last executing test programs: 6m39.449749791s ago: executing program 1 (id=733): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x22}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000640)="9dbe", 0x2}], 0x1}, 0x0) recvmsg(r0, 0x0, 0x2) recvmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) 6m39.200160778s ago: executing program 1 (id=736): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000006000000000000000000008500000041000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904020000", 0x6e}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 6m37.143204985s ago: executing program 1 (id=741): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) mknod(&(0x7f00000031c0)='./bus\x00', 0x1000, 0xcd) 6m35.88197971s ago: executing program 1 (id=750): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 6m35.668505924s ago: executing program 1 (id=756): r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xe00}, {&(0x7f00000011c0)="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", 0x129}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x11, 0x29, 0x2}}, @ip_tos_u8={{0x11}}], 0x48}, 0x0) 6m35.474414497s ago: executing program 1 (id=757): r0 = syz_open_procfs(0x0, &(0x7f0000001380)) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400400c0) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000500), 0x322, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@deltclass={0x5c, 0x29, 0x10, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xb}, {0x9, 0x6}, {0xa}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x80}}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x6b, 0xd5}}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_sfq={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x4008000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000540)={0x2572d8929a6d88f2, 0x0, {0x100, 0x7, 0x200a, 0x5, 0x2, 0x1, 0x2, 0x2}}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0xe5}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr={0x0, 0x4}}], 0x38) ioctl$SG_GET_REQUEST_TABLE(r7, 0x2286, &(0x7f0000000040)) 6m20.337734135s ago: executing program 32 (id=757): r0 = syz_open_procfs(0x0, &(0x7f0000001380)) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400400c0) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000500), 0x322, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@deltclass={0x5c, 0x29, 0x10, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xb}, {0x9, 0x6}, {0xa}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x80}}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x6b, 0xd5}}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_sfq={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x4008000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000540)={0x2572d8929a6d88f2, 0x0, {0x100, 0x7, 0x200a, 0x5, 0x2, 0x1, 0x2, 0x2}}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0xe5}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr={0x0, 0x4}}], 0x38) ioctl$SG_GET_REQUEST_TABLE(r7, 0x2286, &(0x7f0000000040)) 9.007989308s ago: executing program 0 (id=2253): syz_usb_connect(0x5, 0x51, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 8.528097908s ago: executing program 3 (id=2257): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x249, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0xc, 0x6, 0x3, 0x0, 0x0, {0xd, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 8.290750238s ago: executing program 0 (id=2258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x8) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x8918, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0400000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="010047afd50b436a265425575d3e87e0e2120000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000000002000"/28], 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000440)=[@acquire], 0x0, 0x0, 0x0}) 7.14535272s ago: executing program 0 (id=2260): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) syz_open_dev$MSR(0x0, 0x0, 0x0) 5.13645523s ago: executing program 3 (id=2265): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x503}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x40, 0x40, 0x0, 0x0, 0x2, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) listen(r1, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000200)={r4, 0x7, 0x12}, &(0x7f0000000240)=0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 4.937827039s ago: executing program 4 (id=2267): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.921257593s ago: executing program 5 (id=2268): syz_usb_connect(0x5, 0x51, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 4.92102443s ago: executing program 3 (id=2269): socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2a, 0x2, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0xd719}], 0x1, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0x1ad72f7) accept(r1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000a400)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) 4.778528046s ago: executing program 4 (id=2270): mmap(&(0x7f0000001000/0xc00000)=nil, 0x200000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={&(0x7f00000037c0)={[0x9]}, 0x8}) 4.749838382s ago: executing program 2 (id=2271): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x8) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x8918, &(0x7f0000000140)={'wg1\x00', {0x2, 0x0, @empty=0xfe000000}}) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000440)=[@acquire], 0x0, 0x0, 0x0}) 4.638667413s ago: executing program 4 (id=2272): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none}, 0x17) listen(r2, 0x0) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'bridge_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3.808897976s ago: executing program 5 (id=2273): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb, 0x7c, &(0x7f00000021c0)="67d8a650436d78ed123809", &(0x7f00000000c0)="27453a06ff218a04238c312b1d0b4abc5af45edd9e8cd9392ab3d8ed55d942a39ec0ed9b5ed439a31be3d34ef4488e0feca03ecbcde3a1f9f9c3c39c85fb21766a2d936ae2970cf9fc1032bdf3faaf0009300a7cdf3ad38023837eb915635ac9786caac97dae24876e210a7fc7a1a13f8129475cdaf2aff98ed5c0d3", 0x1, 0x0, 0x5}, 0x50) open(&(0x7f0000000000)='./file0\x00', 0x440, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mknod$loop(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f00000012c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 3.808595515s ago: executing program 2 (id=2274): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x19) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0xddff}) bind$qrtr(r2, &(0x7f0000000000)={0x2a, 0x1, 0x2}, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 3.729144856s ago: executing program 4 (id=2275): r0 = syz_io_uring_setup(0x5c1f, 0x0, &(0x7f0000000440)=0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000400)='./file0/../file0\x00'}) io_uring_enter(r0, 0x1, 0x0, 0x1, 0x0, 0x1000000) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x404c805) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x9b}, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcf, 0x0, &(0x7f0000000140)=0xa4ffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)='Q'}) 3.160349142s ago: executing program 3 (id=2276): getuid() syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="800202000a000200577f0000aabb000020000e800500"], 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$UHID_INPUT(r5, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="b70000000000000007000000000000009500000000000000bdc5072e4c75223f007e6ca306000000000000009c91420b66f0980e90dc0a9900d145243692fe648adf4cbc1dc631c378820861eccfa60822e798d6526600ee440bf23deb4dc8947d2bafec88ae3708013fdc5b2a1dbc7d50fcb6d9a01d03491c35fee5ff00002e40db34dea1063eaf2e3d6959435775943a5a7090b1c08454a248811ed0850a0e1679"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@random="e90c630faca2", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "61c03d2d2548741ff5015767096e1cd263026dd8f0703d2e22e3916500fdb8ec", "615eee2cb3c51e06deb424010178396b2afe4378c81f63a9eefc66ef338492fd3b688b2b06e6f206e4e6b8d1174296cd", "d8dbed9defbb6502c2888b524721c5807f3b4eedba8966f8774437de", {"c5f2fb530587df89cc9aa18e60d1a66b", "0c9ec23f1b56eba488bfededb3c997ae"}}}}}}}, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000380)={0x444420, 0x90, 0x13}, 0x18) 3.080733668s ago: executing program 2 (id=2277): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 2.16688892s ago: executing program 2 (id=2278): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xe4, &(0x7f0000000580)=""/228}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 2.112436816s ago: executing program 3 (id=2279): socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000140)='./bus\x00', 0x0) r0 = open(&(0x7f0000000380)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00', @ANYRES32=r0], 0x2b) sendfile(r2, r0, 0x0, 0x4000000053d2) 2.084492038s ago: executing program 4 (id=2280): r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x207f, 0x4) shutdown(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000000)=0x7fff, 0x4) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000440)=""/19, &(0x7f0000000240)=0x71) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000000)={0x0, 0xfffa, "0dc54e", 0xd8, 0xa}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8922, &(0x7f0000000040)="f7618fc5e7ce") socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) connect$tipc(r6, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x2}}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x14, 0x25, 0x301, 0x4, 0x0, {0x1}}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, 0x0, 0x0) 1.971663285s ago: executing program 0 (id=2281): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.971240244s ago: executing program 5 (id=2282): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x800, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 1.898635133s ago: executing program 5 (id=2283): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) socket(0x40000000015, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_SHSTK_LOCK(0x1e, r1, 0x1, 0x5003) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r6, r5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r4, 0x3b8d, &(0x7f0000000280)={0x20, r8, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @qdisc_kind_options=@q_qfg={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 1.518972559s ago: executing program 3 (id=2284): syz_usb_connect(0x5, 0x51, &(0x7f0000002d00)=ANY=[], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 1.453747088s ago: executing program 0 (id=2285): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x8) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x8918, &(0x7f0000000140)={'wg1\x00', {0x2, 0x0, @empty=0xfe000000}}) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000440)=[@acquire], 0x0, 0x0, 0x0}) 357.942713ms ago: executing program 0 (id=2286): socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2a, 0x2, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0xd719}], 0x1, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0x1ad72f7) accept(r1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000a400)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) 323.821946ms ago: executing program 5 (id=2287): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r0, 0x2f, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r3}, 0x18) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r2, 0x0, r5}, 0x10) 224.504486ms ago: executing program 5 (id=2288): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$can_bcm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000003c0)=""/144, 0x90}, {&(0x7f0000000300)=""/76, 0x4c}, {&(0x7f0000000480)=""/201, 0xc9}, {&(0x7f0000000580)=""/218, 0xda}, {&(0x7f0000000680)=""/155, 0x9b}, {&(0x7f0000000800)=""/230, 0xe6}, {&(0x7f0000000240)=""/14, 0xe}], 0x7, &(0x7f0000000980)=""/125, 0x7d}, 0x2122) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0xfffffc89, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[], 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r1) r3 = socket$inet(0xa, 0x801, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000c000500ff000000000000000c0002000000020000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r6, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 173.398226ms ago: executing program 2 (id=2289): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001a000100000000000000000002000001000000000010000008001d"], 0x24}}, 0x20004000) 50.695188ms ago: executing program 4 (id=2290): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=2291): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x182, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000100)="65f341af0f09b805000000b9df28156f0f01d966b8e3000f00d842cd0f420fc73b64262ef30f070f08440f789884e5e8b366660f38818d00000000", 0x3b}], 0x1, 0x40, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x3, 0x0, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r6, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1}, [{0x3, 0x0, 0x0, 0x0, 0x0, 0x800}]}, 0x78) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): t 1(bridge_slave_0) entered blocking state [ 243.425995][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.434593][ T939] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 243.446776][ T939] usb 5-1: config 1 has no interface number 1 [ 243.453665][ T939] usb 5-1: config 1 interface 2 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 243.467344][ T939] usb 5-1: config 1 interface 2 has no altsetting 1 [ 243.495932][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.503136][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.508298][ T939] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 243.528256][ T939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.538470][ T939] usb 5-1: Product: syz [ 243.577913][ T939] usb 5-1: Manufacturer: syz [ 243.583418][ T939] usb 5-1: SerialNumber: syz [ 244.015710][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.834'. [ 244.142006][ T8205] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 244.175013][ T8205] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 244.261558][ T8205] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 244.318541][ T8182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.331666][ T8205] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 244.368148][ T8205] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 244.493916][ T939] usb 5-1: USB disconnect, device number 11 [ 244.511737][ T5857] Bluetooth: hci3: unexpected event 0x01 length: 13 > 1 [ 244.776865][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.387055][ T8248] fuse: Bad value for 'fd' [ 245.509716][ T8182] veth0_vlan: entered promiscuous mode [ 245.599833][ T8182] veth1_vlan: entered promiscuous mode [ 245.624991][ T8182] veth0_macvtap: entered promiscuous mode [ 245.643787][ T8182] veth1_macvtap: entered promiscuous mode [ 245.665580][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.676261][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.686696][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.697620][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.707725][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.718236][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.728111][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.738625][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.748788][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.759467][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.770556][ T8182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.781037][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.791566][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.801566][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.812055][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.822121][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.832625][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.842525][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.853009][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.862895][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.874758][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.886736][ T8182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.907205][ T8182] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.916010][ T8182] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.924769][ T8182] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.933530][ T8182] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.982290][ T5857] Bluetooth: hci0: command 0x206a tx timeout [ 246.294222][ T8256] netlink: 60 bytes leftover after parsing attributes in process `syz.4.842'. [ 246.331127][ T5857] Bluetooth: hci3: command 0x206a tx timeout [ 246.338581][ T5857] Bluetooth: hci5: command 0x040f tx timeout [ 246.762796][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.770753][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.784847][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.927920][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.382281][ T5157] Bluetooth: hci5: command 0x040f tx timeout [ 248.392536][ T8280] fuse: Bad value for 'fd' [ 249.296121][ T8292] xfrm0: entered allmulticast mode [ 249.322174][ T5893] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 249.451330][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.855'. [ 249.512303][ T5893] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 249.521088][ T5893] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.563380][ T5893] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 249.610798][ T5893] usb 5-1: config 1 has no interface number 1 [ 249.637320][ T5893] usb 5-1: config 1 interface 2 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 249.647533][ T8301] netlink: 60 bytes leftover after parsing attributes in process `syz.5.860'. [ 249.688166][ T5893] usb 5-1: config 1 interface 2 has no altsetting 1 [ 249.730704][ T5893] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 249.760634][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.813579][ T5893] usb 5-1: Product: syz [ 249.817823][ T5893] usb 5-1: Manufacturer: syz [ 249.832435][ T5893] usb 5-1: SerialNumber: syz [ 250.911455][ T5157] Bluetooth: hci5: command 0x040f tx timeout [ 251.908307][ T5893] usb 5-1: USB disconnect, device number 12 [ 252.855648][ T8330] xfrm0: entered allmulticast mode [ 252.904610][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.945330][ T5157] Bluetooth: hci5: command 0x040f tx timeout [ 253.183622][ T8333] 9pnet: Could not find request transport: rdm [ 253.437658][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 253.564959][ T8352] netlink: 28 bytes leftover after parsing attributes in process `syz.4.879'. [ 253.605863][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.879'. [ 253.682047][ T5854] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 253.806325][ T8360] xfrm0: entered allmulticast mode [ 253.855880][ T8362] block nbd3: Device being setup by another task [ 253.879231][ T5854] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 253.898306][ T5854] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.910424][ T5854] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 253.919778][ T5854] usb 6-1: config 1 has no interface number 1 [ 253.926768][ T5854] usb 6-1: config 1 interface 2 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 253.940977][ T8362] block nbd3: shutting down sockets [ 253.949755][ T5854] usb 6-1: config 1 interface 2 has no altsetting 1 [ 253.958709][ T5854] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 253.972043][ T5854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.990377][ T5854] usb 6-1: Product: syz [ 253.994766][ T5854] usb 6-1: Manufacturer: syz [ 253.999383][ T5854] usb 6-1: SerialNumber: syz [ 254.116405][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.885'. [ 254.236685][ T5157] Bluetooth: unknown link type 128 [ 255.028389][ T5157] Bluetooth: hci5: command 0x040f tx timeout [ 255.217319][ T8378] loop2: detected capacity change from 0 to 7 [ 255.229538][ T8378] Dev loop2: unable to read RDB block 7 [ 255.237905][ T8346] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 255.247024][ T8378] loop2: unable to read partition table [ 255.255903][ T8378] loop2: partition table beyond EOD, truncated [ 255.267478][ T8346] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 255.300588][ T8378] loop_reread_partitions: partition scan of loop2 (þ被—ü—ŸÑà– ) failed (rc=-5) [ 255.322728][ T8346] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 255.342106][ T5218] Dev loop2: unable to read RDB block 7 [ 255.347762][ T5218] loop2: unable to read partition table [ 255.364308][ T5218] loop2: partition table beyond EOD, truncated [ 255.386787][ T5854] usb 6-1: USB disconnect, device number 2 [ 255.589814][ T6525] udevd[6525]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 255.664375][ T8387] netlink: 28 bytes leftover after parsing attributes in process `syz.3.894'. [ 255.685558][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.894'. [ 256.067353][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.073952][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.282135][ T8408] mmap: syz.4.900 (8408) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 257.332802][ T5157] Bluetooth: hci0: command 0x206a tx timeout [ 257.364880][ T5157] Bluetooth: hci5: command 0x040f tx timeout [ 257.453489][ T5157] Bluetooth: hci3: command 0x206a tx timeout [ 259.517235][ T8423] loop2: detected capacity change from 0 to 7 [ 259.656910][ T8423] Dev loop2: unable to read RDB block 7 [ 259.688842][ T8423] loop2: unable to read partition table [ 259.783848][ T8423] loop2: partition table beyond EOD, truncated [ 259.806882][ T8423] loop_reread_partitions: partition scan of loop2 (þ被—ü—ŸÑà– ) failed (rc=-5) [ 259.834728][ T8428] netlink: 60 bytes leftover after parsing attributes in process `syz.5.908'. [ 260.481807][ T8439] syz.5.912[8439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.481980][ T8439] syz.5.912[8439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.494297][ T8439] syz.5.912[8439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.284139][ T8444] netlink: 'syz.3.913': attribute type 29 has an invalid length. [ 261.387850][ T8449] netlink: 'syz.3.913': attribute type 29 has an invalid length. [ 261.402485][ T8444] netlink: 'syz.3.913': attribute type 29 has an invalid length. [ 261.547263][ T8452] macsec1: entered promiscuous mode [ 261.562498][ T8452] macvlan0: entered promiscuous mode [ 261.575108][ T8452] macsec1: entered allmulticast mode [ 261.582457][ T8452] macvlan0: entered allmulticast mode [ 261.590296][ T8452] veth1_vlan: entered allmulticast mode [ 261.608942][ T8452] macvlan0: left allmulticast mode [ 261.616605][ T8452] veth1_vlan: left allmulticast mode [ 261.625101][ T8452] macvlan0: left promiscuous mode [ 262.797374][ T8467] loop2: detected capacity change from 0 to 7 [ 262.813826][ T8467] Dev loop2: unable to read RDB block 7 [ 262.819838][ T8468] netlink: 60 bytes leftover after parsing attributes in process `syz.5.922'. [ 262.851232][ T8467] loop2: unable to read partition table [ 262.888452][ T8467] loop2: partition table beyond EOD, truncated [ 262.912010][ T8467] loop_reread_partitions: partition scan of loop2 (þ被—ü—ŸÑà– ) failed (rc=-5) [ 263.057283][ T5218] Dev loop2: unable to read RDB block 7 [ 263.064040][ T5218] loop2: unable to read partition table [ 263.175559][ T8477] syz.4.925[8477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.176011][ T8477] syz.4.925[8477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.188410][ T8477] syz.4.925[8477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.813184][ T5218] loop2: partition table beyond EOD, truncated [ 264.349011][ T8485] netlink: 28 bytes leftover after parsing attributes in process `syz.3.929'. [ 264.599822][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.929'. [ 264.858304][ T8490] vlan2: entered promiscuous mode [ 264.864162][ T8490] vlan2: entered allmulticast mode [ 265.512259][ T5893] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 265.682089][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 265.691469][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 265.718860][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 265.742618][ T5893] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 265.753533][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.761575][ T5893] usb 4-1: Product: syz [ 265.769220][ T5893] usb 4-1: Manufacturer: syz [ 265.774125][ T5893] usb 4-1: SerialNumber: syz [ 265.962249][ T5893] usb 4-1: config 0 descriptor?? [ 265.980589][ T5893] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 265.990030][ T5893] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 266.027517][ T8507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.938'. [ 266.802449][ T5893] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 266.808989][ T5893] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 267.097851][ T8521] syz.5.940[8521] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.098468][ T8521] syz.5.940[8521] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.110751][ T8521] syz.5.940[8521] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.825143][ T5893] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 267.843532][ T5893] em28xx 4-1:0.0: No AC97 audio processor [ 268.947137][ T8529] vlan2: entered promiscuous mode [ 268.952400][ T8529] vlan2: entered allmulticast mode [ 269.062100][ T5896] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 269.180306][ T5893] usb 4-1: USB disconnect, device number 14 [ 269.210472][ T5893] em28xx 4-1:0.0: Disconnecting em28xx [ 269.241221][ T5893] em28xx 4-1:0.0: Freeing device [ 269.250553][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.307221][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.338106][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.952'. [ 269.349986][ T5896] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 269.379962][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.436942][ T5896] usb 3-1: config 0 descriptor?? [ 270.282496][ T8553] syz.3.954[8553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.282602][ T8553] syz.3.954[8553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.294177][ T8553] syz.3.954[8553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.860519][ T5896] usbhid 3-1:0.0: can't add hid device: -71 [ 270.881284][ T5896] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 270.891098][ T5896] usb 3-1: USB disconnect, device number 12 [ 272.714580][ T5854] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 272.872203][ T5854] usb 5-1: Using ep0 maxpacket: 16 [ 272.879626][ T5854] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 272.898165][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 272.916865][ T5854] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 272.928239][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.936620][ T5854] usb 5-1: Product: syz [ 272.941034][ T5854] usb 5-1: Manufacturer: syz [ 272.945858][ T5854] usb 5-1: SerialNumber: syz [ 272.952386][ T5893] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 272.953606][ T5854] usb 5-1: config 0 descriptor?? [ 272.968928][ T5854] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 272.978579][ T5854] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 273.052005][ T5894] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 273.122359][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 273.129313][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 273.155020][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 273.182273][ T5894] usb 1-1: device descriptor read/64, error -71 [ 273.190601][ T5893] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 273.202240][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.210305][ T5893] usb 3-1: Product: syz [ 273.231970][ T5893] usb 3-1: Manufacturer: syz [ 273.236609][ T5893] usb 3-1: SerialNumber: syz [ 273.253425][ T5893] usb 3-1: config 0 descriptor?? [ 273.265719][ T5893] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 273.292055][ T5893] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 273.468442][ T5894] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 273.581599][ T5854] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 273.588280][ T5854] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 273.633724][ T5894] usb 1-1: device descriptor read/64, error -71 [ 273.754697][ T5894] usb usb1-port1: attempt power cycle [ 273.911239][ T5893] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 274.007448][ T5893] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 274.042523][ T5897] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 274.181217][ T5894] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 274.275920][ T5894] usb 1-1: device descriptor read/8, error -71 [ 274.325282][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.338169][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.352533][ T5854] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 274.359524][ T5854] em28xx 5-1:0.0: No AC97 audio processor [ 274.368831][ T5897] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 274.422073][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.449727][ T5897] usb 4-1: config 0 descriptor?? [ 274.644778][ T5894] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 274.670943][ T5893] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 274.678803][ T5893] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 274.685571][ T5894] usb 1-1: device descriptor read/8, error -71 [ 274.692072][ T5893] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 274.773301][ T8599] syz.5.970[8599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.774023][ T8599] syz.5.970[8599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.786398][ T8599] syz.5.970[8599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.823187][ T5894] usb usb1-port1: unable to enumerate USB device [ 275.241119][ T5897] sony 0003:1345:3008.0007: unknown main item tag 0x0 [ 275.261676][ T5897] sony 0003:1345:3008.0007: unknown main item tag 0x0 [ 275.269738][ T5897] sony 0003:1345:3008.0007: unknown main item tag 0x0 [ 275.278037][ T5897] sony 0003:1345:3008.0007: unknown main item tag 0x0 [ 275.285006][ T5897] sony 0003:1345:3008.0007: unknown main item tag 0x0 [ 275.299050][ T5897] sony 0003:1345:3008.0007: hiddev0,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.3-1/input0 [ 275.317165][ T5897] sony 0003:1345:3008.0007: failed to claim input [ 275.349878][ T5897] usb 4-1: USB disconnect, device number 15 [ 275.386322][ T5893] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 275.403773][ T5893] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 275.424378][ T5893] usb 3-1: USB disconnect, device number 13 [ 275.500899][ T5854] usb 5-1: USB disconnect, device number 13 [ 275.510146][ T5854] em28xx 5-1:0.0: Disconnecting em28xx [ 275.570752][ T5854] em28xx 5-1:0.0: Freeing device [ 276.715962][ T5854] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 277.106755][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.621233][ T8630] syz.0.981[8630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.621339][ T8630] syz.0.981[8630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.634435][ T8630] syz.0.981[8630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.988351][ T5854] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 278.008814][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.019021][ T5854] usb 5-1: config 0 descriptor?? [ 278.078851][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.977'. [ 278.244970][ T5854] usbhid 5-1:0.0: can't add hid device: -71 [ 278.362036][ T5854] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 278.364404][ T8631] netlink: 'syz.5.980': attribute type 10 has an invalid length. [ 278.654215][ T5854] usb 5-1: USB disconnect, device number 14 [ 278.751438][ T8631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.855365][ T8631] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 279.243071][ T5854] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 280.088737][ T5894] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 280.980004][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.022912][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.132724][ T5894] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 281.141920][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.192803][ T5894] usb 1-1: config 0 descriptor?? [ 281.582218][ T5941] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 281.654783][ T8671] syz.4.993[8671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.654944][ T8671] syz.4.993[8671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.666680][ T8671] syz.4.993[8671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.531911][ T8670] vivid-000: kernel_thread() failed [ 282.625239][ T5894] usbhid 1-1:0.0: can't add hid device: -71 [ 282.631292][ T5894] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 282.648354][ T5894] usb 1-1: USB disconnect, device number 14 [ 283.011989][ T5941] usb 6-1: Using ep0 maxpacket: 16 [ 283.039078][ T5941] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 283.066670][ T5941] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 283.855229][ T5941] usb 6-1: string descriptor 0 read error: -71 [ 283.861573][ T5941] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 283.896789][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.946911][ T5941] usb 6-1: config 0 descriptor?? [ 284.952419][ T5941] usb 6-1: can't set config #0, error -71 [ 284.959500][ T5941] usb 6-1: USB disconnect, device number 3 [ 285.896056][ T8718] syz.0.1007[8718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 285.896148][ T8718] syz.0.1007[8718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 285.908046][ T8718] syz.0.1007[8718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.147493][ T5941] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 286.367820][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.409629][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.472358][ T5941] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 286.524692][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.583192][ T5941] usb 4-1: config 0 descriptor?? [ 287.379820][ T5941] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 287.386896][ T5941] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 287.393814][ T5941] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 287.400844][ T5941] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 287.422815][ T5941] sony 0003:1345:3008.0008: unknown main item tag 0x0 [ 287.432057][ T5896] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 287.459743][ T5941] sony 0003:1345:3008.0008: hiddev0,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.3-1/input0 [ 287.482103][ T5941] sony 0003:1345:3008.0008: failed to claim input [ 287.710165][ T5893] usb 4-1: USB disconnect, device number 16 [ 287.772005][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 287.778445][ T5896] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 287.790258][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 287.805339][ T5896] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 287.815539][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.823775][ T5896] usb 5-1: Product: syz [ 288.181997][ T5896] usb 5-1: Manufacturer: syz [ 288.187714][ T5896] usb 5-1: SerialNumber: syz [ 288.453040][ T5896] usb 5-1: config 0 descriptor?? [ 288.465760][ T5896] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 288.492095][ T5896] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 290.317587][ T5896] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 290.331683][ T5896] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 291.125419][ T5896] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 291.132827][ T5896] em28xx 5-1:0.0: No AC97 audio processor [ 291.149236][ T5896] usb 5-1: USB disconnect, device number 16 [ 292.683763][ T5896] em28xx 5-1:0.0: Disconnecting em28xx [ 292.691318][ T5896] em28xx 5-1:0.0: Freeing device [ 294.566975][ T8782] netlink: 'syz.0.1027': attribute type 10 has an invalid length. [ 294.791982][ T5896] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 294.949826][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.970992][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.981258][ T5896] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 294.994146][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.019823][ T5896] usb 5-1: config 0 descriptor?? [ 296.182647][ T8802] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 296.202192][ T5896] usbhid 5-1:0.0: can't add hid device: -71 [ 296.222124][ T5896] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 296.232307][ T5896] usb 5-1: USB disconnect, device number 17 [ 300.397775][ T5157] Bluetooth: unknown link type 128 [ 300.738757][ T5894] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 301.231670][ T8861] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 301.293649][ T8861] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 301.384054][ T8861] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 302.570838][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 302.680132][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1062'. [ 302.689646][ T8886] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1062'. [ 302.711775][ T8886] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.722553][ T8886] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.731428][ T8886] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.740337][ T8886] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.750795][ T8886] vxlan0: entered promiscuous mode [ 302.904471][ T5157] Bluetooth: hci0: command 0x206a tx timeout [ 303.353612][ T8877] netlink: 'syz.0.1061': attribute type 10 has an invalid length. [ 303.405650][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 303.429184][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 303.429900][ T8889] netlink: 'syz.5.1065': attribute type 4 has an invalid length. [ 303.451553][ T5157] Bluetooth: hci5: command 0x040f tx timeout [ 303.459121][ T5157] Bluetooth: hci3: command 0x206a tx timeout [ 303.542876][ T5894] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 303.561923][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.574083][ T5894] usb 3-1: config 0 descriptor?? [ 303.580287][ T5894] usb 3-1: can't set config #0, error -71 [ 303.598412][ T5894] usb 3-1: USB disconnect, device number 14 [ 303.733326][ T5896] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 304.482346][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 304.523176][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 304.539916][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 304.591548][ T5896] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 304.741992][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.752208][ T5896] usb 4-1: Product: syz [ 304.756414][ T5896] usb 4-1: Manufacturer: syz [ 304.761092][ T5896] usb 4-1: SerialNumber: syz [ 304.775038][ T5896] usb 4-1: config 0 descriptor?? [ 305.613597][ T5896] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 305.662600][ T5896] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 305.882240][ T5894] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 305.955825][ T5896] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 306.640291][ T5896] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 306.780565][ T5894] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 306.789530][ T5894] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 306.796970][ T5894] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 306.806067][ T5894] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 306.826323][ T5894] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 306.838347][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 306.849839][ T5894] usb 6-1: Product: syz [ 306.857110][ T5894] usb 6-1: Manufacturer: syz [ 306.875102][ T5894] cdc_wdm 6-1:1.0: skipping garbage [ 306.890980][ T5894] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 307.005501][ T5941] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 307.079329][ T5894] usb 6-1: USB disconnect, device number 4 [ 307.104098][ T5896] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 307.112192][ T5896] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 307.149671][ T5896] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 307.161342][ T5896] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 307.170500][ T5896] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 307.180603][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 307.197476][ T5896] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 307.207558][ T5941] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 307.223831][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 307.237442][ T5941] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 307.247283][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.255650][ T5941] usb 3-1: Product: syz [ 307.264391][ T5941] usb 3-1: Manufacturer: syz [ 307.269914][ T5941] usb 3-1: SerialNumber: syz [ 307.279530][ T5941] usb 3-1: config 0 descriptor?? [ 307.290875][ T5941] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 307.300838][ T5941] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 307.521964][ T939] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 307.683912][ T939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.701493][ T939] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 307.719932][ T939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.919764][ T5896] em28xx 4-1:0.0: couldn't setup AC97 register 20 [ 307.926983][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 307.934781][ T5941] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 307.941799][ T5941] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 307.948834][ T5896] em28xx 4-1:0.0: couldn't setup AC97 register 16 [ 307.953260][ T939] usb 5-1: config 0 descriptor?? [ 307.959614][ T5896] em28xx 4-1:0.0: couldn't setup AC97 register 12 [ 307.972245][ T5896] em28xx 4-1:0.0: couldn't setup AC97 register 14 [ 307.985656][ T5896] em28xx 4-1:0.0: couldn't setup AC97 register 18 [ 307.995263][ T5896] em28xx 4-1:0.0: couldn't setup AC97 register 22 [ 308.002679][ T5896] em28xx 4-1:0.0: couldn't setup AC97 register 24 [ 308.022750][ T5896] em28xx 4-1:0.0: Binding audio extension [ 308.029021][ T5896] em28xx 4-1:0.0: em28xx-audio.c: Copyright (C) 2006 Markus Rechberger [ 308.149803][ T5896] em28xx 4-1:0.0: em28xx-audio.c: Copyright (C) 2007-2016 Mauro Carvalho Chehab [ 308.392874][ T5941] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 308.403256][ T5941] em28xx 3-1:0.0: No AC97 audio processor [ 308.584017][ T939] usbhid 5-1:0.0: can't add hid device: -71 [ 308.590085][ T939] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 308.620973][ T939] usb 5-1: USB disconnect, device number 18 [ 308.673638][ T5896] em28xx 4-1:0.0: alt 0 doesn't exist on interface 7 [ 308.752617][ T5896] usb 4-1: USB disconnect, device number 17 [ 308.781034][ T5896] em28xx 4-1:0.0: Disconnecting em28xx [ 308.816085][ T5896] em28xx 4-1:0.0: Closing audio extension [ 308.843510][ T5896] em28xx 4-1:0.0: Freeing device [ 309.041990][ T5893] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 309.072070][ T939] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 309.221207][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.232904][ T939] usb 5-1: Using ep0 maxpacket: 16 [ 309.248606][ T8948] netlink: 'syz.3.1085': attribute type 10 has an invalid length. [ 309.278801][ T8948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.293452][ T8948] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 309.326717][ T939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.737890][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.752208][ T939] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 309.761584][ T5893] usb 6-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 309.782339][ T939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.790489][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.813903][ T939] usb 5-1: config 0 descriptor?? [ 309.833254][ T5893] usb 6-1: config 0 descriptor?? [ 309.938564][ T5854] usb 3-1: USB disconnect, device number 15 [ 309.952726][ T5854] em28xx 3-1:0.0: Disconnecting em28xx [ 309.995055][ T5854] em28xx 3-1:0.0: Freeing device [ 310.225212][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1089'. [ 310.265582][ T5893] sony 0003:1345:3008.0009: unknown main item tag 0x0 [ 310.272548][ T5893] sony 0003:1345:3008.0009: unknown main item tag 0x0 [ 310.279396][ T5893] sony 0003:1345:3008.0009: unknown main item tag 0x0 [ 310.286334][ T5893] sony 0003:1345:3008.0009: unknown main item tag 0x0 [ 310.293871][ T5893] sony 0003:1345:3008.0009: unknown main item tag 0x0 [ 310.315605][ T5893] sony 0003:1345:3008.0009: hiddev0,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.5-1/input0 [ 310.327731][ T5893] sony 0003:1345:3008.0009: failed to claim input [ 310.623584][ T939] usbhid 5-1:0.0: can't add hid device: -71 [ 310.707592][ T5854] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 310.719344][ T939] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 310.739694][ T939] usb 5-1: USB disconnect, device number 19 [ 311.234116][ T5894] usb 6-1: USB disconnect, device number 5 [ 311.523024][ T5854] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 311.531794][ T5854] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 311.539222][ T5854] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 311.628838][ T5854] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 311.872111][ T5854] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 312.028602][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 312.183218][ T5854] usb 4-1: Product: syz [ 312.227358][ T5854] usb 4-1: Manufacturer: syz [ 312.321993][ T5854] cdc_wdm 4-1:1.0: skipping garbage [ 312.327279][ T5854] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 312.528319][ T939] usb 4-1: USB disconnect, device number 18 [ 314.487296][ T5854] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 314.677049][ T5854] usb 6-1: Using ep0 maxpacket: 16 [ 314.689274][ T5854] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 314.712547][ T5854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 314.804388][ T5896] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 315.391011][ T5854] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 315.400675][ T5854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.441948][ T5854] usb 6-1: Product: syz [ 315.446199][ T5854] usb 6-1: Manufacturer: syz [ 315.452961][ T5854] usb 6-1: SerialNumber: syz [ 315.720903][ T5854] usb 6-1: config 0 descriptor?? [ 315.757409][ T5854] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 315.767243][ T5854] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 315.864428][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.879092][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.889737][ T5896] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 315.898912][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.923578][ T5896] usb 3-1: config 0 descriptor?? [ 316.282362][ T939] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 316.479405][ T939] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 316.562212][ T939] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 316.653777][ T939] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 316.840602][ T939] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 316.868372][ T9023] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 316.891604][ T9023] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 316.899208][ T939] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 316.915380][ T939] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 316.924433][ T9023] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 316.940429][ T939] usb 1-1: Product: syz [ 316.970904][ T5854] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 316.977698][ T5854] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 316.977767][ T939] usb 1-1: Manufacturer: syz [ 316.990049][ T5896] usbhid 3-1:0.0: can't add hid device: -71 [ 316.996198][ T5896] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 317.023097][ T939] cdc_wdm 1-1:1.0: skipping garbage [ 317.032972][ T5896] usb 3-1: USB disconnect, device number 16 [ 317.050866][ T939] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 317.217684][ T939] usb 1-1: USB disconnect, device number 15 [ 317.393674][ T5854] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 317.401158][ T5854] em28xx 6-1:0.0: No AC97 audio processor [ 317.472028][ T8] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 317.492491][ T9038] netlink: 'syz.2.1118': attribute type 29 has an invalid length. [ 317.500465][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1118'. [ 317.509235][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.516432][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.853795][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 317.990113][ T8] usb 5-1: not running at top speed; connect to a high speed hub [ 318.109040][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 318.132155][ T9040] netlink: 'syz.2.1118': attribute type 29 has an invalid length. [ 318.144407][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1118'. [ 318.246357][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 318.256091][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.264629][ T8] usb 5-1: Product: syz [ 318.268914][ T8] usb 5-1: Manufacturer: syz [ 318.273829][ T8] usb 5-1: SerialNumber: syz [ 318.290341][ T8] usb 5-1: bad CDC descriptors [ 318.302048][ T5857] Bluetooth: hci0: command 0x206a tx timeout [ 318.942186][ T5857] Bluetooth: hci5: command 0x040f tx timeout [ 318.948451][ T5857] Bluetooth: hci3: command 0x206a tx timeout [ 318.977638][ T5896] usb 6-1: USB disconnect, device number 6 [ 318.983996][ T9033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.998996][ T939] usb 5-1: USB disconnect, device number 20 [ 319.042300][ T5896] em28xx 6-1:0.0: Disconnecting em28xx [ 319.107552][ T5896] em28xx 6-1:0.0: Freeing device [ 319.178893][ T9058] serio: Serial port pts0 [ 321.296854][ T5854] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 321.370203][ T9095] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1138'. [ 321.379409][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1138'. [ 321.422071][ T5897] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 321.762304][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 321.769115][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 321.869603][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 322.056185][ T5897] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 322.103029][ T5854] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 322.120827][ T5854] usb 1-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 322.122404][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.162001][ T5854] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 322.179162][ T5897] usb 4-1: Product: syz [ 322.190343][ T5897] usb 4-1: Manufacturer: syz [ 322.196279][ T5854] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 322.200827][ T5897] usb 4-1: SerialNumber: syz [ 323.166689][ T5897] usb 4-1: config 0 descriptor?? [ 323.203442][ T5854] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 323.212733][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 323.220754][ T5854] usb 1-1: Product: syz [ 323.225034][ T5854] usb 1-1: Manufacturer: syz [ 323.236127][ T5897] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 323.242925][ T5854] cdc_wdm 1-1:1.0: skipping garbage [ 323.250607][ T5854] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 323.514237][ T5897] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 323.650788][ T5854] usb 1-1: USB disconnect, device number 16 [ 324.044258][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1146'. [ 324.240928][ T5897] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 324.261055][ T5897] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 324.299307][ T5897] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 324.326397][ T5897] em28xx 4-1:0.0: No AC97 audio processor [ 324.481495][ T9132] netlink: 'syz.5.1149': attribute type 29 has an invalid length. [ 324.516089][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1149'. [ 324.548702][ T9135] netlink: 'syz.5.1149': attribute type 29 has an invalid length. [ 324.586391][ T9135] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1149'. [ 324.680099][ T9137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1151'. [ 324.718529][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1151'. [ 324.764559][ T5854] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 324.992277][ T5854] usb 1-1: Using ep0 maxpacket: 8 [ 325.099111][ T5854] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 325.260633][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.492956][ T5854] usb 1-1: Product: syz [ 325.535679][ T5854] usb 1-1: Manufacturer: syz [ 325.555503][ T5896] usb 4-1: USB disconnect, device number 19 [ 325.561549][ T5854] usb 1-1: SerialNumber: syz [ 325.577776][ T5896] em28xx 4-1:0.0: Disconnecting em28xx [ 325.594009][ T5854] usb 1-1: config 0 descriptor?? [ 325.600630][ T5896] em28xx 4-1:0.0: Freeing device [ 325.615810][ T5854] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 326.037809][ T5854] gspca_sonixj: reg_r err -32 [ 326.082789][ T5854] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 327.654622][ T5854] usb 1-1: USB disconnect, device number 17 [ 327.794606][ T9171] netlink: 'syz.4.1162': attribute type 10 has an invalid length. [ 327.807722][ T9171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.815501][ T9171] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 327.891330][ T9173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1163'. [ 327.900619][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1163'. [ 328.132272][ T5897] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 328.521962][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 328.528924][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 328.540525][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 329.384179][ T5897] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 329.427644][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.465595][ T5897] usb 4-1: Product: syz [ 329.469811][ T5897] usb 4-1: Manufacturer: syz [ 329.494089][ T5897] usb 4-1: SerialNumber: syz [ 329.511810][ T5897] usb 4-1: config 0 descriptor?? [ 329.533508][ T5897] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 329.551897][ T5897] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 329.586514][ T9184] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 329.652306][ T9184] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 329.666571][ T9184] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 329.803667][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1172'. [ 329.932147][ T5894] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 330.244347][ T5897] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 330.267510][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 330.272816][ T5897] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 330.281646][ T5897] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 330.290924][ T5897] em28xx 4-1:0.0: No AC97 audio processor [ 330.298424][ T5894] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 330.649258][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.658693][ T5894] usb 1-1: Product: syz [ 330.883657][ T5894] usb 1-1: Manufacturer: syz [ 330.890375][ T5894] usb 1-1: SerialNumber: syz [ 331.626093][ T5857] Bluetooth: hci0: command 0x206a tx timeout [ 331.664439][ T5857] Bluetooth: hci3: command 0x206a tx timeout [ 331.743465][ T5894] usb 1-1: config 0 descriptor?? [ 331.760555][ T5857] Bluetooth: hci5: command 0x040f tx timeout [ 332.318043][ T8] usb 4-1: USB disconnect, device number 20 [ 332.430542][ T8] em28xx 4-1:0.0: Disconnecting em28xx [ 332.520994][ T5894] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 332.528714][ T5894] gspca_sonixj: reg_r err -32 [ 332.533622][ T5894] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 332.544598][ T8] em28xx 4-1:0.0: Freeing device [ 333.830774][ T9241] serio: Serial port pts0 [ 333.913811][ T5893] usb 1-1: USB disconnect, device number 18 [ 334.041976][ T8] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 334.202017][ T8] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 334.202049][ T8] usb 6-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 334.202069][ T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 334.202107][ T8] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 334.203626][ T8] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 334.203654][ T8] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 334.203674][ T8] usb 6-1: Product: syz [ 334.203690][ T8] usb 6-1: Manufacturer: syz [ 334.226571][ T8] cdc_wdm 6-1:1.0: skipping garbage [ 334.309882][ T8] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 334.515400][ T8] usb 6-1: USB disconnect, device number 7 [ 335.025527][ T8] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 335.191978][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 335.261232][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 335.288422][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 335.992162][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 336.001959][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.009985][ T8] usb 3-1: Product: syz [ 336.014934][ T8] usb 3-1: Manufacturer: syz [ 336.019567][ T8] usb 3-1: SerialNumber: syz [ 336.052919][ T8] usb 3-1: config 0 descriptor?? [ 336.074662][ T8] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 336.091909][ T8] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 336.479858][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1195'. [ 337.248686][ T8] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 337.928702][ T8] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 337.985193][ T8] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 337.997060][ T8] em28xx 3-1:0.0: No AC97 audio processor [ 339.201754][ T5896] usb 3-1: USB disconnect, device number 17 [ 339.208640][ T5896] em28xx 3-1:0.0: Disconnecting em28xx [ 339.217998][ T5896] em28xx 3-1:0.0: Freeing device [ 342.274676][ T9338] 9pnet_virtio: no channels available for device syz [ 343.496077][ T5893] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 343.830490][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.934817][ T9358] vlan3: entered promiscuous mode [ 343.939909][ T9358] vlan3: entered allmulticast mode [ 343.952709][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.962860][ T5893] usb 6-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 343.972027][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.980404][ T9358] vlan0: entered allmulticast mode [ 344.002424][ T5893] usb 6-1: config 0 descriptor?? [ 344.004259][ T9358] veth0_vlan: entered allmulticast mode [ 344.026113][ T9358] vlan0: entered promiscuous mode [ 344.053311][ T9358] team0: Port device vlan3 added [ 344.432066][ T5893] usbhid 6-1:0.0: can't add hid device: -71 [ 344.438305][ T5893] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 344.532936][ T5893] usb 6-1: USB disconnect, device number 8 [ 344.982013][ T5854] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 345.219710][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.232513][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.242429][ T5854] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 345.251525][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.273092][ T5854] usb 1-1: config 0 descriptor?? [ 346.325332][ T5854] sony 0003:1345:3008.000A: unknown main item tag 0x0 [ 346.332256][ T5854] sony 0003:1345:3008.000A: unknown main item tag 0x0 [ 346.340131][ T5854] sony 0003:1345:3008.000A: unknown main item tag 0x0 [ 346.347028][ T5854] sony 0003:1345:3008.000A: unknown main item tag 0x0 [ 346.354289][ T5854] sony 0003:1345:3008.000A: unknown main item tag 0x0 [ 346.365919][ T5854] sony 0003:1345:3008.000A: hiddev0,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.0-1/input0 [ 346.377797][ T5854] sony 0003:1345:3008.000A: failed to claim input [ 346.464998][ T5893] usb 1-1: USB disconnect, device number 19 [ 347.892211][ T9426] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 347.898803][ T9426] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 347.905281][ T9426] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 348.415207][ T5897] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 348.647975][ T5897] usb 6-1: unable to get BOS descriptor or descriptor too short [ 348.708410][ T5897] usb 6-1: not running at top speed; connect to a high speed hub [ 348.846236][ T5897] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 348.945937][ T5897] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 348.955521][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.968383][ T5897] usb 6-1: Product: syz [ 348.974881][ T5897] usb 6-1: Manufacturer: syz [ 348.979930][ T5897] usb 6-1: SerialNumber: syz [ 349.010529][ T5897] usb 6-1: bad CDC descriptors [ 349.634443][ T5897] usb 6-1: USB disconnect, device number 9 [ 349.904908][ T5857] Bluetooth: hci3: command 0x206a tx timeout [ 349.904917][ T5157] Bluetooth: hci0: command 0x206a tx timeout [ 349.982236][ T5857] Bluetooth: hci5: command 0x040f tx timeout [ 352.484150][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1279'. [ 352.493190][ T9499] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1279'. [ 352.506097][ T9499] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.514976][ T9499] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.523808][ T9499] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.532632][ T9499] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.542785][ T9499] vxlan0: entered promiscuous mode [ 354.205373][ T9528] Driver unsupported XDP return value 0 on prog (id 343) dev N/A, expect packet loss! [ 354.445423][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 358.785162][ T9601] netlink: 'syz.3.1319': attribute type 10 has an invalid length. [ 364.871959][ T5894] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 365.643123][ T5894] usb 5-1: device descriptor read/64, error -71 [ 365.709178][ T9686] serio: Serial port pts0 [ 365.841715][ T9695] veth0_virt_wifi: entered promiscuous mode [ 365.848390][ T9695] macsec1: entered promiscuous mode [ 365.854157][ T9695] macsec1: entered allmulticast mode [ 365.859501][ T9695] veth0_virt_wifi: entered allmulticast mode [ 365.892026][ T5894] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 366.032744][ T5894] usb 5-1: device descriptor read/64, error -71 [ 366.142358][ T5894] usb usb5-port1: attempt power cycle [ 366.622221][ T5894] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 366.643324][ T5894] usb 5-1: device descriptor read/8, error -71 [ 366.911995][ T5894] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 366.966918][ T5894] usb 5-1: device descriptor read/8, error -71 [ 367.087062][ T5894] usb usb5-port1: unable to enumerate USB device [ 367.401297][ T9728] veth0_virt_wifi: entered promiscuous mode [ 367.452988][ T9728] macsec1: entered promiscuous mode [ 367.458950][ T9728] macsec1: entered allmulticast mode [ 367.473340][ T9728] veth0_virt_wifi: entered allmulticast mode [ 370.342224][ T5896] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 370.498320][ T9764] netlink: 'syz.5.1375': attribute type 10 has an invalid length. [ 370.517247][ T5896] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 370.527621][ T5896] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 370.589717][ T5896] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 370.641434][ T5896] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 370.701897][ T5896] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 370.792283][ T5896] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 370.855262][ T5896] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 370.879154][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 370.943389][ T5896] usb 4-1: Product: syz [ 370.972075][ T5896] usb 4-1: Manufacturer: syz [ 371.002283][ T5896] cdc_wdm 4-1:1.0: skipping garbage [ 371.007546][ T5896] cdc_wdm 4-1:1.0: skipping garbage [ 371.013413][ T5896] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 371.148187][ T5897] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 371.292127][ T5896] usb 4-1: USB disconnect, device number 21 [ 371.292130][ T5897] usb 3-1: device descriptor read/64, error -71 [ 371.572035][ T5897] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 371.712122][ T5897] usb 3-1: device descriptor read/64, error -71 [ 371.865897][ T5897] usb usb3-port1: attempt power cycle [ 372.252844][ T5897] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 372.362472][ T5897] usb 3-1: device descriptor read/8, error -71 [ 374.008133][ T9808] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1389'. [ 375.419280][ T5894] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 376.561783][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.621628][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.655791][ T5894] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 376.767601][ T9831] block nbd2: shutting down sockets [ 376.925361][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.936297][ T5894] usb 5-1: config 0 descriptor?? [ 377.908130][ T5894] sony 0003:1345:3008.000B: unknown main item tag 0x0 [ 378.006777][ T5894] sony 0003:1345:3008.000B: unknown main item tag 0x0 [ 378.013843][ T5894] sony 0003:1345:3008.000B: unknown main item tag 0x0 [ 378.020668][ T5894] sony 0003:1345:3008.000B: unknown main item tag 0x0 [ 378.027982][ T5894] sony 0003:1345:3008.000B: unknown main item tag 0x0 [ 378.046074][ T5894] sony 0003:1345:3008.000B: hiddev0,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.4-1/input0 [ 378.057978][ T5894] sony 0003:1345:3008.000B: failed to claim input [ 378.270835][ T5896] usb 5-1: USB disconnect, device number 25 [ 379.019497][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.026214][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.592903][ T9867] netlink: 'syz.0.1406': attribute type 29 has an invalid length. [ 379.600872][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1406'. [ 379.707609][ T9867] netlink: 'syz.0.1406': attribute type 29 has an invalid length. [ 379.999643][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1406'. [ 384.955989][ T9933] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1424'. [ 386.172162][ T5919] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 386.612164][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 386.637937][ T5919] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 386.676673][ T5919] usb 5-1: config 0 has no interface number 0 [ 386.740364][ T5919] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 387.007909][ T5919] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 387.019753][ T5919] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 387.030857][ T5919] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 387.040767][ T5919] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 387.053938][ T5919] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 387.063141][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.221593][ T5919] usb 5-1: config 0 descriptor?? [ 387.724239][ T9961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1433'. [ 387.801281][ T9961] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1433'. [ 387.895312][ T5919] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 387.906092][ T5919] usb 5-1: USB disconnect, device number 26 [ 387.917777][ T5919] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 392.988805][ T5943] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 393.389460][T10027] netlink: 'syz.3.1459': attribute type 10 has an invalid length. [ 393.422600][ T5943] usb 5-1: unable to get BOS descriptor or descriptor too short [ 393.607587][ T5943] usb 5-1: not running at top speed; connect to a high speed hub [ 393.681328][ T5943] usb 5-1: config 81 has an invalid descriptor of length 0, skipping remainder of the config [ 393.703074][ T5943] usb 5-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=fb.21 [ 393.719706][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.902844][ T5943] usb 5-1: Product: syz [ 393.907598][ T5943] usb 5-1: Manufacturer: syz [ 393.914496][ T5943] usb 5-1: SerialNumber: syz [ 394.174939][ T5943] kobil_sct 5-1:81.0: required endpoints missing [ 394.205633][ T5943] usb 5-1: USB disconnect, device number 27 [ 394.311980][ T5894] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 394.462257][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 394.478065][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 394.489884][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 394.503883][ T5894] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 394.513095][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.521126][ T5894] usb 3-1: Product: syz [ 394.525443][ T5894] usb 3-1: Manufacturer: syz [ 394.530075][ T5894] usb 3-1: SerialNumber: syz [ 394.537094][ T5894] usb 3-1: config 0 descriptor?? [ 394.546204][ T5894] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 394.555544][ T5894] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 395.267290][ T5894] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 395.275839][ T5894] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 396.313461][ T5894] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 396.412158][ T5894] em28xx 3-1:0.0: No AC97 audio processor [ 397.114738][ T5896] usb 3-1: USB disconnect, device number 22 [ 397.123494][ T5896] em28xx 3-1:0.0: Disconnecting em28xx [ 397.165828][ T5896] em28xx 3-1:0.0: Freeing device [ 398.922032][ T5854] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 399.082179][ T5854] usb 5-1: Using ep0 maxpacket: 16 [ 399.096612][ T5854] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 399.132820][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 399.178768][ T5854] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 399.203520][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.230466][ T5854] usb 5-1: Product: syz [ 399.241930][ T5854] usb 5-1: Manufacturer: syz [ 399.250252][ T5854] usb 5-1: SerialNumber: syz [ 399.287612][ T5854] usb 5-1: config 0 descriptor?? [ 399.305299][ T5854] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 399.328597][ T5854] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 399.929285][ T5854] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 399.941589][ T5854] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 400.611889][ T5854] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 400.929633][T10156] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1505'. [ 400.931933][ T5854] em28xx 5-1:0.0: No AC97 audio processor [ 402.001087][ T5854] usb 5-1: USB disconnect, device number 28 [ 402.018721][ T5854] em28xx 5-1:0.0: Disconnecting em28xx [ 402.038655][ T5854] em28xx 5-1:0.0: Freeing device [ 404.986062][T10210] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1527'. [ 405.000301][T10210] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1527'. [ 405.232162][ T8] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 405.240347][ T5854] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 405.442059][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 405.520991][ T5854] usb 6-1: unable to get BOS descriptor or descriptor too short [ 405.540915][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 405.567770][ T5854] usb 6-1: not running at top speed; connect to a high speed hub [ 405.648009][ T5854] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 405.670358][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 405.795433][ T8] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 405.818698][ T5854] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 405.832890][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.851218][ T5854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.861332][ T8] usb 1-1: Product: syz [ 405.878477][ T5854] usb 6-1: Product: syz [ 405.883143][ T8] usb 1-1: Manufacturer: syz [ 405.887771][ T8] usb 1-1: SerialNumber: syz [ 405.900853][ T5854] usb 6-1: Manufacturer: syz [ 405.923761][ T5854] usb 6-1: SerialNumber: syz [ 405.934982][ T8] usb 1-1: config 0 descriptor?? [ 406.212215][ T5894] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 406.367686][ T5854] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 406.452392][ T8] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 406.558318][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.571299][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.573055][ T5854] usb 6-1: USB disconnect, device number 10 [ 406.582195][ T5894] usb 5-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 406.588386][ T8] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 406.632264][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.662043][ T5894] usb 5-1: config 0 descriptor?? [ 406.707417][T10234] tipc: Failed to remove unknown binding: 66,1,1/0:655514045/655514047 [ 406.718907][T10234] tipc: Failed to remove unknown binding: 66,1,1/0:655514045/655514047 [ 406.728715][T10234] tipc: Failed to remove unknown binding: 66,1,1/0:655514045/655514047 [ 407.023497][ T8] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 407.030719][ T8] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 407.097906][ T5894] apple 0003:05AC:027C.000C: hidraw0: USB HID v0.00 Device [HID 05ac:027c] on usb-dummy_hcd.4-1/input0 [ 407.303499][T10253] netlink: 'syz.2.1540': attribute type 10 has an invalid length. [ 407.679800][ T8] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 407.687349][ T8] em28xx 1-1:0.0: No AC97 audio processor [ 408.198424][ T5894] usb 5-1: USB disconnect, device number 29 [ 408.761600][ T8] usb 1-1: USB disconnect, device number 20 [ 409.608019][ T8] em28xx 1-1:0.0: Disconnecting em28xx [ 409.614565][ T8] em28xx 1-1:0.0: Freeing device [ 410.123521][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1550'. [ 411.299099][T10299] netlink: 'syz.0.1553': attribute type 10 has an invalid length. [ 413.636754][T10334] netlink: 'syz.4.1566': attribute type 10 has an invalid length. [ 416.100331][T10373] binder: BINDER_SET_CONTEXT_MGR already set [ 416.106616][T10373] binder: 10372:10373 ioctl 4018620d 20000040 returned -16 [ 417.277078][T10378] block nbd4: shutting down sockets [ 417.462015][ T5894] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 417.801918][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 417.808593][ T5894] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 417.818317][ T5894] usb 1-1: config 0 has no interface number 0 [ 417.825364][ T5894] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 417.842156][ T5894] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 418.735512][ T5894] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 418.746895][ T5894] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 418.760220][ T5894] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 418.769483][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.895121][ T5894] usb 1-1: config 0 descriptor?? [ 418.910564][ T5894] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 419.319787][T10419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1593'. [ 419.335228][T10419] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1593'. [ 420.101679][ T8] usb 1-1: USB disconnect, device number 21 [ 420.127366][ T8] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 421.501170][T10428] block nbd4: shutting down sockets [ 421.667951][T10438] netlink: 'syz.5.1602': attribute type 2 has an invalid length. [ 422.241139][T10442] ipvlan2: entered promiscuous mode [ 422.257521][T10442] bridge0: port 3(ipvlan2) entered blocking state [ 422.265192][T10442] bridge0: port 3(ipvlan2) entered disabled state [ 422.293841][T10442] ipvlan2: entered allmulticast mode [ 422.313473][T10442] bridge0: entered allmulticast mode [ 422.331683][T10442] ipvlan2: left allmulticast mode [ 422.338271][T10442] bridge0: left allmulticast mode [ 424.572139][ T5854] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 424.731978][ T5854] usb 6-1: Using ep0 maxpacket: 8 [ 424.738973][ T5854] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 424.762010][ T5854] usb 6-1: config 0 has no interface number 0 [ 424.788584][ T5854] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 424.827049][ T5854] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 424.855665][ T5854] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 424.884319][ T5854] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 424.906077][ T5854] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 424.917892][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.939176][ T5854] usb 6-1: config 0 descriptor?? [ 424.951646][ T5854] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 425.162329][ T5854] usb 6-1: USB disconnect, device number 11 [ 425.172444][ T5854] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 425.256964][T10489] uprobe: syz.4.1612:10489 failed to unregister, leaking uprobe [ 426.921981][T10507] block nbd0: shutting down sockets [ 427.052659][T10509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1628'. [ 427.061692][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1628'. [ 427.099634][T10509] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 427.422383][ T5894] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 427.583855][ T5894] usb 6-1: config 0 has an invalid interface number: 216 but max is 0 [ 427.592966][ T5894] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.621185][ T5894] usb 6-1: config 0 has no interface number 0 [ 427.635769][ T5894] usb 6-1: config 0 interface 216 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 427.675006][ T5894] usb 6-1: config 0 interface 216 has no altsetting 0 [ 427.682135][ T5894] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 427.691293][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.710187][ T5894] usb 6-1: config 0 descriptor?? [ 427.717059][ T5894] usb 6-1: NFC: intf ffff888070a78000 id ffffffff8f31a860 [ 427.940620][ T8] usb 6-1: USB disconnect, device number 12 [ 431.345294][T10571] capability: warning: `syz.2.1650' uses 32-bit capabilities (legacy support in use) [ 437.101966][ T5943] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 437.322205][ T5943] usb 6-1: Using ep0 maxpacket: 32 [ 437.383820][ T5943] usb 6-1: unable to get BOS descriptor or descriptor too short [ 437.508118][ T5943] usb 6-1: config 16 has an invalid interface number: 194 but max is 1 [ 437.631696][ T5943] usb 6-1: config 16 has no interface number 1 [ 437.702314][ T5943] usb 6-1: config 16 interface 0 has no altsetting 0 [ 437.726175][ T5943] usb 6-1: New USB device found, idVendor=055f, idProduct=c220, bcdDevice=ca.0e [ 437.752031][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.799851][ T5943] usb 6-1: Product: syz [ 437.817331][ T5943] usb 6-1: Manufacturer: syz [ 437.861902][ T5943] usb 6-1: SerialNumber: syz [ 438.002359][T10651] nbd2: detected capacity change from 0 to 12 [ 438.032833][ T6525] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.042292][T10656] block nbd2: shutting down sockets [ 438.093688][ T6525] Buffer I/O error on dev nbd2, logical block 0, async page read [ 438.110358][ T5943] gspca_main: spca500-2.14.0 probing 055f:c220 [ 438.150145][ T5943] usb 6-1: USB disconnect, device number 13 [ 438.242385][ T40] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.252005][ T40] Buffer I/O error on dev nbd2, logical block 0, async page read [ 438.267844][ T6525] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.303684][ T6525] Buffer I/O error on dev nbd2, logical block 0, async page read [ 438.353649][ T6525] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.400788][ T6525] Buffer I/O error on dev nbd2, logical block 0, async page read [ 438.445969][ T6525] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.498894][ T6525] Buffer I/O error on dev nbd2, logical block 0, async page read [ 438.529001][ T6525] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.578211][ T6525] Buffer I/O error on dev nbd2, logical block 0, async page read [ 438.607408][ T6525] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.647143][ T6525] Buffer I/O error on dev nbd2, logical block 0, async page read [ 438.671697][ T6525] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.914276][ T6525] Buffer I/O error on dev nbd2, logical block 0, async page read [ 439.084454][ T6525] ldm_validate_partition_table(): Disk read failed. [ 439.258971][ T6525] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 439.381341][ T6525] Buffer I/O error on dev nbd2, logical block 0, async page read [ 439.540090][ T6525] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 439.553169][ T6525] Buffer I/O error on dev nbd2, logical block 0, async page read [ 439.562994][ T6525] Dev nbd2: unable to read RDB block 0 [ 439.568887][ T6525] nbd2: unable to read partition table [ 439.574881][ T6525] nbd2: partition table beyond EOD, truncated [ 439.635105][ T6525] ldm_validate_partition_table(): Disk read failed. [ 439.647991][ T6525] Dev nbd2: unable to read RDB block 0 [ 439.685452][ T6525] nbd2: unable to read partition table [ 439.693045][ T6525] nbd2: partition table beyond EOD, truncated [ 440.393263][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.399700][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.932167][ T5893] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 441.944153][T10709] team0: entered allmulticast mode [ 441.963026][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 441.970610][T10709] team_slave_0: entered allmulticast mode [ 441.983473][T10709] team_slave_1: entered allmulticast mode [ 441.987090][ T5893] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 442.027534][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.049824][ T5893] usb 4-1: Product: syz [ 442.060185][ T5893] usb 4-1: Manufacturer: syz [ 442.082963][ T5893] usb 4-1: SerialNumber: syz [ 442.103557][ T5893] usb 4-1: config 0 descriptor?? [ 442.468064][ T5893] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 443.481275][ T5893] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 443.578977][ T5893] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 443.590755][ T5893] usb 4-1: media controller created [ 443.610548][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 443.683080][T10731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1698'. [ 443.706029][ T5893] i2c i2c-1: Added multiplexed i2c bus 2 [ 443.711714][ T5893] rtl2830 1-0010: Realtek RTL2830 successfully attached [ 443.720542][ T5893] usb 4-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2830 (DVB-T))... [ 443.731502][ T5893] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2830 (DVB-T)' registered. [ 443.791523][ T5893] DVB: Unable to find symbol mxl5005s_attach() [ 443.900278][ T5893] usb 4-1: USB disconnect, device number 22 [ 446.916895][ T5857] Bluetooth: hci0: unexpected event for opcode 0x2012 [ 447.033570][T10766] netlink: 'syz.4.1709': attribute type 10 has an invalid length. [ 448.486113][T10783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1717'. [ 448.495324][T10783] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1717'. [ 448.529466][T10783] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.538962][T10783] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.548323][T10783] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.557282][T10783] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.566532][T10783] vxlan0: entered promiscuous mode [ 450.772013][ T5943] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 450.942014][ T5857] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 450.950556][ T5857] Bluetooth: hci0: Injecting HCI hardware error event [ 450.959560][ T5157] Bluetooth: hci0: hardware error 0x00 [ 450.969059][ T5943] usb 3-1: Using ep0 maxpacket: 32 [ 450.990631][ T5943] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 451.026968][ T5943] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 451.041892][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.060334][ T5943] usb 3-1: Product: syz [ 451.064887][ T5943] usb 3-1: Manufacturer: syz [ 451.069477][ T5943] usb 3-1: SerialNumber: syz [ 451.876929][ T5943] usb 3-1: selecting invalid altsetting 1 [ 452.383780][ T5943] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 452.383842][ T5943] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 452.414604][ T5943] usb 3-1: USB disconnect, device number 23 [ 452.856042][T10823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1730'. [ 452.865184][T10823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1730'. [ 453.027922][ T5157] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 453.772684][ T5943] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 454.002327][ T5943] usb 3-1: device descriptor read/64, error -71 [ 454.332235][ T5943] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 454.532119][ T5943] usb 3-1: device descriptor read/64, error -71 [ 455.301323][ T5943] usb usb3-port1: attempt power cycle [ 455.682022][ T5943] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 455.703283][ T5943] usb 3-1: device descriptor read/8, error -71 [ 455.941950][ T5943] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 456.009082][ T5943] usb 3-1: device descriptor read/8, error -71 [ 456.152357][ T5943] usb usb3-port1: unable to enumerate USB device [ 461.202044][ T8] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 461.331983][ T8] usb 5-1: device descriptor read/64, error -71 [ 462.125864][ T8] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 462.365363][ T8] usb 5-1: device descriptor read/64, error -71 [ 462.572162][ T8] usb usb5-port1: attempt power cycle [ 463.022074][ T8] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 463.042772][ T8] usb 5-1: device descriptor read/8, error -71 [ 463.281979][ T8] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 463.332766][ T8] usb 5-1: device descriptor read/8, error -71 [ 463.445560][ T8] usb usb5-port1: unable to enumerate USB device [ 465.513738][T10934] netlink: 'syz.2.1766': attribute type 2 has an invalid length. [ 466.819263][T10947] netlink: 'syz.2.1771': attribute type 10 has an invalid length. [ 466.961304][T10942] syz.4.1770 (10942): drop_caches: 2 [ 467.055020][ T5897] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 468.165901][ T5897] usb 1-1: Using ep0 maxpacket: 16 [ 468.206431][ T5897] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 468.214586][ T5897] usb 1-1: config 0 has no interface number 0 [ 468.228950][ T5897] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 468.238324][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.246459][ T5897] usb 1-1: Product: syz [ 468.250694][ T5897] usb 1-1: Manufacturer: syz [ 468.255407][ T5897] usb 1-1: SerialNumber: syz [ 468.268600][ T5897] usb 1-1: config 0 descriptor?? [ 468.279353][ T5897] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 468.284331][T10972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1779'. [ 470.210836][ T5897] gspca_spca1528: reg_w err -71 [ 470.215961][ T5897] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 470.234889][ T5897] usb 1-1: USB disconnect, device number 22 [ 470.410279][T10990] netlink: 'syz.3.1782': attribute type 2 has an invalid length. [ 472.777786][ T8] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 472.934574][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=e4.fb [ 472.951897][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.987102][ T8] usb 4-1: config 0 descriptor?? [ 473.043846][ T8] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 473.062785][ T8] dvb-usb: bulk message failed: -22 (3/0) [ 473.092646][ T8] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 473.109137][ T8] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 473.141330][ T8] usb 4-1: media controller created [ 473.161511][ T8] dvb-usb: bulk message failed: -22 (5/0) [ 473.181731][ T8] dvb-usb: MAC address reading failed. [ 473.211203][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 473.999575][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 474.006494][ T8] dvb-usb: bulk message failed: -22 (6/0) [ 474.018563][ T8] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 474.034772][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 474.051663][ T8] dvb-usb: schedule remote query interval to 100 msecs. [ 474.067585][ T8] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 474.138072][ T8] usb 4-1: USB disconnect, device number 23 [ 474.173282][ T8] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 474.257272][T11024] syz.4.1795 (11024): drop_caches: 2 [ 475.231905][ T8] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 475.489538][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 475.514965][ T8] usb 4-1: New USB device found, idVendor=5fc9, idProduct=0061, bcdDevice=cd.47 [ 475.529830][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.571933][ T8] usb 4-1: Product: syz [ 475.576158][ T8] usb 4-1: Manufacturer: syz [ 475.999244][ T8] usb 4-1: SerialNumber: syz [ 476.022150][ T8] usb 4-1: config 0 descriptor?? [ 477.030046][ T8] usb 4-1: USB disconnect, device number 24 [ 479.827422][T11093] netlink: 'syz.3.1813': attribute type 2 has an invalid length. [ 480.606073][T11100] capability: warning: `syz.3.1817' uses deprecated v2 capabilities in a way that may be insecure [ 483.310716][T11115] syz.4.1821 (11115): drop_caches: 2 [ 486.243144][ T5919] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 486.693253][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.703761][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 486.716865][ T5919] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 486.726388][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.753713][ T5919] usb 5-1: config 0 descriptor?? [ 486.781839][ T5919] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 487.244147][ T8] usb 5-1: USB disconnect, device number 34 [ 487.377408][T11168] syz.0.1838 (11168): drop_caches: 2 [ 488.202112][ T5854] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 488.362426][ T5854] usb 5-1: Using ep0 maxpacket: 16 [ 488.370272][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.408562][ T5854] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 488.490776][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.507616][ T5854] usb 5-1: config 0 descriptor?? [ 488.699894][ T5854] usb 5-1: can't set config #0, error -71 [ 488.719769][ T5854] usb 5-1: USB disconnect, device number 35 [ 491.426869][T11225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1857'. [ 494.574517][T11277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1872'. [ 496.524807][T11303] netlink: 'syz.0.1881': attribute type 2 has an invalid length. [ 497.581901][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1886'. [ 498.772248][ T5854] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 499.603644][ T5854] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.614630][ T5854] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 500.395172][ T5854] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 500.404433][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.538654][ T5854] usb 6-1: config 0 descriptor?? [ 500.695761][ T5854] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 501.067191][ T5893] usb 6-1: USB disconnect, device number 14 [ 502.306987][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.313400][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.218386][ T5893] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 510.371909][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 510.379426][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.401488][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.412012][ T5893] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 510.421083][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.079101][ T5893] usb 4-1: config 0 descriptor?? [ 511.442141][ T5893] usbhid 4-1:0.0: can't add hid device: -71 [ 511.449236][ T5893] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 511.482542][ T5893] usb 4-1: USB disconnect, device number 25 [ 513.975526][T11451] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 517.469612][T11479] : renamed from bond0 (while UP) [ 522.033503][ T5896] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 522.673438][ T5896] usb 6-1: Using ep0 maxpacket: 8 [ 522.698857][ T5896] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 522.719027][ T5896] usb 6-1: config 179 has no interface number 0 [ 522.757020][ T5896] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 522.851954][ T5943] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 522.917130][ T5896] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 523.744225][ T5896] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 523.893807][ T5896] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 523.907700][ T5896] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 523.917565][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.930979][T11510] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 523.957843][ T5943] usb 5-1: New USB device found, idVendor=5fc9, idProduct=0061, bcdDevice=cd.47 [ 523.967286][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.977395][ T5943] usb 5-1: Product: syz [ 523.981725][ T5943] usb 5-1: Manufacturer: syz [ 523.987068][ T5943] usb 5-1: SerialNumber: syz [ 524.024514][ T5943] usb 5-1: config 0 descriptor?? [ 524.153211][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 524.153211][ T5893] usb 6-1: USB disconnect, device number 16 [ 524.168825][ C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 524.270280][ T5943] usb 5-1: USB disconnect, device number 36 [ 529.092015][ T5854] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 529.253937][ T5854] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 529.272765][ T5854] usb 6-1: New USB device found, idVendor=0830, idProduct=0480, bcdDevice=d2.9e [ 529.285522][ T5854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.297249][ T5854] usb 6-1: Product: syz [ 529.303753][ T5854] usb 6-1: Manufacturer: syz [ 529.308734][ T5854] usb 6-1: SerialNumber: syz [ 529.334035][ T5854] usb 6-1: config 0 descriptor?? [ 530.490765][ T5897] usb 6-1: USB disconnect, device number 17 [ 533.956957][T11657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1990'. [ 533.966200][T11657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1990'. [ 534.000236][T11657] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.009078][T11657] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.017857][T11657] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.026676][T11657] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.036724][T11657] vxlan0: entered promiscuous mode [ 534.801875][ T5897] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 534.962735][ T5897] usb 6-1: Using ep0 maxpacket: 16 [ 535.531218][T11662] syz.4.1994 (11662): drop_caches: 2 [ 535.738967][ T5897] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.749628][ T5897] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 535.765023][ T5897] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 535.774285][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.783420][ T5897] usb 6-1: Product: syz [ 535.787711][ T5897] usb 6-1: Manufacturer: syz [ 535.792875][ T5897] usb 6-1: SerialNumber: syz [ 535.803938][ T5897] usb 6-1: config 0 descriptor?? [ 537.522076][T11700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2004'. [ 537.531207][T11700] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2004'. [ 538.774085][ T5897] usb 6-1: USB disconnect, device number 18 [ 539.306533][T11707] syz.0.2007 (11707): drop_caches: 2 [ 540.351946][ T5919] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 540.514208][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.535878][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.589235][ T5919] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 540.611868][ T5943] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 540.618868][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.677250][ T5919] usb 3-1: config 0 descriptor?? [ 540.784488][ T5943] usb 5-1: Using ep0 maxpacket: 16 [ 540.855573][ T5943] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.880403][ T5943] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 540.917071][ T5919] usbhid 3-1:0.0: can't add hid device: -71 [ 541.105645][ T5919] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 541.129231][ T5919] usb 3-1: USB disconnect, device number 28 [ 541.138906][ T5943] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 541.861084][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.869224][ T5943] usb 5-1: Product: syz [ 541.873544][ T5943] usb 5-1: Manufacturer: syz [ 541.878257][ T5943] usb 5-1: SerialNumber: syz [ 541.884703][ T5943] usb 5-1: config 0 descriptor?? [ 542.972136][ T5919] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 543.354819][ T5919] usb 3-1: device not accepting address 29, error -71 [ 544.573987][ T5854] usb 5-1: USB disconnect, device number 37 [ 545.111922][ T5854] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 546.178428][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.189527][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.199685][ T5854] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 546.210839][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.234048][ T5854] usb 4-1: config 0 descriptor?? [ 547.618164][ T5943] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 547.645671][ T5854] sony 0003:1345:3008.000D: unknown main item tag 0x0 [ 547.653728][ T5854] sony 0003:1345:3008.000D: unknown main item tag 0x0 [ 547.662948][ T5854] sony 0003:1345:3008.000D: unknown main item tag 0x0 [ 547.669981][ T5854] sony 0003:1345:3008.000D: unknown main item tag 0x0 [ 547.677068][ T5854] sony 0003:1345:3008.000D: unknown main item tag 0x0 [ 547.689306][ T5854] sony 0003:1345:3008.000D: hiddev0,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.3-1/input0 [ 547.701618][ T5854] sony 0003:1345:3008.000D: failed to claim input [ 547.838746][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.881877][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.892050][ T5943] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 547.901208][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.968569][ T5943] usb 5-1: config 0 descriptor?? [ 547.982639][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 547.982655][ T29] audit: type=1326 audit(1732744809.478:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11803 comm="syz.5.2038" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25c2380809 code=0x0 [ 547.993754][T11805] netlink: 'syz.0.2037': attribute type 29 has an invalid length. [ 548.037405][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2037'. [ 548.063458][T11806] netlink: 'syz.0.2037': attribute type 29 has an invalid length. [ 548.083819][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2037'. [ 548.182624][ T5919] usb 4-1: USB disconnect, device number 26 [ 548.198876][ T5943] usbhid 5-1:0.0: can't add hid device: -71 [ 548.208236][ T5943] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 548.237983][ T5943] usb 5-1: USB disconnect, device number 38 [ 548.569167][T11813] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 548.722101][ T5943] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 549.072097][ T5943] usb 5-1: Using ep0 maxpacket: 16 [ 549.186017][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.207881][ T5943] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 549.270883][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.330782][ T5943] usb 5-1: config 0 descriptor?? [ 550.390013][ T5943] usbhid 5-1:0.0: can't add hid device: -71 [ 550.396151][ T5943] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 550.421109][ T5943] usb 5-1: USB disconnect, device number 39 [ 550.701893][ T5919] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 551.031915][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 551.097157][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 551.388668][ T5919] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 551.572134][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.716504][ T5919] usb 3-1: Product: syz [ 551.871295][ T5919] usb 3-1: Manufacturer: syz [ 551.876064][ T5919] usb 3-1: SerialNumber: syz [ 551.883403][ T5919] usb 3-1: config 0 descriptor?? [ 553.256342][ T5854] usb 3-1: USB disconnect, device number 31 [ 553.432560][T11862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2053'. [ 553.441672][T11862] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2053'. [ 553.565864][T11855] nbd0: detected capacity change from 0 to 512 [ 553.657202][ T6525] block nbd0: Send control failed (result -89) [ 553.709361][ T6525] block nbd0: Request send failed, requeueing [ 553.795225][ T5157] block nbd0: Receive control failed (result -32) [ 553.925261][ T40] block nbd0: Dead connection, failed to find a fallback [ 553.932831][ T40] block nbd0: shutting down sockets [ 553.939398][ T40] blk_print_req_error: 25 callbacks suppressed [ 553.939424][ T40] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 553.956946][ T40] buffer_io_error: 25 callbacks suppressed [ 553.956962][ T40] Buffer I/O error on dev nbd0, logical block 0, async page read [ 553.977210][T11857] nbd0: detected capacity change from 512 to 20 [ 554.040104][ T6525] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 554.049506][ T6525] Buffer I/O error on dev nbd0, logical block 0, async page read [ 554.057719][ T6525] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 554.067122][ T6525] Buffer I/O error on dev nbd0, logical block 0, async page read [ 554.075125][ T6525] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 554.084595][ T6525] Buffer I/O error on dev nbd0, logical block 0, async page read [ 554.095280][ T6525] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 554.104547][ T6525] Buffer I/O error on dev nbd0, logical block 0, async page read [ 554.113971][ T6525] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 554.123794][ T6525] Buffer I/O error on dev nbd0, logical block 0, async page read [ 554.132530][ T6525] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 554.141711][ T6525] Buffer I/O error on dev nbd0, logical block 0, async page read [ 554.343636][ T6525] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 554.352989][ T6525] Buffer I/O error on dev nbd0, logical block 0, async page read [ 554.369330][ T6525] ldm_validate_partition_table(): Disk read failed. [ 554.378655][ T6525] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 554.388177][ T6525] Buffer I/O error on dev nbd0, logical block 0, async page read [ 554.397102][ T6525] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 554.406458][ T6525] Buffer I/O error on dev nbd0, logical block 0, async page read [ 554.435190][ T6525] Dev nbd0: unable to read RDB block 0 [ 554.454997][ T6525] nbd0: unable to read partition table [ 554.784107][ T5941] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 554.823716][ T6525] nbd0: partition table beyond EOD, truncated [ 555.294343][ T6525] ldm_validate_partition_table(): Disk read failed. [ 555.328662][ T6525] Dev nbd0: unable to read RDB block 0 [ 555.352665][ T6525] nbd0: unable to read partition table [ 555.358420][ T6525] nbd0: partition table beyond EOD, truncated [ 555.433805][ T5941] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 555.452669][ T5941] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 555.490624][ T5941] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 555.560719][T11885] netlink: 'syz.0.2061': attribute type 29 has an invalid length. [ 555.577651][T11885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2061'. [ 555.602673][T11885] netlink: 'syz.0.2061': attribute type 29 has an invalid length. [ 555.618460][T11885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2061'. [ 555.746913][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.756913][ T5941] usb 4-1: Product: syz [ 555.761191][ T5941] usb 4-1: Manufacturer: syz [ 555.766035][ T5941] usb 4-1: SerialNumber: syz [ 556.151500][T11891] block nbd2: shutting down sockets [ 556.506952][ T5941] cdc_ncm 4-1:1.0: bind() failure [ 556.515474][ T5941] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 556.522435][ T5941] cdc_ncm 4-1:1.1: bind() failure [ 556.530921][ T5941] usb 4-1: USB disconnect, device number 27 [ 558.541262][ T29] audit: type=1326 audit(1732744820.038:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11916 comm="syz.3.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a03580809 code=0x7ffc0000 [ 558.633643][ T29] audit: type=1326 audit(1732744820.038:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11916 comm="syz.3.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a03580809 code=0x7ffc0000 [ 559.130273][ T29] audit: type=1326 audit(1732744820.038:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11916 comm="syz.3.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f2a03580809 code=0x7ffc0000 [ 560.971915][ T5894] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 561.062036][ T5919] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 561.071908][ T5893] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 561.124515][ T5894] usb 6-1: unable to get BOS descriptor or descriptor too short [ 561.148816][ T5894] usb 6-1: config 3 has an invalid interface number: 19 but max is 0 [ 561.160006][ T5894] usb 6-1: config 3 has an invalid interface number: 4 but max is 0 [ 561.184165][ T5894] usb 6-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 561.198490][ T5894] usb 6-1: config 3 has no interface number 0 [ 561.217469][ T5894] usb 6-1: config 3 has no interface number 1 [ 561.225329][ T5894] usb 6-1: config 3 interface 19 altsetting 9 endpoint 0x6 has invalid maxpacket 1040, setting to 64 [ 561.942471][ T5894] usb 6-1: config 3 interface 19 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 561.955684][ T5894] usb 6-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30 [ 561.966861][ T5894] usb 6-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32 [ 561.977001][ T5894] usb 6-1: config 3 interface 4 altsetting 131 endpoint 0xC has invalid wMaxPacketSize 0 [ 561.987218][ T5894] usb 6-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 0 [ 561.997806][ T5894] usb 6-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175 [ 562.012279][ T5894] usb 6-1: config 3 interface 19 has no altsetting 0 [ 562.019011][ T5894] usb 6-1: config 3 interface 4 has no altsetting 0 [ 562.032526][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.043664][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.055073][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.066322][ T5919] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 562.090077][ T5894] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=13.f5 [ 562.099995][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.108151][ T5893] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 562.117484][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.125576][ T5894] usb 6-1: Product: syz [ 562.129758][ T5894] usb 6-1: Manufacturer: syz [ 562.134501][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.145307][ T5894] usb 6-1: SerialNumber: syz [ 562.151818][ T5919] usb 3-1: config 0 descriptor?? [ 562.165848][ T5893] usb 5-1: config 0 descriptor?? [ 562.385614][ T5919] usbhid 3-1:0.0: can't add hid device: -71 [ 562.392029][ T5919] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 562.413985][ T5894] pl2303 6-1:3.19: required endpoints missing [ 562.432967][ T5894] pl2303 6-1:3.4: required interrupt-in endpoint missing [ 562.444297][ T5919] usb 3-1: USB disconnect, device number 32 [ 562.475989][ T5894] usb 6-1: USB disconnect, device number 19 [ 562.584215][ T5893] sony 0003:1345:3008.000E: unknown main item tag 0x0 [ 562.591532][ T5893] sony 0003:1345:3008.000E: unknown main item tag 0x0 [ 562.598568][ T5893] sony 0003:1345:3008.000E: unknown main item tag 0x0 [ 562.609838][ T5893] sony 0003:1345:3008.000E: unknown main item tag 0x0 [ 562.619967][ T5893] sony 0003:1345:3008.000E: unknown main item tag 0x0 [ 562.638899][ T5893] sony 0003:1345:3008.000E: hiddev0,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.4-1/input0 [ 562.652479][ T5893] sony 0003:1345:3008.000E: failed to claim input [ 563.032504][ T5893] usb 5-1: USB disconnect, device number 40 [ 563.265524][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.271907][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.417544][ T5941] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 565.575623][ T5854] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 565.602165][ T5941] usb 3-1: Using ep0 maxpacket: 32 [ 565.610977][ T5941] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 565.632753][ T5941] usb 3-1: config 0 has no interface number 0 [ 565.652444][ T5941] usb 3-1: config 0 interface 2 has no altsetting 0 [ 565.677467][ T5941] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=a5.66 [ 565.707997][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.716669][ T5854] usb 4-1: device descriptor read/64, error -71 [ 565.736414][ T5941] usb 3-1: Product: syz [ 565.740630][ T5941] usb 3-1: Manufacturer: syz [ 565.950584][ T5941] usb 3-1: SerialNumber: syz [ 565.958109][ T5941] usb 3-1: config 0 descriptor?? [ 566.093886][ T5854] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 566.492421][ T5854] usb 4-1: device descriptor read/64, error -71 [ 566.732571][ T5854] usb usb4-port1: attempt power cycle [ 567.220683][ T5854] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 567.363065][T12016] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2103'. [ 567.372054][T12016] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2103'. [ 567.385230][T12016] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.394036][T12016] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.402809][T12016] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.411516][T12016] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.421675][T12016] vxlan0: entered promiscuous mode [ 567.525741][ T5941] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 567.822664][ T5854] usb 4-1: device descriptor read/8, error -71 [ 567.832329][ T5941] usb 3-1: invalid MIDI in EP 0 [ 567.978580][ T5941] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 568.081924][ T5854] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 568.118888][ T8939] udevd[8939]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 568.137806][ T5941] usb 3-1: USB disconnect, device number 33 [ 569.066017][ T5854] usb 4-1: device descriptor read/8, error -71 [ 569.213639][T12032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2109'. [ 569.298356][ T5854] usb usb4-port1: unable to enumerate USB device [ 570.371857][ T5919] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 570.518781][T12047] syz.2.2114 (12047): drop_caches: 2 [ 570.534111][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.568419][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.622026][ T5919] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 570.661961][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.719007][ T5919] usb 1-1: config 0 descriptor?? [ 572.936169][ T5919] usbhid 1-1:0.0: can't add hid device: -71 [ 572.943019][ T5919] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 573.122231][ T5919] usb 1-1: USB disconnect, device number 23 [ 573.585591][ T5919] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 573.736654][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2120'. [ 573.745830][ T5919] usb 1-1: device descriptor read/64, error -71 [ 574.052201][ T5919] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 574.411846][ T5919] usb 1-1: device descriptor read/64, error -71 [ 574.581883][ T8] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 574.742422][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 574.762911][ T8] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 574.778506][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.804741][ T8] usb 6-1: Product: syz [ 574.820933][ T8] usb 6-1: Manufacturer: syz [ 574.831606][ T8] usb 6-1: SerialNumber: syz [ 574.837918][ T5919] usb usb1-port1: attempt power cycle [ 574.886059][ T8] usb 6-1: config 0 descriptor?? [ 574.901814][T12085] netlink: 'syz.2.2125': attribute type 29 has an invalid length. [ 574.909820][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2125'. [ 574.912271][ T8] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 574.921178][T12085] netlink: 'syz.2.2125': attribute type 29 has an invalid length. [ 574.933185][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2125'. [ 575.211856][ T5919] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 575.243497][ T5919] usb 1-1: device descriptor read/8, error -71 [ 575.492041][ T5919] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 575.555321][ T5919] usb 1-1: device descriptor read/8, error -71 [ 575.672963][ T5919] usb usb1-port1: unable to enumerate USB device [ 577.161872][ T8] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 577.182404][ T5854] usb 6-1: USB disconnect, device number 20 [ 577.313736][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.331945][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.351901][ T5943] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 577.369424][ T8] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 577.389064][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.410401][ T8] usb 5-1: config 0 descriptor?? [ 577.516258][ T5943] usb 3-1: Using ep0 maxpacket: 16 [ 577.538262][ T5943] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 577.550008][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 577.574458][ T5943] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 578.022617][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.538500][ T8] sony 0003:1345:3008.000F: unknown main item tag 0x0 [ 578.547432][ T8] sony 0003:1345:3008.000F: unknown main item tag 0x0 [ 578.554665][ T5943] usb 3-1: Product: syz [ 578.558945][ T8] sony 0003:1345:3008.000F: unknown main item tag 0x0 [ 578.565943][ T5943] usb 3-1: Manufacturer: syz [ 578.570613][ T5943] usb 3-1: SerialNumber: syz [ 578.575378][ T8] sony 0003:1345:3008.000F: unknown main item tag 0x0 [ 578.775934][ T8] sony 0003:1345:3008.000F: unknown main item tag 0x0 [ 578.787028][ T5943] usb 3-1: config 0 descriptor?? [ 578.796444][ T5943] em28xx 3-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 578.824173][ T8] sony 0003:1345:3008.000F: hiddev0,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.4-1/input0 [ 578.901712][ T8] sony 0003:1345:3008.000F: failed to claim input [ 579.680655][T12138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2140'. [ 579.682892][ T5919] usb 5-1: USB disconnect, device number 41 [ 580.691901][ T8] usb 3-1: USB disconnect, device number 34 [ 581.012876][T12164] netlink: 'syz.0.2143': attribute type 29 has an invalid length. [ 581.020754][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2143'. [ 581.234655][T12171] netlink: 'syz.0.2143': attribute type 29 has an invalid length. [ 581.336357][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2143'. [ 585.012102][ T5919] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 585.255382][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.359055][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.417077][ T5919] usb 4-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 585.451811][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.622497][ T5919] usb 4-1: config 0 descriptor?? [ 586.234481][ T5919] sony 0003:1345:3008.0010: unknown main item tag 0x0 [ 586.242245][ T5919] sony 0003:1345:3008.0010: unknown main item tag 0x0 [ 586.325146][ T5919] sony 0003:1345:3008.0010: unknown main item tag 0x0 [ 586.440213][ T5919] sony 0003:1345:3008.0010: unknown main item tag 0x0 [ 586.915595][ T5919] sony 0003:1345:3008.0010: unknown main item tag 0x0 [ 586.948079][ T5919] sony 0003:1345:3008.0010: hiddev0,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.3-1/input0 [ 586.984783][ T5919] sony 0003:1345:3008.0010: failed to claim input [ 587.039060][ T5919] usb 4-1: USB disconnect, device number 32 [ 588.517456][T12230] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 590.597430][T12258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2176'. [ 590.616259][T12258] vlan2: entered promiscuous mode [ 590.621352][T12258] syz_tun: entered promiscuous mode [ 590.664741][T12258] syz_tun: left promiscuous mode [ 592.119019][T12272] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 592.271861][ T5854] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 592.287699][T12277] netlink: 'syz.3.2181': attribute type 1 has an invalid length. [ 592.317506][T12277] netlink: 'syz.3.2181': attribute type 2 has an invalid length. [ 592.433419][ T5854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.455202][ T5854] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.486203][ T5854] usb 6-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 592.511857][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.544029][ T5854] usb 6-1: config 0 descriptor?? [ 592.982179][ T8] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 593.840391][ T5854] sony 0003:1345:3008.0011: unknown main item tag 0x0 [ 593.847323][ T5854] sony 0003:1345:3008.0011: unknown main item tag 0x0 [ 593.854443][ T5854] sony 0003:1345:3008.0011: unknown main item tag 0x0 [ 593.861265][ T5854] sony 0003:1345:3008.0011: unknown main item tag 0x0 [ 593.868513][ T5854] sony 0003:1345:3008.0011: unknown main item tag 0x0 [ 593.878719][ T5854] sony 0003:1345:3008.0011: hiddev0,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.5-1/input0 [ 593.891150][ T5854] sony 0003:1345:3008.0011: failed to claim input [ 593.966123][T12301] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 593.977841][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 593.993336][ T8] usb 5-1: config 3 has an invalid interface number: 19 but max is 0 [ 594.011678][ T8] usb 5-1: config 3 has an invalid interface number: 4 but max is 0 [ 594.019839][ T8] usb 5-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 594.774766][ T8] usb 5-1: config 3 has no interface number 0 [ 594.780915][ T8] usb 5-1: config 3 has no interface number 1 [ 594.787576][ T8] usb 5-1: config 3 interface 19 altsetting 9 endpoint 0x6 has invalid maxpacket 1040, setting to 64 [ 594.798549][ T8] usb 5-1: config 3 interface 19 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 594.811669][ T8] usb 5-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30 [ 594.823690][ T8] usb 5-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32 [ 594.833836][ T8] usb 5-1: config 3 interface 4 altsetting 131 endpoint 0xC has invalid wMaxPacketSize 0 [ 594.843774][ T8] usb 5-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 0 [ 594.853788][ T8] usb 5-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175 [ 594.867679][ T8] usb 5-1: config 3 interface 19 has no altsetting 0 [ 594.874890][ T8] usb 5-1: config 3 interface 4 has no altsetting 0 [ 594.890879][ T939] usb 6-1: USB disconnect, device number 21 [ 594.927956][ T8] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=13.f5 [ 594.938043][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.976867][ T8] usb 5-1: Product: syz [ 594.994177][ T8] usb 5-1: Manufacturer: syz [ 594.998842][ T8] usb 5-1: SerialNumber: syz [ 595.230394][ T8] pl2303 5-1:3.19: required endpoints missing [ 595.463490][ T8] pl2303 5-1:3.4: required interrupt-in endpoint missing [ 595.488685][ T8] usb 5-1: USB disconnect, device number 42 [ 603.043496][ T29] audit: type=1326 audit(1732744864.548:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12405 comm="syz.0.2224" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68fa980809 code=0x0 [ 607.594093][ T29] audit: type=1326 audit(1732744869.098:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12458 comm="syz.2.2242" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ab6980809 code=0x0 [ 612.085248][ T29] audit: type=1326 audit(1732744873.588:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12500 comm="syz.5.2254" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25c2380809 code=0x0 [ 620.661877][ T8] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 620.801956][ T8] usb 4-1: device descriptor read/64, error -71 [ 620.827350][T12606] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2288'. [ 620.860234][T12608] netlink: 'syz.2.2289': attribute type 29 has an invalid length. [ 620.883651][T12606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2288'. [ 620.933535][T12606] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2288'. [ 621.048335][ T5157] block nbd0: Receive control failed (result -107) [ 621.081957][ T8] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 621.145336][T12606] [ 621.147686][T12606] ====================================================== [ 621.154695][T12606] WARNING: possible circular locking dependency detected [ 621.161718][T12606] 6.12.0-syzkaller-10296-gaaf20f870da0 #0 Not tainted [ 621.168478][T12606] ------------------------------------------------------ [ 621.175489][T12606] syz.5.2288/12606 is trying to acquire lock: [ 621.181558][T12606] ffff8880257cdf00 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2e0/0x8f0 [ 621.190516][T12606] [ 621.190516][T12606] but task is already holding lock: [ 621.197868][T12606] ffff8880257cd8b0 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_set_size+0xe0/0x8f0 [ 621.207733][T12606] [ 621.207733][T12606] which lock already depends on the new lock. [ 621.207733][T12606] [ 621.218132][T12606] [ 621.218132][T12606] the existing dependency chain (in reverse order) is: [ 621.227140][T12606] [ 621.227140][T12606] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 621.235738][T12606] lock_acquire+0x1ed/0x550 [ 621.240758][T12606] blk_mq_submit_bio+0x1536/0x23a0 [ 621.246381][T12606] __submit_bio+0x2c6/0x560 [ 621.251405][T12606] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 621.257562][T12606] block_read_full_folio+0x93b/0xcd0 [ 621.263372][T12606] filemap_read_folio+0x14b/0x630 [ 621.269091][T12606] filemap_get_pages+0x17af/0x2540 [ 621.274735][T12606] filemap_read+0x45c/0xf50 [ 621.279767][T12606] blkdev_read_iter+0x2d8/0x430 [ 621.285203][T12606] vfs_read+0x991/0xb70 [ 621.289909][T12606] ksys_read+0x18f/0x2b0 [ 621.294712][T12606] do_syscall_64+0xf3/0x230 [ 621.299732][T12606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.301914][ T8] usb 4-1: device descriptor read/64, error -71 [ 621.306151][T12606] [ 621.306151][T12606] -> #4 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 621.306192][T12606] lock_acquire+0x1ed/0x550 [ 621.325951][T12606] down_read+0xb1/0xa40 [ 621.330624][T12606] filemap_fault+0x6e8/0x1950 [ 621.335834][T12606] __do_fault+0x135/0x460 [ 621.340711][T12606] handle_pte_fault+0x335a/0x68a0 [ 621.346280][T12606] handle_mm_fault+0x1053/0x1ad0 [ 621.351755][T12606] __get_user_pages+0x1c82/0x49e0 [ 621.357396][T12606] populate_vma_page_range+0x264/0x330 [ 621.363367][T12606] __mm_populate+0x27a/0x460 [ 621.368466][T12606] vm_mmap_pgoff+0x2c3/0x3d0 [ 621.373585][T12606] ksys_mmap_pgoff+0x4eb/0x720 [ 621.378856][T12606] do_syscall_64+0xf3/0x230 [ 621.383879][T12606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.390317][T12606] [ 621.390317][T12606] -> #3 (&mm->mmap_lock){++++}-{4:4}: [ 621.397867][T12606] lock_acquire+0x1ed/0x550 [ 621.402891][T12606] __might_fault+0xc6/0x120 [ 621.407912][T12606] _copy_from_user+0x2a/0xc0 [ 621.413016][T12606] blk_trace_ioctl+0x1ad/0x9a0 [ 621.418287][T12606] blkdev_ioctl+0x40c/0x6a0 [ 621.423295][T12606] __se_sys_ioctl+0xf5/0x170 [ 621.428394][T12606] do_syscall_64+0xf3/0x230 [ 621.433403][T12606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.439831][T12606] [ 621.439831][T12606] -> #2 (&q->debugfs_mutex){+.+.}-{4:4}: [ 621.447636][T12606] lock_acquire+0x1ed/0x550 [ 621.452672][T12606] __mutex_lock+0x1ac/0xee0 [ 621.457705][T12606] blk_mq_init_sched+0x3fa/0x830 [ 621.463163][T12606] elevator_init_mq+0x20e/0x320 [ 621.468533][T12606] add_disk_fwnode+0x10d/0xf80 [ 621.473817][T12606] sd_probe+0xba6/0x1100 [ 621.478573][T12606] really_probe+0x2b8/0xad0 [ 621.483619][T12606] __driver_probe_device+0x1a2/0x390 [ 621.489435][T12606] driver_probe_device+0x50/0x430 [ 621.494985][T12606] __device_attach_driver+0x2d6/0x530 [ 621.500869][T12606] bus_for_each_drv+0x24e/0x2e0 [ 621.506238][T12606] __device_attach_async_helper+0x22d/0x300 [ 621.512644][T12606] async_run_entry_fn+0xa8/0x420 [ 621.518097][T12606] process_scheduled_works+0xa63/0x1850 [ 621.524155][T12606] worker_thread+0x870/0xd30 [ 621.529255][T12606] kthread+0x2f0/0x390 [ 621.533836][T12606] ret_from_fork+0x4b/0x80 [ 621.538759][T12606] ret_from_fork_asm+0x1a/0x30 [ 621.544054][T12606] [ 621.544054][T12606] -> #1 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 621.552916][T12606] lock_acquire+0x1ed/0x550 [ 621.557934][T12606] blk_queue_enter+0xe1/0x600 [ 621.563125][T12606] blk_mq_alloc_request+0x4fa/0xaa0 [ 621.568835][T12606] scsi_execute_cmd+0x177/0x1090 [ 621.574288][T12606] read_capacity_16+0x2b4/0x1450 [ 621.579745][T12606] sd_revalidate_disk+0x1013/0xbce0 [ 621.585457][T12606] sd_probe+0x9fa/0x1100 [ 621.590227][T12606] really_probe+0x2b8/0xad0 [ 621.595246][T12606] __driver_probe_device+0x1a2/0x390 [ 621.601039][T12606] driver_probe_device+0x50/0x430 [ 621.606576][T12606] __device_attach_driver+0x2d6/0x530 [ 621.612457][T12606] bus_for_each_drv+0x24e/0x2e0 [ 621.617822][T12606] __device_attach_async_helper+0x22d/0x300 [ 621.624249][T12606] async_run_entry_fn+0xa8/0x420 [ 621.629704][T12606] process_scheduled_works+0xa63/0x1850 [ 621.635770][T12606] worker_thread+0x870/0xd30 [ 621.640871][T12606] kthread+0x2f0/0x390 [ 621.645452][T12606] ret_from_fork+0x4b/0x80 [ 621.650387][T12606] ret_from_fork_asm+0x1a/0x30 [ 621.655670][T12606] [ 621.655670][T12606] -> #0 (&q->limits_lock){+.+.}-{4:4}: [ 621.663318][T12606] validate_chain+0x18ef/0x5920 [ 621.668704][T12606] __lock_acquire+0x1397/0x2100 [ 621.674176][T12606] lock_acquire+0x1ed/0x550 [ 621.679186][T12606] __mutex_lock+0x1ac/0xee0 [ 621.684200][T12606] nbd_set_size+0x2e0/0x8f0 [ 621.689216][T12606] nbd_genl_connect+0x157c/0x1c80 [ 621.694793][T12606] genl_rcv_msg+0xb14/0xec0 [ 621.699827][T12606] netlink_rcv_skb+0x1e3/0x430 [ 621.705114][T12606] genl_rcv+0x28/0x40 [ 621.709638][T12606] netlink_unicast+0x7f6/0x990 [ 621.714930][T12606] netlink_sendmsg+0x8e4/0xcb0 [ 621.720211][T12606] __sock_sendmsg+0x221/0x270 [ 621.725410][T12606] ____sys_sendmsg+0x52a/0x7e0 [ 621.730714][T12606] __sys_sendmsg+0x269/0x350 [ 621.735813][T12606] do_syscall_64+0xf3/0x230 [ 621.740828][T12606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.747231][T12606] [ 621.747231][T12606] other info that might help us debug this: [ 621.747231][T12606] [ 621.757447][T12606] Chain exists of: [ 621.757447][T12606] &q->limits_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#49 [ 621.757447][T12606] [ 621.772320][T12606] Possible unsafe locking scenario: [ 621.772320][T12606] [ 621.779759][T12606] CPU0 CPU1 [ 621.785111][T12606] ---- ---- [ 621.790466][T12606] lock(&q->q_usage_counter(io)#49); [ 621.795860][T12606] lock(mapping.invalidate_lock#2); [ 621.803674][T12606] lock(&q->q_usage_counter(io)#49); [ 621.811579][T12606] lock(&q->limits_lock); [ 621.815987][T12606] [ 621.815987][T12606] *** DEADLOCK *** [ 621.815987][T12606] [ 621.824132][T12606] 5 locks held by syz.5.2288/12606: [ 621.829331][T12606] #0: ffffffff8fd3ed90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 621.837546][T12606] #1: ffffffff8fd3ec48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 621.846553][T12606] #2: ffff8880258af198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0xc26/0x1c80 [ 621.856625][T12606] #3: ffff8880257cd8b0 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_set_size+0xe0/0x8f0 [ 621.866920][T12606] #4: ffff8880257cd8e8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: nbd_set_size+0xe0/0x8f0 [ 621.877491][T12606] [ 621.877491][T12606] stack backtrace: [ 621.883383][T12606] CPU: 1 UID: 0 PID: 12606 Comm: syz.5.2288 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 621.894135][T12606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 621.904216][T12606] Call Trace: [ 621.907511][T12606] [ 621.910477][T12606] dump_stack_lvl+0x241/0x360 [ 621.915169][T12606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 621.920369][T12606] ? __pfx__printk+0x10/0x10 [ 621.924958][T12606] print_circular_bug+0x13a/0x1b0 [ 621.930077][T12606] check_noncircular+0x36a/0x4a0 [ 621.935012][T12606] ? __pfx_check_noncircular+0x10/0x10 [ 621.940465][T12606] ? lockdep_lock+0x123/0x2b0 [ 621.945143][T12606] validate_chain+0x18ef/0x5920 [ 621.949993][T12606] ? __pfx_validate_chain+0x10/0x10 [ 621.955216][T12606] ? mark_lock+0x9a/0x360 [ 621.959539][T12606] __lock_acquire+0x1397/0x2100 [ 621.964385][T12606] lock_acquire+0x1ed/0x550 [ 621.968878][T12606] ? nbd_set_size+0x2e0/0x8f0 [ 621.973552][T12606] ? __pfx_lock_acquire+0x10/0x10 [ 621.978566][T12606] ? mark_lock+0x9a/0x360 [ 621.982891][T12606] ? __pfx___might_resched+0x10/0x10 [ 621.988173][T12606] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 621.994155][T12606] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 622.000483][T12606] __mutex_lock+0x1ac/0xee0 [ 622.004986][T12606] ? nbd_set_size+0x2e0/0x8f0 [ 622.009659][T12606] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 622.015647][T12606] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 622.021985][T12606] ? finish_wait+0xd4/0x1e0 [ 622.026488][T12606] ? nbd_set_size+0x2e0/0x8f0 [ 622.031166][T12606] ? __pfx___mutex_lock+0x10/0x10 [ 622.036182][T12606] ? blk_mq_freeze_queue_wait+0x132/0x190 [ 622.041894][T12606] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 622.047951][T12606] ? percpu_ref_kill_and_confirm+0xa0/0x130 [ 622.053840][T12606] ? nbd_set_size+0xe0/0x8f0 [ 622.058422][T12606] nbd_set_size+0x2e0/0x8f0 [ 622.062917][T12606] ? __pfx_nbd_set_size+0x10/0x10 [ 622.067932][T12606] ? __pfx_queue_work_on+0x10/0x10 [ 622.073031][T12606] ? rcu_read_lock_any_held+0xb7/0x160 [ 622.078486][T12606] ? nbd_start_device+0x86f/0xaa0 [ 622.083503][T12606] nbd_genl_connect+0x157c/0x1c80 [ 622.088524][T12606] ? __pfx_nbd_genl_connect+0x10/0x10 [ 622.093890][T12606] ? __nla_parse+0x40/0x60 [ 622.098302][T12606] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 622.104638][T12606] genl_rcv_msg+0xb14/0xec0 [ 622.109145][T12606] ? __pfx_genl_rcv_msg+0x10/0x10 [ 622.114171][T12606] ? __pfx_lock_acquire+0x10/0x10 [ 622.119189][T12606] ? __pfx_nbd_genl_connect+0x10/0x10 [ 622.124553][T12606] ? __pfx___might_resched+0x10/0x10 [ 622.129843][T12606] netlink_rcv_skb+0x1e3/0x430 [ 622.134600][T12606] ? __pfx_genl_rcv_msg+0x10/0x10 [ 622.139620][T12606] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 622.144907][T12606] genl_rcv+0x28/0x40 [ 622.148884][T12606] netlink_unicast+0x7f6/0x990 [ 622.153676][T12606] ? __pfx_netlink_unicast+0x10/0x10 [ 622.158957][T12606] ? __virt_addr_valid+0x183/0x530 [ 622.164061][T12606] ? __check_object_size+0x48e/0x900 [ 622.169341][T12606] netlink_sendmsg+0x8e4/0xcb0 [ 622.174125][T12606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 622.179403][T12606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 622.184679][T12606] __sock_sendmsg+0x221/0x270 [ 622.189393][T12606] ____sys_sendmsg+0x52a/0x7e0 [ 622.194157][T12606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 622.199432][T12606] ? __fget_files+0x2a/0x410 [ 622.204025][T12606] ? __fget_files+0x2a/0x410 [ 622.208618][T12606] __sys_sendmsg+0x269/0x350 [ 622.213204][T12606] ? __pfx___sys_sendmsg+0x10/0x10 [ 622.218335][T12606] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 622.224657][T12606] ? do_syscall_64+0x100/0x230 [ 622.229427][T12606] ? do_syscall_64+0xb6/0x230 [ 622.234097][T12606] do_syscall_64+0xf3/0x230 [ 622.238601][T12606] ? clear_bhb_loop+0x35/0x90 [ 622.243270][T12606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.249153][T12606] RIP: 0033:0x7f25c2380809 [ 622.253571][T12606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.273171][T12606] RSP: 002b:00007f25c01f6058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 622.281579][T12606] RAX: ffffffffffffffda RBX: 00007f25c2545fa0 RCX: 00007f25c2380809 [ 622.289545][T12606] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 000000000000000c [ 622.297508][T12606] RBP: 00007f25c23f393e R08: 0000000000000000 R09: 0000000000000000 [ 622.305474][T12606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.313441][T12606] R13: 0000000000000000 R14: 00007f25c2545fa0 R15: 00007fffd11f49c8 [ 622.321433][T12606] [ 622.324598][ C1] vkms_vblank_simulate: vblank timer overrun [ 622.374309][ T8] usb usb4-port1: attempt power cycle [ 622.376747][T12606] nbd0: detected capacity change from 0 to 256 [ 622.387301][T12592] block nbd0: Dead connection, failed to find a fallback [ 622.394536][T12592] block nbd0: shutting down sockets [ 622.400179][T12592] blk_print_req_error: 25 callbacks suppressed [ 622.400194][T12592] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 622.418393][T12592] buffer_io_error: 25 callbacks suppressed [ 622.418596][T12592] Buffer I/O error on dev nbd0, logical block 0, async page read [ 622.435463][T12592] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 622.448795][T12592] Buffer I/O error on dev nbd0, logical block 0, async page read [ 622.459877][T12592] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 622.635280][T12592] Buffer I/O error on dev nbd0, logical block 0, async page read [ 622.654625][T12592] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 622.664506][T12592] Buffer I/O error on dev nbd0, logical block 0, async page read [ 622.673966][T12592] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 622.702335][T12592] Buffer I/O error on dev nbd0, logical block 0, async page read [ 622.741781][T12592] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 622.750966][T12592] Buffer I/O error on dev nbd0, logical block 0, async page read [ 622.773813][T12592] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 622.783102][T12592] Buffer I/O error on dev nbd0, logical block 0, async page read [ 622.793868][T12592] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 622.804795][T12592] Buffer I/O error on dev nbd0, logical block 0, async page read [ 622.817899][T12592] ldm_validate_partition_table(): Disk read failed. [ 622.837521][T12592] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 622.848541][T12592] Buffer I/O error on dev nbd0, logical block 0, async page read [ 622.881817][T12592] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 622.891128][T12592] Buffer I/O error on dev nbd0, logical block 0, async page read [ 622.904245][T12592] Dev nbd0: unable to read RDB block 0 [ 622.913937][T12592] nbd0: unable to read partition table [ 622.941373][T12592] ldm_validate_partition_table(): Disk read failed. [ 622.953054][T12592] Dev nbd0: unable to read RDB block 0 [ 622.958774][T12592] nbd0: unable to read partition table [ 624.703227][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.709589][ T1297] ieee802154 phy1 wpan1: encryption failed: -22