last executing test programs: 6m58.580238615s ago: executing program 1 (id=24): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, 0x0) 6m58.293307251s ago: executing program 1 (id=26): socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_complete(0x0) r0 = syz_open_procfs(0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/36, 0x24) getdents64(r0, 0x0, 0x0) socket$isdn_base(0x22, 0x2, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000480)="1080", 0x2, 0xffffffffffffffff) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 6m52.454391232s ago: executing program 1 (id=34): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x44810) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) 6m51.170940372s ago: executing program 1 (id=41): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) fcntl$setpipe(0xffffffffffffffff, 0x11, 0x7efffeff00000000) r1 = gettid() r2 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r2, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) setgroups(0x0, &(0x7f0000000080)) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 6m47.380829847s ago: executing program 1 (id=50): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x6) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0) setpgid(0x0, r0) mount$9p_rdma(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x820, 0x0) 6m46.809104309s ago: executing program 1 (id=52): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0xffff, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc0}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48) 6m31.705730948s ago: executing program 32 (id=52): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0xffff, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc0}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48) 6m18.513500285s ago: executing program 4 (id=116): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, 0x0, 0x800) sendmsg$nl_route_sched(r1, 0x0, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000000080), 0x0) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 6m15.982035896s ago: executing program 4 (id=119): r0 = fsopen(&(0x7f00000004c0)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) 6m15.761107784s ago: executing program 4 (id=120): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000001e) open(&(0x7f0000000280)='.\x00', 0x0, 0x1) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="cc0bee9b120f70ac56e89f3dae1193fcc2d7d638bd78ba5836399c01fd053cb93cb979f5a00c1256cbe8d8c379dd40573a719163e90865003749f35416d7f825428b447e75a10cc5", 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 6m13.738961571s ago: executing program 4 (id=123): mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x3000008) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8011}, 0x24040040) connect$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x8, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10}}}, 0x24}}, 0x0) read$alg(r3, &(0x7f00000007c0)=""/4096, 0x4008) r4 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r4, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") preadv(r5, &(0x7f0000000240)=[{&(0x7f0000000700)=""/231, 0xe7}], 0x1, 0x200c, 0x22f) 6m10.317137761s ago: executing program 4 (id=127): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000180)={0x0, 0x5, 0x2}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r6, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1}) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) setresuid(0xee00, 0xee00, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x40187014, 0x0) 6m9.088678831s ago: executing program 4 (id=128): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x6c6c9c9e, 0x0) read$msr(r0, &(0x7f000001b5c0)=""/102368, 0x18fe0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0xcb, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_readahead}, {@directio}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x648) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x36, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @mcast2, 0x1}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000200025a725bd7000fddbdf250a0000cdff000001020001000800060000000000050016002b0000009b1c10c78f38702b685300111a232b1e3bacbf3f2a9cca"], 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0x22) 5m53.741504599s ago: executing program 33 (id=128): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x6c6c9c9e, 0x0) read$msr(r0, &(0x7f000001b5c0)=""/102368, 0x18fe0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0xcb, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_readahead}, {@directio}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x648) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x36, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @mcast2, 0x1}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000200025a725bd7000fddbdf250a0000cdff000001020001000800060000000000050016002b0000009b1c10c78f38702b685300111a232b1e3bacbf3f2a9cca"], 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0x22) 44.046804695s ago: executing program 5 (id=763): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, 0x0) 40.202800125s ago: executing program 5 (id=770): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0xc0189436, &(0x7f0000000140)) 38.880255376s ago: executing program 5 (id=773): openat$autofs(0xffffffffffffff9c, 0x0, 0x40100, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r0, 0x0, 0x0, 0x40800) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ac0)=@delchain={0x6c, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x7}, {0x6, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x7, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) recvmsg$can_raw(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="f7040018c88ad182eb3c074b6a6116783bb558eeb7a1da33f681b28ba2076bfb2cc6"], 0x0, 0x1200) r1 = io_uring_setup(0x6576, &(0x7f0000000680)={0x0, 0x41f43, 0x1, 0x2, 0x3bd}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) close_range(r1, 0xffffffffffffffff, 0x0) 38.09305453s ago: executing program 3 (id=775): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x840, 0x8e) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000580)={0x10800, 0x0, 0x87}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$fb0(0xffffffffffffff9c, 0x0, 0x22902, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x4) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r2, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES8=r4, @ANYRES32, @ANYRES16=r5, @ANYRES32=0x0, @ANYBLOB="2fb59ffb44602ae36bd341bece505b6fd49c14a96a0fd598971c54ce159707157696533fcdef0281ad064d431c09f162f8bf2bae4ebe2e6f5e7d20a2883ed44c8111957fe17a882e6a4b37aa5440cc7370dd9e67d73cad19a8aac251", @ANYBLOB="040000000000000000000000fd"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f00000001c0)={0x8}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r8 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x1000, 0x2, 0xda}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f00000000c0)) 35.831299763s ago: executing program 5 (id=781): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000500)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 35.309738241s ago: executing program 3 (id=782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r3 = fsopen(&(0x7f0000000240)='selinuxfs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000080)='rootcontext', 0x0, 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000200000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') unshare(0x22020600) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002102, 0x0) read$FUSE(r5, &(0x7f0000000280)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='tdno=']) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f0000000180)=@ethtool_stats}) 33.546994783s ago: executing program 3 (id=785): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 32.056157243s ago: executing program 0 (id=786): r0 = gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)) keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, r6, 0x0) keyctl$instantiate(0xc, r5, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0xfffffffffffffff9) ioctl$KVM_CAP_VM_TYPES(r4, 0x4068aea3, &(0x7f00000002c0)={0xeb, 0x0, 0x8}) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='update default user::\x00'], 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 31.736266285s ago: executing program 2 (id=787): open(&(0x7f0000000140)='./bus\x00', 0x143ec2, 0x1c1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000014c0)=[{0x0}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 30.981210159s ago: executing program 3 (id=788): socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset(&(0x7f0000000500)={0x21c1, 0x3, 0x3}, 0x18, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0x24, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r6, 0x4c00, r6) dup2(r5, r1) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, 0x0, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x4000000) write$rfkill(0xffffffffffffffff, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 30.938313934s ago: executing program 6 (id=789): pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x10000011}) epoll_wait(r2, 0x0, 0x0, 0x20400000) write$P9_RVERSION(r1, 0x0, 0x13) 30.83962433s ago: executing program 5 (id=790): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r5, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) 30.639386078s ago: executing program 6 (id=791): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000000)) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x77359400}}, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r2, r2) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) readv(r3, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/139, 0x8b}], 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000380)=0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 30.627249336s ago: executing program 0 (id=792): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x840, 0x8e) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000580)={0x10800, 0x0, 0x87}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$fb0(0xffffffffffffff9c, 0x0, 0x22902, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x4) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r2, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES8=r4, @ANYRES32, @ANYRES16=r5, @ANYRES32=0x0, @ANYBLOB="2fb59ffb44602ae36bd341bece505b6fd49c14a96a0fd598971c54ce159707157696533fcdef0281ad064d431c09f162f8bf2bae4ebe2e6f5e7d20a2883ed44c8111957fe17a882e6a4b37aa5440cc7370dd9e67d73cad19a8aac251", @ANYBLOB="040000000000000000000000fdffffffffffff"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f00000001c0)={0x8}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r8 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x1000, 0x2, 0xda}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f00000000c0)) 30.576180048s ago: executing program 2 (id=793): mount(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='gfs2meta\x00', 0x20c400, 0x0) syz_emit_vhci(0x0, 0x7) openat$sndseq(0xffffffffffffff9c, 0x0, 0x582146) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1b) r3 = socket$packet(0x11, 0x3, 0x300) symlink(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a400000000009000200"], 0x565c}}, 0x0) 30.529922011s ago: executing program 3 (id=794): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\aL'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000002c0)={0x0, 0x31, 0x4, "fd9eca37"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000440)={0x0, 0xc, 0x5, "49d48024f8"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 29.884208157s ago: executing program 2 (id=795): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0xc094) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRESDEC], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(r3, r3) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e6520"], 0xb8) 29.788742095s ago: executing program 5 (id=796): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, 0x0) 25.244731604s ago: executing program 3 (id=797): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$inet6(0xa, 0x3, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000034700)=""/102400, 0x19000) socket$inet6(0xa, 0x3, 0xff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300"], 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x840) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000000)={[{0x4, 0x200, 0x8, 0x4f, 0x81, 0x7, 0xc0, 0x1, 0xff, 0x6, 0xc, 0x4, 0x9}, {0x8, 0xaff2, 0x0, 0x8, 0x4, 0x1, 0x8, 0x3, 0x0, 0x53, 0x1, 0x6, 0x10005}, {0x0, 0x7, 0x10, 0x10, 0x25, 0x2, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x3, 0x40000000000002}], 0x9}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10004, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0xfff, 0x10, 0xeb, 0x0, 0x1, 0x8, 0x800000001], 0x0, 0x2011c0}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) close(r2) 19.171784817s ago: executing program 0 (id=798): ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x13, r2}) 18.891114762s ago: executing program 6 (id=799): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x4, @time={0xdf}, {0x4, 0xc4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {0x2}, @connect={{0x2, 0x3}, {0x1, 0xa}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control={0x0, 0x0, 0xfffffffe}}, {0x0, 0x0, 0x1, 0x0, @time, {}, {0x8}, @quote={{0x9, 0xfc}, 0x8002}}], 0x70) 18.242142006s ago: executing program 0 (id=800): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000500)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17.981266215s ago: executing program 2 (id=801): pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x10000011}) epoll_wait(r2, 0x0, 0x0, 0x20400000) write$P9_RVERSION(r1, 0x0, 0x13) 17.849916055s ago: executing program 2 (id=802): r0 = gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)) keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, r6, 0x0) keyctl$instantiate(0xc, r5, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0xfffffffffffffff9) ioctl$KVM_CAP_VM_TYPES(r4, 0x4068aea3, &(0x7f00000002c0)={0xeb, 0x0, 0x8}) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='update default user::\x00'], 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 17.732828313s ago: executing program 6 (id=803): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaede, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) 15.321918695s ago: executing program 6 (id=804): socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset(&(0x7f0000000500)={0x21c1, 0x3, 0x3}, 0x18, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0x24, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r5) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) dup2(r5, r1) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, 0x0, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x4000000) write$rfkill(0xffffffffffffffff, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 15.217810348s ago: executing program 2 (id=805): mount(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='gfs2meta\x00', 0x20c400, 0x0) syz_emit_vhci(0x0, 0x7) openat$sndseq(0xffffffffffffff9c, 0x0, 0x582146) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1b) r3 = socket$packet(0x11, 0x3, 0x300) symlink(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a400000000009000200"], 0x565c}}, 0x0) 14.553714857s ago: executing program 34 (id=796): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, 0x0) 14.498416212s ago: executing program 6 (id=807): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\aL'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000002c0)={0x0, 0x31, 0x4, "fd9eca37"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000440)={0x0, 0xc, 0x5, "49d48024f8"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.204972892s ago: executing program 0 (id=808): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x840, 0x8e) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000580)={0x10800, 0x0, 0x87}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$fb0(0xffffffffffffff9c, 0x0, 0x22902, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x4) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r2, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES8=r4, @ANYRES32, @ANYRES16=r5, @ANYRES32=0x0, @ANYBLOB="2fb59ffb44602ae36bd341bece505b6fd49c14a96a0fd598971c54ce159707157696533fcdef0281ad064d431c09f162f8bf2bae4ebe2e6f5e7d20a2883ed44c8111957fe17a882e6a4b37aa5440cc7370dd9e67d73cad19a8aac251", @ANYBLOB="040000000000000000000000fdffffffffffff"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f00000001c0)={0x8}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r8 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x1000, 0x2, 0xda}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f00000000c0)) 12.264871252s ago: executing program 0 (id=809): modify_ldt$write(0x1, &(0x7f0000000000)={0x3fd, 0xffffffffffffffff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) r0 = socket(0xa, 0x3, 0x3a) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f00000000c0)={'ip6gre0\x00', {0x2, 0x4e1d, @broadcast}}) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) fanotify_init(0xa00, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x13, 0x0, 0x80, 0x8}}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/82, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000600)={0x17}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='veno', 0x4) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x3}, &(0x7f00000002c0)=0x8) socket(0x14, 0x80000, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 10.13180905s ago: executing program 35 (id=797): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$inet6(0xa, 0x3, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000034700)=""/102400, 0x19000) socket$inet6(0xa, 0x3, 0xff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300"], 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x840) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000000)={[{0x4, 0x200, 0x8, 0x4f, 0x81, 0x7, 0xc0, 0x1, 0xff, 0x6, 0xc, 0x4, 0x9}, {0x8, 0xaff2, 0x0, 0x8, 0x4, 0x1, 0x8, 0x3, 0x0, 0x53, 0x1, 0x6, 0x10005}, {0x0, 0x7, 0x10, 0x10, 0x25, 0x2, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x3, 0x40000000000002}], 0x9}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10004, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0xfff, 0x10, 0xeb, 0x0, 0x1, 0x8, 0x800000001], 0x0, 0x2011c0}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) close(r2) 0s ago: executing program 36 (id=805): mount(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='gfs2meta\x00', 0x20c400, 0x0) syz_emit_vhci(0x0, 0x7) openat$sndseq(0xffffffffffffff9c, 0x0, 0x582146) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1b) r3 = socket$packet(0x11, 0x3, 0x300) symlink(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a400000000009000200"], 0x565c}}, 0x0) kernel console output (not intermixed with test programs): ptor's value: 66 [ 208.986067][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 208.986095][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 208.989282][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 208.989314][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 208.989335][ T9] usb 3-1: Product: syz [ 208.989351][ T9] usb 3-1: Manufacturer: syz [ 209.099319][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 209.099337][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 209.117491][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 209.117514][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 209.151144][ T6467] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.286079][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.286309][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.351553][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.378203][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.485648][ T6687] chnl_net:caif_netlink_parms(): no params data found [ 209.953636][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 210.329091][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE [ 210.442885][ T9] usb 4-1: device descriptor read/64, error -71 [ 210.551918][ T994] usb 3-1: USB disconnect, device number 10 [ 210.766858][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 210.922921][ T9] usb 4-1: device descriptor read/64, error -71 [ 211.039805][ T9] usb usb4-port1: attempt power cycle [ 211.048474][ T5805] Bluetooth: hci3: command tx timeout [ 211.392946][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 211.414110][ T9] usb 4-1: device descriptor read/8, error -71 [ 211.692909][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 211.716945][ T9] usb 4-1: device descriptor read/8, error -71 [ 211.823431][ T9] usb usb4-port1: unable to enumerate USB device [ 212.941814][ T6749] binder: 6745:6749 ioctl c0306201 0 returned -14 [ 213.157741][ T5805] Bluetooth: hci3: command tx timeout [ 213.228705][ T6748] fuse: Unknown parameter 'fd0x0000000000000008 [ 213.228705][ T6748] 00000000000000000000' [ 214.017353][ T6749] warning: `syz.2.199' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 214.022867][ T6687] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.023024][ T6687] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.023283][ T6687] bridge_slave_0: entered allmulticast mode [ 214.029378][ T6687] bridge_slave_0: entered promiscuous mode [ 214.101805][ T6687] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.101951][ T6687] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.102212][ T6687] bridge_slave_1: entered allmulticast mode [ 214.125603][ T6687] bridge_slave_1: entered promiscuous mode [ 214.822906][ T5888] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 214.923493][ T6687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.975486][ T5888] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 214.975518][ T5888] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 214.975537][ T5888] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 214.975593][ T5888] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 214.975621][ T5888] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 214.980570][ T5888] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 214.980600][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 214.980621][ T5888] usb 4-1: Product: syz [ 214.980636][ T5888] usb 4-1: Manufacturer: syz [ 215.057120][ T6687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.203108][ T5805] Bluetooth: hci3: command tx timeout [ 215.411372][ T5888] cdc_wdm 4-1:1.0: skipping garbage [ 215.411394][ T5888] cdc_wdm 4-1:1.0: skipping garbage [ 215.411502][ T5888] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 216.006023][ T6687] team0: Port device team_slave_0 added [ 216.063582][ T6687] team0: Port device team_slave_1 added [ 216.303103][ T5888] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 216.348613][ T6687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.348631][ T6687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.348658][ T6687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.389473][ T6687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.389494][ T6687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.389527][ T6687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.483732][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.483761][ T5888] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 216.525408][ T5888] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 216.525441][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.525462][ T5888] usb 3-1: Product: syz [ 216.525477][ T5888] usb 3-1: Manufacturer: syz [ 216.525493][ T5888] usb 3-1: SerialNumber: syz [ 216.576653][ T5888] usb 3-1: config 0 descriptor?? [ 217.048170][ T6687] hsr_slave_0: entered promiscuous mode [ 217.049783][ T6687] hsr_slave_1: entered promiscuous mode [ 217.050835][ T6687] debugfs: 'hsr0' already exists in 'hsr' [ 217.050861][ T6687] Cannot create hsr debugfs directory [ 217.226796][ T5939] bridge_slave_1: left allmulticast mode [ 217.226828][ T5939] bridge_slave_1: left promiscuous mode [ 217.227106][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.334788][ T5939] bridge_slave_0: left allmulticast mode [ 217.334821][ T5939] bridge_slave_0: left promiscuous mode [ 217.335092][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.569853][ T9] usb 4-1: USB disconnect, device number 25 [ 217.769943][ T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 217.959929][ T31] usb 1-1: no configurations [ 217.959950][ T31] usb 1-1: can't read configurations, error -22 [ 218.082839][ T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 218.275416][ T31] usb 1-1: no configurations [ 218.275435][ T31] usb 1-1: can't read configurations, error -22 [ 218.275854][ T31] usb usb1-port1: attempt power cycle [ 218.612862][ T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 218.674316][ T31] usb 1-1: no configurations [ 218.674336][ T31] usb 1-1: can't read configurations, error -22 [ 218.802901][ T31] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 218.826793][ T31] usb 1-1: no configurations [ 218.826815][ T31] usb 1-1: can't read configurations, error -22 [ 218.842555][ T31] usb usb1-port1: unable to enumerate USB device [ 219.129829][ T5888] usb 3-1: USB disconnect, device number 11 [ 221.374777][ T5939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.453625][ T5939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.497696][ T5939] bond0 (unregistering): Released all slaves [ 222.092931][ T31] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 222.183006][ T6017] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 222.253206][ T5939] hsr_slave_0: left promiscuous mode [ 222.257134][ T31] usb 4-1: config 8 has an invalid interface number: 80 but max is 0 [ 222.257163][ T31] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 222.257183][ T31] usb 4-1: config 8 has no interface number 0 [ 222.257248][ T31] usb 4-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 222.257275][ T31] usb 4-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 222.257289][ T31] usb 4-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 222.257339][ T31] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 222.257355][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.340850][ T6017] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 222.340887][ T6017] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 222.340912][ T6017] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 222.341000][ T6017] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 222.341039][ T6017] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 222.352999][ T6017] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 222.353038][ T6017] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 222.353063][ T6017] usb 1-1: Product: syz [ 222.353101][ T6017] usb 1-1: Manufacturer: syz [ 222.386469][ T6017] cdc_wdm 1-1:1.0: skipping garbage [ 222.386496][ T6017] cdc_wdm 1-1:1.0: skipping garbage [ 222.390925][ T6017] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 222.448669][ T31] usb 4-1: NFC: intf ffff88804a394000 id ffffffff8e0adb20 [ 222.472207][ T5939] hsr_slave_1: left promiscuous mode [ 222.484610][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.545714][ T6017] usb 4-1: USB disconnect, device number 26 [ 222.584895][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.964376][ T994] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 223.135148][ T994] usb 3-1: Using ep0 maxpacket: 8 [ 223.150090][ T994] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 223.150128][ T994] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 223.150155][ T994] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 223.150178][ T994] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 223.150203][ T994] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.150250][ T994] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 223.150274][ T994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.274519][ T994] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 223.895290][ T6839] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 224.475967][ T5939] team0 (unregistering): Port device team_slave_1 removed [ 225.223677][ T31] usb 1-1: USB disconnect, device number 18 [ 225.421874][ T5939] team0 (unregistering): Port device team_slave_0 removed [ 225.702956][ T6017] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 225.712231][ T5874] usb 3-1: USB disconnect, device number 12 [ 225.733123][ T31] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 225.885981][ T6017] usb 4-1: no configurations [ 225.885997][ T6017] usb 4-1: can't read configurations, error -22 [ 225.925161][ T31] usb 1-1: config 0 has an invalid interface number: 46 but max is 0 [ 225.925191][ T31] usb 1-1: config 0 has no interface number 0 [ 225.925245][ T31] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 225.927952][ T31] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 225.928000][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.928022][ T31] usb 1-1: Product: syz [ 225.928038][ T31] usb 1-1: Manufacturer: syz [ 225.928054][ T31] usb 1-1: SerialNumber: syz [ 225.991694][ T31] usb 1-1: config 0 descriptor?? [ 225.992644][ T6850] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 226.011286][ T31] ums-karma 1-1:0.46: USB Mass Storage device detected [ 226.015037][ T6017] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 226.140686][ T31] ums-karma 1-1:0.46: probe with driver ums-karma failed with error -5 [ 226.203632][ T994] usb 1-1: USB disconnect, device number 19 [ 226.215056][ T6017] usb 4-1: no configurations [ 226.215088][ T6017] usb 4-1: can't read configurations, error -22 [ 226.215666][ T6017] usb usb4-port1: attempt power cycle [ 226.570476][ T6017] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 226.584309][ T6017] usb 4-1: no configurations [ 226.584329][ T6017] usb 4-1: can't read configurations, error -22 [ 226.732866][ T6017] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 226.762081][ T6017] usb 4-1: no configurations [ 226.762102][ T6017] usb 4-1: can't read configurations, error -22 [ 226.762548][ T6017] usb usb4-port1: unable to enumerate USB device [ 229.563337][ T6467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.816182][ T37] Bluetooth: Error in BCSP hdr checksum [ 231.524087][ T994] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 231.672809][ T994] usb 4-1: Using ep0 maxpacket: 8 [ 231.677438][ T994] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 231.677473][ T994] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 231.677500][ T994] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 231.677525][ T994] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.677568][ T994] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 231.677599][ T994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.682931][ T5806] Bluetooth: hci5: command 0x1003 tx timeout [ 231.700295][ T5805] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 232.077891][ T994] usb 4-1: usb_control_msg returned -32 [ 232.077939][ T994] usbtmc 4-1:16.0: can't read capabilities [ 232.153761][ T994] usb 4-1: USB disconnect, device number 31 [ 232.324732][ T6908] snd_dummy snd_dummy.0: control 0:0:0:syz0:-16777217 is already present [ 233.575027][ T6467] veth0_vlan: entered promiscuous mode [ 233.632478][ T6467] veth1_vlan: entered promiscuous mode [ 233.921855][ T6467] veth0_macvtap: entered promiscuous mode [ 233.958612][ T6916] loop6: detected capacity change from 0 to 524288000 [ 233.990764][ T6467] veth1_macvtap: entered promiscuous mode [ 234.580640][ T6467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.641331][ T6687] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 234.789427][ T6467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.794682][ T6687] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 236.151134][ T6687] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 237.082954][ T5939] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.084615][ T5939] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.085588][ T5939] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.085778][ T5939] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.171280][ T6687] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 237.322879][ T994] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 237.955273][ T994] usb 3-1: device descriptor read/all, error -71 [ 238.492769][ T1367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.492802][ T1367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.622914][ T994] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 238.753777][ T994] usb 3-1: device descriptor read/64, error -71 [ 238.781708][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.781731][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.863228][ T994] usb usb3-port1: attempt power cycle [ 238.911813][ T6687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.944268][ T31] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 238.949190][ T6687] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.988089][ T1334] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.988276][ T1334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.003707][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.003954][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.022803][ T6018] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 239.102794][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 239.182847][ T6018] usb 1-1: Using ep0 maxpacket: 8 [ 239.203568][ T994] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 239.385254][ T994] usb 3-1: device descriptor read/8, error -71 [ 239.410979][ T31] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.411010][ T31] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.411036][ T31] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 239.411060][ T31] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.411104][ T31] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 239.411136][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.488754][ T6018] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 239.488788][ T6018] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 239.488814][ T6018] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 239.488838][ T6018] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.488894][ T6018] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 239.488918][ T6018] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.639252][ T31] usb 4-1: GET_CAPABILITIES returned 0 [ 239.639304][ T31] usbtmc 4-1:16.0: can't read capabilities [ 239.642887][ T994] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 239.665441][ T994] usb 3-1: device descriptor read/8, error -71 [ 239.773446][ T994] usb usb3-port1: unable to enumerate USB device [ 239.790695][ T6018] usb 1-1: usb_control_msg returned -32 [ 239.790744][ T6018] usbtmc 1-1:16.0: can't read capabilities [ 239.852209][ T6018] usb 1-1: USB disconnect, device number 20 [ 239.880465][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.880939][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.881020][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.903206][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.903302][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.903376][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.904064][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.908231][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.910802][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.910900][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.910984][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.913025][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.922489][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.922595][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.922720][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 239.922795][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 240.123001][ T31] usb 4-1: USB disconnect, device number 32 [ 240.480352][ T6970] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 241.483071][ T6984] snd_dummy snd_dummy.0: control 0:0:0:syz0:-16777217 is already present [ 241.807252][ T6687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.573515][ T31] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 242.739519][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.739549][ T31] usb 1-1: config 0 has no interfaces? [ 242.739583][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 242.739607][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.810043][ T31] usb 1-1: config 0 descriptor?? [ 250.222533][ T994] usb 1-1: USB disconnect, device number 21 [ 250.259250][ T7025] loop6: detected capacity change from 0 to 524288000 [ 250.546922][ T7025] loop6: unable to read partition table [ 250.547132][ T7025] loop_reread_partitions: partition scan of loop6 (ÿŸ ¾‚³˜±Ä6tPΪŔ±³×AÝÁ¬8ï*V^ñè3c) failed (rc=-5) [ 250.742892][ T6017] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 250.880635][ T6687] veth0_vlan: entered promiscuous mode [ 250.912809][ T6017] usb 4-1: Using ep0 maxpacket: 8 [ 250.915254][ T6017] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 250.915288][ T6017] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 250.915314][ T6017] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 250.915340][ T6017] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.915385][ T6017] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 250.915409][ T6017] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.097316][ T6687] veth1_vlan: entered promiscuous mode [ 251.143989][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 251.147478][ T5888] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 251.273903][ T5888] usb 7-1: device descriptor read/64, error -71 [ 251.292935][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 251.295481][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 251.295544][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 251.295562][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 251.295579][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.295610][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 251.295626][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.372460][ T6017] usb 4-1: usb_control_msg returned -32 [ 251.372510][ T6017] usbtmc 4-1:16.0: can't read capabilities [ 251.514485][ T5888] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 251.519572][ T6687] veth0_macvtap: entered promiscuous mode [ 251.550793][ T6687] veth1_macvtap: entered promiscuous mode [ 251.561959][ T6017] usb 4-1: USB disconnect, device number 33 [ 251.642884][ T5888] usb 7-1: device descriptor read/64, error -71 [ 251.714557][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 251.714608][ T9] usbtmc 1-1:16.0: can't read capabilities [ 251.719813][ T6687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.753326][ T5888] usb usb7-port1: attempt power cycle [ 251.817696][ T6687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.870057][ T146] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.871885][ T146] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.914302][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.914401][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.914485][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.916857][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.916964][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.917049][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.917130][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.918602][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.918697][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.918784][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.918867][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.919354][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.919440][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.919518][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.919820][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.919920][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 251.923233][ T146] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.925375][ T44] usb 1-1: USB disconnect, device number 22 [ 251.931462][ T146] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.173562][ T5888] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 252.195020][ T5888] usb 7-1: device descriptor read/8, error -71 [ 252.444510][ T5888] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 252.471481][ T5888] usb 7-1: device descriptor read/8, error -71 [ 252.573861][ T5888] usb usb7-port1: unable to enumerate USB device [ 252.717186][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.717206][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.754329][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 252.859146][ T1304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.859170][ T1304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.903083][ T5888] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 252.903270][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 252.907653][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 252.908454][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.970752][ T9] usb 4-1: config 0 descriptor?? [ 252.992077][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 253.115960][ T5888] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 253.116054][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.116077][ T5888] usb 1-1: Product: syz [ 253.116093][ T5888] usb 1-1: Manufacturer: syz [ 253.116109][ T5888] usb 1-1: SerialNumber: syz [ 253.191904][ T5888] usb 1-1: config 0 descriptor?? [ 254.333434][ T9] gspca_sonixj: reg_w1 err -71 [ 254.353406][ T9] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 255.561805][ T9] usb 4-1: USB disconnect, device number 34 [ 261.139812][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.139888][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.383761][ T5874] usb 1-1: USB disconnect, device number 23 [ 263.988187][ T7086] fuse: Unknown parameter '0x0000000000000003' [ 265.854159][ T7103] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 266.905515][ T7102] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.282888][ T5881] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 269.432944][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 269.435842][ T5881] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 269.435873][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.503453][ T5881] usb 1-1: config 0 descriptor?? [ 269.627949][ T5881] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 270.534703][ T5881] gspca_sonixj: reg_w1 err -71 [ 270.553113][ T5881] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 270.556766][ T5881] usb 1-1: USB disconnect, device number 24 [ 271.167824][ T7152] fuse: Unknown parameter '0x0000000000000003' [ 271.274694][ T5888] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 271.962897][ T5888] usb 6-1: Using ep0 maxpacket: 16 [ 271.969092][ T5888] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 271.969114][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.969129][ T5888] usb 6-1: Product: syz [ 271.969139][ T5888] usb 6-1: Manufacturer: syz [ 271.969149][ T5888] usb 6-1: SerialNumber: syz [ 271.992980][ T5888] usb 6-1: config 0 descriptor?? [ 272.453675][ T7163] trusted_key: encrypted_key: key user:syz not found [ 272.567763][ T5888] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 272.571936][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 272.572765][ T5888] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 272.572817][ T5888] usb 6-1: media controller created [ 272.694592][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 272.723646][ T7147] dtv5100: wlen = 0, aborting. [ 272.843018][ T5888] zl10353_read_register: readreg error (reg=127, ret==0) [ 272.843067][ T5888] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 272.843077][ T5888] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 272.894123][ T5888] usb 6-1: USB disconnect, device number 2 [ 272.972820][ T5888] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 275.676753][ T7185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.283'. [ 276.798386][ T6018] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 276.956045][ T6018] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.956082][ T6018] usb 1-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 276.956098][ T6018] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.002903][ T6018] usb 1-1: config 0 descriptor?? [ 277.269780][ T7198] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 277.634296][ T7202] Bluetooth: MGMT ver 1.23 [ 277.646949][ T7202] fuse: Unknown parameter 'fd0x0000000000000008 [ 277.646949][ T7202] 00000000000000000000' [ 277.679803][ T7202] binder: 7192:7202 ioctl c0306201 0 returned -14 [ 280.960105][ T6018] usbhid 1-1:0.0: can't add hid device: -71 [ 280.960423][ T6018] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 281.742985][ T6018] usb 1-1: USB disconnect, device number 25 [ 283.987506][ T6841] Bluetooth: Error in BCSP hdr checksum [ 284.185948][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'. [ 284.359623][ T31] IPVS: starting estimator thread 0... [ 284.442946][ T7228] IPVS: using max 8 ests per chain, 19200 per kthread [ 284.732841][ T31] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 284.917815][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.917844][ T31] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 284.917952][ T31] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 284.917977][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.998746][ T31] usb 4-1: config 0 descriptor?? [ 285.362998][ T5805] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 286.689091][ T7253] loop6: detected capacity change from 0 to 524288000 [ 286.700770][ T7250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.705231][ T7250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.186021][ T5881] usb 4-1: USB disconnect, device number 35 [ 290.292817][ T6018] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 290.466849][ T6018] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 290.466883][ T6018] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.466929][ T6018] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 290.466953][ T6018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.637329][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.299'. [ 292.703903][ T6018] usb 7-1: usb_control_msg returned -32 [ 292.703940][ T6018] usbtmc 7-1:16.0: can't read capabilities [ 293.574590][ T7308] usbtmc 7-1:16.0: usbtmc_ioctl_request failed -71 [ 293.575369][ T5888] usb 7-1: USB disconnect, device number 6 [ 294.833955][ T1243] IPVS: starting estimator thread 0... [ 294.942862][ T7322] IPVS: using max 7 ests per chain, 16800 per kthread [ 296.228379][ T5888] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 296.387497][ T5888] usb 4-1: config 8 has an invalid interface number: 80 but max is 0 [ 296.387529][ T5888] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 296.387550][ T5888] usb 4-1: config 8 has no interface number 0 [ 296.387602][ T5888] usb 4-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 296.387632][ T5888] usb 4-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 296.387655][ T5888] usb 4-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 296.387734][ T5888] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 296.387760][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.425082][ T5888] usb 4-1: NFC: intf ffff88805c54c000 id ffffffff8e0adb20 [ 296.552863][ T31] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 296.705917][ T5881] usb 4-1: USB disconnect, device number 36 [ 296.709149][ T31] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 296.709179][ T31] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 296.709198][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 296.709250][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 296.709277][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 296.770550][ T31] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 296.770572][ T31] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 296.770586][ T31] usb 3-1: Product: syz [ 296.770596][ T31] usb 3-1: Manufacturer: syz [ 296.894002][ T31] cdc_wdm 3-1:1.0: skipping garbage [ 296.894024][ T31] cdc_wdm 3-1:1.0: skipping garbage [ 296.896803][ T31] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 296.896823][ T31] cdc_wdm 3-1:1.0: Unknown control protocol [ 297.468986][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 298.412277][ T7355] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 299.579004][ T6017] usb 3-1: USB disconnect, device number 17 [ 302.481036][ T5805] Bluetooth: hci3: unexpected cc 0x203c length: 9 > 1 [ 302.710102][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.5.321'. [ 304.469728][ T7394] fuse: Bad value for 'fd' [ 305.932945][ T5874] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 306.087335][ T5874] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 306.087367][ T5874] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 306.087412][ T5874] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 306.087435][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.349051][ T5874] usb 4-1: usb_control_msg returned -32 [ 306.349087][ T5874] usbtmc 4-1:16.0: can't read capabilities [ 306.623012][ T6017] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 306.772792][ T6017] usb 6-1: Using ep0 maxpacket: 8 [ 306.910677][ T6017] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 306.910700][ T6017] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 306.910717][ T6017] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 306.910737][ T6017] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 306.910769][ T6017] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 306.910786][ T6017] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.290655][ T6017] usb 6-1: GET_CAPABILITIES returned 0 [ 307.290703][ T6017] usbtmc 6-1:16.0: can't read capabilities [ 307.528398][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 307.528460][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 307.528509][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 307.528557][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 307.528826][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 307.528875][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 307.528923][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 307.529155][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 307.529204][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 307.529252][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 307.529299][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 307.532367][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 307.532426][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 307.532474][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 307.532941][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 307.537819][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 307.542565][ T5874] usb 6-1: USB disconnect, device number 3 [ 309.073047][ T6018] usb 4-1: USB disconnect, device number 37 [ 310.787036][ T7426] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 311.054431][ T7426] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 311.176514][ T7441] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 311.246543][ T7426] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 311.248639][ T7426] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 311.353373][ T7447] fuse: Bad value for 'fd' [ 311.376298][ T7426] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 312.802841][ T5805] Bluetooth: hci2: command 0x0406 tx timeout [ 313.285426][ T5805] Bluetooth: hci3: command 0x0c1a tx timeout [ 314.892781][ T5805] Bluetooth: hci2: command 0x0406 tx timeout [ 315.385652][ T5805] Bluetooth: hci3: command 0x0c1a tx timeout [ 315.603489][ T31] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 315.672797][ T1243] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 315.755842][ T31] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 315.755876][ T31] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.755922][ T31] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 315.755947][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.834555][ T1243] usb 1-1: Using ep0 maxpacket: 8 [ 315.840672][ T1243] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 315.840694][ T1243] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 315.840712][ T1243] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 315.840729][ T1243] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.840760][ T1243] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 315.840777][ T1243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.221847][ T1243] usb 1-1: GET_CAPABILITIES returned 0 [ 316.221891][ T1243] usbtmc 1-1:16.0: can't read capabilities [ 316.319305][ T31] usb 7-1: usb_control_msg returned -32 [ 316.319364][ T31] usbtmc 7-1:16.0: can't read capabilities [ 316.427649][ T31] usb 1-1: USB disconnect, device number 26 [ 317.429739][ T7493] fuse: Invalid rootmode [ 317.443918][ T5805] Bluetooth: hci3: command 0x0c1a tx timeout [ 317.566309][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.374567][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.400444][ T31] usb 7-1: USB disconnect, device number 7 [ 319.495521][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.400710][ T7532] netlink: 28 bytes leftover after parsing attributes in process `syz.6.362'. [ 322.400746][ T7532] netlink: 'syz.6.362': attribute type 7 has an invalid length. [ 322.400758][ T7532] netlink: 'syz.6.362': attribute type 8 has an invalid length. [ 322.400768][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz.6.362'. [ 322.424787][ T6017] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 322.485596][ T7532] ip6gretap0: entered promiscuous mode [ 322.491891][ T7532] syz_tun: entered promiscuous mode [ 322.569137][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.569219][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.604630][ T7532] ip6gretap0: left promiscuous mode [ 322.624752][ T6017] usb 4-1: Using ep0 maxpacket: 8 [ 322.629026][ T6017] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 322.629048][ T6017] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 322.629065][ T6017] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 322.629082][ T6017] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.629112][ T6017] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 322.629128][ T6017] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.700224][ T7532] syz_tun: left promiscuous mode [ 322.972843][ T5874] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 322.978611][ T6017] usb 4-1: GET_CAPABILITIES returned 0 [ 322.978645][ T6017] usbtmc 4-1:16.0: can't read capabilities [ 323.135814][ T5874] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 323.135851][ T5874] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.135899][ T5874] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 323.135925][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.790710][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 323.790769][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 323.790826][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 323.790874][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 323.791149][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 323.791198][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 323.791246][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 323.791470][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 323.791519][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 323.791566][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 323.791614][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 323.793875][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 323.793958][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 323.794030][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 323.893192][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 323.893264][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 323.905537][ T9] usb 4-1: USB disconnect, device number 38 [ 324.102242][ T5874] usb 6-1: usb_control_msg returned -32 [ 324.102293][ T5874] usbtmc 6-1:16.0: can't read capabilities [ 324.137225][ T5874] usb 6-1: USB disconnect, device number 4 [ 325.310990][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'. [ 325.555818][ T7555] binder: 7553:7555 ioctl c0306201 0 returned -14 [ 329.772267][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.994322][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.418143][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.6.382'. [ 331.618763][ C1] vkms_vblank_simulate: vblank timer overrun [ 332.632886][ T6017] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 332.785216][ T6017] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 332.785251][ T6017] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.785297][ T6017] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 332.785321][ T6017] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.892758][ T31] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 333.071049][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.071102][ T31] usb 1-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 333.071125][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.112683][ T31] usb 1-1: config 0 descriptor?? [ 333.360879][ T6017] usb 7-1: usb_control_msg returned -32 [ 333.360929][ T6017] usbtmc 7-1:16.0: can't read capabilities [ 333.548343][ T7611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.550239][ T7611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.580437][ T31] hid (null): invalid report_count 139821482 [ 333.595304][ T6017] usb 7-1: USB disconnect, device number 8 [ 333.661632][ T31] razer 0003:1532:010D.0002: invalid report_count 139821482 [ 333.661658][ T31] razer 0003:1532:010D.0002: item 0 4 1 9 parsing failed [ 333.681290][ T31] razer 0003:1532:010D.0002: probe with driver razer failed with error -22 [ 334.336016][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.387260][ T7624] tipc: Failed to obtain node identity [ 334.387286][ T7624] tipc: Enabling of bearer rejected, failed to enable media [ 334.673611][ C1] vkms_vblank_simulate: vblank timer overrun [ 336.166044][ T6017] usb 1-1: USB disconnect, device number 27 [ 336.728358][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.394'. [ 337.382792][ T31] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 337.632793][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 337.635754][ T31] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 337.635783][ T31] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 337.635809][ T31] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 337.635833][ T31] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.635878][ T31] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 337.635902][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.952913][ T31] usb 7-1: GET_CAPABILITIES returned 0 [ 337.952963][ T31] usbtmc 7-1:16.0: can't read capabilities [ 338.202479][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 338.202574][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 338.202694][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 338.202778][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 338.203287][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 338.203369][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 338.203445][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 338.203519][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 338.205579][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 338.205648][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 338.205697][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 338.205753][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 338.206146][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 338.206197][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 338.206245][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 338.206292][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 338.209753][ T31] usb 7-1: USB disconnect, device number 9 [ 339.273080][ T31] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 339.445492][ T31] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 339.445527][ T31] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.445570][ T31] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 339.445594][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.671343][ T31] usb 7-1: usb_control_msg returned -32 [ 339.671392][ T31] usbtmc 7-1:16.0: can't read capabilities [ 339.782796][ T31] usb 7-1: USB disconnect, device number 10 [ 340.013307][ T7676] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 341.652819][ T31] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 341.803951][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 341.806462][ T31] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 341.806482][ T31] usb 1-1: config 0 has no interface number 0 [ 341.806518][ T31] usb 1-1: config 0 interface 184 has no altsetting 0 [ 341.809562][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 341.809587][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.809602][ T31] usb 1-1: Product: syz [ 341.809612][ T31] usb 1-1: Manufacturer: syz [ 341.809622][ T31] usb 1-1: SerialNumber: syz [ 341.818333][ T31] usb 1-1: config 0 descriptor?? [ 341.899849][ T31] smsc75xx v1.0.0 [ 341.942785][ T5888] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 342.192754][ T5888] usb 6-1: Using ep0 maxpacket: 8 [ 342.196291][ T5888] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 342.196322][ T5888] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 342.196348][ T5888] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 342.196374][ T5888] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.196416][ T5888] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 342.196448][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.583055][ T5888] usb 6-1: GET_CAPABILITIES returned 0 [ 342.583108][ T5888] usbtmc 6-1:16.0: can't read capabilities [ 342.792436][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.795189][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.795247][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.795300][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.795616][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.795666][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.795714][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.798532][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.798587][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.801204][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.801578][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.801668][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.803584][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.803679][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.807122][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.809769][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.895467][ T5889] usb 6-1: USB disconnect, device number 5 [ 342.979781][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 342.979860][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 343.407523][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 343.407569][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 343.407590][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 343.411585][ T31] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 343.504332][ T31] usb 1-1: USB disconnect, device number 28 [ 346.141158][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz.6.427'. [ 346.537766][ T7750] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.855830][ T5888] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 347.037000][ T5888] usb 7-1: Using ep0 maxpacket: 8 [ 347.546337][ T5888] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 347.546443][ T5888] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 347.548653][ T5888] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 347.549176][ T5888] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.549232][ T5888] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 347.549258][ T5888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.892491][ T5888] usb 7-1: GET_CAPABILITIES returned 0 [ 347.892524][ T5888] usbtmc 7-1:16.0: can't read capabilities [ 348.114732][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.114803][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.114854][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.114903][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.133197][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.133299][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.133386][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.133470][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.134046][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.134146][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.134244][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.134330][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.134679][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.134770][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.134855][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.135207][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 348.170245][ T5888] usb 7-1: USB disconnect, device number 11 [ 349.893537][ T7780] netlink: 12 bytes leftover after parsing attributes in process `syz.6.438'. [ 350.732822][ T5888] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 350.886940][ T5888] usb 7-1: config 8 has an invalid interface number: 80 but max is 0 [ 350.886972][ T5888] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 350.886994][ T5888] usb 7-1: config 8 has no interface number 0 [ 350.887043][ T5888] usb 7-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 350.887066][ T5888] usb 7-1: config 8 interface 80 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 350.887111][ T5888] usb 7-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 350.887134][ T5888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.965299][ T5888] usb 7-1: NFC: intf ffff88804849e000 id ffffffff8e0adb20 [ 351.222440][ T5888] usb 7-1: USB disconnect, device number 12 [ 351.584384][ T38] kauditd_printk_skb: 19 callbacks suppressed [ 351.584407][ T38] audit: type=1800 audit(1760513234.382:31): pid=7794 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.442" name="/" dev="fuse" ino=0 res=0 errno=0 [ 352.901542][ T6018] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 353.382555][ T6018] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 353.382587][ T6018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.465518][ T6018] usb 7-1: config 0 descriptor?? [ 353.507278][ T6018] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 353.562818][ T6017] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 353.732839][ T6017] usb 4-1: Using ep0 maxpacket: 8 [ 353.738920][ T6017] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 353.738942][ T6017] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 353.738959][ T6017] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 353.739018][ T6017] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.739052][ T6017] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 353.739069][ T6017] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.031002][ T6017] usb 4-1: GET_CAPABILITIES returned 0 [ 354.031040][ T6017] usbtmc 4-1:16.0: can't read capabilities [ 354.735107][ T6017] usb 4-1: USB disconnect, device number 39 [ 355.076239][ T6018] gspca_stv06xx: I2C: Read error writing address: -71 [ 355.090605][ T6018] usb 7-1: USB disconnect, device number 13 [ 355.490694][ T7827] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 356.425566][ T7834] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 358.545468][ T7856] program syz.2.460 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 359.775897][ T7856] netlink: 244 bytes leftover after parsing attributes in process `syz.2.460'. [ 360.081657][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.6.462'. [ 360.432872][ T6018] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 360.604608][ T6018] usb 1-1: Using ep0 maxpacket: 8 [ 360.606940][ T6018] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 360.606961][ T6018] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 360.606979][ T6018] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 360.606996][ T6018] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.607027][ T6018] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 360.607043][ T6018] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.960934][ T6018] usb 1-1: GET_CAPABILITIES returned 0 [ 360.961781][ T6018] usbtmc 1-1:16.0: can't read capabilities [ 360.992797][ T1243] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 361.171314][ T1243] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 361.171348][ T1243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.183305][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.183419][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.183504][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.183587][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.184007][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.184096][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.184181][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.184496][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.184582][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.184667][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.185101][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.185188][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.185271][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.185363][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.185712][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.185802][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.188175][ T5888] usb 1-1: USB disconnect, device number 29 [ 361.415761][ T1243] usb 3-1: config 0 descriptor?? [ 361.444395][ T1243] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 362.172855][ T5888] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 362.333132][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 362.336413][ T5888] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 362.336474][ T5888] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 362.338195][ T5888] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 362.338255][ T5888] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 362.339792][ T5888] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 362.339865][ T5888] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 362.353902][ T5888] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 362.353941][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.353966][ T5888] usb 1-1: Product: syz [ 362.353984][ T5888] usb 1-1: Manufacturer: syz [ 362.354002][ T5888] usb 1-1: SerialNumber: syz [ 362.666291][ T5888] adutux 1-1:168.0: interrupt endpoints not found [ 362.669954][ T6017] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 362.722845][ T5888] usb 1-1: USB disconnect, device number 30 [ 362.741650][ T1243] gspca_stv06xx: I2C: Read error writing address: -71 [ 362.887028][ T6017] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 362.974782][ T1243] usb 3-1: USB disconnect, device number 18 [ 363.312801][ T5888] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 364.003772][ T5888] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 364.003794][ T5888] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 364.003807][ T5888] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 364.003821][ T5888] usb 1-1: config 220 has no interface number 2 [ 364.003874][ T5888] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 364.003894][ T5888] usb 1-1: config 220 interface 0 has no altsetting 0 [ 364.003907][ T5888] usb 1-1: config 220 interface 76 has no altsetting 0 [ 364.003921][ T5888] usb 1-1: config 220 interface 1 has no altsetting 0 [ 364.008235][ T5888] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 364.008258][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.008273][ T5888] usb 1-1: Product: syz [ 364.008284][ T5888] usb 1-1: Manufacturer: syz [ 364.008296][ T5888] usb 1-1: SerialNumber: syz [ 364.361059][ T5888] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 364.361106][ T5888] uvcvideo 1-1:220.0: No valid video chain found. [ 364.361337][ T5888] usb 1-1: selecting invalid altsetting 0 [ 365.046048][ T5888] usb 1-1: selecting invalid altsetting 0 [ 365.046093][ T5888] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 365.267808][ T5888] usb 1-1: USB disconnect, device number 31 [ 365.496295][ T7909] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 365.911168][ T7903] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 366.004032][ T5888] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 366.918966][ T7903] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 366.955594][ T5888] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 366.955624][ T5888] usb 1-1: config 0 has no interface number 0 [ 366.955658][ T5888] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 366.955700][ T5888] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 366.955729][ T5888] usb 1-1: config 0 interface 255 has no altsetting 0 [ 366.955779][ T5888] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 366.955804][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.099652][ T5888] usb 1-1: config 0 descriptor?? [ 367.113492][ T5888] cp210x 1-1:0.255: cp210x converter detected [ 367.352921][ T5888] cp210x 1-1:0.255: failed to get vendor val 0x370b size 1: -121 [ 367.352965][ T5888] cp210x 1-1:0.255: querying part number failed [ 367.400595][ T5888] usb 1-1: cp210x converter now attached to ttyUSB0 [ 368.610976][ T7932] fuse: Unknown parameter 'use00000000000000000000' [ 368.730206][ T31] usb 1-1: USB disconnect, device number 32 [ 368.836141][ T7935] netlink: 28 bytes leftover after parsing attributes in process `syz.0.486'. [ 368.836168][ T7935] netlink: 'syz.0.486': attribute type 7 has an invalid length. [ 368.836178][ T7935] netlink: 'syz.0.486': attribute type 8 has an invalid length. [ 368.836187][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.486'. [ 368.881966][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 368.923445][ T31] cp210x 1-1:0.255: device disconnected [ 369.444309][ T5881] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 371.506459][ T5881] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 371.506492][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.049229][ T5881] usb 6-1: config 0 descriptor?? [ 372.159257][ T5881] usb 6-1: can't set config #0, error -71 [ 372.184850][ T5881] usb 6-1: USB disconnect, device number 6 [ 373.878338][ T58] Bluetooth: Error in BCSP hdr checksum [ 374.185668][ T6840] Bluetooth: Error in BCSP hdr checksum [ 374.482917][ T5806] Bluetooth: hci5: command 0x1003 tx timeout [ 374.486178][ T5805] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 374.807140][ T7981] ALSA: mixer_oss: invalid OSS volume '' [ 376.772833][ T6017] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 376.958905][ T6017] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 376.958938][ T6017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.034455][ T6017] usb 3-1: config 0 descriptor?? [ 377.040871][ T6017] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 378.402355][ T6017] gspca_stv06xx: I2C: Read error writing address: -71 [ 378.425824][ T6017] usb 3-1: USB disconnect, device number 19 [ 378.522810][ T44] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 379.558950][ T44] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 379.558983][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.559004][ T44] usb 7-1: Product: syz [ 379.559020][ T44] usb 7-1: Manufacturer: syz [ 379.559035][ T44] usb 7-1: SerialNumber: syz [ 379.575567][ T44] usb 7-1: config 0 descriptor?? [ 379.806860][ T44] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 379.898954][ T8015] ALSA: mixer_oss: invalid OSS volume '' [ 381.325544][ T44] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 381.540128][ T31] usb 7-1: USB disconnect, device number 14 [ 384.038271][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.038349][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.386250][ T8031] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 384.386399][ T8031] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 384.767651][ T5881] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 384.926435][ T5881] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 384.926467][ T5881] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 384.926488][ T5881] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 384.926542][ T5881] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 384.926568][ T5881] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 384.930443][ T5881] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 384.930474][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 384.930494][ T5881] usb 6-1: Product: syz [ 384.930510][ T5881] usb 6-1: Manufacturer: syz [ 384.932847][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 385.020734][ T5881] cdc_wdm 6-1:1.0: skipping garbage [ 385.020756][ T5881] cdc_wdm 6-1:1.0: skipping garbage [ 385.068828][ T5881] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 385.068853][ T5881] cdc_wdm 6-1:1.0: Unknown control protocol [ 385.083133][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 385.087096][ T9] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 385.087131][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.127301][ T9] usb 7-1: config 0 descriptor?? [ 385.147144][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 385.283086][ T44] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 385.445226][ T44] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 385.445268][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.451932][ T44] usb 1-1: config 0 descriptor?? [ 385.486469][ T44] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 385.604423][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 6 bytes [ 386.727222][ T5806] Bluetooth: hci3: command 0x0c1a tx timeout [ 386.727271][ T5806] Bluetooth: hci2: command 0x0406 tx timeout [ 387.180543][ T44] gspca_stv06xx: I2C: Read error writing address: -71 [ 387.606168][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 387.819609][ T44] usb 1-1: USB disconnect, device number 33 [ 387.880891][ T8058] delete_channel: no stack [ 388.037592][ T6017] usb 6-1: USB disconnect, device number 7 [ 388.417277][ T9] gspca_vc032x: reg_w err -71 [ 388.417294][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.417301][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.417308][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.417315][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.417322][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.417328][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.417334][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.417340][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.417346][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.417352][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.417358][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.417364][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.417370][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.417376][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.417383][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.417389][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.417395][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.417401][ T9] gspca_vc032x: Unknown sensor... [ 388.417459][ T9] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 388.420186][ T9] usb 7-1: USB disconnect, device number 15 [ 390.639626][ T8078] Can't find ip_set type [ 391.078425][ T8075] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 391.078777][ T8075] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 392.962990][ T5806] Bluetooth: hci2: command 0x0406 tx timeout [ 393.125258][ T5806] Bluetooth: hci3: command 0x0c1a tx timeout [ 393.458481][ T3096] Bluetooth: Error in BCSP hdr checksum [ 393.785190][ T6840] Bluetooth: Error in BCSP hdr checksum [ 394.022766][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 394.198177][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 394.198224][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.225418][ T9] usb 4-1: config 0 descriptor?? [ 394.283334][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 394.403041][ T5806] Bluetooth: hci5: command 0x1003 tx timeout [ 394.415300][ T5805] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 394.565186][ T5956] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 394.755606][ T5956] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 394.755637][ T5956] usb 3-1: config 0 has no interface number 0 [ 394.755671][ T5956] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 394.755714][ T5956] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 394.755744][ T5956] usb 3-1: config 0 interface 255 has no altsetting 0 [ 394.755781][ T5956] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 394.755812][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.828555][ T5956] usb 3-1: config 0 descriptor?? [ 395.454529][ T5956] cp210x 3-1:0.255: cp210x converter detected [ 395.507199][ T5956] usb 3-1: cp210x converter now attached to ttyUSB0 [ 395.972332][ T9] gspca_stv06xx: I2C: Read error writing address: -71 [ 396.036855][ T9] usb 4-1: USB disconnect, device number 40 [ 397.663942][ T8134] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 397.664083][ T8134] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 397.679487][ T9] usb 3-1: USB disconnect, device number 20 [ 397.847384][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 397.848228][ T9] cp210x 3-1:0.255: device disconnected [ 398.042835][ T5881] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 398.384573][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.384630][ T5881] usb 4-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 398.384654][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.410637][ T5881] usb 4-1: config 0 descriptor?? [ 398.777716][ T8163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 398.840449][ T1367] Bluetooth: Error in BCSP hdr checksum [ 399.073298][ T5939] Bluetooth: Error in BCSP hdr checksum [ 399.154346][ T8143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.154881][ T8143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.156631][ T5881] hid (null): invalid report_count 139821482 [ 399.162082][ T5881] razer 0003:1532:010D.0004: invalid report_count 139821482 [ 399.162098][ T5881] razer 0003:1532:010D.0004: item 0 4 1 9 parsing failed [ 399.172365][ T5881] razer 0003:1532:010D.0004: probe with driver razer failed with error -22 [ 399.464755][ T9] usb 4-1: USB disconnect, device number 41 [ 399.682916][ T5805] Bluetooth: hci3: command 0x0c1a tx timeout [ 399.682952][ T5805] Bluetooth: hci2: command 0x0406 tx timeout [ 400.482946][ T5806] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 402.192797][ T44] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 402.345251][ T44] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 402.345285][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.377322][ T44] usb 6-1: config 0 descriptor?? [ 402.408008][ T44] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 402.453679][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 403.609325][ T9] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 403.609359][ T9] usb 7-1: config 0 has no interface number 0 [ 403.609396][ T9] usb 7-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 403.609439][ T9] usb 7-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 403.609468][ T9] usb 7-1: config 0 interface 255 has no altsetting 0 [ 403.609508][ T9] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 403.609532][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.723123][ T9] usb 7-1: config 0 descriptor?? [ 403.730466][ T9] cp210x 7-1:0.255: cp210x converter detected [ 405.365228][ T8189] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 405.383084][ T8189] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 405.870792][ T8188] ubi31: attaching mtd0 [ 405.876210][ T8188] ubi31: scanning is finished [ 405.876235][ T8188] ubi31: empty MTD device detected [ 406.538699][ T9] cp210x 7-1:0.255: failed to get vendor val 0x370b size 1: -71 [ 406.538731][ T9] cp210x 7-1:0.255: querying part number failed [ 406.638619][ T9] usb 7-1: cp210x converter now attached to ttyUSB0 [ 406.666602][ T9] usb 7-1: USB disconnect, device number 16 [ 406.749581][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 406.751882][ T9] cp210x 7-1:0.255: device disconnected [ 406.918947][ T44] usb 6-1: USB disconnect, device number 8 [ 407.381814][ T8188] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 407.603637][ T5805] Bluetooth: hci2: command 0x0406 tx timeout [ 407.603699][ T8201] Bluetooth: hci3: command 0x0c1a tx timeout [ 409.510011][ T8218] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 409.767014][ T8229] delete_channel: no stack [ 410.257382][ T6018] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 410.432197][ T6018] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 410.432219][ T6018] usb 4-1: config 0 has no interface number 0 [ 410.432242][ T6018] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 410.432270][ T6018] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 410.432290][ T6018] usb 4-1: config 0 interface 255 has no altsetting 0 [ 410.432315][ T6018] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 410.432332][ T6018] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.500239][ T6018] usb 4-1: config 0 descriptor?? [ 410.515787][ T6018] cp210x 4-1:0.255: cp210x converter detected [ 410.737922][ T6018] usb 4-1: cp210x converter now attached to ttyUSB0 [ 411.102952][ T6018] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 411.267517][ T6018] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 411.267549][ T6018] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.302108][ T6018] usb 3-1: config 0 descriptor?? [ 411.316924][ T6018] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 412.801898][ T6018] gspca_stv06xx: I2C: Read error writing address: -71 [ 412.846289][ T6018] usb 3-1: USB disconnect, device number 21 [ 412.871898][ T8237] fuse: Bad value for 'fd' [ 412.978539][ T44] usb 4-1: USB disconnect, device number 42 [ 413.069134][ T44] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 413.069971][ T44] cp210x 4-1:0.255: device disconnected [ 413.650711][ T8266] delete_channel: no stack [ 416.332823][ T5881] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 416.433267][ T6018] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 416.472691][ T5881] usb 3-1: device descriptor read/64, error -71 [ 416.554101][ T8294] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 416.625628][ T6018] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.625683][ T6018] usb 7-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 416.625707][ T6018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.667508][ T6018] usb 7-1: config 0 descriptor?? [ 416.712739][ T5881] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 416.843837][ T5881] usb 3-1: device descriptor read/64, error -71 [ 416.964372][ T5881] usb usb3-port1: attempt power cycle [ 417.086264][ T8288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.086849][ T8288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.094702][ T6018] hid (null): invalid report_count 139821482 [ 417.151440][ T6018] razer 0003:1532:010D.0005: invalid report_count 139821482 [ 417.151471][ T6018] razer 0003:1532:010D.0005: item 0 4 1 9 parsing failed [ 417.179571][ T6018] razer 0003:1532:010D.0005: probe with driver razer failed with error -22 [ 417.322774][ T5881] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 417.343674][ T5881] usb 3-1: device descriptor read/8, error -71 [ 417.409637][ T8297] delete_channel: no stack [ 417.506014][ T8301] binder: 8300:8301 ioctl c0306201 200000000180 returned -14 [ 417.542739][ T31] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 417.583287][ T5881] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 417.608131][ T5881] usb 3-1: device descriptor read/8, error -71 [ 417.713227][ T5881] usb usb3-port1: unable to enumerate USB device [ 417.717397][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 417.717420][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.724382][ T31] usb 1-1: config 0 descriptor?? [ 417.781481][ T31] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 419.786538][ T8296] fuse: Bad value for 'fd' [ 419.877806][ T31] gspca_stv06xx: I2C: Read error writing address: -71 [ 419.902248][ T31] usb 1-1: USB disconnect, device number 34 [ 419.948616][ T5881] usb 7-1: USB disconnect, device number 17 [ 422.142667][ T38] audit: type=1800 audit(1760513304.942:32): pid=8321 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.600" name="/" dev="fuse" ino=3 res=0 errno=0 [ 422.507252][ T5881] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 422.637645][ T5881] usb 3-1: device descriptor read/64, error -71 [ 422.641621][ T8335] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 422.758822][ T8331] delete_channel: no stack [ 422.897789][ T5881] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 423.042790][ T5881] usb 3-1: device descriptor read/64, error -71 [ 423.120175][ T8340] netlink: 'syz.3.606': attribute type 10 has an invalid length. [ 423.369711][ T5881] usb usb3-port1: attempt power cycle [ 423.543628][ T8343] overlayfs: failed to resolve './file1': -2 [ 426.656513][ T5881] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 427.089344][ T5881] usb 6-1: config 7 has an invalid interface number: 252 but max is 0 [ 427.089366][ T5881] usb 6-1: config 7 has no interface number 0 [ 427.089389][ T5881] usb 6-1: config 7 interface 252 has no altsetting 0 [ 427.093957][ T5881] usb 6-1: string descriptor 0 read error: -22 [ 427.094150][ T5881] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 427.094181][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.512855][ T5888] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 427.679366][ T5888] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 427.679400][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.277495][ T5888] usb 3-1: config 0 descriptor?? [ 429.383642][ T5888] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 429.486718][ T994] usb 6-1: USB disconnect, device number 9 [ 429.529642][ T8368] delete_channel: no stack [ 430.549688][ T8385] overlayfs: failed to resolve './file1': -2 [ 431.151366][ T8387] fuse: Bad value for 'fd' [ 431.507759][ T5888] usb 3-1: USB disconnect, device number 29 [ 432.892299][ T8392] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 434.282756][ T44] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 434.820144][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.820198][ T44] usb 7-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 434.820222][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.842236][ T44] usb 7-1: config 0 descriptor?? [ 434.852501][ T8417] delete_channel: no stack [ 435.479674][ C1] vkms_vblank_simulate: vblank timer overrun [ 435.495154][ T8410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.497149][ T8410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.501062][ T44] hid (null): invalid report_count 139821482 [ 435.526496][ T44] razer 0003:1532:010D.0006: invalid report_count 139821482 [ 435.526523][ T44] razer 0003:1532:010D.0006: item 0 4 1 9 parsing failed [ 435.527391][ T44] razer 0003:1532:010D.0006: probe with driver razer failed with error -22 [ 435.844960][ C1] vkms_vblank_simulate: vblank timer overrun [ 436.187441][ C1] vkms_vblank_simulate: vblank timer overrun [ 436.589620][ C1] vkms_vblank_simulate: vblank timer overrun [ 436.808048][ C1] vkms_vblank_simulate: vblank timer overrun [ 436.981413][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.095955][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.262064][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.441318][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.491445][ T44] usb 7-1: USB disconnect, device number 18 [ 437.532737][ T994] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 437.711680][ T994] usb 1-1: config 0 has an invalid interface number: 46 but max is 0 [ 437.711710][ T994] usb 1-1: config 0 has no interface number 0 [ 437.711760][ T994] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 437.716559][ T994] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 437.716592][ T994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.716613][ T994] usb 1-1: Product: syz [ 437.716629][ T994] usb 1-1: Manufacturer: syz [ 437.716644][ T994] usb 1-1: SerialNumber: syz [ 437.795019][ T994] usb 1-1: config 0 descriptor?? [ 437.797094][ T8445] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 437.800496][ T994] ums-karma 1-1:0.46: USB Mass Storage device detected [ 438.113090][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'. [ 438.113119][ T8445] netlink: 20 bytes leftover after parsing attributes in process `syz.0.639'. [ 438.145651][ T994] ums-karma 1-1:0.46: probe with driver ums-karma failed with error -5 [ 438.895913][ T1367] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.898913][ T1367] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.898974][ T1367] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.899021][ T1367] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.899693][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'. [ 438.899726][ T8445] netlink: 20 bytes leftover after parsing attributes in process `syz.0.639'. [ 438.919894][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.086869][ T5881] usb 1-1: USB disconnect, device number 35 [ 439.201786][ C1] vkms_vblank_simulate: vblank timer overrun [ 440.141951][ C1] vkms_vblank_simulate: vblank timer overrun [ 441.183012][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.281242][ C1] vkms_vblank_simulate: vblank timer overrun [ 445.154107][ T8520] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 445.542923][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.542982][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.647810][ C1] vkms_vblank_simulate: vblank timer overrun [ 445.658872][ T8527] delete_channel: no stack [ 446.852747][ T44] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 447.026195][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 447.029427][ T44] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 447.029459][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.085718][ T44] usb 4-1: config 0 descriptor?? [ 447.133547][ T44] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 447.546448][ C1] vkms_vblank_simulate: vblank timer overrun [ 448.356815][ C1] vkms_vblank_simulate: vblank timer overrun [ 448.983662][ T8550] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_1 [ 449.722209][ T44] gspca_vc032x: reg_r err -32 [ 449.722229][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.722240][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.722250][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.722260][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.722270][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.722279][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.722289][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.722298][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.722308][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.722318][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.722327][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.722336][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.722346][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.722355][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.722365][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.722374][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.722383][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.722393][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 449.722402][ T44] gspca_vc032x: Unknown sensor... [ 449.722488][ T44] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 452.014798][ T5888] usb 4-1: USB disconnect, device number 43 [ 454.190012][ C0] vkms_vblank_simulate: vblank timer overrun [ 454.739745][ C0] vkms_vblank_simulate: vblank timer overrun [ 454.854713][ C0] vkms_vblank_simulate: vblank timer overrun [ 454.913599][ C0] vkms_vblank_simulate: vblank timer overrun [ 455.364462][ C0] vkms_vblank_simulate: vblank timer overrun [ 456.364585][ T5888] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 456.984338][ T5888] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 457.032942][ T5888] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 457.032986][ T5888] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 457.033006][ T5888] usb 7-1: config 0 interface 0 has no altsetting 0 [ 457.036431][ T5888] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 457.036475][ T5888] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 457.036495][ T5888] usb 7-1: config 0 interface 0 has no altsetting 0 [ 457.103215][ T5888] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 457.103268][ T5888] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 457.103287][ T5888] usb 7-1: config 0 interface 0 has no altsetting 0 [ 457.104756][ T5888] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 457.104798][ T5888] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 457.104816][ T5888] usb 7-1: config 0 interface 0 has no altsetting 0 [ 457.140297][ T5888] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 457.140361][ T5888] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 457.140390][ T5888] usb 7-1: config 0 interface 0 has no altsetting 0 [ 457.191824][ T5888] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 457.191893][ T5888] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 457.191922][ T5888] usb 7-1: config 0 interface 0 has no altsetting 0 [ 457.228825][ T5888] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 457.228889][ T5888] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 457.228918][ T5888] usb 7-1: config 0 interface 0 has no altsetting 0 [ 457.262184][ T5888] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 457.262231][ T5888] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 457.262250][ T5888] usb 7-1: config 0 interface 0 has no altsetting 0 [ 457.266748][ T5888] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 457.266770][ T5888] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 457.266786][ T5888] usb 7-1: Product: syz [ 457.266800][ T5888] usb 7-1: Manufacturer: syz [ 457.266812][ T5888] usb 7-1: SerialNumber: syz [ 457.345887][ T5888] usb 7-1: config 0 descriptor?? [ 457.356453][ T8596] misc userio: No port type given on /dev/userio [ 457.387836][ T5888] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 457.879926][ C0] usb 7-1: yurex_control_callback - control failed: -71 [ 457.913845][ T5889] usb 7-1: USB disconnect, device number 19 [ 458.109880][ T5889] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 459.135609][ T8608] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 460.283035][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.412684][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.085936][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.126672][ T8626] input: syz1 as /devices/virtual/input/input6 [ 463.728603][ T8639] misc userio: No port type given on /dev/userio [ 465.462763][ T6020] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 465.635993][ T6020] usb 1-1: Using ep0 maxpacket: 32 [ 465.744565][ T6020] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 465.744668][ T6020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.748748][ T6020] usb 1-1: config 0 descriptor?? [ 465.784174][ T6020] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 465.938227][ T8664] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 466.357950][ T8669] block nbd3: shutting down sockets [ 466.673286][ T8375] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 466.838541][ T8375] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 466.838631][ T8375] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 466.838664][ T8375] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 466.838680][ T8375] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.923093][ T8375] usbtmc 3-1:16.0: bulk endpoints not found [ 467.633402][ T6020] gspca_vc032x: reg_r err -32 [ 467.633419][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.633431][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.633442][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.633450][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.633460][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.633470][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.633480][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.633489][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.633498][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.633507][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.633517][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.633527][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.633537][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.633547][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.633556][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.633566][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.633575][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.633585][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.633594][ T6020] gspca_vc032x: Unknown sensor... [ 467.633686][ T6020] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 467.858816][ T8678] misc userio: No port type given on /dev/userio [ 468.639958][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.914603][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.963680][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.340458][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.668768][ T31] usb 3-1: USB disconnect, device number 30 [ 469.757715][ T6020] usb 1-1: USB disconnect, device number 36 [ 470.092766][ T5888] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 470.112984][ C1] vkms_vblank_simulate: vblank timer overrun [ 470.344949][ T8708] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 470.353152][ T5888] usb 7-1: Using ep0 maxpacket: 32 [ 470.356370][ T5888] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 470.356404][ T5888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.466940][ T5888] usb 7-1: config 0 descriptor?? [ 470.496421][ T5888] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 470.906404][ T8710] block nbd0: shutting down sockets [ 471.409894][ T8717] misc userio: No port type given on /dev/userio [ 472.314806][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.917998][ T5888] gspca_vc032x: reg_r err -110 [ 472.918021][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.918034][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.918044][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.918055][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.918065][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.918075][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.918085][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.918095][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.918105][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.918115][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.918124][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.918134][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.918144][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.918153][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.918163][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.918173][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.918182][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.918192][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 472.918202][ T5888] gspca_vc032x: Unknown sensor... [ 472.918294][ T5888] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 473.035700][ C1] vkms_vblank_simulate: vblank timer overrun [ 473.545088][ T1243] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 473.652730][ T8375] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 473.693012][ T1243] usb 1-1: Using ep0 maxpacket: 32 [ 473.696483][ T1243] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 473.696516][ T1243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.707403][ T1243] usb 1-1: config 0 descriptor?? [ 473.805437][ T8375] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 473.805505][ T8375] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 473.805551][ T8375] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 473.805578][ T8375] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.225125][ T8375] usbtmc 6-1:16.0: bulk endpoints not found [ 474.280454][ T1243] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 474.634412][ T44] usb 7-1: USB disconnect, device number 20 [ 474.711064][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.728'. [ 474.732487][ T8742] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 476.276692][ T1243] gspca_vc032x: reg_r err -32 [ 476.276711][ T1243] gspca_vc032x: I2c Bus Busy Wait 00 [ 476.276722][ T1243] gspca_vc032x: I2c Bus Busy Wait 00 [ 476.276732][ T1243] gspca_vc032x: I2c Bus Busy Wait 00 [ 476.276741][ T1243] gspca_vc032x: I2c Bus Busy Wait 00 [ 476.276751][ T1243] gspca_vc032x: I2c Bus Busy Wait 00 [ 476.276760][ T1243] gspca_vc032x: I2c Bus Busy Wait 00 [ 476.276770][ T1243] gspca_vc032x: I2c Bus Busy Wait 00 [ 476.276779][ T1243] gspca_vc032x: I2c Bus Busy Wait 00 [ 476.276789][ T1243] gspca_vc032x: I2c Bus Busy Wait 00 [ 476.276799][ T1243] gspca_vc032x: I2c Bus Busy Wait 00 [ 476.276809][ T1243] gspca_vc032x: I2c Bus Busy Wait 00 [ 476.276818][ T1243] gspca_vc032x: I2c Bus Busy Wait 00 [ 476.276827][ T1243] gspca_vc032x: I2c Bus Busy Wait 00 [ 476.276837][ T1243] gspca_vc032x: I2c Bus Busy Wait 00 [ 476.276847][ T1243] gspca_vc032x: I2c Bus Busy Wait 00 [ 476.276857][ T1243] gspca_vc032x: I2c Bus Busy Wait 00 [ 476.276866][ T1243] gspca_vc032x: I2c Bus Busy Wait 00 [ 476.276875][ T1243] gspca_vc032x: I2c Bus Busy Wait 00 [ 476.276885][ T1243] gspca_vc032x: Unknown sensor... [ 476.276971][ T1243] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 477.197372][ T8375] usb 6-1: USB disconnect, device number 10 [ 477.365915][ T6020] usb 1-1: USB disconnect, device number 37 [ 480.520522][ T8788] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 481.092800][ T5889] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 481.192703][ T6020] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 481.274960][ T5889] usb 7-1: Using ep0 maxpacket: 32 [ 481.278342][ T5889] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 481.278371][ T5889] usb 7-1: config 0 has no interface number 0 [ 481.278425][ T5889] usb 7-1: config 0 interface 184 has no altsetting 0 [ 481.298852][ T5889] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 481.298890][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.298915][ T5889] usb 7-1: Product: syz [ 481.298933][ T5889] usb 7-1: Manufacturer: syz [ 481.298950][ T5889] usb 7-1: SerialNumber: syz [ 481.342746][ T6020] usb 6-1: Using ep0 maxpacket: 8 [ 481.345074][ T6020] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 481.345094][ T6020] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 481.345112][ T6020] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 481.345129][ T6020] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.345160][ T6020] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 481.345176][ T6020] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.424729][ T5889] usb 7-1: config 0 descriptor?? [ 481.460613][ T5889] smsc75xx v1.0.0 [ 481.562645][ T6020] usb 6-1: GET_CAPABILITIES returned 0 [ 481.562699][ T6020] usbtmc 6-1:16.0: can't read capabilities [ 481.767742][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 481.767839][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 481.767912][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 481.767965][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 481.769748][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 481.769812][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 481.769861][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 481.770117][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 481.770168][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 481.770216][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 481.770264][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 481.770517][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 481.770566][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 481.770614][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 481.770662][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 481.770924][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 481.784394][ T6020] usb 6-1: USB disconnect, device number 11 [ 482.238901][ T5889] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 482.239007][ T5889] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 482.583246][ T5889] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 482.583352][ T5889] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 482.583933][ T5889] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 482.584570][ T5889] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 482.738901][ T5889] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32 [ 483.782720][ T8375] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 483.869447][ T5888] usb 7-1: USB disconnect, device number 21 [ 483.933776][ T8375] usb 4-1: Using ep0 maxpacket: 32 [ 483.936169][ T8375] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 483.936192][ T8375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.974583][ T8375] usb 4-1: config 0 descriptor?? [ 484.023423][ T8375] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 484.112746][ T6020] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 485.172967][ T8375] gspca_vc032x: reg_r err -110 [ 485.172989][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.173000][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.173010][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.173020][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.173029][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.173038][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.173047][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.173056][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.173065][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.173074][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.173084][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.173092][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.173102][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.173111][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.173120][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.173129][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.173138][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.173147][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 485.173164][ T8375] gspca_vc032x: Unknown sensor... [ 485.173251][ T8375] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 485.193433][ T6020] usb 1-1: Using ep0 maxpacket: 32 [ 485.203875][ T6020] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 485.203902][ T6020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.258389][ T6020] usb 1-1: config 0 descriptor?? [ 485.402354][ T6020] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 485.517279][ T6020] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 485.771647][ T6020] usb 1-1: USB disconnect, device number 38 [ 486.864127][ T5889] usb 4-1: USB disconnect, device number 44 [ 488.724727][ T8869] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 489.548057][ T8880] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 489.934170][ C0] vkms_vblank_simulate: vblank timer overrun [ 489.938079][ T8375] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 490.082688][ T8375] usb 1-1: Using ep0 maxpacket: 32 [ 490.085485][ T8375] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 490.085514][ T8375] usb 1-1: config 0 has no interface number 0 [ 490.085567][ T8375] usb 1-1: config 0 interface 184 has no altsetting 0 [ 490.089213][ T8375] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 490.089244][ T8375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.089266][ T8375] usb 1-1: Product: syz [ 490.089282][ T8375] usb 1-1: Manufacturer: syz [ 490.089298][ T8375] usb 1-1: SerialNumber: syz [ 490.202807][ T8375] usb 1-1: config 0 descriptor?? [ 490.207733][ T8375] smsc75xx v1.0.0 [ 490.391272][ C0] vkms_vblank_simulate: vblank timer overrun [ 490.810649][ C0] vkms_vblank_simulate: vblank timer overrun [ 490.984557][ T8891] netlink: 28 bytes leftover after parsing attributes in process `syz.5.760'. [ 490.984587][ T8891] netlink: 'syz.5.760': attribute type 7 has an invalid length. [ 490.984598][ T8891] netlink: 'syz.5.760': attribute type 8 has an invalid length. [ 490.984607][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.760'. [ 491.027581][ T8375] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 491.027611][ T8375] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 491.028345][ T8375] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 491.028372][ T8375] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 491.028393][ T8375] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 491.028412][ T8375] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 491.028633][ T8375] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 491.061454][ T8891] syz_tun: entered promiscuous mode [ 491.230041][ T8891] syz_tun: left promiscuous mode [ 491.735321][ T8896] block nbd3: shutting down sockets [ 492.436565][ C0] vkms_vblank_simulate: vblank timer overrun [ 492.498527][ T6020] usb 1-1: USB disconnect, device number 39 [ 492.512804][ T8375] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 492.662944][ T8375] usb 4-1: Using ep0 maxpacket: 16 [ 492.665761][ T8375] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.665794][ T8375] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.665818][ T8375] usb 4-1: config 0 interface 0 has no altsetting 0 [ 492.665862][ T8375] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 492.665888][ T8375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.039610][ C0] vkms_vblank_simulate: vblank timer overrun [ 493.713186][ T8375] usb 4-1: config 0 descriptor?? [ 494.251407][ T8912] usb usb5: usbfs: process 8912 (syz.0.766) did not claim interface 0 before use [ 495.286855][ T8375] usbhid 4-1:0.0: can't add hid device: -71 [ 495.286949][ T8375] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 495.310000][ T8375] usb 4-1: USB disconnect, device number 45 [ 497.331112][ T8934] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 497.970566][ T8949] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 498.042751][ T1243] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 498.132849][ T5889] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 498.323667][ T5889] usb 7-1: Using ep0 maxpacket: 32 [ 498.325607][ T5889] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 498.325627][ T5889] usb 7-1: config 0 has no interface number 0 [ 498.325661][ T5889] usb 7-1: config 0 interface 184 has no altsetting 0 [ 498.328157][ T5889] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 498.328187][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.328203][ T5889] usb 7-1: Product: syz [ 498.328213][ T5889] usb 7-1: Manufacturer: syz [ 498.328223][ T5889] usb 7-1: SerialNumber: syz [ 498.436765][ T5889] usb 7-1: config 0 descriptor?? [ 498.449526][ T5889] smsc75xx v1.0.0 [ 498.482844][ T1243] usb 6-1: Using ep0 maxpacket: 8 [ 498.485594][ T1243] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 498.485615][ T1243] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 498.485633][ T1243] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 498.485693][ T1243] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 498.485726][ T1243] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 498.485743][ T1243] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.788927][ T1243] usb 6-1: GET_CAPABILITIES returned 0 [ 498.788979][ T1243] usbtmc 6-1:16.0: can't read capabilities [ 499.004247][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.004310][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.004601][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.004652][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.005258][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.005328][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.005378][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.006014][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.006066][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.008895][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.008975][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.009050][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.010045][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.010099][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.010366][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.010423][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.104664][ T5889] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 499.104697][ T5889] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 499.107536][ T5889] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 499.107559][ T5889] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 499.107573][ T5889] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 499.107587][ T5889] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 499.107795][ T5889] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32 [ 499.247619][ T8375] usb 6-1: USB disconnect, device number 12 [ 500.192795][ T8375] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 500.342712][ T8375] usb 6-1: Using ep0 maxpacket: 32 [ 500.345031][ T8375] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 500.345052][ T8375] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.391699][ T8375] usb 6-1: config 0 descriptor?? [ 500.452084][ T8375] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 500.784249][ T5888] usb 7-1: USB disconnect, device number 22 [ 503.600803][ T8375] gspca_vc032x: reg_r err -32 [ 503.600822][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.600834][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.600843][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.600853][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.600863][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.600873][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.600882][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.600891][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.600900][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.600909][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.600919][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.600928][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.600937][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.600946][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.600954][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.600963][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.600980][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.600989][ T8375] gspca_vc032x: I2c Bus Busy Wait 00 [ 503.600997][ T8375] gspca_vc032x: Unknown sensor... [ 503.601081][ T8375] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 504.831541][ T6020] usb 6-1: USB disconnect, device number 13 [ 505.612128][ T9012] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 505.932713][ T6020] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 506.082818][ T6020] usb 4-1: Using ep0 maxpacket: 32 [ 506.085684][ T6020] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 506.085711][ T6020] usb 4-1: config 0 has no interface number 0 [ 506.085766][ T6020] usb 4-1: config 0 interface 184 has no altsetting 0 [ 506.089440][ T6020] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 506.089461][ T6020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.089476][ T6020] usb 4-1: Product: syz [ 506.089487][ T6020] usb 4-1: Manufacturer: syz [ 506.089497][ T6020] usb 4-1: SerialNumber: syz [ 506.174877][ T6020] usb 4-1: config 0 descriptor?? [ 506.257298][ T6020] smsc75xx v1.0.0 [ 506.796919][ T6020] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 506.796951][ T6020] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 506.796971][ T6020] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 506.797185][ T6020] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 506.891795][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.891901][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.352738][ T5889] usb 4-1: USB disconnect, device number 46 [ 517.084464][ T9035] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 517.872722][ T6020] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 518.042952][ T6020] usb 1-1: Using ep0 maxpacket: 32 [ 518.045324][ T6020] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 518.045360][ T6020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.152419][ T6020] usb 1-1: config 0 descriptor?? [ 518.246600][ T6020] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 520.154604][ T6020] gspca_vc032x: reg_r err -32 [ 520.154624][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.154635][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.154645][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.154655][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.154664][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.154674][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.154684][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.154694][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.154703][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.154713][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.154723][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.154733][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.154743][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.154752][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.154762][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.154771][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.154781][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.154790][ T6020] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.154799][ T6020] gspca_vc032x: Unknown sensor... [ 520.154888][ T6020] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 521.465523][ T8375] usb 1-1: USB disconnect, device number 40 [ 522.186519][ T9071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 523.054081][ T5805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 523.087934][ T5805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 523.100356][ T5805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 523.101746][ T5805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 523.112788][ T5805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 525.203175][ T5805] Bluetooth: hci5: command tx timeout [ 526.759110][ T8201] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 526.774733][ T8201] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 526.779460][ T8201] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 526.781677][ T8201] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 526.783896][ T8201] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 527.282673][ T8201] Bluetooth: hci5: command tx timeout [ 528.882694][ T8201] Bluetooth: hci6: command tx timeout [ 529.362878][ T8201] Bluetooth: hci5: command tx timeout [ 530.964603][ T8201] Bluetooth: hci6: command tx timeout [ 531.442936][ T8201] Bluetooth: hci5: command tx timeout [ 533.046300][ T8201] Bluetooth: hci6: command tx timeout [ 535.133377][ T8201] Bluetooth: hci6: command tx timeout [ 535.862784][ T1261] ================================================================== [ 535.862802][ T1261] BUG: KASAN: slab-use-after-free in handle_tx+0x466/0x610 [ 535.862833][ T1261] Read of size 1 at addr ffff888049c0f480 by task aoe_tx0/1261 [ 535.862851][ T1261] [ 535.862875][ T1261] CPU: 1 UID: 0 PID: 1261 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 535.862899][ T1261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 535.862922][ T1261] Call Trace: [ 535.862934][ T1261] [ 535.862945][ T1261] dump_stack_lvl+0x189/0x250 [ 535.862972][ T1261] ? __virt_addr_valid+0x1c8/0x5c0 [ 535.862996][ T1261] ? rcu_is_watching+0x15/0xb0 [ 535.863024][ T1261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 535.863049][ T1261] ? rcu_is_watching+0x15/0xb0 [ 535.863075][ T1261] ? lock_release+0x4b/0x3e0 [ 535.863102][ T1261] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 535.863139][ T1261] ? __virt_addr_valid+0x1c8/0x5c0 [ 535.863165][ T1261] ? __virt_addr_valid+0x4a5/0x5c0 [ 535.863193][ T1261] print_report+0xca/0x240 [ 535.863224][ T1261] ? handle_tx+0x466/0x610 [ 535.863242][ T1261] kasan_report+0x118/0x150 [ 535.863268][ T1261] ? handle_tx+0x466/0x610 [ 535.863293][ T1261] handle_tx+0x466/0x610 [ 535.863321][ T1261] dev_hard_start_xmit+0x2f0/0x870 [ 535.863354][ T1261] __dev_queue_xmit+0x1b50/0x3b70 [ 535.863382][ T1261] ? __dev_queue_xmit+0x26f/0x3b70 [ 535.863408][ T1261] ? do_raw_spin_lock+0x121/0x290 [ 535.863446][ T1261] ? __pfx___dev_queue_xmit+0x10/0x10 [ 535.863468][ T1261] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 535.863503][ T1261] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.863537][ T1261] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 535.863571][ T1261] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 535.863607][ T1261] ? __lock_acquire+0xab9/0xd20 [ 535.863632][ T1261] ? rt_mutex_slowunlock+0x493/0x8a0 [ 535.863665][ T1261] ? reacquire_held_locks+0x127/0x1d0 [ 535.863692][ T1261] ? rt_spin_lock+0x1c1/0x3e0 [ 535.863720][ T1261] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 535.863750][ T1261] ? rt_spin_unlock+0x150/0x200 [ 535.863779][ T1261] ? rt_spin_unlock+0x161/0x200 [ 535.863808][ T1261] tx+0x6b/0x190 [ 535.863840][ T1261] ? __pfx_tx+0x10/0x10 [ 535.863871][ T1261] kthread+0x1d0/0x3e0 [ 535.863906][ T1261] ? __pfx_kthread+0x10/0x10 [ 535.863936][ T1261] ? __pfx_default_wake_function+0x10/0x10 [ 535.863966][ T1261] ? __kthread_parkme+0x7b/0x200 [ 535.863988][ T1261] ? __kthread_parkme+0x1a1/0x200 [ 535.864014][ T1261] kthread+0x711/0x8a0 [ 535.864040][ T1261] ? __pfx_kthread+0x10/0x10 [ 535.864069][ T1261] ? __pfx_kthread+0x10/0x10 [ 535.864092][ T1261] ? rt_spin_unlock+0x150/0x200 [ 535.864123][ T1261] ? rt_spin_unlock+0x161/0x200 [ 535.864148][ T1261] ? __pfx_kthread+0x10/0x10 [ 535.864173][ T1261] ret_from_fork+0x4bc/0x870 [ 535.864207][ T1261] ? __pfx_ret_from_fork+0x10/0x10 [ 535.864245][ T1261] ? __switch_to_asm+0x39/0x70 [ 535.864273][ T1261] ? __switch_to_asm+0x33/0x70 [ 535.864302][ T1261] ? __pfx_kthread+0x10/0x10 [ 535.864327][ T1261] ret_from_fork_asm+0x1a/0x30 [ 535.864367][ T1261] [ 535.864375][ T1261] [ 535.864385][ T1261] Allocated by task 6511: [ 535.864395][ T1261] kasan_save_track+0x3e/0x80 [ 535.864413][ T1261] __kasan_kmalloc+0x93/0xb0 [ 535.864431][ T1261] __kmalloc_cache_noprof+0x1ef/0x6c0 [ 535.864451][ T1261] alloc_tty_struct+0xa6/0x7c0 [ 535.864472][ T1261] tty_init_dev+0x59/0x4d0 [ 535.864491][ T1261] tty_open+0x5b2/0xd10 [ 535.864516][ T1261] chrdev_open+0x4cf/0x5e0 [ 535.864536][ T1261] do_dentry_open+0x9b1/0x1350 [ 535.864558][ T1261] vfs_open+0x3b/0x350 [ 535.864579][ T1261] path_openat+0x2ef1/0x3840 [ 535.864605][ T1261] do_filp_open+0x1fa/0x410 [ 535.864630][ T1261] do_sys_openat2+0x121/0x1c0 [ 535.864653][ T1261] __x64_sys_openat+0x138/0x170 [ 535.864683][ T1261] do_syscall_64+0xfa/0xfa0 [ 535.864714][ T1261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.864733][ T1261] [ 535.864738][ T1261] Freed by task 8375: [ 535.864747][ T1261] kasan_save_track+0x3e/0x80 [ 535.864763][ T1261] __kasan_save_free_info+0x46/0x50 [ 535.864789][ T1261] __kasan_slab_free+0x5c/0x80 [ 535.864806][ T1261] kfree+0x197/0x950 [ 535.864834][ T1261] process_scheduled_works+0xae1/0x17b0 [ 535.864864][ T1261] worker_thread+0x8a0/0xda0 [ 535.864880][ T1261] kthread+0x711/0x8a0 [ 535.864900][ T1261] ret_from_fork+0x4bc/0x870 [ 535.864928][ T1261] ret_from_fork_asm+0x1a/0x30 [ 535.864953][ T1261] [ 535.864958][ T1261] Last potentially related work creation: [ 535.864965][ T1261] kasan_save_stack+0x3e/0x60 [ 535.864996][ T1261] kasan_record_aux_stack+0xbd/0xd0 [ 535.865021][ T1261] insert_work+0x3d/0x330 [ 535.865047][ T1261] __queue_work+0xd63/0x1010 [ 535.865064][ T1261] queue_work_on+0x181/0x270 [ 535.865081][ T1261] tty_release_struct+0xb8/0xd0 [ 535.865102][ T1261] tty_release+0xcb6/0x1650 [ 535.865123][ T1261] __fput+0x45b/0xa80 [ 535.865145][ T1261] task_work_run+0x1d4/0x260 [ 535.865169][ T1261] do_exit+0x6b5/0x2300 [ 535.865190][ T1261] do_group_exit+0x21c/0x2d0 [ 535.865213][ T1261] get_signal+0x125d/0x1310 [ 535.865240][ T1261] arch_do_signal_or_restart+0xa0/0x790 [ 535.865267][ T1261] exit_to_user_mode_loop+0x72/0x130 [ 535.865285][ T1261] do_syscall_64+0x2bd/0xfa0 [ 535.865315][ T1261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.865334][ T1261] [ 535.865338][ T1261] The buggy address belongs to the object at ffff888049c0f000 [ 535.865338][ T1261] which belongs to the cache kmalloc-cg-2k of size 2048 [ 535.865356][ T1261] The buggy address is located 1152 bytes inside of [ 535.865356][ T1261] freed 2048-byte region [ffff888049c0f000, ffff888049c0f800) [ 535.865377][ T1261] [ 535.865383][ T1261] The buggy address belongs to the physical page: [ 535.865415][ T1261] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888049c0a000 pfn:0x49c08 [ 535.865437][ T1261] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 535.865453][ T1261] memcg:ffff88805cc39581 [ 535.865462][ T1261] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 535.865484][ T1261] page_type: f5(slab) [ 535.865503][ T1261] raw: 0080000000000240 ffff88813ff303c0 ffffea0000d31610 ffffea000072d410 [ 535.865521][ T1261] raw: ffff888049c0a000 0000000000080007 00000000f5000000 ffff88805cc39581 [ 535.865540][ T1261] head: 0080000000000240 ffff88813ff303c0 ffffea0000d31610 ffffea000072d410 [ 535.865558][ T1261] head: ffff888049c0a000 0000000000080007 00000000f5000000 ffff88805cc39581 [ 535.865576][ T1261] head: 0080000000000003 ffffea0001270201 00000000ffffffff 00000000ffffffff [ 535.865593][ T1261] head: 00000007f06416b1 0000000000000000 00000000ffffffff 0000000000000008 [ 535.865604][ T1261] page dumped because: kasan: bad access detected [ 535.865617][ T1261] page_owner tracks the page as allocated [ 535.865626][ T1261] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6224, tgid 6224 (syz-executor), ts 185533102723, free_ts 185532010409 [ 535.865668][ T1261] post_alloc_hook+0x240/0x2a0 [ 535.865687][ T1261] get_page_from_freelist+0x28c0/0x2960 [ 535.865710][ T1261] __alloc_frozen_pages_noprof+0x181/0x370 [ 535.865751][ T1261] alloc_pages_mpol+0xd1/0x380 [ 535.865772][ T1261] allocate_slab+0x96/0x3a0 [ 535.865797][ T1261] ___slab_alloc+0xb12/0x13f0 [ 535.865820][ T1261] __slab_alloc+0xc6/0x1f0 [ 535.865842][ T1261] __kmalloc_noprof+0x14b/0x7d0 [ 535.865859][ T1261] __register_sysctl_table+0x72/0x1340 [ 535.865888][ T1261] __devinet_sysctl_register+0x37f/0x470 [ 535.865908][ T1261] devinet_sysctl_register+0x187/0x200 [ 535.865927][ T1261] inetdev_event+0xef2/0x15b0 [ 535.865946][ T1261] notifier_call_chain+0x1b6/0x3e0 [ 535.865964][ T1261] netif_change_name+0x5e5/0x990 [ 535.865987][ T1261] do_setlink+0x9f6/0x41c0 [ 535.866014][ T1261] rtnl_newlink+0x1619/0x1c80 [ 535.866039][ T1261] page last free pid 6224 tgid 6224 stack trace: [ 535.866051][ T1261] __free_frozen_pages+0xfb6/0x1140 [ 535.866071][ T1261] __slab_free+0x2c6/0x370 [ 535.866096][ T1261] qlist_free_all+0x97/0x140 [ 535.866124][ T1261] kasan_quarantine_reduce+0x148/0x160 [ 535.866154][ T1261] __kasan_slab_alloc+0x22/0x80 [ 535.866171][ T1261] kmem_cache_alloc_node_noprof+0x23b/0x6e0 [ 535.866202][ T1261] __alloc_skb+0x112/0x2d0 [ 535.866228][ T1261] inet_netconf_notify_devconf+0x173/0x240 [ 535.866247][ T1261] inetdev_event+0xebf/0x15b0 [ 535.866266][ T1261] notifier_call_chain+0x1b6/0x3e0 [ 535.866283][ T1261] netif_change_name+0x5e5/0x990 [ 535.866305][ T1261] do_setlink+0x9f6/0x41c0 [ 535.866331][ T1261] rtnl_newlink+0x1619/0x1c80 [ 535.866356][ T1261] rtnetlink_rcv_msg+0x7cf/0xb70 [ 535.866381][ T1261] netlink_rcv_skb+0x208/0x470 [ 535.866406][ T1261] netlink_unicast+0x846/0xa10 [ 535.866429][ T1261] [ 535.866434][ T1261] Memory state around the buggy address: [ 535.866445][ T1261] ffff888049c0f380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 535.866460][ T1261] ffff888049c0f400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 535.866475][ T1261] >ffff888049c0f480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 535.866487][ T1261] ^ [ 535.866497][ T1261] ffff888049c0f500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 535.866512][ T1261] ffff888049c0f580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 535.866524][ T1261] ================================================================== [ 535.866549][ T1261] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 535.866565][ T1261] CPU: 1 UID: 0 PID: 1261 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 535.866588][ T1261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 535.866601][ T1261] Call Trace: [ 535.866609][ T1261] [ 535.866617][ T1261] dump_stack_lvl+0x99/0x250 [ 535.866643][ T1261] ? __asan_memcpy+0x40/0x70 [ 535.866681][ T1261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 535.866706][ T1261] ? __pfx__printk+0x10/0x10 [ 535.866741][ T1261] vpanic+0x237/0x6d0 [ 535.866762][ T1261] ? __pfx_vpanic+0x10/0x10 [ 535.866788][ T1261] panic+0xb9/0xc0 [ 535.866808][ T1261] ? __pfx_panic+0x10/0x10 [ 535.866826][ T1261] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 535.866862][ T1261] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 535.866899][ T1261] ? is_module_address+0x17/0xf0 [ 535.866932][ T1261] ? handle_tx+0x466/0x610 [ 535.866951][ T1261] check_panic_on_warn+0x89/0xb0 [ 535.866980][ T1261] ? handle_tx+0x466/0x610 [ 535.866999][ T1261] end_report+0x78/0x160 [ 535.867022][ T1261] kasan_report+0x129/0x150 [ 535.867047][ T1261] ? handle_tx+0x466/0x610 [ 535.867072][ T1261] handle_tx+0x466/0x610 [ 535.867101][ T1261] dev_hard_start_xmit+0x2f0/0x870 [ 535.867133][ T1261] __dev_queue_xmit+0x1b50/0x3b70 [ 535.867162][ T1261] ? __dev_queue_xmit+0x26f/0x3b70 [ 535.867188][ T1261] ? do_raw_spin_lock+0x121/0x290 [ 535.867227][ T1261] ? __pfx___dev_queue_xmit+0x10/0x10 [ 535.867248][ T1261] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 535.867281][ T1261] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.867314][ T1261] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 535.867348][ T1261] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 535.867385][ T1261] ? __lock_acquire+0xab9/0xd20 [ 535.867410][ T1261] ? rt_mutex_slowunlock+0x493/0x8a0 [ 535.867438][ T1261] ? reacquire_held_locks+0x127/0x1d0 [ 535.867464][ T1261] ? rt_spin_lock+0x1c1/0x3e0 [ 535.867494][ T1261] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 535.867525][ T1261] ? rt_spin_unlock+0x150/0x200 [ 535.867555][ T1261] ? rt_spin_unlock+0x161/0x200 [ 535.867584][ T1261] tx+0x6b/0x190 [ 535.867616][ T1261] ? __pfx_tx+0x10/0x10 [ 535.867648][ T1261] kthread+0x1d0/0x3e0 [ 535.867688][ T1261] ? __pfx_kthread+0x10/0x10 [ 535.867717][ T1261] ? __pfx_default_wake_function+0x10/0x10 [ 535.867746][ T1261] ? __kthread_parkme+0x7b/0x200 [ 535.867767][ T1261] ? __kthread_parkme+0x1a1/0x200 [ 535.867793][ T1261] kthread+0x711/0x8a0 [ 535.867819][ T1261] ? __pfx_kthread+0x10/0x10 [ 535.867848][ T1261] ? __pfx_kthread+0x10/0x10 [ 535.867871][ T1261] ? rt_spin_unlock+0x150/0x200 [ 535.867900][ T1261] ? rt_spin_unlock+0x161/0x200 [ 535.867927][ T1261] ? __pfx_kthread+0x10/0x10 [ 535.867953][ T1261] ret_from_fork+0x4bc/0x870 [ 535.867987][ T1261] ? __pfx_ret_from_fork+0x10/0x10 [ 535.868024][ T1261] ? __switch_to_asm+0x39/0x70 [ 535.868051][ T1261] ? __switch_to_asm+0x33/0x70 [ 535.868080][ T1261] ? __pfx_kthread+0x10/0x10 [ 535.868105][ T1261] ret_from_fork_asm+0x1a/0x30 [ 535.868145][ T1261] [ 535.868495][ T1261] Kernel Offset: disabled