last executing test programs: 18.559390065s ago: executing program 1 (id=1272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) 17.973344636s ago: executing program 1 (id=1273): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000019340)=ANY=[@ANYBLOB="3e000000110401002cbd7000fedbdf257f000001000000000000000000003d680000000004d308003c0014000d00e0000002000000190000000000000000"], 0x3c}}, 0x40) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f627269646765001400010077673200000000000000000000000000140001007665746830"], 0xa8}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000170a01020000000000000000000c0007"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000019080)={{{@in6=@mcast2, @in=@multicast1}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000019380)=0x4d) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) accept4$x25(r4, &(0x7f0000019280)={0x9, @remote}, &(0x7f00000192c0)=0x12, 0x80000) 8.173601041s ago: executing program 1 (id=1275): openat$sndseq(0xffffff9c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x87) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.173039972s ago: executing program 2 (id=1276): ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbf, 0x0, 0xffff, 0x2, 0x10000, '\x00', 0x654}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f40600", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 8.068964614s ago: executing program 2 (id=1278): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0x17b3\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x00', 0x4) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000280), 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='ACMESynth\n', 0xa) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680)='dummy_udc.0\n', 0xc) close(r4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x800000006) 7.962027674s ago: executing program 2 (id=1280): openat$sndseq(0xffffff9c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x87) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.958500919s ago: executing program 3 (id=1288): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$unix(r3, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000001740), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r6, 0xc0884123, &(0x7f0000000000)={0x6, "31aeb6bf53768468d0eab6c0a4e98c88c0f69a3fe8d98bc6342595be7cce9e36b6e8662699ba3f3034110e1adfc9c447f94b68ae6d00dd5a45aacd75768b86a1", {0x8000, 0x87}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x40}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sendmmsg$inet(r5, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000012c0), 0x0) 6.817175106s ago: executing program 3 (id=1282): openat$sndseq(0xffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x87) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.517115038s ago: executing program 0 (id=1285): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$unix(r3, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000001740), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r6, 0xc0884123, &(0x7f0000000000)={0x6, "31aeb6bf53768468d0eab6c0a4e98c88c0f69a3fe8d98bc6342595be7cce9e36b6e8662699ba3f3034110e1adfc9c447f94b68ae6d00dd5a45aacd75768b86a1", {0x8000, 0x87}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x40}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sendmmsg$inet(r5, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000012c0), 0x0) 5.315499028s ago: executing program 3 (id=1286): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$unix(r3, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000001740), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r6, 0xc0884123, &(0x7f0000000000)={0x6, "31aeb6bf53768468d0eab6c0a4e98c88c0f69a3fe8d98bc6342595be7cce9e36b6e8662699ba3f3034110e1adfc9c447f94b68ae6d00dd5a45aacd75768b86a1", {0x8000, 0x87}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x40}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sendmmsg$inet(r5, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@mcast2, @in=@initdev}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000400)=0xe8) 4.579587871s ago: executing program 2 (id=1287): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$unix(r3, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000001740), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f0000000000)={0x6, "31aeb6bf53768468d0eab6c0a4e98c88c0f69a3fe8d98bc6342595be7cce9e36b6e8662699ba3f3034110e1adfc9c447f94b68ae6d00dd5a45aacd75768b86a1", {0x8000, 0x87}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x40}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@mcast2, @in=@initdev}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000400)=0xe8) getresgid(&(0x7f0000000180), &(0x7f00000012c0), 0x0) 4.508032894s ago: executing program 1 (id=1289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r1, &(0x7f0000000040)=""/148, 0xffffff96) 4.395324665s ago: executing program 0 (id=1290): ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbf, 0x0, 0xffff, 0x2, 0x10000, '\x00', 0x654}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f40600", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.140201153s ago: executing program 3 (id=1291): pidfd_send_signal(0xffffffffffffffff, 0x30, &(0x7f0000000140)={0x11, 0x4, 0x6}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)={0x14, 0x14, 0x1, 0x70bd2d, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x80, 0x0, &(0x7f0000000000)) syz_open_dev$admmidi(&(0x7f0000000000), 0x80, 0x130c42) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x12, 0x8c, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000019}, 0x8080) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r6, 0x9) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r7, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f00000001c0)={{0x3, 0x200, 0x85c2, 0x1, 0x0, 0x4}, 0x348, [0x1, 0x86, 0x1, 0x9, 0x3, 0x9, 0xff, 0x7ff, 0x7, 0x0, 0x7, 0x5, 0x9c, 0x3, 0x6, 0xb9, 0x4, 0x6, 0x6, 0x7, 0x8, 0x8, 0x9, 0x1, 0x4c1b, 0x3, 0x7, 0x9, 0x4, 0x8295, 0x80000001, 0xb5, 0x8, 0x7, 0x8, 0x6, 0x7fffffff, 0x9, 0x1, 0x2, 0x4, 0x8, 0x2, 0x5, 0x81, 0xcc88, 0x2a6f, 0x10000, 0x6a, 0x0, 0x17, 0x800, 0xfc, 0x8, 0x2, 0x400, 0x0, 0xb22, 0x6, 0xc9a, 0xfff, 0x401, 0x8, 0x9c7d, 0x5, 0x0, 0x6, 0x7fff, 0x1000000, 0x3, 0xffff8382, 0x7fffffff, 0x1ff, 0x6, 0x9, 0x8, 0x0, 0xfffffffa, 0x8, 0x8c, 0x7, 0x400, 0x2, 0x2, 0x10, 0x6, 0x8000, 0xd3, 0x7f, 0x16cf, 0x1, 0x8, 0x2, 0xd7b, 0x9, 0x7fff, 0xffffff5c, 0x1, 0x666, 0x0, 0x8, 0x7, 0x3, 0x3, 0x3, 0x1, 0x4, 0x368, 0x8, 0x3, 0x580, 0x2, 0x6, 0x10, 0x70955bc4, 0x1, 0x2, 0xfffffffb, 0x2, 0x2, 0x3, 0xfffff38f, 0x2, 0xa000000, 0xeb, 0x5b2, 0x4, 0x960, 0x6, 0x79, 0x3, 0x30, 0x3, 0x7, 0x1, 0x7fff, 0xf2, 0x5, 0x7, 0xff, 0x4, 0x3, 0x12e4, 0x3, 0x0, 0x101, 0x200, 0x7, 0x40, 0x0, 0x1, 0x3, 0x2, 0xffffff00, 0x702, 0x7, 0x800, 0x81, 0xfffffff7, 0x7, 0x1, 0xd, 0x40, 0x10000, 0x3, 0xffffffff, 0x23db, 0x6, 0x0, 0x5, 0x7, 0xffffffff, 0x4, 0x7, 0x6, 0x2, 0x200040, 0xb7, 0x6, 0x638, 0x0, 0x800, 0x6, 0x6, 0x0, 0x8, 0x7, 0x2, 0x8, 0x2, 0xfffffffb, 0x2, 0x80, 0xffff7fff, 0x4, 0x200, 0x7f, 0x1, 0x5, 0x9, 0x1, 0xfffffffa, 0xc, 0x50c2, 0xc1ed, 0x401, 0x3, 0x7, 0x101, 0x800, 0x5, 0x5, 0x8, 0x1, 0x1, 0xfffffff8, 0xe9, 0x1, 0x7f, 0x7ff, 0x0, 0x7, 0xac, 0x80000000, 0x81, 0x80000001, 0x2, 0x80, 0x3ff, 0xa639, 0x0, 0x53647e6f, 0x2, 0xd792, 0x14b, 0x4, 0x3, 0xb36, 0xa, 0x1, 0x4, 0x94, 0x5f, 0x1, 0x8, 0xd8, 0x7fff, 0xf, 0x400, 0x7f, 0x80000001, 0xd08, 0x2, 0x1, 0x6, 0x9, 0x7d9, 0x1, 0x3, 0x3, 0x8, 0x6, 0x400, 0x86, 0x2, 0x1000, 0xbdf6, 0x41bf, 0xc, 0x2487005d, 0x2, 0x1, 0xaa1, 0x6, 0x80000001, 0x9, 0xe, 0x2, 0x0, 0x4, 0x401, 0x5, 0x87a0, 0xffffffff, 0x5, 0x3, 0xf, 0x7fffffff, 0x0, 0x8d, 0xe, 0x3, 0xb6, 0x5, 0x9, 0x100, 0xfff, 0x10, 0x1, 0x6, 0xb7, 0x7, 0xfffffffa, 0x4, 0x5, 0x81, 0x6, 0x5, 0xdcdf, 0x7ff, 0x9, 0xffffffe3, 0x1ff, 0x3, 0xf1c, 0x8021, 0xffffffff, 0x70, 0x10000, 0x7, 0x4, 0x1, 0x0, 0x4, 0x7aed, 0x4, 0x8, 0xe, 0xffffffc0, 0x8b7, 0x5, 0x5, 0x200, 0x40, 0x3ff, 0x6, 0x0, 0xa, 0xc, 0x7, 0xe324, 0xf, 0x7, 0x97a, 0x7fff, 0xffffffff, 0x8, 0x7, 0x40000000, 0x7, 0x6, 0x7, 0x6f007526, 0xa, 0x80000000, 0x0, 0x200, 0xaeb, 0x315c, 0x9, 0x1000, 0xd, 0x5, 0x0, 0xf0f, 0x6, 0x20, 0x2, 0x9, 0x2, 0x9, 0x4, 0x6, 0xb37, 0x8, 0x5, 0x8, 0xa6b7, 0x10001, 0x2, 0x1, 0xf, 0x8, 0x8, 0x3ff, 0x1, 0x4, 0xbe, 0x1, 0x10001, 0x7fa, 0xe7ad, 0x4, 0x2, 0x6, 0x81, 0x10000, 0x3, 0xbd7, 0x71e5119d, 0x62, 0xffd, 0x5, 0x6, 0x4, 0xc, 0x3, 0x7, 0x400, 0x4, 0x400277e, 0xe1, 0x3, 0x4, 0x3, 0x4, 0x6, 0xbf, 0x7, 0x6, 0x8, 0x5, 0x3ff, 0x9ad9, 0x8, 0x1, 0x0, 0x3, 0x400, 0x2, 0x9, 0x6, 0x40, 0x1000, 0x82, 0x4, 0x1000, 0x8, 0x3d, 0x2, 0xe, 0x20004, 0x3, 0x1, 0x4, 0x8, 0x10, 0x6, 0x9, 0xffffffff, 0x10, 0x0, 0x1, 0x9225, 0x3be, 0xd, 0x401, 0x81, 0x13, 0x5, 0x3b1, 0x1, 0x9f18, 0x2, 0x8f86, 0x417db73f, 0x7, 0x1, 0x7, 0x5, 0x3, 0x6, 0x7, 0x2, 0xd, 0x0, 0x7, 0x7, 0x2, 0x8, 0x5, 0x0, 0xab, 0x5, 0x94, 0xb3ab, 0x5ae, 0x2, 0x40, 0x5, 0x0, 0x8001, 0x8, 0x800, 0xb, 0xa4, 0x50, 0x8, 0x99, 0x10, 0x5, 0x100, 0xfffff800, 0x5, 0xca, 0x3, 0x4, 0x6, 0x7ff, 0x6e15d2ec, 0x7, 0x5, 0x8, 0x7ba, 0x21c0, 0xe64, 0xc, 0x7, 0x6d4, 0x5, 0x3, 0x7fff, 0x121, 0x9, 0xe6d8, 0x1000, 0x1ff, 0x42db5dac, 0xffff, 0x6, 0xfffffff8, 0x3ff, 0xfcf, 0x1000, 0x7, 0x2, 0x2, 0x6, 0x7, 0x2, 0x7, 0x80000001, 0x7, 0x8, 0x7, 0xfffff000, 0xfffffffe, 0x5, 0x5, 0x7, 0x80000001, 0x4, 0x2, 0x53f, 0x8, 0x6, 0x0, 0xffff7ff8, 0x6, 0x8, 0x9, 0x8, 0x6d, 0x48, 0x8001, 0x1, 0x1, 0x2e7a, 0x8, 0x4, 0x10000, 0x5, 0x1ff, 0x1, 0x8, 0xfffffffd, 0xc217, 0x6, 0x59a, 0x2, 0x3, 0xba7a, 0x6d9c7f55, 0x4, 0x9, 0x1000, 0x3, 0x10001, 0x2, 0x2, 0x7, 0x6, 0x2, 0x1, 0x27a, 0x9, 0x2, 0xde26, 0x99, 0xfffffffe, 0x5, 0x1, 0xdba4b27, 0x6, 0x100, 0x0, 0x9, 0x7, 0x1, 0x7ff, 0x3, 0x2, 0xffff9369, 0x4, 0xff, 0x6, 0xed1, 0x6, 0x0, 0x3, 0x80000001, 0xe, 0x9, 0x1, 0xffff, 0x6, 0x9, 0x4, 0xef3, 0x1, 0xfffffffb, 0x7, 0x40, 0x6, 0x4, 0x9, 0x7f, 0x5, 0x1, 0x3, 0x2, 0xc15e, 0x6, 0x0, 0x6, 0x8, 0xffffffff, 0x8, 0x401, 0x0, 0x10, 0x3, 0x2, 0x4, 0x50d, 0x3, 0x4b, 0x7, 0x0, 0x2, 0x75, 0x80, 0x1, 0xdb, 0x401, 0x5, 0x1, 0x3, 0x6, 0xbf0d, 0x18, 0x1, 0x5, 0x95, 0x7fff, 0xe7, 0xa, 0x4, 0x0, 0xffffff16, 0x10, 0xae25, 0x908, 0x78e, 0x6, 0x1, 0xb2b7, 0xc, 0x7, 0x0, 0x5, 0x9, 0x8, 0x73, 0x9, 0xfffffffe, 0x2, 0x1, 0x7, 0x81, 0xffffffaa, 0x3, 0x6, 0xd, 0xffffc4e6, 0xffff0001, 0x0, 0x5, 0x10001, 0x2, 0x3, 0x0, 0x6, 0x4, 0x3, 0x8, 0x3, 0x8, 0xbbb, 0x3, 0xc3f, 0x0, 0x2, 0x6, 0x6, 0xaed, 0x4, 0xed4, 0x7, 0x7, 0x8, 0xff, 0x8001, 0x5, 0x9, 0x4, 0xc2, 0x80000000, 0x80000000, 0x4, 0x8, 0xab84, 0xb4, 0xfffffc00, 0x908b, 0x8, 0xc9, 0xfffffffe, 0x1, 0x3, 0x8, 0xfffffffb, 0x0, 0xf8, 0xfffffff0, 0x637, 0x6, 0x4, 0xa, 0x80, 0xfffffff9, 0xfffffb6f, 0x0, 0x120e, 0x7, 0x0, 0x6, 0x2, 0x1000, 0xa, 0x6, 0x2, 0xd, 0x3ff, 0x5e18, 0xf, 0x9ebe, 0x7, 0x2, 0x1, 0x7, 0x7, 0x9e, 0x8, 0xedd3, 0x9, 0x1, 0xffffffff, 0x5, 0x1ff, 0x8, 0x1, 0x5, 0x2, 0x40, 0xe, 0x4, 0xc, 0xc65, 0x40, 0x7, 0xbb7d, 0x10, 0x2, 0x1ff, 0x8, 0x6, 0x80, 0x2, 0xf, 0x7, 0x80000000, 0x6e0, 0x1, 0x5, 0xd1, 0x9, 0x8, 0xfffffe00, 0x0, 0x1, 0x4, 0xe449, 0x4, 0x40, 0x10, 0x1000, 0x0, 0xca, 0xffff, 0x10001, 0xfffff891, 0x2, 0xfe, 0x200, 0xffffff81, 0xfffffff8, 0x4, 0x101, 0x68f0, 0xbfb, 0xdfe2, 0x0, 0x4, 0x9e74, 0x8, 0x7, 0x3ff, 0x80, 0xde7, 0x5, 0x51, 0x0, 0xb, 0x3, 0xad, 0x8, 0x2, 0x1, 0x8000, 0x4, 0x7, 0x8, 0x4, 0x10, 0x80000000, 0x6, 0x1400000, 0xf7, 0x8, 0x81, 0x4, 0x6790, 0x9, 0xfa6, 0x400, 0x7f, 0x3ff, 0x4, 0x2, 0x9, 0x6, 0x9107, 0x1, 0xcac, 0x40, 0x7, 0xc, 0x1, 0x5, 0x7, 0xb923, 0x2, 0xffff3818, 0x3, 0x1, 0x5, 0xe39, 0x4, 0x6, 0x7ff, 0xfff, 0x5, 0x5, 0x1, 0x101, 0xfffffff9, 0x3, 0x1, 0x400, 0xe59, 0x6, 0x8, 0x3ff, 0x6, 0x3ff, 0x9, 0x2, 0x6, 0x12dd, 0x0, 0x10, 0x6, 0x40, 0x0, 0xffffff80, 0x3, 0x0, 0x1, 0x7, 0x997, 0x7, 0x7fffffff, 0x81, 0x1, 0xe, 0x7e, 0x9, 0x3, 0x5, 0x7c, 0x4, 0x9, 0x3, 0x0, 0x1ff, 0x4, 0x926a, 0x9, 0x6, 0xea, 0x9, 0x9, 0xc0000, 0xf4d, 0x80000001, 0x1, 0x2, 0x1, 0x3, 0x7fff, 0x3, 0x1, 0x5851, 0x9fc, 0x0, 0x6, 0xcf4, 0x6, 0x1, 0xffb8, 0x0, 0x10001, 0x7, 0x8, 0x7b, 0x6, 0x89, 0xfffc0000, 0x9, 0x1, 0x4, 0xb, 0x9, 0x3, 0x5, 0xc2, 0x5, 0x2, 0x9, 0x3, 0x2c33, 0x5, 0x4, 0x0, 0x5, 0x9, 0x1, 0xa, 0x819, 0x5, 0x4, 0x7, 0xb, 0x5, 0x8000, 0xffff, 0x8, 0x7fff, 0xe, 0x3, 0x6, 0xffffffff, 0x7, 0xba, 0x1, 0x2, 0xc7c, 0x8, 0xdc, 0x3, 0x5, 0x9, 0x1]}) openat$vicodec0(0xffffff9c, &(0x7f0000000440), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x190) 3.899266537s ago: executing program 0 (id=1292): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, r4, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x8, 0x1000000, 0x2033f, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x8000, 0x5, 0xdfffffff}}], 0x1, 0x0, 0x0) 3.229182443s ago: executing program 2 (id=1293): openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x80941, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xe8381, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x5e, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) 3.049265398s ago: executing program 1 (id=1294): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b0b, &(0x7f00000002c0)) 2.918853566s ago: executing program 3 (id=1295): mount$9p_unix(0x0, &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f00000000c0)) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0xb, 0x7]}, 0x8) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000180)={r2}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200)={r2}, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000240001002dbd7000fddbdf250400000000000000000000000600030600000000cbfe3fa504b2e46eda0a1335db5972454b0d00959b21e7b2"], 0x24}}, 0x4000) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14001003", @ANYRES16=r4, @ANYBLOB="01002cbd70000000000001000000"], 0x14}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x6, 0x200000006c832, 0xffffffffffffffff, 0x3000) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000001780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001500)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a14000000060a010800000000000000000300000a54000000020a01010000000000000000030000000900010073797a30000000000c000440000000000000000108000240000000010900010073797a300000000008000240000000010c0004400000000000000002140000001100010000000000000000000100000a64ea1bfe8486242ca7393e6acfc20b497b1ec5761e482c0100000080000000a024b89a6d790db337327647d47e13b2f97a7bff9ba8f0a87dc826a0ba3c938e0c7704e8a9d5781dc9916bf51deef790f52a579f357cd91abf6002bedd"], 0x90}, 0x1, 0x0, 0x0, 0x15}, 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r5, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) syz_usb_connect(0x0, 0x371, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_SREGS2(r6, 0x8140aecc, &(0x7f00000017c0)) 2.479811089s ago: executing program 0 (id=1296): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$unix(r3, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000001740), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r6, 0xc0884123, &(0x7f0000000000)={0x6, "31aeb6bf53768468d0eab6c0a4e98c88c0f69a3fe8d98bc6342595be7cce9e36b6e8662699ba3f3034110e1adfc9c447f94b68ae6d00dd5a45aacd75768b86a1", {0x8000, 0x87}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x40}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sendmmsg$inet(r5, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000012c0), 0x0) 2.261651216s ago: executing program 0 (id=1297): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$unix(r3, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000001740), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f0000000000)={0x6, "31aeb6bf53768468d0eab6c0a4e98c88c0f69a3fe8d98bc6342595be7cce9e36b6e8662699ba3f3034110e1adfc9c447f94b68ae6d00dd5a45aacd75768b86a1", {0x8000, 0x87}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x40}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@mcast2, @in=@initdev}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000400)=0xe8) getresgid(&(0x7f0000000180), &(0x7f00000012c0), 0x0) 16.901652ms ago: executing program 0 (id=1298): openat$sndseq(0xffffff9c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x87) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.747964ms ago: executing program 1 (id=1299): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$unix(r3, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000001740), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r6, 0xc0884123, &(0x7f0000000000)={0x6, "31aeb6bf53768468d0eab6c0a4e98c88c0f69a3fe8d98bc6342595be7cce9e36b6e8662699ba3f3034110e1adfc9c447f94b68ae6d00dd5a45aacd75768b86a1", {0x8000, 0x87}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x40}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sendmmsg$inet(r5, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000012c0), 0x0) 16.55881ms ago: executing program 3 (id=1300): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x140001, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x0, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x48}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x60}}, 0x24040000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008", @ANYRES32=r2, @ANYBLOB="080001", @ANYRES32=r3], 0x90}}, 0x4048801) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000080)={0x20004, r5, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = io_uring_setup(0x566d, &(0x7f0000000580)={0x0, 0x968, 0x4000, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r10, 0xf, &(0x7f0000000540)={0x1002, 0x0, 0x0, 0x0, 0x28}, 0x20) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r7}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=1301): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xefa9, 0x800, 0x43, 0x161}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x800}, {}, {}, {0x0, 0x0, 0x0, 0x200}, {}, {}, {}, {0x82}, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40000}, {0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x80000000}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x101}, {}, {}, {}, {}, {0x10, 0x0, 0x0, 0x3}, {0x0, 0x3}, {0x3ff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x400000}, {0x5}, {}, {}, {0x0, 0x0, 0x9, 0xfffffffd}, {}, {0x0, 0xb}, {}, {0x0, 0x0, 0x7}, {0x0, 0x2000000, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0xc16}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x400000}, {0x100}, {0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x70}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffff8}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x800}, {}, {0x0, 0x0, 0x0, 0x6, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8a}], [{}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) syz_clone3(&(0x7f00000003c0)={0xac021080, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$FUSE(r0, &(0x7f0000002f40)={0x2020}, 0xfffffd24) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): 283723][ T2519] pvrusb2: Invalid write control endpoint [ 142.313106][ T2519] pvrusb2: Invalid write control endpoint [ 142.315930][ T7655] random: crng reseeded on system resumption [ 142.317432][ T2519] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 142.322393][ T2519] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 142.324907][ T2519] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 142.328034][ T2519] pvrusb2: Device being rendered inoperable [ 142.329949][ T2519] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 142.332646][ T2519] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 142.342918][ T2519] pvrusb2: Attached sub-driver cx25840 [ 142.344746][ T2519] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 142.347790][ T2519] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 142.487395][ T7652] pvrusb2: Attempted to execute control transfer when device not ok [ 142.491751][ T1479] usb 8-1: USB disconnect, device number 16 [ 143.045238][ T7673] netlink: 16 bytes leftover after parsing attributes in process `syz.3.548'. [ 143.048831][ T7673] netlink: 16 bytes leftover after parsing attributes in process `syz.3.548'. [ 143.411708][ T36] Bluetooth: Error in BCSP hdr checksum [ 143.660540][ T1163] Bluetooth: Error in BCSP hdr checksum [ 143.812939][ T7681] random: crng reseeded on system resumption [ 143.932636][ T1162] Bluetooth: Error in BCSP hdr checksum [ 144.163606][ T7693] netlink: 24 bytes leftover after parsing attributes in process `syz.1.552'. [ 144.856007][ T7701] netlink: 36 bytes leftover after parsing attributes in process `syz.1.557'. [ 144.957466][ T7706] netlink: 32 bytes leftover after parsing attributes in process `syz.2.558'. [ 145.191698][ T5760] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 145.760313][ T9] libceph: connect (1)[c::]:6789 error -101 [ 145.762639][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 145.764928][ T9] libceph: connect (1)[c::]:6789 error -101 [ 145.766609][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 145.821329][ T7712] ceph: No mds server is up or the cluster is laggy [ 146.121770][ T7717] random: crng reseeded on system resumption [ 146.340817][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.566'. [ 146.381917][ T7734] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.488425][ T7734] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.691049][ T7734] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.948483][ T7734] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.173926][ T7740] netlink: 32 bytes leftover after parsing attributes in process `syz.0.567'. [ 147.306839][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.322094][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.339890][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.366435][ T5853] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.449965][ T1479] libceph: connect (1)[c::]:6789 error -101 [ 147.452856][ T1479] libceph: mon0 (1)[c::]:6789 connect error [ 147.482658][ T7751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.569'. [ 147.486746][ T7751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.569'. [ 147.549213][ T7746] ceph: No mds server is up or the cluster is laggy [ 147.621105][ T7756] netlink: 36 bytes leftover after parsing attributes in process `syz.1.571'. [ 147.870713][ T1167] Bluetooth: Error in BCSP hdr checksum [ 148.140921][ T1167] Bluetooth: Error in BCSP hdr checksum [ 148.410756][ T1167] Bluetooth: Error in BCSP hdr checksum [ 148.661351][ T1162] Bluetooth: Error in BCSP hdr checksum [ 148.910652][ T7765] random: crng reseeded on system resumption [ 149.680704][ T5752] Bluetooth: hci4: command 0x1003 tx timeout [ 149.680724][ T5760] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 150.167394][ T7780] netlink: 24 bytes leftover after parsing attributes in process `syz.3.577'. [ 150.408572][ T7783] netlink: 32 bytes leftover after parsing attributes in process `syz.2.578'. [ 150.512815][ T1365] libceph: connect (1)[c::]:6789 error -101 [ 150.515852][ T1365] libceph: mon0 (1)[c::]:6789 connect error [ 150.602910][ T7785] ceph: No mds server is up or the cluster is laggy [ 151.088029][ T7804] netlink: 36 bytes leftover after parsing attributes in process `syz.3.583'. [ 151.248129][ T7807] random: crng reseeded on system resumption [ 152.226262][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'. [ 152.252820][ T7815] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.458153][ T7815] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.523519][ T7815] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.610960][ T7815] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.773173][ T5853] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.808333][ T5853] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.854040][ T5853] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.893689][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.953621][ T7822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.588'. [ 152.969723][ T7822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.588'. [ 152.990526][ T9] libceph: connect (1)[c::]:6789 error -101 [ 152.992572][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 153.088349][ T7824] ceph: No mds server is up or the cluster is laggy [ 153.311089][ T102] Bluetooth: Error in BCSP hdr checksum [ 153.449552][ T7836] netlink: 24 bytes leftover after parsing attributes in process `syz.2.590'. [ 153.570396][ T1167] Bluetooth: Error in BCSP hdr checksum [ 153.843216][ T102] Bluetooth: Error in BCSP hdr checksum [ 153.969753][ T7843] netlink: 24 bytes leftover after parsing attributes in process `syz.0.592'. [ 154.202111][ T7845] random: crng reseeded on system resumption [ 154.208928][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.594'. [ 154.260713][ T7850] netlink: 36 bytes leftover after parsing attributes in process `syz.2.595'. [ 155.110316][ T5752] Bluetooth: hci4: command 0x1003 tx timeout [ 155.112107][ T5760] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 155.801692][ T7863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.598'. [ 155.810379][ T7863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.598'. [ 156.722164][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.604'. [ 156.995668][ T7884] netlink: 24 bytes leftover after parsing attributes in process `syz.3.605'. [ 157.636738][ T7886] netlink: 36 bytes leftover after parsing attributes in process `syz.0.606'. [ 158.959931][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.614'. [ 158.986311][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.616'. [ 158.993786][ T7911] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.077691][ T7911] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.284363][ T7918] netlink: 24 bytes leftover after parsing attributes in process `syz.3.615'. [ 159.373807][ T7911] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.446260][ T7911] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.547761][ T5853] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.568239][ T5853] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.578108][ T5853] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.601095][ T5853] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.932592][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 160.091065][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 160.096124][ T24] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 160.101147][ T24] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 160.105402][ T24] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 160.109197][ T24] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 160.115186][ T24] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 160.118083][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.120869][ T24] usb 7-1: Product: syz [ 160.122400][ T24] usb 7-1: Manufacturer: syz [ 160.123942][ T24] usb 7-1: SerialNumber: syz [ 160.132474][ C2] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 160.137190][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input36 [ 160.339902][ T7920] ubi: mtd0 is already attached to ubi16 [ 160.370371][ T24] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 160.372967][ T24] (id 0x00) [ 160.610230][ T24] rc_core: IR keymap rc-imon-pad not found [ 160.613041][ T24] Registered IR keymap rc-empty [ 160.615976][ T24] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 160.619139][ T24] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 160.643265][ T61] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 160.644817][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 160.675593][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input37 [ 160.727725][ T24] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:9> initialized [ 161.281433][ T61] usb 5-1: Using ep0 maxpacket: 8 [ 161.284867][ T61] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 161.288088][ T61] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.291422][ T61] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 161.295262][ T61] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 161.299071][ T61] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.303816][ T61] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 161.307010][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.519119][ T61] usb 5-1: usb_control_msg returned -32 [ 161.521795][ T61] usbtmc 5-1:16.0: can't read capabilities [ 161.816422][ T7971] random: crng reseeded on system resumption [ 162.069368][ T7981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.628'. [ 162.224283][ T7982] imon:display_open: display port is already open [ 162.832584][ T7986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.629'. [ 162.835431][ T7986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.629'. [ 162.972196][ T9] usb 7-1: USB disconnect, device number 9 [ 163.160589][ T36] Bluetooth: Error in BCSP hdr checksum [ 163.331520][ T41] usb 5-1: USB disconnect, device number 16 [ 163.421500][ T1162] Bluetooth: Error in BCSP hdr checksum [ 163.691816][ T1167] Bluetooth: Error in BCSP hdr checksum [ 164.534211][ T8005] random: crng reseeded on system resumption [ 164.621779][ T8007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.635'. [ 164.640889][ T8007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.635'. [ 164.952041][ T5752] Bluetooth: hci4: command 0x1003 tx timeout [ 164.952057][ T5760] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 166.050273][ T55] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 166.200349][ T55] usb 7-1: Using ep0 maxpacket: 8 [ 166.203311][ T55] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 166.206215][ T55] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 166.209129][ T55] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 166.212352][ T55] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 166.215944][ T55] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.219888][ T55] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 166.222755][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.430867][ T55] usb 7-1: usb_control_msg returned -32 [ 166.432711][ T55] usbtmc 7-1:16.0: can't read capabilities [ 167.135387][ T8043] usbtmc 7-1:16.0: INITIATE_CLEAR returned 0 [ 167.836528][ T8059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.652'. [ 168.833275][ T5895] usb 7-1: USB disconnect, device number 10 [ 169.208657][ T8086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.662'. [ 170.141227][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.671'. [ 170.161180][ T24] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 170.314139][ T5752] Bluetooth: hci1: command 0x0406 tx timeout [ 170.314199][ T5762] Bluetooth: hci2: command 0x0406 tx timeout [ 170.316194][ T5752] Bluetooth: hci3: command 0x0405 tx timeout [ 170.333328][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 170.350321][ T24] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 170.354658][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 170.360295][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 170.364520][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 170.370103][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.374230][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 170.377083][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.587202][ T24] usb 7-1: usb_control_msg returned -32 [ 170.588960][ T24] usbtmc 7-1:16.0: can't read capabilities [ 171.291279][ T8125] usbtmc 7-1:16.0: INITIATE_CLEAR returned 0 [ 171.478337][ T8127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.675'. [ 172.160290][ T5895] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 172.313694][ T5895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.317453][ T5895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.320582][ T5895] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 172.324510][ T5895] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.327314][ T5895] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.331308][ T5895] usb 8-1: config 0 descriptor?? [ 172.460266][ T5845] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 172.610281][ T5845] usb 5-1: Using ep0 maxpacket: 16 [ 172.613186][ T5845] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.616499][ T5845] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 172.620009][ T5845] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 172.622927][ T5845] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 172.625391][ T5845] usb 5-1: Manufacturer: syz [ 172.627963][ T5845] usb 5-1: config 0 descriptor?? [ 172.739293][ T5895] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 172.742458][ T5895] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 172.744866][ T5895] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 172.747197][ T5895] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 172.749464][ T5895] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 172.751898][ T5895] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 172.754280][ T5895] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 172.756679][ T5895] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 172.759012][ T5895] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 172.761438][ T5895] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 172.771804][ T5895] plantronics 0003:047F:FFFF.0003: hiddev1,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 172.928393][ T5845] usb 7-1: USB disconnect, device number 11 [ 173.311409][ T8140] netlink: 24 bytes leftover after parsing attributes in process `syz.2.680'. [ 173.369205][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.678'. [ 173.880702][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.681'. [ 174.573577][ T5845] usb 8-1: USB disconnect, device number 17 [ 175.229749][ T55] usb 5-1: USB disconnect, device number 17 [ 175.324741][ T8161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.685'. [ 175.720255][ T55] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 175.870221][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 175.874197][ T55] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 175.877884][ T55] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 175.882206][ T55] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 175.886321][ T55] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 175.890635][ T55] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.897213][ T55] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 175.900977][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.045175][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.692'. [ 176.111721][ T55] usb 5-1: usb_control_msg returned -32 [ 176.113543][ T55] usbtmc 5-1:16.0: can't read capabilities [ 176.170257][ T61] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 176.331470][ T61] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 176.334681][ T61] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 176.337719][ T61] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.343723][ T61] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 176.346688][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 176.349257][ T61] usb 7-1: Product: syz [ 176.350837][ T61] usb 7-1: Manufacturer: syz [ 176.352722][ T61] usb 7-1: SerialNumber: syz [ 176.562016][ T61] usblp 7-1:1.0: usblp1: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 176.816388][ T8180] usbtmc 5-1:16.0: INITIATE_CLEAR returned 0 [ 176.986317][ T5896] usb 7-1: USB disconnect, device number 12 [ 176.991236][ T5896] usblp1: removed [ 177.180265][ T5895] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 177.331901][ T5895] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 177.336206][ T5895] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.341214][ T5895] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 177.344464][ T5895] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.555456][ T5895] usb 8-1: usb_control_msg returned -32 [ 177.557260][ T5895] usbtmc 8-1:16.0: can't read capabilities [ 177.790245][ T55] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 177.950228][ T55] usb 7-1: Using ep0 maxpacket: 16 [ 177.953922][ T55] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.957335][ T55] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 177.960988][ T55] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 177.964081][ T55] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 177.966679][ T55] usb 7-1: Manufacturer: syz [ 177.969873][ T55] usb 7-1: config 0 descriptor?? [ 178.108911][ T5895] usb 5-1: USB disconnect, device number 18 [ 178.557648][ T8188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.694'. [ 178.880321][ T5845] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 179.043015][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.047331][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.051180][ T5845] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 179.056339][ T5845] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.059865][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.066928][ T5845] usb 5-1: config 0 descriptor?? [ 179.351978][ T8198] ======================================================= [ 179.351978][ T8198] WARNING: The mand mount option has been deprecated and [ 179.351978][ T8198] and is ignored by this kernel. Remove the mand [ 179.351978][ T8198] option from the mount to silence this warning. [ 179.351978][ T8198] ======================================================= [ 179.370670][ T8198] random: crng reseeded on system resumption [ 179.640157][ T5845] hid_parser_main: 28 callbacks suppressed [ 179.642115][ T5845] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 179.644416][ T5845] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 179.646693][ T5845] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 179.649010][ T5845] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 179.651378][ T5845] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 180.222643][ T5845] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 180.225034][ T5845] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 180.227347][ T5845] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 180.229721][ T5845] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 180.232192][ T5845] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 180.242788][ T5845] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 180.290470][ T24] usb 8-1: USB disconnect, device number 18 [ 180.560338][ T24] usb 7-1: USB disconnect, device number 13 [ 180.615945][ T8208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.701'. [ 181.180376][ T24] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 181.203657][ T1041] usb 5-1: USB disconnect, device number 19 [ 181.220263][ T5896] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 181.331428][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 181.334542][ T24] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 181.337550][ T24] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.343178][ T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 181.346068][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 181.348578][ T24] usb 8-1: Product: syz [ 181.349909][ T24] usb 8-1: Manufacturer: syz [ 181.351573][ T24] usb 8-1: SerialNumber: syz [ 181.370981][ T5896] usb 6-1: Using ep0 maxpacket: 8 [ 181.374445][ T5896] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 181.377039][ T5896] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 181.380114][ T5896] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 181.383218][ T5896] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 181.386294][ T5896] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.390325][ T5896] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 181.393144][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.560511][ T24] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 181.601867][ T5896] usb 6-1: usb_control_msg returned -32 [ 181.603687][ T5896] usbtmc 6-1:16.0: can't read capabilities [ 181.741674][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.705'. [ 181.766786][ T8223] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.980681][ T5896] usb 8-1: USB disconnect, device number 19 [ 182.004292][ T8225] usblp0: removed [ 182.011692][ T8223] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.154741][ T8223] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.279269][ T8223] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.431383][ T5853] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.443483][ T5853] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.457162][ T5853] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.471981][ T5853] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.770292][ T9] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 182.924516][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.927515][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.932151][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 182.935399][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.173614][ T9] usb 5-1: usb_control_msg returned -32 [ 183.175551][ T9] usbtmc 5-1:16.0: can't read capabilities [ 183.337926][ T8237] netlink: 36 bytes leftover after parsing attributes in process `syz.3.708'. [ 183.728619][ T9] usb 5-1: USB disconnect, device number 20 [ 183.959479][ T1041] usb 6-1: USB disconnect, device number 24 [ 184.137322][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.712'. [ 184.910440][ T9] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 185.066432][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.077565][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.083996][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 185.091318][ T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 185.096728][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.104721][ T9] usb 8-1: config 0 descriptor?? [ 185.157323][ T8262] netlink: 36 bytes leftover after parsing attributes in process `syz.0.717'. [ 185.523192][ T9] hid_parser_main: 28 callbacks suppressed [ 185.523205][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 185.536271][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 185.546119][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 185.560556][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 185.568734][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 185.583514][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 185.591937][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 185.597378][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 185.604005][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 185.608516][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 185.644210][ T9] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 186.630793][ T5895] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 186.705337][ T9] usb 8-1: USB disconnect, device number 20 [ 186.791275][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 186.802805][ T5895] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 186.805277][ T5895] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.808897][ T5895] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 186.812488][ T5895] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 186.815690][ T5895] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.819860][ T5895] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 186.822883][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.053196][ T5895] usb 5-1: usb_control_msg returned -32 [ 187.055352][ T5895] usbtmc 5-1:16.0: can't read capabilities [ 187.250555][ T9] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 187.401686][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 187.406858][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.414087][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 187.417034][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.490365][ T1041] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 187.630287][ T1041] usb 8-1: device descriptor read/64, error -71 [ 187.635587][ T9] usb 6-1: usb_control_msg returned -32 [ 187.637462][ T9] usbtmc 6-1:16.0: can't read capabilities [ 187.760596][ T8282] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 187.880279][ T1041] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 187.961105][ T5845] usb 5-1: USB disconnect, device number 21 [ 188.030283][ T1041] usb 8-1: device descriptor read/64, error -71 [ 188.140826][ T1041] usb usb8-port1: attempt power cycle [ 188.480395][ T1041] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 188.494928][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.724'. [ 188.500690][ T1041] usb 8-1: device descriptor read/8, error -71 [ 188.740269][ T1041] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 188.760757][ T1041] usb 8-1: device descriptor read/8, error -71 [ 188.891087][ T1041] usb usb8-port1: unable to enumerate USB device [ 189.853469][ T8303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.726'. [ 190.045553][ T5854] usb 6-1: USB disconnect, device number 25 [ 190.610276][ T34] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 190.690270][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 190.760336][ T34] usb 8-1: Using ep0 maxpacket: 32 [ 190.764177][ T34] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 190.767888][ T34] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 190.772762][ T34] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 190.777364][ T34] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 190.786545][ T34] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 190.790105][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.793724][ T34] usb 8-1: Product: syz [ 190.795320][ T34] usb 8-1: Manufacturer: syz [ 190.796720][ T34] usb 8-1: SerialNumber: syz [ 190.809916][ C3] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 190.814878][ T34] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input40 [ 190.843185][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 190.847137][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 190.851780][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.862600][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 190.866239][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 190.869487][ T24] usb 5-1: Product: syz [ 190.871500][ T24] usb 5-1: Manufacturer: syz [ 190.873443][ T24] usb 5-1: SerialNumber: syz [ 191.010575][ T8312] ubi: mtd0 is already attached to ubi16 [ 191.030439][ T34] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 191.033590][ T34] (id 0x00) [ 191.088833][ T24] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 191.090315][ T34] rc_core: IR keymap rc-imon-pad not found [ 191.095292][ T34] Registered IR keymap rc-empty [ 191.096684][ T34] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 191.103138][ T34] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 191.184908][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.735'. [ 191.236250][ T34] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 191.243147][ T34] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input41 [ 191.252103][ T34] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:25> initialized [ 191.298848][ T24] usb 5-1: USB disconnect, device number 22 [ 191.350760][ T24] usblp0: removed [ 192.090901][ T5854] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 192.100288][ T5758] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 192.230316][ T5854] usb 5-1: device descriptor read/64, error -71 [ 192.252720][ T5758] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 192.256646][ T5758] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.262112][ T5758] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 192.265028][ T5758] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.478942][ T5758] usb 7-1: usb_control_msg returned -32 [ 192.480783][ T5758] usbtmc 7-1:16.0: can't read capabilities [ 192.490966][ T5854] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 192.630360][ T5854] usb 5-1: device descriptor read/64, error -71 [ 192.740951][ T5854] usb usb5-port1: attempt power cycle [ 193.034903][ T5845] usb 7-1: USB disconnect, device number 14 [ 193.110310][ T5854] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 193.141486][ T5854] usb 5-1: device descriptor read/8, error -71 [ 193.380370][ T5854] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 193.402261][ T5854] usb 5-1: device descriptor read/8, error -71 [ 193.520778][ T5854] usb usb5-port1: unable to enumerate USB device [ 193.571101][ T24] usb 8-1: USB disconnect, device number 25 [ 193.834061][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.837377][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.985864][ T8360] netlink: 36 bytes leftover after parsing attributes in process `syz.1.745'. [ 194.051761][ T8364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'. [ 195.270332][ T5758] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 195.424804][ T5758] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 195.429543][ T5758] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.435965][ T5758] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 195.457855][ T5758] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.570454][ T34] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 195.700281][ T5758] usb 5-1: usb_control_msg returned -32 [ 195.702066][ T5758] usbtmc 5-1:16.0: can't read capabilities [ 195.740530][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 195.765297][ T34] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 195.772226][ T34] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 195.776857][ T34] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 195.783194][ T34] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 195.801705][ T34] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 195.806569][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.810030][ T34] usb 7-1: Product: syz [ 195.812128][ T34] usb 7-1: Manufacturer: syz [ 195.818343][ T34] usb 7-1: SerialNumber: syz [ 195.876689][ C3] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 195.900309][ T34] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input43 [ 196.101236][ T8397] ubi: mtd0 is already attached to ubi16 [ 196.143014][ T34] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 196.147269][ T34] (id 0x00) [ 196.200295][ T34] rc_core: IR keymap rc-imon-pad not found [ 196.202176][ T34] Registered IR keymap rc-empty [ 196.203797][ T34] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 196.206907][ T34] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 196.263267][ T61] usb 5-1: USB disconnect, device number 27 [ 196.331958][ T34] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 196.337016][ T34] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input44 [ 196.349302][ T34] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:15> initialized [ 196.493454][ T8409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.759'. [ 196.505176][ T8409] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.640669][ T8409] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.722307][ T8409] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.871183][ T8413] netlink: 16 bytes leftover after parsing attributes in process `syz.0.760'. [ 196.874002][ T8413] netlink: 16 bytes leftover after parsing attributes in process `syz.0.760'. [ 196.963458][ T8409] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.220507][ T1163] Bluetooth: Error in BCSP hdr checksum [ 197.251134][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.288290][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.317830][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.389215][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.482795][ T1163] Bluetooth: Error in BCSP hdr checksum [ 197.743696][ T1164] Bluetooth: Error in BCSP hdr checksum [ 198.410359][ T5854] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 198.560309][ T5854] usb 6-1: Using ep0 maxpacket: 16 [ 198.563463][ T5854] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.567269][ T5854] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 198.573234][ T5854] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 198.576877][ T5854] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 198.579726][ T5854] usb 6-1: Manufacturer: syz [ 198.584452][ T5854] usb 6-1: config 0 descriptor?? [ 198.724004][ T24] usb 7-1: USB disconnect, device number 15 [ 199.030407][ T5105] Bluetooth: hci4: command 0x1003 tx timeout [ 199.035124][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 199.158442][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'. [ 199.411761][ T8439] netlink: 24 bytes leftover after parsing attributes in process `syz.3.766'. [ 199.439822][ T8446] netlink: 16 bytes leftover after parsing attributes in process `syz.2.769'. [ 199.444037][ T8446] netlink: 16 bytes leftover after parsing attributes in process `syz.2.769'. [ 199.631854][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.770'. [ 199.642157][ T8449] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.745776][ T8449] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.822241][ T8449] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.001125][ T8449] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.307605][ T5853] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.337104][ T5853] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.342529][ T5853] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.355398][ T5853] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.368883][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.773'. [ 201.222552][ T5854] usb 6-1: USB disconnect, device number 26 [ 201.380275][ T8473] netlink: 16 bytes leftover after parsing attributes in process `syz.2.778'. [ 201.600289][ T5854] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 201.751536][ T5854] usb 6-1: Using ep0 maxpacket: 32 [ 201.757066][ T37] Bluetooth: Error in BCSP hdr checksum [ 201.759385][ T5854] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 201.766702][ T5854] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 201.770570][ T5854] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.774112][ T5854] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 201.785334][ T5854] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 201.788544][ T5854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.792768][ T5854] usb 6-1: Product: syz [ 201.794359][ T5854] usb 6-1: Manufacturer: syz [ 201.795859][ T5854] usb 6-1: SerialNumber: syz [ 201.863774][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 201.876567][ T5854] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input45 [ 202.010474][ T1164] Bluetooth: Error in BCSP hdr checksum [ 202.057666][ T8467] ubi: mtd0 is already attached to ubi16 [ 202.080531][ T5854] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 202.084215][ T5854] (id 0x00) [ 202.130247][ T5854] rc_core: IR keymap rc-imon-pad not found [ 202.132568][ T5854] Registered IR keymap rc-empty [ 202.135588][ T5854] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 202.154769][ T5854] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 202.272179][ T1163] Bluetooth: Error in BCSP hdr checksum [ 202.354305][ T5854] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 202.394715][ T5854] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input46 [ 202.524175][ T5854] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:27> initialized [ 202.530567][ T102] Bluetooth: Error in BCSP hdr checksum [ 202.663762][ T8493] __nla_validate_parse: 1 callbacks suppressed [ 202.663773][ T8493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.784'. [ 202.668439][ T8493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.784'. [ 202.790399][ T1163] Bluetooth: Error in BCSP hdr checksum [ 203.510290][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 203.512499][ T5105] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 203.580335][ T1041] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 203.730308][ T1041] usb 8-1: Using ep0 maxpacket: 16 [ 203.735168][ T1041] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.738870][ T1041] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 203.742716][ T1041] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 203.746221][ T1041] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 203.748658][ T1041] usb 8-1: Manufacturer: syz [ 203.752205][ T1041] usb 8-1: config 0 descriptor?? [ 204.321189][ T8507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.785'. [ 204.488808][ T8508] evm: overlay not supported [ 204.564055][ T42] audit: type=1804 audit(1785118843.009:2): pid=8508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.787" name="/newroot/190/file0/file1" dev="overlay" ino=1031 res=1 errno=0 [ 204.629169][ T9] usb 6-1: USB disconnect, device number 27 [ 205.193918][ T8515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.789'. [ 206.170280][ T34] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 206.334148][ T34] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 206.340003][ T34] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 206.346701][ T34] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.353598][ T34] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 206.356701][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 206.359194][ T34] usb 7-1: Product: syz [ 206.363359][ T34] usb 7-1: Manufacturer: syz [ 206.366096][ T34] usb 7-1: SerialNumber: syz [ 206.367201][ T8532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.794'. [ 206.368468][ T1041] usb 8-1: USB disconnect, device number 26 [ 206.372003][ T8532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.794'. [ 206.577412][ T34] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 206.711417][ T1163] Bluetooth: Error in BCSP hdr checksum [ 206.839348][ T61] usb 7-1: USB disconnect, device number 16 [ 206.848446][ T8523] usblp0: removed [ 206.950338][ T34] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 206.970508][ T102] Bluetooth: Error in BCSP hdr checksum [ 207.110308][ T34] usb 5-1: Using ep0 maxpacket: 32 [ 207.113673][ T34] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 207.117367][ T34] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 207.121536][ T34] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 207.125663][ T34] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 207.132268][ T34] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 207.135516][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.138294][ T34] usb 5-1: Product: syz [ 207.139725][ T34] usb 5-1: Manufacturer: syz [ 207.142342][ T34] usb 5-1: SerialNumber: syz [ 207.149362][ C3] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 207.155742][ T34] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input47 [ 207.230476][ T1164] Bluetooth: Error in BCSP hdr checksum [ 207.351589][ T8540] ubi: mtd0 is already attached to ubi16 [ 207.371155][ T34] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 207.376394][ T34] (id 0x00) [ 207.430282][ T34] rc_core: IR keymap rc-imon-pad not found [ 207.433016][ T34] Registered IR keymap rc-empty [ 207.434891][ T34] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 207.439132][ T34] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 207.445440][ T8544] netlink: 16 bytes leftover after parsing attributes in process `syz.2.798'. [ 207.448308][ T8544] netlink: 16 bytes leftover after parsing attributes in process `syz.2.798'. [ 207.580777][ T34] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 207.585484][ T34] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input48 [ 207.591261][ T34] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:28> initialized [ 208.472548][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 208.472908][ T5105] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 209.888505][ T5758] usb 5-1: USB disconnect, device number 28 [ 210.520432][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 210.680516][ T5854] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 210.696002][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 210.704895][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 210.712951][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.740892][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 210.743862][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 210.750606][ T9] usb 6-1: Product: syz [ 210.752114][ T9] usb 6-1: Manufacturer: syz [ 210.753715][ T9] usb 6-1: SerialNumber: syz [ 210.851510][ T5854] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 210.857578][ T5854] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.872453][ T5854] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 210.889324][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.984713][ T9] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 211.119909][ T5854] usb 5-1: usb_control_msg returned -32 [ 211.127994][ T5854] usbtmc 5-1:16.0: can't read capabilities [ 211.244494][ T5854] usb 6-1: USB disconnect, device number 28 [ 211.250293][ T8575] usblp0: removed [ 211.969199][ T8595] capability: warning: `syz.1.813' uses 32-bit capabilities (legacy support in use) [ 212.002100][ T8595] overlayfs: upper fs does not support file handles, falling back to index=off. [ 212.014586][ T8597] syzkaller0: entered promiscuous mode [ 212.016569][ T8597] syzkaller0: entered allmulticast mode [ 213.376684][ T8614] random: crng reseeded on system resumption [ 213.778211][ T5896] usb 5-1: USB disconnect, device number 29 [ 214.660233][ T24] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 214.832443][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.840233][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.844396][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 214.852066][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.858452][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.863268][ T24] usb 7-1: config 0 descriptor?? [ 215.277925][ T24] hid_parser_main: 28 callbacks suppressed [ 215.277938][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 215.282382][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 215.285444][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 215.288522][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 215.320300][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 215.322733][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 215.325039][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 215.327336][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 215.329656][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 215.332112][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 215.339511][ T24] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 215.606878][ T8643] netlink: 24 bytes leftover after parsing attributes in process `syz.0.828'. [ 216.391688][ T8653] random: crng reseeded on system resumption [ 216.692453][ T5758] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 217.073416][ T5896] usb 7-1: reset high-speed USB device number 17 using dummy_hcd [ 217.571626][ T5758] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 217.576968][ T5758] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.584551][ T5758] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 217.589246][ T5758] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.801778][ T5758] usb 8-1: usb_control_msg returned -32 [ 217.803359][ T5758] usbtmc 8-1:16.0: can't read capabilities [ 217.859822][ T24] usb 7-1: USB disconnect, device number 17 [ 219.458158][ T34] usb 8-1: USB disconnect, device number 27 [ 220.211599][ T34] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 220.240064][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.844'. [ 220.370312][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 220.373280][ T34] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 220.377057][ T34] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 220.382290][ T34] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 220.386259][ T34] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 220.393902][ T34] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 220.399092][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.401815][ T34] usb 7-1: Product: syz [ 220.403052][ T34] usb 7-1: Manufacturer: syz [ 220.409243][ T34] usb 7-1: SerialNumber: syz [ 220.420153][ C3] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 220.424124][ T34] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input49 [ 220.630063][ T8696] ubi: mtd0 is already attached to ubi16 [ 220.650244][ T34] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 220.652913][ T34] (id 0x00) [ 220.720254][ T34] rc_core: IR keymap rc-imon-pad not found [ 220.722013][ T34] Registered IR keymap rc-empty [ 220.723582][ T34] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 220.726787][ T34] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 220.848350][ T8708] random: crng reseeded on system resumption [ 220.850810][ T34] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 220.856034][ T34] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input50 [ 220.861550][ T34] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:18> initialized [ 221.330251][ T9] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 221.360420][ T5845] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 221.502157][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 221.510509][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.511707][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.516360][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.519435][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.525896][ T5845] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 221.530076][ T5845] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 221.530788][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.534129][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.540712][ T5845] usb 6-1: config 0 descriptor?? [ 221.756255][ T9] usb 5-1: usb_control_msg returned -32 [ 221.758034][ T9] usbtmc 5-1:16.0: can't read capabilities [ 221.951510][ T5845] hid_parser_main: 28 callbacks suppressed [ 221.951524][ T5845] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 221.955566][ T5845] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 221.957949][ T5845] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 221.962283][ T5845] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 221.964788][ T5845] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 221.967279][ T5845] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 221.969493][ T5845] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 221.972097][ T5845] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 221.974780][ T5845] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 221.977226][ T5845] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 221.983718][ T5845] plantronics 0003:047F:FFFF.0007: hiddev2,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 222.108084][ T8723] imon:display_open: display port is already open [ 223.261548][ T5758] usb 6-1: USB disconnect, device number 29 [ 223.278441][ T29] usb 7-1: USB disconnect, device number 18 [ 224.039118][ T8744] random: crng reseeded on system resumption [ 224.130708][ T5758] usb 5-1: USB disconnect, device number 30 [ 224.170761][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'. [ 225.302623][ T8769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.871'. [ 225.490334][ T24] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 225.659357][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 225.668124][ T24] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 225.672238][ T24] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 225.678249][ T24] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 225.685512][ T24] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 225.705512][ T24] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 225.708555][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.716374][ T24] usb 6-1: Product: syz [ 225.722279][ T24] usb 6-1: Manufacturer: syz [ 225.724042][ T24] usb 6-1: SerialNumber: syz [ 225.840273][ C2] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 225.876491][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input51 [ 226.010071][ T8767] ubi: mtd0 is already attached to ubi16 [ 226.033886][ T24] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 226.038673][ T24] (id 0x00) [ 226.120289][ T24] rc_core: IR keymap rc-imon-pad not found [ 226.122811][ T24] Registered IR keymap rc-empty [ 226.125342][ T24] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 226.128702][ T24] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 226.266354][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 226.320804][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input52 [ 226.380072][ T24] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:30> initialized [ 226.627817][ T8804] random: crng reseeded on system resumption [ 226.950245][ T5758] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 227.106361][ T5758] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 227.109882][ T5758] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.114193][ T5758] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 227.116998][ T5758] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.326365][ T5758] usb 8-1: usb_control_msg returned -32 [ 227.328334][ T5758] usbtmc 8-1:16.0: can't read capabilities [ 227.682330][ T8821] imon:display_open: display port is already open [ 228.663540][ T1365] usb 6-1: USB disconnect, device number 30 [ 228.730580][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.875'. [ 229.456622][ T8847] random: crng reseeded on system resumption [ 229.763035][ T24] usb 8-1: USB disconnect, device number 28 [ 230.580420][ T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 230.740363][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 230.744907][ T24] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 230.752915][ T24] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 230.761499][ T24] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 230.767457][ T24] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 230.776263][ T24] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 230.781258][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.788374][ T24] usb 5-1: Product: syz [ 230.790154][ T24] usb 5-1: Manufacturer: syz [ 230.795614][ T24] usb 5-1: SerialNumber: syz [ 230.806895][ C2] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 230.814340][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input53 [ 230.842175][ T8875] random: crng reseeded on system resumption [ 231.012146][ T8870] ubi: mtd0 is already attached to ubi16 [ 231.032196][ T24] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 231.038612][ T24] (id 0x00) [ 231.080889][ T24] rc_core: IR keymap rc-imon-pad not found [ 231.082841][ T24] Registered IR keymap rc-empty [ 231.084507][ T24] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 231.087697][ T24] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 231.230919][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 231.236755][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input54 [ 231.248658][ T24] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:31> initialized [ 233.335749][ T8916] random: crng reseeded on system resumption [ 233.629385][ T61] usb 5-1: USB disconnect, device number 31 [ 235.916222][ T8950] random: crng reseeded on system resumption [ 237.820254][ T34] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 237.970222][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 237.974277][ T34] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.977526][ T34] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 237.981510][ T34] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 237.984497][ T34] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 237.986919][ T34] usb 8-1: Manufacturer: syz [ 237.990738][ T34] usb 8-1: config 0 descriptor?? [ 238.245795][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'. [ 238.253480][ T8990] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.202949][ T8990] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.216786][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.915'. [ 239.296642][ T8990] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.349078][ T8990] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.459867][ T5853] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.476755][ T5853] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.497449][ T5853] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.511596][ T5853] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.620979][ T61] usb 8-1: USB disconnect, device number 29 [ 240.731200][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.927'. [ 240.950400][ T24] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 241.121798][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 241.128187][ T24] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 241.132459][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.140365][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 241.143522][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 241.146806][ T24] usb 6-1: Product: syz [ 241.148316][ T24] usb 6-1: Manufacturer: syz [ 241.157381][ T24] usb 6-1: SerialNumber: syz [ 241.369662][ T24] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 241.767651][ T1365] usb 6-1: USB disconnect, device number 31 [ 241.846389][ T9040] usblp0: removed [ 242.113800][ T9069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.937'. [ 242.116607][ T9069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.937'. [ 242.250351][ T24] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 242.410562][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 242.415405][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.419664][ T24] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 242.425078][ T24] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 242.430390][ T24] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 242.440002][ T24] usb 8-1: Manufacturer: syz [ 242.449142][ T24] usb 8-1: config 0 descriptor?? [ 242.455417][ T1163] Bluetooth: Error in BCSP hdr checksum [ 242.720536][ T37] Bluetooth: Error in BCSP hdr checksum [ 242.787219][ T9077] syzkaller0: entered promiscuous mode [ 242.788997][ T9077] syzkaller0: entered allmulticast mode [ 242.982041][ T37] Bluetooth: Error in BCSP hdr checksum [ 243.078754][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.935'. [ 244.230420][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 244.235182][ T5105] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 244.310542][ T5758] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 244.461464][ T5758] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 244.464558][ T5758] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.468555][ T5758] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 244.471663][ T5758] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.680634][ T5758] usb 6-1: usb_control_msg returned -32 [ 244.682431][ T5758] usbtmc 6-1:16.0: can't read capabilities [ 244.770350][ T1365] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 244.922721][ T1365] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 244.926651][ T1365] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 244.930763][ T1365] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.938091][ T1365] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 244.941883][ T1365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 244.945198][ T1365] usb 5-1: Product: syz [ 244.946895][ T1365] usb 5-1: Manufacturer: syz [ 244.948817][ T1365] usb 5-1: SerialNumber: syz [ 245.037545][ T61] usb 8-1: USB disconnect, device number 30 [ 245.160242][ T1365] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 245.237734][ T1365] usb 6-1: USB disconnect, device number 32 [ 245.364346][ T5854] usb 5-1: USB disconnect, device number 32 [ 245.374539][ T5854] usblp1: removed [ 245.848288][ T9123] syzkaller0: entered promiscuous mode [ 245.850315][ T9123] syzkaller0: entered allmulticast mode [ 246.010395][ T1365] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 246.180229][ T1365] usb 6-1: Using ep0 maxpacket: 8 [ 246.183616][ T1365] usb 6-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 246.186838][ T1365] usb 6-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 246.189785][ T1365] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 246.193373][ T1365] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.410281][ T5854] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 246.570813][ T5854] usb 8-1: Using ep0 maxpacket: 16 [ 246.590082][ T5854] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.593881][ T5854] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 246.598935][ T5854] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 246.603056][ T5854] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 246.606426][ T5854] usb 8-1: Manufacturer: syz [ 246.613819][ T5854] usb 8-1: config 0 descriptor?? [ 247.144458][ T9135] overlayfs: upper fs does not support file handles, falling back to index=off. [ 247.217482][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.958'. [ 247.470271][ T61] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 247.632071][ T61] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 247.635319][ T61] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.639437][ T61] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 247.642516][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.851516][ T61] usb 5-1: usb_control_msg returned -32 [ 247.853444][ T61] usbtmc 5-1:16.0: can't read capabilities [ 248.390276][ T61] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 248.543565][ T61] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 248.546621][ T61] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 248.549743][ T61] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.556350][ T61] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 248.559193][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 248.562047][ T61] usb 7-1: Product: syz [ 248.563380][ T61] usb 7-1: Manufacturer: syz [ 248.564921][ T61] usb 7-1: SerialNumber: syz [ 248.771758][ T61] usblp 7-1:1.0: usblp1: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 248.790579][ T61] usb 6-1: USB disconnect, device number 33 [ 249.028812][ T61] usb 7-1: USB disconnect, device number 19 [ 249.043529][ T61] usblp1: removed [ 249.204522][ T5845] usb 8-1: USB disconnect, device number 31 [ 249.288762][ T9168] syzkaller0: entered promiscuous mode [ 249.291360][ T9168] syzkaller0: entered allmulticast mode [ 249.308679][ T9170] random: crng reseeded on system resumption [ 249.467282][ T9174] netlink: 24 bytes leftover after parsing attributes in process `syz.3.973'. [ 249.586638][ T9176] overlayfs: missing 'lowerdir' [ 250.250553][ T24] usb 5-1: USB disconnect, device number 33 [ 250.657222][ T9182] netlink: 40 bytes leftover after parsing attributes in process `syz.0.976'. [ 251.170311][ T5845] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 251.300350][ T24] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 251.321133][ T5845] usb 6-1: Using ep0 maxpacket: 8 [ 251.324440][ T5845] usb 6-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 251.327803][ T5845] usb 6-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 251.331823][ T5845] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 251.335151][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.450335][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 251.453526][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.456895][ T24] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 251.460926][ T24] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 251.463814][ T24] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 251.466274][ T24] usb 7-1: Manufacturer: syz [ 251.468997][ T24] usb 7-1: config 0 descriptor?? [ 251.550319][ T1041] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 251.701718][ T1041] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 251.704950][ T1041] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 251.708159][ T1041] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 251.714065][ T1041] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 251.717196][ T1041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 251.719913][ T1041] usb 5-1: Product: syz [ 251.721401][ T1041] usb 5-1: Manufacturer: syz [ 251.723076][ T1041] usb 5-1: SerialNumber: syz [ 251.933133][ T1041] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 252.073238][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.979'. [ 252.189617][ T1041] usb 5-1: USB disconnect, device number 34 [ 252.196159][ T9198] usblp0: removed [ 252.370259][ T24] usb 8-1: new full-speed USB device number 32 using dummy_hcd [ 252.522433][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 252.526548][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.532051][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 252.535816][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.745626][ T24] usb 8-1: usb_control_msg returned -32 [ 252.748279][ T24] usbtmc 8-1:16.0: can't read capabilities [ 252.980311][ T5845] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 253.131599][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.135429][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.138718][ T5845] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 253.143113][ T5845] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 253.146283][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.150341][ T5845] usb 5-1: config 0 descriptor?? [ 253.558970][ T5845] hid_parser_main: 28 callbacks suppressed [ 253.558983][ T5845] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 253.564251][ T5845] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 253.566683][ T5845] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 253.569114][ T5845] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 253.572271][ T5845] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 253.574707][ T5845] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 253.577144][ T5845] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 253.579540][ T5845] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 253.582179][ T5845] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 253.584613][ T5845] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 253.593648][ T5845] plantronics 0003:047F:FFFF.0008: hiddev1,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 253.768157][ T5845] usb 5-1: USB disconnect, device number 35 [ 253.932575][ T24] usb 6-1: USB disconnect, device number 34 [ 254.090791][ T1041] usb 7-1: USB disconnect, device number 20 [ 254.134982][ T9218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.988'. [ 254.435388][ T9224] netlink: 40 bytes leftover after parsing attributes in process `syz.2.989'. [ 255.167991][ T29] usb 8-1: USB disconnect, device number 32 [ 255.274691][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.280322][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.660282][ T34] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 255.730443][ T5845] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 255.811587][ T34] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 255.814795][ T34] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 255.819378][ T34] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.826223][ T34] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 255.829128][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 255.831848][ T34] usb 5-1: Product: syz [ 255.833182][ T34] usb 5-1: Manufacturer: syz [ 255.834961][ T34] usb 5-1: SerialNumber: syz [ 255.880344][ T5845] usb 8-1: Using ep0 maxpacket: 8 [ 255.884021][ T5845] usb 8-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 255.887699][ T5845] usb 8-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 255.890860][ T5845] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 255.893957][ T5845] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.049906][ T34] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 256.127593][ T9246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.998'. [ 256.130442][ T9246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.998'. [ 256.323597][ T29] usb 5-1: USB disconnect, device number 36 [ 256.336879][ T9235] usblp0: removed [ 256.520470][ T1166] Bluetooth: Error in BCSP hdr checksum [ 256.790760][ T37] Bluetooth: Error in BCSP hdr checksum [ 257.051324][ T1166] Bluetooth: Error in BCSP hdr checksum [ 257.151802][ T9284] overlayfs: missing 'workdir' [ 257.291363][ T29] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 257.441561][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 257.444605][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 257.448455][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 257.452376][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.662331][ T29] usb 5-1: usb_control_msg returned -32 [ 257.664121][ T29] usbtmc 5-1:16.0: can't read capabilities [ 258.310403][ T5105] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 258.314366][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 258.477870][ T9298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1005'. [ 258.493980][ T29] usb 8-1: USB disconnect, device number 33 [ 258.611221][ T9302] random: crng reseeded on system resumption [ 260.202168][ T5824] usb 5-1: USB disconnect, device number 37 [ 261.540314][ T5824] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 261.641463][ T9353] random: crng reseeded on system resumption [ 261.696670][ T9356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1017'. [ 261.699373][ T9356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1017'. [ 261.710261][ T5824] usb 8-1: Using ep0 maxpacket: 16 [ 261.716120][ T5824] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.736293][ T5824] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 261.747683][ T5824] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 261.755497][ T5824] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 261.759116][ T5824] usb 8-1: Manufacturer: syz [ 261.759686][ T9358] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1018'. [ 261.769269][ T5824] usb 8-1: config 0 descriptor?? [ 262.050442][ T36] Bluetooth: Error in BCSP hdr checksum [ 262.310659][ T1166] Bluetooth: Error in BCSP hdr checksum [ 262.442102][ T9361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1014'. [ 262.570784][ T36] Bluetooth: Error in BCSP hdr checksum [ 262.848421][ T48] Bluetooth: Error in BCSP hdr checksum [ 263.736132][ T9377] syzkaller0: entered promiscuous mode [ 263.739968][ T9377] syzkaller0: entered allmulticast mode [ 263.841214][ T5105] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 263.843234][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 264.663266][ T5824] usb 8-1: USB disconnect, device number 34 [ 264.710995][ T9385] random: crng reseeded on system resumption [ 267.508110][ T9417] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1034'. [ 267.515753][ T9417] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1034'. [ 267.530625][ T9418] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1033'. [ 268.131456][ T1166] Bluetooth: Error in BCSP hdr checksum [ 268.390851][ T48] Bluetooth: Error in BCSP hdr checksum [ 268.561496][ T9424] tipc: Started in network mode [ 268.563765][ T9424] tipc: Node identity ac14140f, cluster identity 4711 [ 268.569065][ T9424] tipc: New replicast peer: 172.30.0.1 [ 268.573607][ T9424] tipc: Enabled bearer , priority 10 [ 268.614686][ T9426] random: crng reseeded on system resumption [ 268.790648][ T37] Bluetooth: Error in BCSP hdr checksum [ 268.930978][ T5845] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 269.052877][ T48] Bluetooth: Error in BCSP hdr checksum [ 269.100271][ T5845] usb 8-1: Using ep0 maxpacket: 32 [ 269.104483][ T5845] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 269.108739][ T5845] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 269.113960][ T5845] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 269.118555][ T5845] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 269.127164][ T5845] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 269.130077][ T5845] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.132752][ T5845] usb 8-1: Product: syz [ 269.134038][ T5845] usb 8-1: Manufacturer: syz [ 269.136555][ T5845] usb 8-1: SerialNumber: syz [ 269.145931][ C3] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 269.149272][ T5845] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input56 [ 269.347553][ T9428] ubi: mtd0 is already attached to ubi16 [ 269.370321][ T5845] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 269.377497][ T5845] (id 0x00) [ 269.437747][ T9435] tipc: Enabling of bearer rejected, already enabled [ 269.480262][ T5845] rc_core: IR keymap rc-imon-pad not found [ 269.483242][ T5845] Registered IR keymap rc-empty [ 269.485413][ T5845] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 269.489131][ T5845] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 269.631425][ T5845] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 269.635913][ T5845] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input57 [ 269.641364][ T5845] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:35> initialized [ 269.701197][ T5105] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 269.703165][ T1365] tipc: Node number set to 2886997007 [ 269.703453][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 270.425371][ T9448] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1041'. [ 270.624858][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1045'. [ 271.665846][ T9475] tipc: Started in network mode [ 271.667724][ T9475] tipc: Node identity ac14140f, cluster identity 4711 [ 271.671581][ T9475] tipc: New replicast peer: 172.30.0.3 [ 271.673988][ T9475] tipc: Enabled bearer , priority 10 [ 272.063326][ T5845] usb 8-1: USB disconnect, device number 35 [ 272.397383][ T9481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1052'. [ 272.400298][ T9481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1052'. [ 272.501512][ T9484] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1051'. [ 272.672051][ T1365] tipc: Node number set to 2886997007 [ 272.725479][ T9488] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 272.740486][ T102] Bluetooth: Error in BCSP hdr checksum [ 273.000523][ T1164] Bluetooth: Error in BCSP hdr checksum [ 273.260480][ T48] Bluetooth: Error in BCSP hdr checksum [ 273.520772][ T1164] Bluetooth: Error in BCSP hdr checksum [ 273.697844][ T9498] syzkaller0: entered promiscuous mode [ 273.701579][ T9498] syzkaller0: entered allmulticast mode [ 274.474293][ T5105] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 275.662642][ T9528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1065'. [ 276.730553][ T9537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1068'. [ 277.170690][ T9540] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1069'. [ 277.173538][ T9540] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1069'. [ 277.331791][ T9545] overlayfs: upper fs does not support file handles, falling back to index=off. [ 277.590388][ T1164] Bluetooth: Error in BCSP hdr checksum [ 277.853042][ T102] Bluetooth: Error in BCSP hdr checksum [ 278.111525][ T102] Bluetooth: Error in BCSP hdr checksum [ 278.439257][ T9565] ieee802154 phy0 wpan0: encryption failed: -22 [ 278.683183][ T102] Bluetooth: Error in BCSP hdr checksum [ 278.956994][ T102] Bluetooth: Error in BCSP hdr checksum [ 279.200598][ T102] Bluetooth: Error in BCSP hdr checksum [ 279.351023][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 279.351447][ T5105] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 279.470380][ T37] Bluetooth: Error in BCSP hdr checksum [ 279.523683][ T9574] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1078'. [ 279.740476][ T36] Bluetooth: Error in BCSP hdr checksum [ 279.899105][ T9579] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1080'. [ 280.006347][ T102] Bluetooth: Error in BCSP hdr checksum [ 280.260527][ T1166] Bluetooth: Error in BCSP hdr checksum [ 280.523797][ T102] Bluetooth: Error in BCSP hdr checksum [ 281.124848][ T9611] ieee802154 phy0 wpan0: encryption failed: -22 [ 281.476312][ T9633] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1090'. [ 281.668651][ T9639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1092'. [ 281.671583][ T9639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1092'. [ 281.818771][ T9643] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1091'. [ 282.670308][ T34] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 282.757437][ T5105] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 282.821709][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.825165][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.828108][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 282.832181][ T34] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 282.835028][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.838607][ T34] usb 8-1: config 0 descriptor?? [ 283.290435][ T34] hid_parser_main: 28 callbacks suppressed [ 283.292737][ T34] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 283.296944][ T34] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 283.299227][ T34] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 283.305060][ T34] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 283.307801][ T34] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 283.312693][ T34] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 283.317292][ T34] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 283.322011][ T34] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 283.327514][ T34] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 283.334896][ T34] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 283.350031][ T34] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 283.597835][ T29] usb 8-1: USB disconnect, device number 36 [ 284.042472][ T9673] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1100'. [ 284.310337][ T34] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 284.470234][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 284.474490][ T34] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 284.477921][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.485460][ T34] pvrusb2: Hardware description: Terratec Grabster AV400 [ 284.488155][ T34] pvrusb2: ********** [ 284.489521][ T34] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 284.493015][ T34] pvrusb2: Important functionality might not be entirely working. [ 284.496831][ T34] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 284.500622][ T34] pvrusb2: ********** [ 284.692925][ T2519] pvrusb2: Invalid write control endpoint [ 284.736909][ T2519] pvrusb2: Invalid write control endpoint [ 284.739188][ T2519] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 284.742547][ T2519] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 284.744993][ T2519] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 284.748089][ T2519] pvrusb2: Device being rendered inoperable [ 284.751419][ T2519] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 284.753682][ T2519] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 284.759916][ T2519] pvrusb2: Attached sub-driver cx25840 [ 284.763033][ T2519] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 284.766336][ T2519] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 284.894710][ T5824] usb 5-1: USB disconnect, device number 38 [ 285.055450][ T9685] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1105'. [ 285.058222][ T9685] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1105'. [ 285.390489][ T102] Bluetooth: Error in BCSP hdr checksum [ 285.660469][ T48] Bluetooth: Error in BCSP hdr checksum [ 285.664651][ T64] Bluetooth: hci3: unexpected event for opcode 0x0005 [ 285.920610][ T37] Bluetooth: Error in BCSP hdr checksum [ 286.192570][ T1166] Bluetooth: Error in BCSP hdr checksum [ 286.356107][ T9732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1113'. [ 286.602036][ T9739] overlayfs: upper fs does not support file handles, falling back to index=off. [ 286.801137][ T64] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 286.805414][ T64] Bluetooth: hci1: Injecting HCI hardware error event [ 286.810049][ T5760] Bluetooth: hci1: hardware error 0x00 [ 286.910618][ T61] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 287.090351][ T61] usb 6-1: Using ep0 maxpacket: 8 [ 287.100685][ T61] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 287.104068][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.151678][ T61] pvrusb2: Hardware description: Terratec Grabster AV400 [ 287.154244][ T61] pvrusb2: ********** [ 287.155720][ T61] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 287.159472][ T61] pvrusb2: Important functionality might not be entirely working. [ 287.163532][ T61] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 287.167318][ T61] pvrusb2: ********** [ 287.191670][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 287.198696][ T5105] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 287.363821][ T2519] pvrusb2: Invalid write control endpoint [ 287.444421][ T9746] ieee802154 phy0 wpan0: encryption failed: -22 [ 287.615507][ T61] usb 6-1: USB disconnect, device number 35 [ 287.948830][ T2519] pvrusb2: Invalid write control endpoint [ 287.991245][ T2519] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 288.009874][ T2519] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 288.020722][ T2519] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 288.040115][ T2519] pvrusb2: Device being rendered inoperable [ 288.042939][ T2519] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 288.061415][ T2519] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 288.093931][ T2519] pvrusb2: Attached sub-driver cx25840 [ 288.097915][ T2519] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 288.105721][ T2519] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 288.287889][ T9751] ieee802154 phy0 wpan0: encryption failed: -22 [ 288.551537][ T9757] ieee802154 phy0 wpan0: encryption failed: -22 [ 288.870444][ T5760] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 289.244487][ T9766] ieee802154 phy0 wpan0: encryption failed: -22 [ 289.318372][ T9762] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.201519][ T9775] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.802130][ T9805] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1132'. [ 292.513723][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1134'. [ 292.574862][ T9823] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.675792][ T9823] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.746308][ T9823] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.805308][ T9823] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.810240][ T1041] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 292.894125][ T5853] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.905134][ T5853] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.915253][ T5853] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.926138][ T5853] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.960276][ T1041] usb 8-1: Using ep0 maxpacket: 8 [ 292.964504][ T1041] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 292.967316][ T1041] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.979367][ T1041] pvrusb2: Hardware description: Terratec Grabster AV400 [ 292.981833][ T1041] pvrusb2: ********** [ 292.983135][ T1041] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 292.987488][ T1041] pvrusb2: Important functionality might not be entirely working. [ 292.990483][ T1041] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 292.994721][ T1041] pvrusb2: ********** [ 293.180034][ T2519] pvrusb2: Invalid write control endpoint [ 293.207280][ T2519] pvrusb2: Invalid write control endpoint [ 293.209110][ T2519] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 293.212615][ T2519] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 293.215035][ T2519] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 293.218198][ T2519] pvrusb2: Device being rendered inoperable [ 293.222307][ T2519] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 293.224634][ T2519] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 293.229750][ T2519] pvrusb2: Attached sub-driver cx25840 [ 293.231870][ T2519] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 293.235111][ T2519] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 293.280344][ T5845] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 293.384506][ T5854] usb 8-1: USB disconnect, device number 37 [ 293.432846][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.441945][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.445962][ T5845] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 293.451458][ T5845] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 293.455499][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.461138][ T5845] usb 6-1: config 0 descriptor?? [ 293.560138][ T9834] overlayfs: upper fs does not support file handles, falling back to index=off. [ 293.599847][ T5760] Bluetooth: hci3: unexpected event for opcode 0x0005 [ 293.873631][ T5845] hid_parser_main: 28 callbacks suppressed [ 293.873645][ T5845] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 293.878180][ T5845] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 293.880581][ T5845] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 293.882868][ T5845] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 293.885159][ T5845] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 293.887619][ T5845] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 293.890104][ T5845] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 293.892459][ T5845] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 293.894726][ T5845] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 293.896983][ T5845] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 293.908538][ T5845] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 294.124186][ T9848] ieee802154 phy0 wpan0: encryption failed: -22 [ 294.179697][ T34] usb 6-1: USB disconnect, device number 36 [ 295.126709][ T9857] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.404596][ T9881] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1152'. [ 296.458846][ T9883] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1153'. [ 296.461757][ T9883] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1153'. [ 296.658258][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1154'. [ 296.671204][ T9887] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.794429][ T9887] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.800396][ T106] Bluetooth: Error in BCSP hdr checksum [ 296.877856][ T9887] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.938218][ T9887] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.021408][ T5853] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.039321][ T5853] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.061658][ T1166] Bluetooth: Error in BCSP hdr checksum [ 297.076652][ T5853] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.126995][ T5853] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.224575][ T9894] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1156'. [ 297.330505][ T1164] Bluetooth: Error in BCSP hdr checksum [ 297.520239][ T61] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 297.680303][ T61] usb 7-1: Using ep0 maxpacket: 8 [ 297.683456][ T61] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 297.686502][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.693008][ T61] pvrusb2: Hardware description: Terratec Grabster AV400 [ 297.695414][ T61] pvrusb2: ********** [ 297.696959][ T61] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 297.701068][ T61] pvrusb2: Important functionality might not be entirely working. [ 297.703609][ T61] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 297.707846][ T61] pvrusb2: ********** [ 297.850270][ T5896] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 297.914396][ T2519] pvrusb2: Invalid write control endpoint [ 297.951082][ T2519] pvrusb2: Invalid write control endpoint [ 297.953402][ T2519] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 297.961591][ T2519] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 297.965678][ T2519] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 297.969690][ T2519] pvrusb2: Device being rendered inoperable [ 297.974702][ T2519] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 297.978127][ T2519] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 298.007969][ T2519] pvrusb2: Attached sub-driver cx25840 [ 298.010578][ T2519] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 298.015658][ T2519] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 298.020256][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 298.023063][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.026477][ T5896] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 298.030019][ T5896] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 298.032926][ T5896] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 298.035486][ T5896] usb 5-1: Manufacturer: syz [ 298.038353][ T5896] usb 5-1: config 0 descriptor?? [ 298.116422][ T5896] usb 7-1: USB disconnect, device number 21 [ 298.550351][ T5105] Bluetooth: hci4: command 0x1003 tx timeout [ 298.553701][ T5760] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 298.653645][ T9905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1158'. [ 299.390367][ T5845] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 299.551892][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.555378][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.558397][ T5845] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 299.562637][ T5845] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 299.565685][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.571023][ T5845] usb 6-1: config 0 descriptor?? [ 299.904649][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1164'. [ 299.941025][ T9919] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.981371][ T5845] hid_parser_main: 28 callbacks suppressed [ 299.981385][ T5845] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 299.988025][ T5845] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 299.991582][ T5845] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 299.993887][ T5845] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 299.996396][ T5845] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 299.998770][ T5845] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 300.001762][ T5845] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 300.004123][ T5845] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 300.006288][ T5845] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 300.010005][ T5845] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 300.024767][ T5845] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 300.102620][ T9919] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.191855][ T9919] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.246736][ T5845] usb 6-1: USB disconnect, device number 37 [ 300.295958][ T9919] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.379257][ T5853] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.391948][ T5853] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.405631][ T5853] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.415606][ T5853] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.487631][ T9926] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1165'. [ 300.617131][ T55] usb 5-1: USB disconnect, device number 39 [ 300.785653][ T9937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1170'. [ 300.788376][ T9937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1170'. [ 301.000224][ T55] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 301.130499][ T1166] Bluetooth: Error in BCSP hdr checksum [ 301.170229][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 301.180236][ T55] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 301.188800][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.207464][ T55] pvrusb2: Hardware description: Terratec Grabster AV400 [ 301.214367][ T55] pvrusb2: ********** [ 301.218153][ T55] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 301.222566][ T55] pvrusb2: Important functionality might not be entirely working. [ 301.225147][ T55] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 301.228872][ T55] pvrusb2: ********** [ 301.400477][ T1164] Bluetooth: Error in BCSP hdr checksum [ 301.406091][ T2519] pvrusb2: Invalid write control endpoint [ 301.431102][ T2519] pvrusb2: Invalid write control endpoint [ 301.433238][ T2519] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 301.439320][ T2519] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 301.442880][ T2519] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 301.445690][ T2519] pvrusb2: Device being rendered inoperable [ 301.448420][ T2519] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 301.452021][ T2519] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 301.456515][ T2519] pvrusb2: Attached sub-driver cx25840 [ 301.458083][ T2519] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 301.465037][ T2519] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 301.607101][ T34] usb 5-1: USB disconnect, device number 40 [ 302.152974][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1173'. [ 302.161201][ T9950] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.225035][ T9950] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.329384][ T9950] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.396446][ T9950] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.464924][ T5853] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.472315][ T5853] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.481681][ T5853] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.492469][ T5853] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.701827][ T9959] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1175'. [ 302.873152][ T5760] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 303.615541][ T9968] ieee802154 phy0 wpan0: encryption failed: -22 [ 303.700291][ T5845] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 303.852321][ T5845] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.857879][ T5845] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.863240][ T5845] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 303.869408][ T5845] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 303.872512][ T5845] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.879791][ T5845] usb 8-1: config 0 descriptor?? [ 304.291826][ T5845] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 304.551114][ T55] usb 8-1: USB disconnect, device number 38 [ 304.931196][ T9997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1183'. [ 305.159228][T10006] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1184'. [ 305.164295][T10006] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1184'. [ 305.172338][ T9997] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.275876][ T9997] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.454819][ T9997] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.726895][T10016] ieee802154 phy0 wpan0: encryption failed: -22 [ 305.896128][ T9997] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.165037][ T5831] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.168753][ T5831] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.181586][ T5831] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.250311][ T5831] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.598571][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1196'. [ 306.608322][T10026] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.703287][T10026] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.828937][T10026] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.968979][T10026] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.056209][ T5853] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.072629][ T5853] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.095559][ T5853] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.113816][ T5853] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.566154][T10038] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1190'. [ 307.739653][T10040] random: crng reseeded on system resumption [ 309.560124][T10083] ieee802154 phy0 wpan0: encryption failed: -22 [ 309.600540][T10089] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1199'. [ 309.603925][T10089] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1199'. [ 310.802443][T10099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1202'. [ 310.805226][T10099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1202'. [ 311.140588][ T1164] Bluetooth: Error in BCSP hdr checksum [ 311.400577][ T222] Bluetooth: Error in BCSP hdr checksum [ 311.767786][ T1164] Bluetooth: Error in BCSP hdr checksum [ 311.946900][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1207'. [ 311.954402][T10117] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.021002][ T222] Bluetooth: Error in BCSP hdr checksum [ 312.057586][T10117] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.117485][T10117] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.176036][T10117] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.255747][ T5853] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.268469][ T5853] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.277759][ T5853] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.280573][ T1164] Bluetooth: Error in BCSP hdr checksum [ 312.309293][ T5853] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.540531][ T1164] Bluetooth: Error in BCSP hdr checksum [ 312.950741][ T5105] Bluetooth: hci4: command 0x1003 tx timeout [ 312.952122][ T5760] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 316.714101][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.716783][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.784668][T10169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1222'. [ 316.821930][T10169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1222'. [ 316.822495][T10171] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1223'. [ 316.834754][T10171] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1223'. [ 317.270583][ T222] Bluetooth: Error in BCSP hdr checksum [ 317.531766][ T222] Bluetooth: Error in BCSP hdr checksum [ 317.764885][T10189] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.820240][ T1164] Bluetooth: Error in BCSP hdr checksum [ 318.070450][ T222] Bluetooth: Error in BCSP hdr checksum [ 318.187182][T10130] syz.3.1210 (10130) used greatest stack depth: 19704 bytes left [ 318.340705][ T36] Bluetooth: Error in BCSP hdr checksum [ 318.600437][ T1164] Bluetooth: Error in BCSP hdr checksum [ 318.862089][ T1164] Bluetooth: Error in BCSP hdr checksum [ 319.032393][ T5760] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 319.140378][ T222] Bluetooth: Error in BCSP hdr checksum [ 319.410433][ T222] Bluetooth: Error in BCSP hdr checksum [ 320.197157][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1232'. [ 320.547965][T10215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1238'. [ 320.551168][T10215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1238'. [ 320.564777][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1237'. [ 320.780279][ T29] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 320.971797][ T29] usb 5-1: Dual-Role OTG device on HNP port [ 320.973867][ T29] usb 5-1: New USB device found, idVendor=17b3, idProduct=0000, bcdDevice= 7.02 [ 320.976734][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.979271][ T29] usb 5-1: Product: ACMESynth [ 320.994522][ T29] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 321.023213][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1241'. [ 321.027242][T10227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1241'. [ 321.070982][ T5853] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.073774][ T5853] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.076282][ T5853] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.078796][ T5853] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.960537][ T36] Bluetooth: Error in BCSP hdr checksum [ 322.220672][ T106] Bluetooth: Error in BCSP hdr checksum [ 322.480714][ T106] Bluetooth: Error in BCSP hdr checksum [ 322.740397][ T222] Bluetooth: Error in BCSP hdr checksum [ 323.010453][ T222] Bluetooth: Error in BCSP hdr checksum [ 323.270511][ T36] Bluetooth: Error in BCSP hdr checksum [ 323.530511][ T37] Bluetooth: Error in BCSP hdr checksum [ 323.752310][ T5760] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 323.752362][ T5105] Bluetooth: hci4: command 0x1003 tx timeout [ 323.790535][ T36] Bluetooth: Error in BCSP hdr checksum [ 324.051566][ T1164] Bluetooth: Error in BCSP hdr checksum [ 324.320678][ T1164] Bluetooth: Error in BCSP hdr checksum [ 324.580475][ T1164] Bluetooth: Error in BCSP hdr checksum [ 324.765536][T10255] overlayfs: upper fs does not support file handles, falling back to index=off. [ 325.484629][T10266] __nla_validate_parse: 4 callbacks suppressed [ 325.484640][T10266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1255'. [ 325.505340][T10266] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.511256][T10264] random: crng reseeded on system resumption [ 325.621823][T10266] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.625659][T10273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1257'. [ 325.634335][T10273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1257'. [ 325.705183][T10266] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.781515][T10266] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.949711][ T5831] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.962715][ T5831] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.982548][ T5831] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.007398][ T5831] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.075828][T10281] overlayfs: upper fs does not support file handles, falling back to index=off. [ 329.596199][T10311] overlayfs: upper fs does not support file handles, falling back to index=off. [ 329.652967][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1271'. [ 329.663810][T10315] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.750400][T10315] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.862388][T10315] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.941331][T10315] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.124692][ T5831] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.145996][ T5831] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.176269][ T5831] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.189871][ T5831] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.750441][T10298] sound midiC3D0: rawmidi drain error (avail = 3968, buffer_size = 4096) [ 340.540146][T10375] ieee802154 phy0 wpan0: encryption failed: -22 [ 340.786945][T10382] ieee802154 phy0 wpan0: encryption failed: -22 [ 341.040204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 341.160201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 341.330204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 342.023270][T10392] ieee802154 phy0 wpan0: encryption failed: -22 [ 343.023274][T10401] ieee802154 phy0 wpan0: encryption failed: -22 [ 343.867002][T10405] ieee802154 phy0 wpan0: encryption failed: -22 [ 344.156734][T10411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1291'. [ 344.399929][T10411] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.506424][T10411] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.736966][T10411] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.921011][T10411] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.215152][ T5831] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.235561][ T5831] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.259933][ T5853] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.276666][ T5831] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.342619][T10432] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1295'. [ 345.345167][T10432] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1295'. [ 345.450337][ T5854] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 345.600240][ T5854] usb 6-1: Using ep0 maxpacket: 8 [ 345.603260][ T5854] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 345.606335][ T5854] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 345.612056][ T5854] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 345.615888][ T5854] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 345.623729][ T5854] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 345.626504][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.883029][ T5854] usb 6-1: GET_CAPABILITIES returned 0 [ 345.884749][ T5854] usbtmc 6-1:16.0: can't read capabilities [ 345.967160][T10437] ieee802154 phy0 wpan0: encryption failed: -22 [ 346.087209][ T29] usb 6-1: USB disconnect, device number 38 [ 346.882361][T10391] syz.3.1282 (10391) used greatest stack depth: 19504 bytes left [ 348.270691][ T5824] [ 348.271519][ T5824] ============================================ [ 348.273400][ T5824] WARNING: possible recursive locking detected [ 348.275300][ T5824] syzkaller #0 Tainted: G L [ 348.277255][ T5824] -------------------------------------------- [ 348.279162][ T5824] kworker/2:3/5824 is trying to acquire lock: [ 348.281076][ T5824] ffff8880487a3128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 348.284114][ T5824] [ 348.284114][ T5824] but task is already holding lock: [ 348.286367][ T5824] ffff88806ee0a928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 348.289369][ T5824] [ 348.289369][ T5824] other info that might help us debug this: [ 348.291859][ T5824] Possible unsafe locking scenario: [ 348.291859][ T5824] [ 348.294126][ T5824] CPU0 [ 348.295168][ T5824] ---- [ 348.296236][ T5824] lock(&grp->list_lock); [ 348.297652][ T5824] lock(&grp->list_lock); [ 348.299042][ T5824] [ 348.299042][ T5824] *** DEADLOCK *** [ 348.299042][ T5824] [ 348.301525][ T5824] May be due to missing lock nesting notation [ 348.301525][ T5824] [ 348.304080][ T5824] 3 locks held by kworker/2:3/5824: [ 348.305696][ T5824] #0: ffff88801bcaa940 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 348.308867][ T5824] #1: ffffc90006707d08 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 348.312494][ T5824] #2: ffff88806ee0a928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 348.315649][ T5824] [ 348.315649][ T5824] stack backtrace: [ 348.317489][ T5824] CPU: 2 UID: 0 PID: 5824 Comm: kworker/2:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 348.317504][ T5824] Tainted: [L]=SOFTLOCKUP [ 348.317508][ T5824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 348.317516][ T5824] Workqueue: events snd_rawmidi_input_event_work [ 348.317530][ T5824] Call Trace: [ 348.317535][ T5824] [ 348.317540][ T5824] dump_stack_lvl+0x100/0x190 [ 348.317552][ T5824] print_deadlock_bug.cold+0xbd/0xca [ 348.317569][ T5824] __lock_acquire+0x1256/0x1a40 [ 348.317589][ T5824] lock_acquire+0x1b9/0x370 [ 348.317604][ T5824] ? snd_seq_deliver_event+0x230/0x860 [ 348.317615][ T5824] ? do_raw_read_unlock+0x3f/0x70 [ 348.317627][ T5824] _raw_read_lock+0x5f/0x70 [ 348.317638][ T5824] ? snd_seq_deliver_event+0x230/0x860 [ 348.317647][ T5824] snd_seq_deliver_event+0x230/0x860 [ 348.317661][ T5824] ? do_raw_spin_lock+0x128/0x260 [ 348.317673][ T5824] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 348.317683][ T5824] ? mark_held_locks+0x40/0x70 [ 348.317698][ T5824] ? lockdep_hardirqs_on+0x78/0x100 [ 348.317711][ T5824] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 348.317722][ T5824] ? client_use_ptr+0x107/0x4b0 [ 348.317738][ T5824] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 348.317749][ T5824] queue_broadcast_event.isra.0+0x143/0x1b0 [ 348.317762][ T5824] ? __pfx_queue_broadcast_event.isra.0+0x10/0x10 [ 348.317775][ T5824] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 348.317786][ T5824] ? snd_seq_timer_start+0x1f0/0x2a0 [ 348.317801][ T5824] snd_seq_control_queue+0x709/0xb70 [ 348.317813][ T5824] ? __pfx_event_input_timer+0x10/0x10 [ 348.317828][ T5824] __snd_seq_deliver_single_event+0x127/0x1c0 [ 348.317839][ T5824] snd_seq_deliver_single_event+0x31f/0x8c0 [ 348.317850][ T5824] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 348.317860][ T5824] ? __lock_acquire+0x49f/0x1a40 [ 348.317878][ T5824] snd_seq_deliver_event+0x44b/0x860 [ 348.317887][ T5824] ? do_raw_spin_lock+0x128/0x260 [ 348.317900][ T5824] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 348.317909][ T5824] ? mark_held_locks+0x40/0x70 [ 348.317924][ T5824] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 348.317935][ T5824] ? lockdep_hardirqs_on+0x78/0x100 [ 348.317946][ T5824] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 348.317957][ T5824] ? client_use_ptr+0x107/0x4b0 [ 348.317973][ T5824] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 348.317984][ T5824] send_timer_event.isra.0+0x130/0x190 [ 348.317994][ T5824] ? __pfx_send_timer_event.isra.0+0x10/0x10 [ 348.318004][ T5824] ? lockdep_hardirqs_on+0x78/0x100 [ 348.318016][ T5824] ? snd_seq_queue_timer_set_tempo+0x199/0x510 [ 348.318030][ T5824] snd_seq_oss_timer_start+0x1db/0x320 [ 348.318041][ T5824] ? __pfx_snd_seq_oss_timer_start+0x10/0x10 [ 348.318051][ T5824] ? snd_seq_oss_readq_put_timestamp+0xd1/0x260 [ 348.318066][ T5824] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 348.318077][ T5824] ? find_slot+0x166/0x1b0 [ 348.318089][ T5824] snd_seq_oss_midi_input+0x467/0xa30 [ 348.318102][ T5824] ? __pfx_snd_seq_oss_midi_input+0x10/0x10 [ 348.318117][ T5824] ? find_held_lock+0x2b/0x80 [ 348.318130][ T5824] ? snd_seq_port_use_ptr+0x128/0x190 [ 348.318145][ T5824] snd_seq_oss_event_input+0x194/0x250 [ 348.318156][ T5824] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 348.318168][ T5824] __snd_seq_deliver_single_event+0x127/0x1c0 [ 348.318179][ T5824] snd_seq_deliver_single_event+0x31f/0x8c0 [ 348.318189][ T5824] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 348.318200][ T5824] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 348.318210][ T5824] ? lockdep_hardirqs_on+0x78/0x100 [ 348.318222][ T5824] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 348.318233][ T5824] ? snd_seq_timer_get_cur_tick+0x50/0x70 [ 348.318248][ T5824] snd_seq_deliver_event+0x2c1/0x860 [ 348.318260][ T5824] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 348.318269][ T5824] ? mark_held_locks+0x40/0x70 [ 348.318285][ T5824] ? lockdep_hardirqs_on+0x78/0x100 [ 348.318296][ T5824] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 348.318307][ T5824] ? client_use_ptr+0x107/0x4b0 [ 348.318322][ T5824] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 348.318334][ T5824] snd_midi_input_event+0x32f/0x470 [ 348.318349][ T5824] ? __pfx_snd_midi_input_event+0x10/0x10 [ 348.318365][ T5824] ? lock_acquire+0x5e/0x370 [ 348.318382][ T5824] ? __pfx_snd_midi_input_event+0x10/0x10 [ 348.318396][ T5824] snd_rawmidi_input_event_work+0x61/0x80 [ 348.318407][ T5824] process_one_work+0xa23/0x1940 [ 348.318425][ T5824] ? __pfx_process_one_work+0x10/0x10 [ 348.318442][ T5824] ? __pfx_snd_rawmidi_input_event_work+0x10/0x10 [ 348.318453][ T5824] worker_thread+0x5ef/0xe50 [ 348.318470][ T5824] ? kthread+0x13a/0x450 [ 348.318483][ T5824] ? __pfx_worker_thread+0x10/0x10 [ 348.318497][ T5824] kthread+0x370/0x450 [ 348.318510][ T5824] ? __pfx_kthread+0x10/0x10 [ 348.318523][ T5824] ret_from_fork+0x72b/0xd50 [ 348.318536][ T5824] ? __pfx_ret_from_fork+0x10/0x10 [ 348.318549][ T5824] ? __switch_to+0x800/0x10f0 [ 348.318565][ T5824] ? __pfx_kthread+0x10/0x10 [ 348.318579][ T5824] ret_from_fork_asm+0x1a/0x30 [ 348.318596][ T5824] [ 348.892595][T10446] ieee802154 phy0 wpan0: encryption failed: -22