last executing test programs: 7m6.336058745s ago: executing program 3 (id=787): r0 = socket$inet(0x2, 0x3, 0x32) unshare(0x8000280) r1 = syz_clone(0x100000, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0xff07) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='ip6_vti0\x00', 0x10) r3 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r3, 0x0, 0x0, 0x4082c, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) 7m6.297071525s ago: executing program 3 (id=788): mkdir(&(0x7f0000000400)='./file0\x00', 0x3f) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x8, 0x1, 0x3a4, 0x3ff}, {0x7, 0x7, 0xa, 0x5}}}, &(0x7f0000000000), 0x0) 7m6.201347527s ago: executing program 3 (id=789): clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x6, 0x2000800, 0x0, 0x0, 0x59, 0xb, 0x3b9ac9ff}) 7m6.064741067s ago: executing program 3 (id=790): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='g\t', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 7m6.005699343s ago: executing program 3 (id=791): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x20000, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000140000000800200007001e0018000180140002006e657464657673696d3000000000000008001500000000020800130000000200080014"], 0x4c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x20000, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000140000000800200007001e0018000180140002006e657464657673696d3000000000000008001500000000020800130000000200080014"], 0x4c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000940)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x10}, 0x1c, &(0x7f0000000480)}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @local, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000140)="81", 0x1}], 0x1}}], 0x2, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000000440)=0x74523b94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r3, &(0x7f0000000140)=ANY=[], 0xff2e) (async) write$binfmt_aout(r3, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x3, 0x3, 0x0, 0x16, "b0bfac0000000003000018bfff4000"}) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x3, 0x3, 0x0, 0x16, "b0bfac0000000003000018bfff4000"}) syz_open_pts(r3, 0x201) (async) r4 = syz_open_pts(r3, 0x201) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000003c0)=0xff) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000003c0)=0xff) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x1}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x1}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f00000011c0)=ANY=[@ANYBLOB="8704040000000000fc02000000619cc0694d00000000000000ed"], 0x28) write(r5, &(0x7f0000000200)='md0\n\x00', 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/md0\x00', 0x40542, 0x1) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$cont(0x7, r8, 0x7, 0x80) fcntl$lock(r6, 0x6, &(0x7f00000001c0)={0x2, 0x2, 0xfff, 0x9, r8}) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f0000000280)="b8c44200000f23c00f21f83502000d000f23f80f01cbf30f53080fc77128f3ab66f4b9a20a0000b800000000ba000000800f30b9c80b00000f32b8a40000000f23c00f21f835030001000f23f80f20c035000000800f22c0", 0x58}], 0x1, 0x8, &(0x7f0000000380)=[@cstype0={0x4, 0x3}], 0x1) ioctl(r7, 0x40480923, &(0x7f0000000300)="000000000000000000000000000000000a000000000400000200000002000000000000000100"/54) ioctl(r7, 0x932, &(0x7f0000000400)="0000000001000000000000000000000006000000") (async) ioctl(r7, 0x932, &(0x7f0000000400)="0000000001000000000000000000000006000000") 7m5.481728337s ago: executing program 3 (id=795): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xffce, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x5, 0x2, 0x0, 0x9, 0x14, "7a76f5c90257452ef37e9832612e2752ca91cd"}) sendmsg$nl_netfilter(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0xa4, 0x8, 0x9, 0x201, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x6}, [@typed={0xc, 0xd3, 0x0, 0x0, @u64=0x7}, @typed={0xc, 0x14c, 0x0, 0x0, @u64=0x8}, @nested={0x20, 0x11c, 0x0, 0x1, [@typed={0x14, 0xb0, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x25}}, @typed={0x8, 0x34, 0x0, 0x0, @u32=0x4}]}, @generic="01791efb804b81ba1e22088f0bbd1507a9a3263990d22b24f7fd34c4c5083a52c43b3bb69bb0fb846402171d81c113b3cd17c4160839f8da7638e49c646a", @typed={0x4, 0xd}, @typed={0x14, 0x89, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3e}}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc0802}, 0x855) 7m5.03603045s ago: executing program 32 (id=795): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xffce, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x5, 0x2, 0x0, 0x9, 0x14, "7a76f5c90257452ef37e9832612e2752ca91cd"}) sendmsg$nl_netfilter(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0xa4, 0x8, 0x9, 0x201, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x6}, [@typed={0xc, 0xd3, 0x0, 0x0, @u64=0x7}, @typed={0xc, 0x14c, 0x0, 0x0, @u64=0x8}, @nested={0x20, 0x11c, 0x0, 0x1, [@typed={0x14, 0xb0, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x25}}, @typed={0x8, 0x34, 0x0, 0x0, @u32=0x4}]}, @generic="01791efb804b81ba1e22088f0bbd1507a9a3263990d22b24f7fd34c4c5083a52c43b3bb69bb0fb846402171d81c113b3cd17c4160839f8da7638e49c646a", @typed={0x4, 0xd}, @typed={0x14, 0x89, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3e}}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc0802}, 0x855) 6m30.166147716s ago: executing program 4 (id=1045): r0 = socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000040)=0x6, 0x3, 0x7) mincore(&(0x7f0000cb0000/0x4000)=nil, 0x4000, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x20000) shutdown(r0, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYRES8=r1, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYBLOB="0002f8b8a26443d582cf6e300acdd0ecae41f967533519b3c337345b183e29cb9052d2be8a35973b2e3c381eb738facd01d52904becd6bf826167adf733b67ae459c7fb6f05fc12803dbd11cdec4e5e690f343e833dc0acc6818daa4e0a18e291c03c2f9fa233e50714f1e18e812ec", @ANYRESOCT=r0, @ANYRES64=r0], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000280)}, 0x9}, {{0x0, 0x0, 0x0}, 0xb91b}], 0x4, 0x102, 0x0) 6m30.065554972s ago: executing program 4 (id=1047): write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="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", 0x150) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf00d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x44, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xc1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) (async) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) (async) landlock_restrict_self(r1, 0xe) landlock_restrict_self(r1, 0x0) (async) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x8152}, 0x18, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) (async) landlock_restrict_self(r2, 0xa) r5 = landlock_create_ruleset(&(0x7f00000001c0)={0x1005, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r4, &(0x7f0000000000)='./file0\x00', 0x4) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m29.313960958s ago: executing program 4 (id=1055): socket$kcm(0x2, 0x3, 0x2) chdir(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x2c) r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='sec\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x92ffffffffffffff, 0x0, 0x0) 6m29.127761728s ago: executing program 4 (id=1056): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000300)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x7, 0x7, 0xf2cb}) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000100)={0xc, 0x7, 0xfffffff8, 0x5d80106f, 0x2}) r1 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000701, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ea8000/0x2000)=nil, 0x2000}, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000900000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000020000000000030000000900030073797a30000000000900010073797a300000000014000480080002406375fd82080001400000000028000000000a01040000000000000000030000000900010073797a3000000000080002400000000114000000110001"], 0xb0}}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00001ce000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x2}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r4, r4, 0x0) r5 = memfd_create(&(0x7f0000000480)='dev\x02\x00l+\xea3\xaflH\xe2\xf0\xdf\x00\x80\x00\x00\xb8\xf7A\\\xb1\a0\xbc\x1a\xeb*\xe3\xa6%\xfc\xe50L\xe7\xa6\xf9\x1f{\x98i\xb1P\xc4\xbd\xabR\t\xd4\x7f\x17\xe9\xec\xca\x1c\n\x9a\xec\x9fe\xc1X\x91hBy`\xfe\x86\x99\xb9kS\x01\rw\xcb#e\x1e\xa9\xe8\xe8T\xca\xbbIr\x1ek\xbfb\xc7\xce5\xb7\xd1\x81MB\xce\x80\xadH\xb8\xef\xdf\v!p{/-\xd3\"\xe8I\x96=Gm\xe0\xd2\x13J\xa1O\xd1\xcbZU\x94\xd1_\xb7M,X\xe5\xfa\xa4\x88\xcb92\a9(\xed#\xb2W\xd2{\xdb(\x95\x06\xf4N\xdc\r\xfc\xb6\x9f\xff\x06\x1al\xbc\x7f0B\xe2\xcak\x99\xa4\xb1\x96\x97\xdf7\xf6i\xbf\\\xac\xf6\xfe\x8be\x8b\xf4\x84\x83\xba\x1d>\xab\x02\xf4I^\xe7\xb1\x16?\xf4\xc7\x9858\x11\xc4>\x13\xdanv?O\xe0\xaaaE\xb0\x84\x11\xdc$\xcf\xf9s\x81f\xfe\x84\xea\xc6\xb1\xaf\xf2\xe2\xeb\x84\x1e)\xe2\xe9i\x8c6v\x9a\x01\x93zFx\r\x01\xf7\xb6\xe8v\xe6\xf1\xab\b\x05!\x00\x00\x00\x00\x00\x00\x00\x00\x00/j\v@\xde\xb7r?\xdb@\x889\xcc\".\x8d\x0ey\xe8\xcf\x82\x9f\x8a5\xea\bg\"\x93\xc3`H\xeb\xc5\xdd\x03\x8d\x0f`Dc\xb0\x05^ 3m\x11\xf6#\'\x91\xdb\xae\x16\xe5\xd8\xd2}\x01\xad>H\xa5y\xeev\x8av@\x88\'\x8b*$\x83\x8a\x91\x14e\xf8V\xccX\x8c\xbe\x9e\xba\x9aM\x10\xab`\xcc\x97\xa8\xcbl\x8b\xb1\x9d\xa8L\xed\xc4\x8d\x9f2Vk\xa5\xd4\xf6\xab\xe0\xadDU\x06}\a\xaa\x1f\x00\x00\x00\x00', 0x3) fchmod(r5, 0x28) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) 6m28.763684513s ago: executing program 4 (id=1058): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="64000000100001060000000000000000000000007fff00000000000000030000100005007665746830000000000000002400120008000100766574681800020014000100000000000900000002000000000066279b182300001000030076657468590000", 0x64}], 0x1}, 0x400400c) 6m28.656114854s ago: executing program 4 (id=1059): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000200)={0xfffffffffffffe00, r1, 'id1\x00'}) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f0000000300)={{0x3, 0x3, 0x1000, 0x28, 0x9, 0x4}, 0x12e, [0x9, 0xb5b, 0x7, 0x4, 0x0, 0x6fc, 0x7, 0x6, 0x6, 0xfffffd46, 0x1, 0xdf, 0x8e, 0x0, 0x1, 0x9, 0x34, 0x1000, 0x2, 0x2c, 0x7, 0x1, 0xee75, 0x70, 0x2, 0x6, 0x3, 0xffffffff, 0x7, 0x6, 0x6, 0x0, 0x3e000000, 0x3, 0x200, 0x5227, 0xbce, 0x100, 0xa7, 0x10001, 0x101, 0xfffffffe, 0x6d, 0x7fff, 0x80000001, 0x2da0, 0x6, 0x401, 0x9, 0x3, 0x6, 0x7, 0x4, 0x9, 0x7, 0x9, 0x1, 0x80, 0x6, 0xc2, 0x3, 0x2, 0xff, 0xffffffff, 0x3, 0x2, 0x8, 0x0, 0x0, 0x101, 0x2, 0xf92, 0x0, 0x101, 0x7, 0x9, 0x1, 0x81b, 0xd, 0x0, 0xfffffff8, 0x1000, 0x100, 0x7, 0xcb2d, 0x4, 0x8, 0x0, 0xf, 0x3ff, 0x2, 0x7, 0x1, 0x7, 0x1, 0x1, 0x3, 0xc3, 0x8, 0x6e9e, 0xe989, 0x1, 0xb681, 0xfffffff9, 0x9, 0x8, 0xfff, 0x5d3e, 0x95f4, 0xbc7, 0xd, 0x5, 0x7, 0x7, 0x6, 0xafb, 0xff0, 0x0, 0x3, 0x2, 0xfffffffc, 0xbe5b, 0x2, 0x80000001, 0x101, 0x100, 0x9, 0x5, 0x0, 0x2, 0x5, 0x0, 0x6, 0x8001, 0x6, 0x6, 0x9, 0x46b, 0x6, 0x200, 0x6, 0x6cce387b, 0x10, 0x1, 0x0, 0x3, 0x4, 0x0, 0x8, 0x1, 0xb88, 0x2, 0x0, 0x40, 0xc32, 0x2, 0x6, 0x5, 0xff, 0x8000, 0x10, 0x0, 0xfffffff8, 0x6, 0x9, 0xf, 0x8, 0x3, 0x6, 0x6, 0x1, 0x1, 0x9, 0x1, 0xfffffff9, 0x6, 0x9, 0x6, 0x1, 0x3, 0x2, 0x1000, 0x200, 0x400, 0x1, 0x6917fb8d, 0x4, 0x0, 0x6, 0x0, 0x8, 0x1, 0x9, 0x5, 0x7fffffff, 0x5, 0x8, 0xa, 0x1, 0xb9f8, 0xa6c, 0x3, 0x9, 0x9, 0xdb04, 0x5, 0x9ada, 0xe0, 0x42, 0x0, 0x4, 0xc, 0x1, 0x3ff, 0x8000, 0x7fff800, 0xcd, 0x4, 0xf, 0x8, 0x7ff, 0xfff, 0x9, 0x3, 0x200, 0x95, 0x0, 0xff, 0x5, 0x1000, 0x10000, 0x2, 0xe3b6000, 0x2000000, 0x5, 0x4000000, 0xe93, 0x8, 0x0, 0x93e, 0x1000, 0x616b, 0x7ff, 0x1ff, 0xf12, 0x52c, 0x0, 0x6, 0x20000000, 0x0, 0xe6, 0x1, 0x9, 0xfffffffb, 0xfffffff7, 0x100, 0x6, 0xfffffffb, 0x8001, 0xffffffff, 0x1, 0x7, 0x80000000, 0x3, 0x0, 0x800, 0x9, 0x40, 0xc, 0x6, 0x4, 0x10, 0x5, 0x1, 0xd1, 0x5, 0x8, 0x2, 0x0, 0xffffffff, 0x0, 0x1ff, 0x191, 0x7fff, 0x4, 0x0, 0x2, 0x8, 0x8, 0x61fce49c, 0xc, 0x5, 0x6, 0x9, 0x8001, 0xfffffffe, 0x8, 0x1, 0x1, 0x7, 0x5, 0xb, 0x9, 0x2, 0x8a600, 0x7, 0xfffffffa, 0x3ff, 0xd, 0x7788ee3f, 0x401, 0x6, 0x10000, 0x1, 0x5, 0x8, 0xfc, 0x2, 0xb, 0xc, 0x7, 0x7, 0xb535, 0x7fff, 0x1, 0x9, 0x9, 0x6, 0x1, 0x2, 0xc, 0x7, 0x1, 0x6, 0x3, 0xa4b7, 0x6, 0x7af572d0, 0xcd3, 0x5, 0x9, 0x4, 0x9, 0x8, 0xf, 0x9, 0x7fffffff, 0xfff, 0x5, 0x6, 0x7, 0x6, 0x7, 0x9, 0xd, 0x3, 0x3, 0x7, 0x6, 0x8001, 0xe, 0x5, 0x5, 0x3, 0x9, 0x1, 0xac37, 0x1000, 0xf, 0x400, 0x5b62, 0x0, 0x5d90, 0x7f, 0xf, 0x7, 0xfd, 0xd, 0x3, 0x3, 0x1, 0x0, 0x4, 0x0, 0x1, 0x7, 0x2da, 0x9, 0x400, 0x10000, 0x1000, 0x1000, 0x4, 0x3, 0x96aa, 0x4, 0x9, 0xfffffeff, 0x800, 0x7fffffff, 0x7f, 0x4a, 0x1, 0x81, 0x2, 0x2, 0x1, 0x3, 0x2, 0x100, 0xd, 0x1, 0x7, 0x9, 0x5, 0xcdae, 0x1ff, 0x1, 0xb, 0x9, 0x8000, 0x8, 0x4, 0x3fec9da3, 0xe, 0x3, 0x9, 0x4, 0x8, 0x49f8, 0x78, 0x3, 0x1, 0x4, 0xe, 0x6, 0x81, 0x2, 0x1, 0x0, 0x80, 0x490, 0x8, 0x0, 0x4970e3e4, 0x3, 0x10001, 0x7, 0x1, 0x2, 0x36c0, 0x7, 0x0, 0x0, 0x3, 0x8, 0x8, 0xfffffffa, 0x4, 0x4, 0x5, 0x1, 0x9, 0x3, 0x5, 0x10, 0x1, 0x300000, 0x3, 0xfa2a4ef, 0x2, 0xf, 0x7, 0x8001, 0x3f, 0x5, 0xfffff5cb, 0x4, 0xffffff16, 0x5, 0x1a, 0xf5d4, 0x3, 0x0, 0x7, 0x2, 0x800, 0x80, 0x16c630d6, 0x4a, 0xeeb, 0x2, 0x6, 0xdd6, 0x1, 0x5, 0x7fffffff, 0xff, 0x7, 0x3, 0x6, 0x4, 0x4, 0x8, 0x9, 0x3, 0x100, 0x8001, 0x0, 0x138, 0x4, 0x8c, 0x4, 0x8001, 0x3, 0x5, 0x10000, 0x0, 0x0, 0x80, 0x4, 0x52c, 0x1, 0xfff, 0x0, 0x16, 0x3, 0x7326, 0x6, 0x9, 0x81, 0x6e, 0x0, 0x7509, 0x3, 0x5, 0x2, 0x7, 0x6d, 0x4, 0x89b, 0x51e, 0x6, 0x8, 0x561, 0x151a, 0x1, 0x2, 0x3, 0x8, 0x2, 0x0, 0x80000000, 0x81, 0x8, 0x0, 0x3, 0x100, 0xa791, 0xfd, 0xe, 0x5367, 0x6, 0x7ff, 0x1, 0x9, 0x7, 0x401, 0x1, 0x3ff, 0x122, 0x10000, 0x2, 0x8, 0x2, 0x1, 0x7, 0x679fb288, 0x10001, 0x3, 0x101, 0x8, 0x7, 0xffffbc1d, 0x1, 0xfffffcd4, 0xc4, 0x5, 0x4, 0x8, 0x9, 0x8ad3, 0x4, 0x2, 0x3, 0x1, 0x0, 0x49e, 0x6, 0x101, 0x800, 0x7fff, 0x2, 0xffffff80, 0x3b, 0x3, 0x7, 0x9, 0x9, 0x7, 0x1, 0x14c00, 0x6, 0x2047, 0xe, 0x4, 0x1, 0x655e, 0x1, 0x5, 0x2, 0x4, 0x40, 0x4, 0x4, 0x5, 0x80000, 0x101, 0x7f, 0xfffffffe, 0x1, 0x8, 0x4, 0x9, 0x40, 0x8, 0xffffe3a4, 0x3, 0x401, 0x7fff, 0x8, 0xc, 0xe, 0xffff0000, 0x55d4, 0x5, 0x5, 0x2, 0xa, 0x81, 0x7, 0x4, 0x1, 0x4, 0x6, 0x6, 0xffffffff, 0x5, 0xd, 0x0, 0x10001, 0x2, 0x1, 0x7, 0x9, 0x3b6, 0x6, 0x0, 0x1, 0x9, 0x5, 0xb81, 0x200, 0xfffff6eb, 0xfffffffb, 0x2, 0xd4, 0x9, 0x2, 0x3, 0x3, 0xa, 0x9, 0x3, 0x9, 0xd, 0x8, 0x8001, 0x6, 0x7c, 0x8842, 0x8001, 0x2, 0x10001, 0x4, 0x80000001, 0x3, 0xa, 0x220, 0x4, 0x401, 0x86311279, 0x5, 0xd9, 0x9, 0x401, 0x0, 0x200, 0x1ff, 0x71, 0x7, 0x8001, 0x1, 0x1000, 0x10000, 0x1, 0x76, 0x8000, 0x0, 0x8001, 0xfffffffe, 0x8, 0x43cd, 0xeb, 0x4, 0x2, 0x6, 0x86bf, 0x10000, 0x10001, 0x2, 0x3560, 0xfffffffe, 0x4, 0x80, 0x401, 0xff, 0x6, 0x8, 0x81, 0x4, 0x6, 0x3, 0x3, 0xa, 0x9, 0x5, 0x0, 0x5, 0x6, 0x3, 0x3ff, 0x0, 0x1, 0x20000000, 0x8, 0x9, 0x2, 0x4, 0x4, 0xc, 0x4, 0x6d5, 0x81, 0x100, 0x8, 0x0, 0x2, 0x25a5, 0x8, 0x2, 0x1, 0x0, 0x9, 0x0, 0x1, 0x8, 0x4, 0x2, 0xc832, 0x7, 0xf, 0x80, 0xa2, 0x5d, 0x9, 0x2, 0x2, 0x1, 0x9, 0x6, 0xfffff800, 0x684, 0x4, 0x101, 0xd4e3, 0x0, 0x1, 0x5ac, 0x754d, 0xfff, 0x1b, 0xbef, 0xfffffffe, 0xffffffff, 0x7, 0x5, 0x6, 0x52, 0x1, 0x5ad7, 0x7, 0x4, 0x8, 0x7, 0x3, 0x5, 0x1, 0xe, 0x1, 0x3, 0xfb72, 0x8, 0x9, 0x1, 0x3, 0x8, 0x96bb, 0x0, 0x1ff, 0x4, 0x3, 0x9, 0x0, 0x3, 0x6, 0x7, 0x9, 0x8, 0x2664, 0x0, 0x40, 0x6, 0x2, 0x81a, 0x4, 0x2, 0x7, 0x3, 0x8, 0xffff0000, 0xd63, 0x2, 0x800, 0x7, 0x6, 0x6, 0x10, 0x6, 0x6819, 0xf, 0xfffffffe, 0x1c000000, 0xffff13f9, 0x6, 0x9, 0x0, 0x9, 0x1, 0x1, 0x6, 0x6c, 0x1d0f, 0x164400, 0x0, 0x0, 0x8000, 0x0, 0x7f, 0x8, 0x7, 0xd, 0x4, 0x8, 0x6, 0x2, 0x6, 0x9, 0x1, 0x0, 0x1, 0x4, 0xdc6, 0x4, 0x5, 0x0, 0xfffffffb, 0x1, 0x2, 0x8, 0x8, 0x0, 0xd, 0x10, 0x3, 0x1, 0xf1f, 0x37f, 0x2, 0x7ff, 0x3, 0xff, 0x400, 0x0, 0xff, 0x1, 0x7a, 0x60, 0x1, 0x2250fa3f, 0x6, 0xf1, 0x10000000, 0x100, 0x7, 0x6, 0x3, 0x8, 0x0, 0xa940, 0x1, 0x40, 0x1000, 0x1, 0x7, 0xfffffffe, 0xa, 0x9, 0x7ff, 0x80000001, 0x60000000, 0x41, 0xffff, 0xf4, 0x800, 0x4, 0x6, 0x3, 0x7, 0x10001, 0x6, 0x6, 0x1, 0x3, 0x9, 0xfff, 0x7fff, 0x47, 0x3, 0x3, 0xffffff6c, 0x9a, 0x5, 0x2, 0x4, 0x84, 0x9, 0x1, 0x40000, 0x401, 0x7ed1000, 0x6, 0x6, 0x800, 0x18, 0x6, 0x66, 0x3ff, 0x80, 0x1, 0x7fffffff, 0x8000, 0x2, 0x8000, 0x0, 0xfffffffd, 0x4, 0x8, 0x9, 0x7f, 0x10, 0x7eb, 0x6, 0x73, 0xeb3, 0x9, 0xf0, 0x0, 0x7, 0x1140e2b3, 0x2, 0x80, 0x93a, 0xd, 0x2, 0x0, 0x5c, 0x321, 0xb, 0xd9, 0xfffffffb, 0x7, 0x1, 0x4, 0x8, 0x1, 0x80000001, 0x8, 0x8, 0x99, 0x1, 0x8, 0x4, 0x4]}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async, rerun: 32) listen(0xffffffffffffffff, 0x4bf) (async) r5 = syz_open_dev$video4linux(&(0x7f0000000680), 0xffffffffffffffff, 0x401) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f0000000740)={0x9e0000, 0x200, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000700)={0xa30901, 0x0, '\x00', @p_u32=0x0}}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) getsockopt$bt_hci(r6, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000001380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f0000000280)={0x2c, 0x0, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 6m13.55098553s ago: executing program 33 (id=1059): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000200)={0xfffffffffffffe00, r1, 'id1\x00'}) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f0000000300)={{0x3, 0x3, 0x1000, 0x28, 0x9, 0x4}, 0x12e, [0x9, 0xb5b, 0x7, 0x4, 0x0, 0x6fc, 0x7, 0x6, 0x6, 0xfffffd46, 0x1, 0xdf, 0x8e, 0x0, 0x1, 0x9, 0x34, 0x1000, 0x2, 0x2c, 0x7, 0x1, 0xee75, 0x70, 0x2, 0x6, 0x3, 0xffffffff, 0x7, 0x6, 0x6, 0x0, 0x3e000000, 0x3, 0x200, 0x5227, 0xbce, 0x100, 0xa7, 0x10001, 0x101, 0xfffffffe, 0x6d, 0x7fff, 0x80000001, 0x2da0, 0x6, 0x401, 0x9, 0x3, 0x6, 0x7, 0x4, 0x9, 0x7, 0x9, 0x1, 0x80, 0x6, 0xc2, 0x3, 0x2, 0xff, 0xffffffff, 0x3, 0x2, 0x8, 0x0, 0x0, 0x101, 0x2, 0xf92, 0x0, 0x101, 0x7, 0x9, 0x1, 0x81b, 0xd, 0x0, 0xfffffff8, 0x1000, 0x100, 0x7, 0xcb2d, 0x4, 0x8, 0x0, 0xf, 0x3ff, 0x2, 0x7, 0x1, 0x7, 0x1, 0x1, 0x3, 0xc3, 0x8, 0x6e9e, 0xe989, 0x1, 0xb681, 0xfffffff9, 0x9, 0x8, 0xfff, 0x5d3e, 0x95f4, 0xbc7, 0xd, 0x5, 0x7, 0x7, 0x6, 0xafb, 0xff0, 0x0, 0x3, 0x2, 0xfffffffc, 0xbe5b, 0x2, 0x80000001, 0x101, 0x100, 0x9, 0x5, 0x0, 0x2, 0x5, 0x0, 0x6, 0x8001, 0x6, 0x6, 0x9, 0x46b, 0x6, 0x200, 0x6, 0x6cce387b, 0x10, 0x1, 0x0, 0x3, 0x4, 0x0, 0x8, 0x1, 0xb88, 0x2, 0x0, 0x40, 0xc32, 0x2, 0x6, 0x5, 0xff, 0x8000, 0x10, 0x0, 0xfffffff8, 0x6, 0x9, 0xf, 0x8, 0x3, 0x6, 0x6, 0x1, 0x1, 0x9, 0x1, 0xfffffff9, 0x6, 0x9, 0x6, 0x1, 0x3, 0x2, 0x1000, 0x200, 0x400, 0x1, 0x6917fb8d, 0x4, 0x0, 0x6, 0x0, 0x8, 0x1, 0x9, 0x5, 0x7fffffff, 0x5, 0x8, 0xa, 0x1, 0xb9f8, 0xa6c, 0x3, 0x9, 0x9, 0xdb04, 0x5, 0x9ada, 0xe0, 0x42, 0x0, 0x4, 0xc, 0x1, 0x3ff, 0x8000, 0x7fff800, 0xcd, 0x4, 0xf, 0x8, 0x7ff, 0xfff, 0x9, 0x3, 0x200, 0x95, 0x0, 0xff, 0x5, 0x1000, 0x10000, 0x2, 0xe3b6000, 0x2000000, 0x5, 0x4000000, 0xe93, 0x8, 0x0, 0x93e, 0x1000, 0x616b, 0x7ff, 0x1ff, 0xf12, 0x52c, 0x0, 0x6, 0x20000000, 0x0, 0xe6, 0x1, 0x9, 0xfffffffb, 0xfffffff7, 0x100, 0x6, 0xfffffffb, 0x8001, 0xffffffff, 0x1, 0x7, 0x80000000, 0x3, 0x0, 0x800, 0x9, 0x40, 0xc, 0x6, 0x4, 0x10, 0x5, 0x1, 0xd1, 0x5, 0x8, 0x2, 0x0, 0xffffffff, 0x0, 0x1ff, 0x191, 0x7fff, 0x4, 0x0, 0x2, 0x8, 0x8, 0x61fce49c, 0xc, 0x5, 0x6, 0x9, 0x8001, 0xfffffffe, 0x8, 0x1, 0x1, 0x7, 0x5, 0xb, 0x9, 0x2, 0x8a600, 0x7, 0xfffffffa, 0x3ff, 0xd, 0x7788ee3f, 0x401, 0x6, 0x10000, 0x1, 0x5, 0x8, 0xfc, 0x2, 0xb, 0xc, 0x7, 0x7, 0xb535, 0x7fff, 0x1, 0x9, 0x9, 0x6, 0x1, 0x2, 0xc, 0x7, 0x1, 0x6, 0x3, 0xa4b7, 0x6, 0x7af572d0, 0xcd3, 0x5, 0x9, 0x4, 0x9, 0x8, 0xf, 0x9, 0x7fffffff, 0xfff, 0x5, 0x6, 0x7, 0x6, 0x7, 0x9, 0xd, 0x3, 0x3, 0x7, 0x6, 0x8001, 0xe, 0x5, 0x5, 0x3, 0x9, 0x1, 0xac37, 0x1000, 0xf, 0x400, 0x5b62, 0x0, 0x5d90, 0x7f, 0xf, 0x7, 0xfd, 0xd, 0x3, 0x3, 0x1, 0x0, 0x4, 0x0, 0x1, 0x7, 0x2da, 0x9, 0x400, 0x10000, 0x1000, 0x1000, 0x4, 0x3, 0x96aa, 0x4, 0x9, 0xfffffeff, 0x800, 0x7fffffff, 0x7f, 0x4a, 0x1, 0x81, 0x2, 0x2, 0x1, 0x3, 0x2, 0x100, 0xd, 0x1, 0x7, 0x9, 0x5, 0xcdae, 0x1ff, 0x1, 0xb, 0x9, 0x8000, 0x8, 0x4, 0x3fec9da3, 0xe, 0x3, 0x9, 0x4, 0x8, 0x49f8, 0x78, 0x3, 0x1, 0x4, 0xe, 0x6, 0x81, 0x2, 0x1, 0x0, 0x80, 0x490, 0x8, 0x0, 0x4970e3e4, 0x3, 0x10001, 0x7, 0x1, 0x2, 0x36c0, 0x7, 0x0, 0x0, 0x3, 0x8, 0x8, 0xfffffffa, 0x4, 0x4, 0x5, 0x1, 0x9, 0x3, 0x5, 0x10, 0x1, 0x300000, 0x3, 0xfa2a4ef, 0x2, 0xf, 0x7, 0x8001, 0x3f, 0x5, 0xfffff5cb, 0x4, 0xffffff16, 0x5, 0x1a, 0xf5d4, 0x3, 0x0, 0x7, 0x2, 0x800, 0x80, 0x16c630d6, 0x4a, 0xeeb, 0x2, 0x6, 0xdd6, 0x1, 0x5, 0x7fffffff, 0xff, 0x7, 0x3, 0x6, 0x4, 0x4, 0x8, 0x9, 0x3, 0x100, 0x8001, 0x0, 0x138, 0x4, 0x8c, 0x4, 0x8001, 0x3, 0x5, 0x10000, 0x0, 0x0, 0x80, 0x4, 0x52c, 0x1, 0xfff, 0x0, 0x16, 0x3, 0x7326, 0x6, 0x9, 0x81, 0x6e, 0x0, 0x7509, 0x3, 0x5, 0x2, 0x7, 0x6d, 0x4, 0x89b, 0x51e, 0x6, 0x8, 0x561, 0x151a, 0x1, 0x2, 0x3, 0x8, 0x2, 0x0, 0x80000000, 0x81, 0x8, 0x0, 0x3, 0x100, 0xa791, 0xfd, 0xe, 0x5367, 0x6, 0x7ff, 0x1, 0x9, 0x7, 0x401, 0x1, 0x3ff, 0x122, 0x10000, 0x2, 0x8, 0x2, 0x1, 0x7, 0x679fb288, 0x10001, 0x3, 0x101, 0x8, 0x7, 0xffffbc1d, 0x1, 0xfffffcd4, 0xc4, 0x5, 0x4, 0x8, 0x9, 0x8ad3, 0x4, 0x2, 0x3, 0x1, 0x0, 0x49e, 0x6, 0x101, 0x800, 0x7fff, 0x2, 0xffffff80, 0x3b, 0x3, 0x7, 0x9, 0x9, 0x7, 0x1, 0x14c00, 0x6, 0x2047, 0xe, 0x4, 0x1, 0x655e, 0x1, 0x5, 0x2, 0x4, 0x40, 0x4, 0x4, 0x5, 0x80000, 0x101, 0x7f, 0xfffffffe, 0x1, 0x8, 0x4, 0x9, 0x40, 0x8, 0xffffe3a4, 0x3, 0x401, 0x7fff, 0x8, 0xc, 0xe, 0xffff0000, 0x55d4, 0x5, 0x5, 0x2, 0xa, 0x81, 0x7, 0x4, 0x1, 0x4, 0x6, 0x6, 0xffffffff, 0x5, 0xd, 0x0, 0x10001, 0x2, 0x1, 0x7, 0x9, 0x3b6, 0x6, 0x0, 0x1, 0x9, 0x5, 0xb81, 0x200, 0xfffff6eb, 0xfffffffb, 0x2, 0xd4, 0x9, 0x2, 0x3, 0x3, 0xa, 0x9, 0x3, 0x9, 0xd, 0x8, 0x8001, 0x6, 0x7c, 0x8842, 0x8001, 0x2, 0x10001, 0x4, 0x80000001, 0x3, 0xa, 0x220, 0x4, 0x401, 0x86311279, 0x5, 0xd9, 0x9, 0x401, 0x0, 0x200, 0x1ff, 0x71, 0x7, 0x8001, 0x1, 0x1000, 0x10000, 0x1, 0x76, 0x8000, 0x0, 0x8001, 0xfffffffe, 0x8, 0x43cd, 0xeb, 0x4, 0x2, 0x6, 0x86bf, 0x10000, 0x10001, 0x2, 0x3560, 0xfffffffe, 0x4, 0x80, 0x401, 0xff, 0x6, 0x8, 0x81, 0x4, 0x6, 0x3, 0x3, 0xa, 0x9, 0x5, 0x0, 0x5, 0x6, 0x3, 0x3ff, 0x0, 0x1, 0x20000000, 0x8, 0x9, 0x2, 0x4, 0x4, 0xc, 0x4, 0x6d5, 0x81, 0x100, 0x8, 0x0, 0x2, 0x25a5, 0x8, 0x2, 0x1, 0x0, 0x9, 0x0, 0x1, 0x8, 0x4, 0x2, 0xc832, 0x7, 0xf, 0x80, 0xa2, 0x5d, 0x9, 0x2, 0x2, 0x1, 0x9, 0x6, 0xfffff800, 0x684, 0x4, 0x101, 0xd4e3, 0x0, 0x1, 0x5ac, 0x754d, 0xfff, 0x1b, 0xbef, 0xfffffffe, 0xffffffff, 0x7, 0x5, 0x6, 0x52, 0x1, 0x5ad7, 0x7, 0x4, 0x8, 0x7, 0x3, 0x5, 0x1, 0xe, 0x1, 0x3, 0xfb72, 0x8, 0x9, 0x1, 0x3, 0x8, 0x96bb, 0x0, 0x1ff, 0x4, 0x3, 0x9, 0x0, 0x3, 0x6, 0x7, 0x9, 0x8, 0x2664, 0x0, 0x40, 0x6, 0x2, 0x81a, 0x4, 0x2, 0x7, 0x3, 0x8, 0xffff0000, 0xd63, 0x2, 0x800, 0x7, 0x6, 0x6, 0x10, 0x6, 0x6819, 0xf, 0xfffffffe, 0x1c000000, 0xffff13f9, 0x6, 0x9, 0x0, 0x9, 0x1, 0x1, 0x6, 0x6c, 0x1d0f, 0x164400, 0x0, 0x0, 0x8000, 0x0, 0x7f, 0x8, 0x7, 0xd, 0x4, 0x8, 0x6, 0x2, 0x6, 0x9, 0x1, 0x0, 0x1, 0x4, 0xdc6, 0x4, 0x5, 0x0, 0xfffffffb, 0x1, 0x2, 0x8, 0x8, 0x0, 0xd, 0x10, 0x3, 0x1, 0xf1f, 0x37f, 0x2, 0x7ff, 0x3, 0xff, 0x400, 0x0, 0xff, 0x1, 0x7a, 0x60, 0x1, 0x2250fa3f, 0x6, 0xf1, 0x10000000, 0x100, 0x7, 0x6, 0x3, 0x8, 0x0, 0xa940, 0x1, 0x40, 0x1000, 0x1, 0x7, 0xfffffffe, 0xa, 0x9, 0x7ff, 0x80000001, 0x60000000, 0x41, 0xffff, 0xf4, 0x800, 0x4, 0x6, 0x3, 0x7, 0x10001, 0x6, 0x6, 0x1, 0x3, 0x9, 0xfff, 0x7fff, 0x47, 0x3, 0x3, 0xffffff6c, 0x9a, 0x5, 0x2, 0x4, 0x84, 0x9, 0x1, 0x40000, 0x401, 0x7ed1000, 0x6, 0x6, 0x800, 0x18, 0x6, 0x66, 0x3ff, 0x80, 0x1, 0x7fffffff, 0x8000, 0x2, 0x8000, 0x0, 0xfffffffd, 0x4, 0x8, 0x9, 0x7f, 0x10, 0x7eb, 0x6, 0x73, 0xeb3, 0x9, 0xf0, 0x0, 0x7, 0x1140e2b3, 0x2, 0x80, 0x93a, 0xd, 0x2, 0x0, 0x5c, 0x321, 0xb, 0xd9, 0xfffffffb, 0x7, 0x1, 0x4, 0x8, 0x1, 0x80000001, 0x8, 0x8, 0x99, 0x1, 0x8, 0x4, 0x4]}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async, rerun: 32) listen(0xffffffffffffffff, 0x4bf) (async) r5 = syz_open_dev$video4linux(&(0x7f0000000680), 0xffffffffffffffff, 0x401) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f0000000740)={0x9e0000, 0x200, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000700)={0xa30901, 0x0, '\x00', @p_u32=0x0}}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) getsockopt$bt_hci(r6, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000001380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f0000000280)={0x2c, 0x0, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 2m34.384414005s ago: executing program 0 (id=2359): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) ioctl(r0, 0x3b8f, &(0x7f00000000c0)="2800000006000000010000000400000000000000000000000010") (fail_nth: 4) 2m34.0899209s ago: executing program 0 (id=2360): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x50}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r1) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x602000, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0xa, 0xe5, 0x20, 0x0, 0xe51d, 0x4, 0x17, 0xf5, 0x12, 0x7, 0xd0, 0x4, 0x0, 0x1000, 0x7, 0xf8, 0x8, 0x8, 0x6, '\x00', 0x9, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2}) ioctl(0xffffffffffffffff, 0x3b90, &(0x7f00000000c0)="2800000006000000010000000400000000000000000000000010") 2m33.925351419s ago: executing program 0 (id=2361): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f00000002c0)={0xffffffff, 0xc000c, "a115a710efcbb4ba660496c0df6a300ea04869694fbb7630", {0x7, 0x7fff}}) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) 2m33.784021762s ago: executing program 0 (id=2363): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)=@hci, 0x80, &(0x7f0000001b00), 0x0, 0x0, 0x0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)="e0d13b56faa183fa4795c3b0375de68a019baaa9dfbb19a3816fdd449a914b48ddce4ee067870bc71d3cd149faa58bb3d6026d0a3a7707d74c4258996d1678311d7ef7723adde73633b2d9f1c5ba165e929febf1bc8dd341948b11ed5e00597e193dc7e3957987f0a11b1b9575cd79ac569f7a516338d4647260eb2160dad90adb383972e43a2508c9ac717eea3e8d0443f24ca108f18269af74a2b22aa094d085063eaa450f0eeacc08d7c1f18780ba8a6fcfe7dcf23ee3a68e87", 0xbb}], 0x1, 0x0, 0x0, 0x20000810}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x81001) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000000)={0x3, 0x1, 0x0, 0x2, 0x81}) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4018}, 0x40000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 2m33.330562613s ago: executing program 0 (id=2365): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x92) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f00000001c0)='./bus\x00', 0x2c840, 0x50) truncate(&(0x7f0000000000)='./bus\x00', 0x86) finit_module(r0, 0x0, 0x5) (fail_nth: 4) 2m32.965330681s ago: executing program 0 (id=2366): ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='jfs\x00', 0x2200010, &(0x7f00000000c0)='discard') 2m16.169353538s ago: executing program 34 (id=2366): ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='jfs\x00', 0x2200010, &(0x7f00000000c0)='discard') 1m28.835806912s ago: executing program 5 (id=2694): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x57, &(0x7f00000000c0)=ANY=[@ANYBLOB="570315936f8775e476560bc6e405a4df6a7ac5d132e14d25669c0f118bb4a25bff11bfe3ab0c1e042d78cb9ed274de7349e1a8c7ff19360aed93d8d95a480ee79c2025bec192573be96b91873ca36ea3e9bac4459f9235"]}, {0x21, &(0x7f0000000040)=@string={0x21, 0x3, "6899d681e89eeab2d1eccc992a37d5257119d5bb26fdc1898c2fac5bb87252"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf0fc}}, {0xf3, &(0x7f00000003c0)=@string={0xf3, 0x3, "2928a8019a7d3a13341925c319464ba70c7c0f1e110bb98c6490c6a90ceb5415c2b6c969ade0b77fc18f1fd24ea55ec89045bdc505c376e793ceffd199b7bbed656d7533aca30e697d999ff84e5e622dfbf010ab1a9624ca1a7f8e1fff95f0a10f5ad9734e0b965dccea3b61f3ca71c385575207b03c23ea0cde836efece064e3b57a344c670655510bc0fd98e7978069d3cf2288c2e4db6e9ce67fad2e3a56466b00be011426b18d4e253c86e1241fd579506f40e14316829bdb70c0cdb75dcf237a8d91008c5dccd69a7433ad942a628e57c66a77e2c84b0af71ee78c8a0fe938f70d0de815754cc2bebb095b8a98174"}}]}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000780)=[{0x9, 0x200, 0x0, 0x0}], 0x1}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) mq_timedreceive(r1, &(0x7f00000004c0)=""/205, 0xcd, 0x1, &(0x7f00000005c0)) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb) 1m27.276270229s ago: executing program 5 (id=2706): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003b00)=[{{&(0x7f0000001280)={0xa, 0x4e24, 0x0, @empty, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000016c0)}}], 0x1, 0x4000) 1m27.237113491s ago: executing program 5 (id=2707): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000a00)={0x40, 0xc, 0x4, "be128742"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000ec0)={0x1c, &(0x7f0000000180)={0x0, 0xd, 0x4, "6aa79e12"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000000840)={0x40, 0x11, 0x4c, "1b9333a18dfa3dffcaa0c2b939d1dd168c6707d2cd2da959eed754a0fd955ac23ce80e63357d41a8220ac019c5d6d90b0f75be61967302685f4290691ee55452eb8190939503bebafa315212"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m24.567731356s ago: executing program 5 (id=2726): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000b0601080000000000000000020000020500010007000000440007801800148014000240fc0200000000000000000000000000011800018014000240fe8000000000000000000000000000aa060004404e23000005000700880000000900020073797a31"], 0x6c}, 0x1, 0x0, 0x0, 0x48}, 0x4800) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2000000, 0x1}, 0x10) write$binfmt_aout(r0, 0x0, 0xd4d) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m24.415989668s ago: executing program 5 (id=2728): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f901"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00030400000004030c"], 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x6, 0x2, &(0x7f0000000140)={0x2, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9950cf5e1dee93"}}) 1m21.031978373s ago: executing program 5 (id=2746): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002f00090024bd70000000020005000000"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x80000) r3 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100107010340b804020240000102030109021b000101fbb00c0904002501000001000905010220"], 0x0) syz_usb_control_io$printer(r3, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r4, &(0x7f00000007c0)='\v', 0x1) fcntl$dupfd(r2, 0x203, r2) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776010203010902240001000000000904310002ff0107"], 0x0) syz_usb_disconnect(r3) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) (async) syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002f00090024bd70000000020005000000"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x80000) (async) syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100107010340b804020240000102030109021b000101fbb00c0904002501000001000905010220"], 0x0) (async) syz_usb_control_io$printer(r3, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) (async) write$char_usb(r4, &(0x7f00000007c0)='\v', 0x1) (async) fcntl$dupfd(r2, 0x203, r2) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776010203010902240001000000000904310002ff0107"], 0x0) (async) syz_usb_disconnect(r3) (async) 1m4.452840681s ago: executing program 35 (id=2746): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002f00090024bd70000000020005000000"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x80000) r3 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100107010340b804020240000102030109021b000101fbb00c0904002501000001000905010220"], 0x0) syz_usb_control_io$printer(r3, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r4, &(0x7f00000007c0)='\v', 0x1) fcntl$dupfd(r2, 0x203, r2) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776010203010902240001000000000904310002ff0107"], 0x0) syz_usb_disconnect(r3) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) (async) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) (async) syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002f00090024bd70000000020005000000"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x80000) (async) syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100107010340b804020240000102030109021b000101fbb00c0904002501000001000905010220"], 0x0) (async) syz_usb_control_io$printer(r3, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) (async) write$char_usb(r4, &(0x7f00000007c0)='\v', 0x1) (async) fcntl$dupfd(r2, 0x203, r2) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776010203010902240001000000000904310002ff0107"], 0x0) (async) syz_usb_disconnect(r3) (async) 14.673463961s ago: executing program 7 (id=2978): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, 0x0, 0x0) write(r3, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000000)={r6}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000000)=r6, 0x4) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000140)=[{0xe302, 0x14211, 0x0, 0x0}], 0x1}) 10.952748765s ago: executing program 7 (id=2988): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, 0x0, 0x0) write(r3, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000000)=r5, 0x4) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000080)=0x9, 0x4) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000140)=[{0xe302, 0x14211, 0x0, 0x0}], 0x1}) 8.108435792s ago: executing program 1 (id=2995): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x6, 0x2, &(0x7f0000000140)={0x2, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9950cf5e1dee93"}}) 7.519390505s ago: executing program 7 (id=2998): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, &(0x7f0000000140)={0x40, 0xa, 0xa9, {0xfffffdfc, 0x21, "d364ccce0e43c02159b1fec5e42265cc4feee70cd5d7d6fd3c342b95121885147938029f89a85091879c85350f509dff0e371bc687c714f51288c0d4704aeaec13ad4bed73cf7bd987d3cb346c3118a44f6f0404aa7d742bb4afc34729d5fb4b4d4a38f05ca519271324d197fffa6a3ccbe90414b2aafc200477992ce5b4ec1d4c05888bb50cd03b50f25059dbe94a98b6f163bce30df4c0c47968c7b2d6adbb1bab9cfd3fae14"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x445}}, &(0x7f00000002c0)={0x0, 0x22, 0x7, {[@main=@item_012={0x0, 0x0, 0xb, 'K'}, @global=@item_012={0x1, 0x1, 0x4, 'z'}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9712, 0x9, 0x1, {0x22, 0x907}}}}, &(0x7f0000000980)={0x2c, &(0x7f00000006c0)={0x20, 0xf, 0xd8, "7426cae6743eb649e5c5ad0982e19e31159a52f2fe0b8f9ee96a9fda8021c9b9609b0374a733b6a38d3c4a62eb3128182d4d0246560b4241816db9113eb4d0af448b3d597cb11ca09ac551bd966f39d4c12b5da3ba6c4ef2d8481ae635365c94d6a1b124986342a5c73fba3f232cd2f26613e02b7c68168d7b761f8ead1c0f981ae7e6cc972c1bd1165f3e525f99770d1ec67b708010c8a103c654632810cc323f080e29cd4e1823db0c4bcc01e49320b7c775c5f3aafcc70021522a14431a4854c10205c298e31beb5bb0babb43264f023edf483f2b0cba"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000840)={0x20, 0x1, 0x98, "4bc602bfd0898e146a9f3977472bdcc6819f257a669aa533e99187b17cd51674977759a898e21cd56922e907a1253b51fee5eb555d863fc09cbc1782d14cf783859534fcabdd2270a38646b0f555cb67bcdd793ed85cbc8e07620443d2ad7fd50ef29e30054c1fbef76c68edfdc61b4a090e53b4439ea09039a164dbc500f09d2d3d4c01854a7ce37689fa959f77d05d51d3c537a50bf406"}, &(0x7f0000000900)={0x20, 0x3, 0x1, 0x6}}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x200, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x32, &(0x7f0000000080), 0x2, 0x8}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="201103000000053ff5"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000000705e37e1b"], 0x0) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) fsopen(&(0x7f0000000040)='proc\x00', 0x0) 6.691565548s ago: executing program 1 (id=3000): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, 0x0, 0x0) write(r2, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000000)={r5}, &(0x7f0000000080)=0x8) 5.111508727s ago: executing program 1 (id=3003): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffe, 0x5, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="0004000019", 0x0, 0x0, 0x10011, 0xfffbffff, 0x0}) read(r0, 0x0, 0x0) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) 4.073707673s ago: executing program 1 (id=3006): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, 0x0, 0x0) write(r3, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000000)=r5, 0x4) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000080)=0x9, 0x4) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000140)=[{0xe302, 0x14211, 0x0, 0x0}], 0x1}) 4.073540548s ago: executing program 7 (id=3007): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, 0x0, 0x0) write(r2, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000000)=r4, 0x4) 3.635483193s ago: executing program 6 (id=3008): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x6, 0x2, &(0x7f0000000140)={0x2, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9950cf5e1dee93"}}) 3.633052436s ago: executing program 2 (id=3009): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00302bfffe8000000000000000000000000000aaff020000000000000000000005000001", @ANYRES8=r2, @ANYRES64=r3], 0xfdef) 3.392438203s ago: executing program 2 (id=3010): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x19, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090040000000000000001d000017030006000000000002000000e2000002000000000000000002000100000000000000050200000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x10) 3.379595769s ago: executing program 2 (id=3011): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, 0x0, 0x0) write(r3, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000000), &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000000), 0x4) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000080)=0x9, 0x4) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000140)=[{0xe302, 0x14211, 0x0, 0x0}], 0x1}) 2.443394747s ago: executing program 1 (id=3012): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, 0x0, 0x0) write(r3, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000000)=r5, 0x4) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000080)=0x9, 0x4) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000140)=[{0xe302, 0x14211, 0x0, 0x0}], 0x1}) 2.160341259s ago: executing program 6 (id=3013): r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000a00)={0x40, 0xc, 0x4, "be128742"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000ec0)={0x1c, &(0x7f0000000180)={0x0, 0xd, 0x4, "6aa79e12"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000000840)={0x40, 0x11, 0x4c, "1b9333a18dfa3dffcaa0c2b939d1dd168c6707d2cd2da959eed754a0fd955ac23ce80e63357d41a8220ac019c5d6d90b0f75be61967302685f4290691ee55452eb8190939503bebafa315212"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.826324481s ago: executing program 2 (id=3014): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffe, 0x6, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="000400001900", 0x0, 0x0, 0x10011, 0xfffbffff, 0x0}) read(r0, 0x0, 0x0) write$tun(r1, 0x0, 0xa2) 934.382265ms ago: executing program 1 (id=3015): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, &(0x7f0000000140)={0x40, 0xa, 0xa9, {0xfffffdfc, 0x21, "d364ccce0e43c02159b1fec5e42265cc4feee70cd5d7d6fd3c342b95121885147938029f89a85091879c85350f509dff0e371bc687c714f51288c0d4704aeaec13ad4bed73cf7bd987d3cb346c3118a44f6f0404aa7d742bb4afc34729d5fb4b4d4a38f05ca519271324d197fffa6a3ccbe90414b2aafc200477992ce5b4ec1d4c05888bb50cd03b50f25059dbe94a98b6f163bce30df4c0c47968c7b2d6adbb1bab9cfd3fae14"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x445}}, &(0x7f00000002c0)={0x0, 0x22, 0x7, {[@main=@item_012={0x0, 0x0, 0xb, 'K'}, @global=@item_012={0x1, 0x1, 0x4, 'z'}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9712, 0x9, 0x1, {0x22, 0x907}}}}, &(0x7f0000000980)={0x2c, &(0x7f00000006c0)={0x20, 0xf, 0xd8, "7426cae6743eb649e5c5ad0982e19e31159a52f2fe0b8f9ee96a9fda8021c9b9609b0374a733b6a38d3c4a62eb3128182d4d0246560b4241816db9113eb4d0af448b3d597cb11ca09ac551bd966f39d4c12b5da3ba6c4ef2d8481ae635365c94d6a1b124986342a5c73fba3f232cd2f26613e02b7c68168d7b761f8ead1c0f981ae7e6cc972c1bd1165f3e525f99770d1ec67b708010c8a103c654632810cc323f080e29cd4e1823db0c4bcc01e49320b7c775c5f3aafcc70021522a14431a4854c10205c298e31beb5bb0babb43264f023edf483f2b0cba"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000840)={0x20, 0x1, 0x98, "4bc602bfd0898e146a9f3977472bdcc6819f257a669aa533e99187b17cd51674977759a898e21cd56922e907a1253b51fee5eb555d863fc09cbc1782d14cf783859534fcabdd2270a38646b0f555cb67bcdd793ed85cbc8e07620443d2ad7fd50ef29e30054c1fbef76c68edfdc61b4a090e53b4439ea09039a164dbc500f09d2d3d4c01854a7ce37689fa959f77d05d51d3c537a50bf406"}, &(0x7f0000000900)={0x20, 0x3, 0x1, 0x6}}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x200, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x32, &(0x7f0000000080), 0x2, 0x8}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="201103000000053ff5"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000000705e37e1b"], 0x0) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) fsopen(&(0x7f0000000040)='proc\x00', 0x0) 933.631468ms ago: executing program 6 (id=3023): r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000a00)={0x40, 0xc, 0x4, "be128742"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000ec0)={0x1c, &(0x7f0000000180)={0x0, 0xd, 0x4, "6aa79e12"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000000840)={0x40, 0x11, 0x4c, "1b9333a18dfa3dffcaa0c2b939d1dd168c6707d2cd2da959eed754a0fd955ac23ce80e63357d41a8220ac019c5d6d90b0f75be61967302685f4290691ee55452eb8190939503bebafa315212"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 827.892414ms ago: executing program 2 (id=3016): ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000100)) r1 = dup(r0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000040)={0x0, r1}) 717.143386ms ago: executing program 7 (id=3017): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000100)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x1e5) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000440)={@generic={0x1a, "60896231a923bb6b1225a80e63e9c011711bfd3c1d4c82152417dc2577233e0b1078e322c14d18c9ac63f25f83046b6befdd364a83f3a9cc7aa621fd8f9866329756125852e6f850aa874fc7a5d985ef3fabda34a812930e2257c5de756d320980e5626f4043d5438d803d262128bb02da74cde60787a4e95f1fc2a98dbf"}, {&(0x7f0000000200)=""/140, 0x8c}, &(0x7f0000000300), 0x50}, 0xa0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 599.56036ms ago: executing program 7 (id=3018): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, 0x0, 0x0) write(r2, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000000), &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000000), 0x4) 259.732495ms ago: executing program 6 (id=3019): inotify_init1(0x800) socket$inet6(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000f5ffffff010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 183.757023ms ago: executing program 6 (id=3020): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x10, 0x200, &(0x7f0000000100)="000000000000000000000000000000000000000000000000000500"}) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0) 94.718786ms ago: executing program 2 (id=3021): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x6, 0x2, &(0x7f0000000140)={0x2, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9950cf5e1dee93"}}) 0s ago: executing program 6 (id=3022): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, 0x0, 0x0) write(r3, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000000), &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000000), 0x4) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000080)=0x9, 0x4) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000140)=[{0xe302, 0x14211, 0x0, 0x0}], 0x1}) kernel console output (not intermixed with test programs): 7][T13084] usb 7-1: config 0 descriptor?? [ 561.400971][ T25] r8152-cfgselector 3-1: USB disconnect, device number 123 [ 562.047062][T13954] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 562.416122][ T1732] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 562.467321][T13084] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 562.467390][T13084] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 562.469901][T13084] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 562.469992][T13084] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 562.470058][T13084] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 562.470316][T13084] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 562.472992][T13084] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 562.490732][T13084] usb 7-1: USB disconnect, device number 26 [ 562.634591][ T1732] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 562.639856][ T1732] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 562.639928][ T1732] usb 3-1: config 0 has no interface number 0 [ 562.640104][ T1732] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.640239][ T1732] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.640303][ T1732] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 562.640507][ T1732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.656390][ T1732] usb 3-1: config 0 descriptor?? [ 563.186041][T13958] sg_write: data in/out 360512/136 bytes for SCSI command 0x0-- guessing data in; [ 563.186041][T13958] program syz.6.2799 not setting count and/or reply_len properly [ 563.205856][T13958] trusted_key: encrypted_key: insufficient parameters specified [ 563.324233][ T1732] input: HID 28bd:0042 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.0042/input/input40 [ 563.427926][ T1732] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.0042/input/input41 [ 563.464173][ T25] usb 2-1: USB disconnect, device number 18 [ 563.566145][ T9309] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 563.670681][ T1732] uclogic 0003:28BD:0042.0042: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1 [ 563.743492][ T9309] usb 7-1: Using ep0 maxpacket: 8 [ 563.759557][ T9309] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 563.784453][ T9309] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.866555][ T9309] pvrusb2: Hardware description: Terratec Grabster AV400 [ 563.866607][ T9309] pvrusb2: ********** [ 563.866717][ T9309] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 563.866765][ T9309] pvrusb2: Important functionality might not be entirely working. [ 563.866807][ T9309] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 563.866910][ T9309] pvrusb2: ********** [ 564.077414][ T2361] pvrusb2: Invalid write control endpoint [ 564.176627][T13972] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 564.190707][T13972] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 564.201331][T13972] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 564.216136][T13972] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 564.228178][T13972] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 564.377883][ T989] usb 7-1: USB disconnect, device number 27 [ 564.403603][ T2361] pvrusb2: Invalid write control endpoint [ 564.403693][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 564.403706][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 564.403770][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 564.416421][ T2361] pvrusb2: Device being rendered inoperable [ 564.416685][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 564.416893][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 564.440106][ T2361] pvrusb2: Attached sub-driver cx25840 [ 564.440212][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 564.440246][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 564.809305][ T9309] usb 3-1: reset high-speed USB device number 124 using dummy_hcd [ 564.973787][T13983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.986448][T13983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.678824][T13084] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 565.726826][ T1732] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 565.851626][T13084] usb 7-1: Using ep0 maxpacket: 32 [ 565.859208][T13084] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 565.877806][T13084] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 565.886152][T13084] usb 7-1: config 0 has no interface number 0 [ 565.886210][T13084] usb 7-1: config 0 interface 184 has no altsetting 0 [ 565.907463][T13084] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.907966][ T1732] usb 2-1: Using ep0 maxpacket: 16 [ 565.913285][ T1732] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 565.930334][T13084] usb 7-1: Product: syz [ 565.930386][T13084] usb 7-1: Manufacturer: syz [ 565.930408][T13084] usb 7-1: SerialNumber: syz [ 565.951515][T13084] usb 7-1: config 0 descriptor?? [ 565.958537][ T1732] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.958590][ T1732] usb 2-1: config 0 has no interfaces? [ 565.990448][ T1732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.990503][ T1732] usb 2-1: Product: syz [ 565.990589][ T1732] usb 2-1: Manufacturer: syz [ 565.990651][ T1732] usb 2-1: SerialNumber: syz [ 566.029234][ T1732] usb 2-1: config 0 descriptor?? [ 566.512746][T13972] Bluetooth: hci6: command tx timeout [ 566.579438][T13971] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.579960][T13971] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.580778][T13971] bridge_slave_0: entered allmulticast mode [ 566.606204][T13971] bridge_slave_0: entered promiscuous mode [ 566.616485][T13971] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.617142][T13971] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.617725][T13971] bridge_slave_1: entered allmulticast mode [ 566.645085][T13971] bridge_slave_1: entered promiscuous mode [ 566.776032][T13971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.791577][T13971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.853392][ T5769] usb 3-1: USB disconnect, device number 124 [ 566.962301][T13971] team0: Port device team_slave_0 added [ 566.975831][T13971] team0: Port device team_slave_1 added [ 567.064860][T13971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.072142][T13971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.098553][T13971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.116458][T13971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.116499][T13971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.116568][T13971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.124058][T13084] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 567.124093][T13084] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 567.125168][T13084] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 567.125201][T13084] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 567.125222][T13084] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 567.125241][T13084] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 567.125492][T13084] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 567.251282][T13084] usb 7-1: USB disconnect, device number 28 [ 567.360101][T13971] hsr_slave_0: entered promiscuous mode [ 567.367153][T13971] hsr_slave_1: entered promiscuous mode [ 567.368202][T13971] debugfs: 'hsr0' already exists in 'hsr' [ 567.368232][T13971] Cannot create hsr debugfs directory [ 567.640970][ T5769] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 567.652678][T13971] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 567.664124][T13971] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 567.676186][T13971] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 567.701799][T13971] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 567.713235][T13971] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 567.751580][T13971] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 567.763740][T13971] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 567.801706][T13971] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 567.815874][ T5769] usb 3-1: Using ep0 maxpacket: 8 [ 567.823202][ T5769] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 567.845524][ T5769] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.888453][ T5769] pvrusb2: Hardware description: Terratec Grabster AV400 [ 567.896793][ T5769] pvrusb2: ********** [ 567.896880][ T5769] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 567.896899][ T5769] pvrusb2: Important functionality might not be entirely working. [ 567.896914][ T5769] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 567.896932][ T5769] pvrusb2: ********** [ 568.095951][T13971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.110738][ T2361] pvrusb2: Invalid write control endpoint [ 568.159919][T13971] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.183477][ T1419] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.183722][ T1419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.221752][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.221982][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.267668][ T2361] pvrusb2: Invalid write control endpoint [ 568.273771][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 568.284228][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 568.292362][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 568.294164][ T2361] pvrusb2: Device being rendered inoperable [ 568.296260][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 568.296316][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 568.321832][ T2361] pvrusb2: Attached sub-driver cx25840 [ 568.321875][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 568.321887][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 568.449346][ T25] usb 3-1: USB disconnect, device number 125 [ 568.738045][ T25] usb 2-1: USB disconnect, device number 19 [ 568.756199][T13972] Bluetooth: hci6: command tx timeout [ 569.296031][T13971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.458665][T13084] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 570.545021][T13971] veth0_vlan: entered promiscuous mode [ 570.565656][ T4982] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 570.565711][ T4982] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 570.565752][ T4982] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 570.565830][ T4982] loop0: [ 570.584852][T13971] veth1_vlan: entered promiscuous mode [ 570.620261][T13084] usb 7-1: Using ep0 maxpacket: 32 [ 570.622185][T13084] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 570.626047][T13084] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 570.626122][T13084] usb 7-1: config 0 has no interface number 0 [ 570.626262][T13084] usb 7-1: config 0 interface 184 has no altsetting 0 [ 570.660090][T13084] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.660155][T13084] usb 7-1: Product: syz [ 570.660195][T13084] usb 7-1: Manufacturer: syz [ 570.660239][T13084] usb 7-1: SerialNumber: syz [ 570.705030][T13084] usb 7-1: config 0 descriptor?? [ 570.793723][ T1732] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 570.840443][T14075] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2827'. [ 570.869714][T13971] veth0_macvtap: entered promiscuous mode [ 570.897103][T13971] veth1_macvtap: entered promiscuous mode [ 570.960111][T13971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.979280][ T1732] usb 3-1: Using ep0 maxpacket: 16 [ 570.985704][T13971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.987384][ T1732] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 571.005657][ T1732] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.005752][ T1732] usb 3-1: config 0 has no interfaces? [ 571.016499][T13972] Bluetooth: hci6: command tx timeout [ 571.024909][ T1732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.025062][ T1732] usb 3-1: Product: syz [ 571.025144][ T1732] usb 3-1: Manufacturer: syz [ 571.025283][ T1732] usb 3-1: SerialNumber: syz [ 571.060971][ T1732] usb 3-1: config 0 descriptor?? [ 571.153187][ T9401] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.163960][ T9401] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.172944][ T9401] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.196110][ T9401] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.212687][ T9309] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 571.316908][ T1419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.316962][ T1419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.392658][ T9402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.392717][ T9402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.400778][ T9309] usb 2-1: Using ep0 maxpacket: 8 [ 571.403453][ T9309] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 571.417102][ T9309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.422766][T13084] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 571.422798][T13084] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 571.467275][ T9309] pvrusb2: Hardware description: Terratec Grabster AV400 [ 571.477798][ T9309] pvrusb2: ********** [ 571.481940][ T9309] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 571.481960][ T9309] pvrusb2: Important functionality might not be entirely working. [ 571.481971][ T9309] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 571.481984][ T9309] pvrusb2: ********** [ 571.634044][ T31] audit: type=1800 audit(1787189114.626:91): pid=14079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2803" name="bus" dev="overlay" ino=25 res=0 errno=0 [ 571.643004][T14079] FAULT_INJECTION: forcing a failure. [ 571.643004][T14079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.643180][T14079] CPU: 1 UID: 0 PID: 14079 Comm: syz.7.2803 Tainted: G L syzkaller #0 PREEMPT(full) [ 571.643272][T14079] Tainted: [L]=SOFTLOCKUP [ 571.643295][T14079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 571.643339][T14079] Call Trace: [ 571.643362][T14079] [ 571.643390][T14079] dump_stack_lvl+0xe8/0x150 [ 571.643493][T14079] should_fail_ex+0x410/0x560 [ 571.643600][T14079] _copy_to_user+0x31/0xb0 [ 571.643673][T14079] simple_read_from_buffer+0xe1/0x170 [ 571.643761][T14079] proc_fail_nth_read+0x1bb/0x230 [ 571.643838][T14079] ? common_file_perm+0x20e/0x2b0 [ 571.643920][T14079] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 571.644031][T14079] ? rw_verify_area+0x24a/0x4c0 [ 571.644122][T14079] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 571.644204][T14079] vfs_read+0x213/0xa80 [ 571.644290][T14079] ? __pfx___mutex_lock+0x10/0x10 [ 571.644354][T14079] ? __pfx_vfs_read+0x10/0x10 [ 571.644439][T14079] ? __fget_files+0x2a/0x420 [ 571.644516][T14079] ? __fget_files+0x3a2/0x420 [ 571.644614][T14079] ? __fget_files+0x2a/0x420 [ 571.644720][T14079] ksys_read+0x150/0x270 [ 571.644806][T14079] ? __pfx_ksys_read+0x10/0x10 [ 571.644902][T14079] do_syscall_64+0x166/0x520 [ 571.644956][T14079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.645020][T14079] ? clear_bhb_loop+0x70/0xc0 [ 571.645092][T14079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.645155][T14079] RIP: 0033:0x7f0634d5e90e [ 571.645215][T14079] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 571.645261][T14079] RSP: 002b:00007f0632ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 571.645332][T14079] RAX: ffffffffffffffda RBX: 00007f0632ff66c0 RCX: 00007f0634d5e90e [ 571.645390][T14079] RDX: 000000000000000f RSI: 00007f0632ff60a0 RDI: 0000000000000004 [ 571.645448][T14079] RBP: 00007f0632ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 571.645489][T14079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.645523][T14079] R13: 00007f0635026038 R14: 00007f0635025fa0 R15: 00007ffe19a87f48 [ 571.645616][T14079] [ 571.700882][T13084] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 571.700919][T13084] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 571.700949][T13084] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 571.700971][T13084] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 571.701262][T13084] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 571.772132][T13084] usb 7-1: USB disconnect, device number 29 [ 571.907794][ T2361] pvrusb2: Invalid write control endpoint [ 572.093035][ T2361] pvrusb2: Invalid write control endpoint [ 572.093083][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 572.093113][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 572.093124][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 572.093162][ T2361] pvrusb2: Device being rendered inoperable [ 572.099975][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 572.100037][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 572.108456][ T2361] pvrusb2: Attached sub-driver cx25840 [ 572.108517][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 572.108549][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 572.198998][T13084] usb 2-1: USB disconnect, device number 20 [ 572.572337][T14089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 573.157943][T14098] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 573.158233][T14098] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 573.158492][T14098] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 573.158569][T14098] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 573.159615][T13084] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 573.216426][T14098] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 573.228400][T14098] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 573.236732][T14098] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 573.253620][T14098] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 573.263376][T14098] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 573.269597][ T5614] Bluetooth: hci6: command tx timeout [ 573.278754][T14098] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 573.285985][T14101] jffs2: notice: (14101) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 573.307771][T14098] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 573.329410][T14098] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 573.336440][T13084] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 573.338241][T14098] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 573.364527][T14098] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 573.382593][T14098] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 573.382847][T14098] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 573.389418][T13084] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.389439][T13084] usb 7-1: Product: syz [ 573.389452][T13084] usb 7-1: Manufacturer: syz [ 573.389482][T13084] usb 7-1: SerialNumber: syz [ 573.430900][T13084] usb 7-1: config 0 descriptor?? [ 573.441505][T13084] usb 7-1: Waiting for MOTU Microbook II to boot up... [ 573.448635][T13084] usb 7-1: failed setting the sample rate for Motu MicroBook II: -22 [ 573.456908][T13084] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 573.476652][T14098] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 573.733414][ T9309] usb 7-1: USB disconnect, device number 30 [ 573.865346][ T5705] usb 3-1: USB disconnect, device number 126 [ 573.874322][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.066842][ T1732] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 574.119480][T14125] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 574.209339][T14127] netlink: 'syz.7.2842': attribute type 5 has an invalid length. [ 574.209395][T14127] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2842'. [ 574.251163][ T1732] usb 2-1: Using ep0 maxpacket: 32 [ 574.257271][ T1732] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 574.269948][ T1732] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 574.270026][ T1732] usb 2-1: config 0 has no interface number 0 [ 574.270257][ T1732] usb 2-1: config 0 interface 184 has no altsetting 0 [ 574.295031][ T5705] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 574.295825][ T1732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.295875][ T1732] usb 2-1: Product: syz [ 574.295931][ T1732] usb 2-1: Manufacturer: syz [ 574.295955][ T1732] usb 2-1: SerialNumber: syz [ 574.336642][ T1732] usb 2-1: config 0 descriptor?? [ 574.457919][ T5705] usb 3-1: Using ep0 maxpacket: 8 [ 574.463589][ T5705] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 574.485649][ T5705] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.485788][ T5705] usb 3-1: config 0 has no interfaces? [ 574.486043][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.512892][ T5705] usb 3-1: config 0 descriptor?? [ 575.051456][ T1732] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 575.051599][ T1732] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 575.282187][ T1732] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 575.282247][ T1732] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 575.282325][ T1732] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 575.282352][ T1732] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 575.283421][ T1732] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 575.345899][ T5614] Bluetooth: hci4: command 0x0405 tx timeout [ 575.345970][ T5614] Bluetooth: hci2: command 0x0406 tx timeout [ 575.346345][T13972] Bluetooth: hci5: command 0x0c1a tx timeout [ 575.377391][ T1732] usb 2-1: USB disconnect, device number 21 [ 575.408336][ T31] audit: type=1800 audit(1787189118.105:92): pid=14139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2846" name="bus" dev="overlay" ino=616 res=0 errno=0 [ 575.432379][T14137] Bluetooth: hci1: command 0x0c1a tx timeout [ 575.432537][T14137] Bluetooth: hci0: command 0x0c1a tx timeout [ 575.520813][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 575.605834][ T52] Bluetooth: hci6: command 0x0405 tx timeout [ 575.844085][T13084] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 576.000280][T14148] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 576.007590][T13084] usb 7-1: Using ep0 maxpacket: 16 [ 576.013905][T13084] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 576.022278][T13084] usb 7-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config [ 576.022365][T13084] usb 7-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 576.037520][T13084] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.037551][T13084] usb 7-1: Product: syz [ 576.037568][T13084] usb 7-1: Manufacturer: syz [ 576.037585][T13084] usb 7-1: SerialNumber: syz [ 576.181491][T14150] FAULT_INJECTION: forcing a failure. [ 576.181491][T14150] name failslab, interval 1, probability 0, space 0, times 0 [ 576.181586][T14150] CPU: 1 UID: 0 PID: 14150 Comm: syz.1.2851 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.181622][T14150] Tainted: [L]=SOFTLOCKUP [ 576.181632][T14150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 576.181646][T14150] Call Trace: [ 576.181694][T14150] [ 576.181723][T14150] dump_stack_lvl+0xe8/0x150 [ 576.181811][T14150] should_fail_ex+0x410/0x560 [ 576.181927][T14150] should_failslab+0xa8/0x100 [ 576.181979][T14150] ? do_getname+0x2e/0x250 [ 576.182047][T14150] kmem_cache_alloc_noprof+0xa1/0x600 [ 576.182135][T14150] ? do_getname+0x2e/0x250 [ 576.182212][T14150] do_getname+0x2e/0x250 [ 576.182268][T14150] ? getname_uflags+0x11/0x30 [ 576.182334][T14150] __se_sys_name_to_handle_at+0x1ad/0x9e0 [ 576.182501][T14150] ? fput+0xa0/0xd0 [ 576.182564][T14150] ? __pfx___se_sys_name_to_handle_at+0x10/0x10 [ 576.182629][T14150] ? ksys_write+0x242/0x270 [ 576.182723][T14150] ? __x64_sys_name_to_handle_at+0x20/0xc0 [ 576.182797][T14150] do_syscall_64+0x166/0x520 [ 576.182860][T14150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.182925][T14150] ? clear_bhb_loop+0x70/0xc0 [ 576.183006][T14150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.183069][T14150] RIP: 0033:0x7fc0c379e0d9 [ 576.183125][T14150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.183186][T14150] RSP: 002b:00007fc0c19f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 576.183270][T14150] RAX: ffffffffffffffda RBX: 00007fc0c3a25fa0 RCX: 00007fc0c379e0d9 [ 576.183322][T14150] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 576.183359][T14150] RBP: 00007fc0c19f6090 R08: 0000000000000000 R09: 0000000000000000 [ 576.183402][T14150] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.183453][T14150] R13: 00007fc0c3a26038 R14: 00007fc0c3a25fa0 R15: 00007ffc51034f58 [ 576.183539][T14150] [ 576.549124][ T1732] usb 7-1: USB disconnect, device number 31 [ 577.260047][ T9309] usb 3-1: USB disconnect, device number 127 [ 577.601842][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 577.689639][T14137] Bluetooth: hci1: command 0x0c1a tx timeout [ 577.695940][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 577.762348][ T1732] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 577.773244][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 577.773320][ T5699] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 577.860130][ T52] Bluetooth: hci6: command 0x0405 tx timeout [ 577.903305][ T1732] usb 2-1: device descriptor read/64, error -71 [ 577.949028][ T5699] usb 3-1: Using ep0 maxpacket: 32 [ 577.953152][ T5699] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 577.961440][ T5699] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 577.961522][ T5699] usb 3-1: config 0 has no interface number 0 [ 577.961649][ T5699] usb 3-1: config 0 interface 184 has no altsetting 0 [ 577.989626][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.989681][ T5699] usb 3-1: Product: syz [ 577.989706][ T5699] usb 3-1: Manufacturer: syz [ 577.991197][ T5699] usb 3-1: SerialNumber: syz [ 578.014532][ T5699] usb 3-1: config 0 descriptor?? [ 578.077901][T14171] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 578.163484][ T1732] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 578.315143][ T1732] usb 2-1: device descriptor read/64, error -71 [ 578.334240][T14175] jffs2: notice: (14175) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 578.435069][ T1732] usb usb2-port1: attempt power cycle [ 578.696470][ T5699] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 578.696533][ T5699] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 578.802877][ T1732] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 578.825224][ T1732] usb 2-1: device descriptor read/8, error -71 [ 578.935077][ T5699] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 578.935141][ T5699] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 578.935166][ T5699] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 578.935229][ T5699] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 578.935932][ T5699] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 578.955482][ T5699] usb 3-1: USB disconnect, device number 2 [ 579.085071][T13084] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 579.138834][ T1732] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 579.163272][ T1732] usb 2-1: device descriptor read/8, error -71 [ 579.247372][T13084] usb 7-1: Using ep0 maxpacket: 8 [ 579.254191][T13084] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 579.258148][T13084] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.258232][T13084] usb 7-1: config 0 has no interfaces? [ 579.258327][T13084] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.270229][T13084] usb 7-1: config 0 descriptor?? [ 579.296951][ T1732] usb usb2-port1: unable to enumerate USB device [ 579.598268][T14189] jffs2: notice: (14189) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 579.865180][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 579.931257][ T1732] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 579.941592][T14137] Bluetooth: hci1: command 0x0c1a tx timeout [ 579.941712][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 580.027503][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 580.092478][ T1732] usb 3-1: Using ep0 maxpacket: 8 [ 580.095517][ T1732] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 580.101425][ T1732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.115078][ T52] Bluetooth: hci6: command 0x0405 tx timeout [ 580.143724][ T1732] pvrusb2: Hardware description: Terratec Grabster AV400 [ 580.143783][ T1732] pvrusb2: ********** [ 580.150698][ T1732] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 580.150761][ T1732] pvrusb2: Important functionality might not be entirely working. [ 580.150792][ T1732] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 580.150915][ T1732] pvrusb2: ********** [ 580.364237][ T2361] pvrusb2: Invalid write control endpoint [ 580.415636][ T2361] pvrusb2: Invalid write control endpoint [ 580.421719][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 580.421737][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 580.421748][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 580.421762][ T2361] pvrusb2: Device being rendered inoperable [ 580.421797][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 580.421852][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 580.435873][ T2361] pvrusb2: Attached sub-driver cx25840 [ 580.435903][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 580.435915][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 580.593245][T13084] usb 3-1: USB disconnect, device number 3 [ 580.842519][T14199] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 582.100729][ T1732] usb 7-1: USB disconnect, device number 32 [ 582.238313][ T5699] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 582.275390][T14225] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 582.401586][ T5699] usb 2-1: Using ep0 maxpacket: 32 [ 582.407995][ T5699] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 582.419174][ T5699] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 582.427931][ T5699] usb 2-1: config 0 has no interface number 0 [ 582.428018][ T5699] usb 2-1: config 0 interface 184 has no altsetting 0 [ 582.444226][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.452348][ T5699] usb 2-1: Product: syz [ 582.452373][ T5699] usb 2-1: Manufacturer: syz [ 582.452392][ T5699] usb 2-1: SerialNumber: syz [ 582.472210][ T5699] usb 2-1: config 0 descriptor?? [ 582.845256][T13084] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 583.018679][T13084] usb 3-1: Using ep0 maxpacket: 16 [ 583.025252][T13084] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 583.036002][T13084] usb 3-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config [ 583.036049][T13084] usb 3-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 583.060052][T13084] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.068553][T13084] usb 3-1: Product: syz [ 583.073222][T13084] usb 3-1: Manufacturer: syz [ 583.079646][T13084] usb 3-1: SerialNumber: syz [ 583.150422][ T5699] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 583.162835][ T5699] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 583.172821][ T5699] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 583.173233][ T5699] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 583.548652][T13084] usb 3-1: USB disconnect, device number 4 [ 583.983250][ T989] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 584.146655][ T989] usb 7-1: Using ep0 maxpacket: 8 [ 584.148335][ T989] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 584.154695][ T989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.188373][ T989] pvrusb2: Hardware description: Terratec Grabster AV400 [ 584.188422][ T989] pvrusb2: ********** [ 584.188453][ T989] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 584.188471][ T989] pvrusb2: Important functionality might not be entirely working. [ 584.188482][ T989] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 584.188494][ T989] pvrusb2: ********** [ 584.398030][ T2361] pvrusb2: Invalid write control endpoint [ 584.463282][ T2361] pvrusb2: Invalid write control endpoint [ 584.463333][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 584.463363][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 584.463378][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 584.463395][ T2361] pvrusb2: Device being rendered inoperable [ 584.463441][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 584.463533][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 584.465041][ T2361] pvrusb2: Attached sub-driver cx25840 [ 584.465062][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 584.465088][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 584.629033][ T989] usb 7-1: USB disconnect, device number 33 [ 585.212845][T14243] FAULT_INJECTION: forcing a failure. [ 585.212845][T14243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.212905][T14243] CPU: 1 UID: 0 PID: 14243 Comm: syz.2.2884 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.212938][T14243] Tainted: [L]=SOFTLOCKUP [ 585.212973][T14243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 585.213019][T14243] Call Trace: [ 585.213049][T14243] [ 585.213086][T14243] dump_stack_lvl+0xe8/0x150 [ 585.213182][T14243] should_fail_ex+0x410/0x560 [ 585.213288][T14243] _copy_from_user+0x2d/0xb0 [ 585.213345][T14243] ___sys_sendmsg+0x1c6/0x360 [ 585.213428][T14243] ? __lock_acquire+0x6df/0x2e50 [ 585.213529][T14243] ? __pfx____sys_sendmsg+0x10/0x10 [ 585.213614][T14243] ? kstrtouint+0x6e/0xe0 [ 585.213759][T14243] ? __fget_files+0x2a/0x420 [ 585.213824][T14243] ? __fget_files+0x3a2/0x420 [ 585.213912][T14243] __sys_sendmmsg+0x273/0x4d0 [ 585.214006][T14243] ? __pfx___sys_sendmmsg+0x10/0x10 [ 585.214110][T14243] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 585.214206][T14243] ? ksys_write+0x242/0x270 [ 585.214291][T14243] ? __pfx_ksys_write+0x10/0x10 [ 585.214384][T14243] __x64_sys_sendmmsg+0xa0/0xc0 [ 585.214482][T14243] do_syscall_64+0x166/0x520 [ 585.214542][T14243] ? trace_irq_disable+0x3b/0x140 [ 585.214632][T14243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.214695][T14243] ? clear_bhb_loop+0x70/0xc0 [ 585.214767][T14243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.214823][T14243] RIP: 0033:0x7f9cf3d9e0d9 [ 585.214893][T14243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.214952][T14243] RSP: 002b:00007f9cf4c0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 585.215017][T14243] RAX: ffffffffffffffda RBX: 00007f9cf4025fa0 RCX: 00007f9cf3d9e0d9 [ 585.215061][T14243] RDX: 0000000000000001 RSI: 0000200000003b00 RDI: 0000000000000003 [ 585.215103][T14243] RBP: 00007f9cf4c0c090 R08: 0000000000000000 R09: 0000000000000000 [ 585.215144][T14243] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 585.215185][T14243] R13: 00007f9cf4026038 R14: 00007f9cf4025fa0 R15: 00007fff45822118 [ 585.215270][T14243] [ 585.493086][ T5705] usb 2-1: USB disconnect, device number 26 [ 585.773561][T14253] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 585.988611][ T5705] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 586.150755][ T5705] usb 2-1: Using ep0 maxpacket: 8 [ 586.156949][ T5705] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 586.169621][ T5705] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.180264][ T5705] usb 2-1: config 0 has no interfaces? [ 586.180358][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.196350][ T9309] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 586.211186][ T5705] usb 2-1: config 0 descriptor?? [ 586.378423][ T9309] usb 7-1: Using ep0 maxpacket: 16 [ 586.384861][ T9309] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 586.397130][ T9309] usb 7-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 586.411525][ T9309] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.420087][ T9309] usb 7-1: Product: syz [ 586.420153][ T9309] usb 7-1: Manufacturer: syz [ 586.420173][ T9309] usb 7-1: SerialNumber: syz [ 586.895291][ T5705] usb 7-1: USB disconnect, device number 34 [ 587.819771][T13084] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 587.982354][T13084] usb 7-1: Using ep0 maxpacket: 32 [ 587.984129][T13084] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 587.988343][T13084] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 587.988432][T13084] usb 7-1: config 0 has no interface number 0 [ 587.988571][T13084] usb 7-1: config 0 interface 184 has no altsetting 0 [ 588.008579][T13084] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.008616][T13084] usb 7-1: Product: syz [ 588.008635][T13084] usb 7-1: Manufacturer: syz [ 588.008654][T13084] usb 7-1: SerialNumber: syz [ 588.029984][T13084] usb 7-1: config 0 descriptor?? [ 588.440368][ T1679] block nbd0: Possible stuck request ffff888026e1e000: control (read@0,1024B). Runtime 240 seconds [ 588.440445][ T1679] block nbd0: Possible stuck request ffff888026e1e1c0: control (read@1024,3072B). Runtime 240 seconds [ 588.696107][T13084] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 588.696169][T13084] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 588.696278][T13084] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 588.696910][T13084] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32 [ 588.891891][ T9309] usb 2-1: USB disconnect, device number 27 [ 589.128208][T14275] FAULT_INJECTION: forcing a failure. [ 589.128208][T14275] name failslab, interval 1, probability 0, space 0, times 0 [ 589.142894][T14275] CPU: 1 UID: 0 PID: 14275 Comm: syz.2.2897 Tainted: G L syzkaller #0 PREEMPT(full) [ 589.142938][T14275] Tainted: [L]=SOFTLOCKUP [ 589.142949][T14275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 589.142964][T14275] Call Trace: [ 589.142974][T14275] [ 589.142986][T14275] dump_stack_lvl+0xe8/0x150 [ 589.143026][T14275] should_fail_ex+0x410/0x560 [ 589.143065][T14275] ? __alloc_skb+0x1db/0x7a0 [ 589.143091][T14275] should_failslab+0xa8/0x100 [ 589.143118][T14275] ? __alloc_skb+0x1db/0x7a0 [ 589.143141][T14275] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 589.143173][T14275] ? __alloc_skb+0x18d/0x7a0 [ 589.143198][T14275] ? __alloc_skb+0x1db/0x7a0 [ 589.143230][T14275] __alloc_skb+0x1db/0x7a0 [ 589.143260][T14275] netlink_sendmsg+0x5d4/0xb40 [ 589.143305][T14275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.143345][T14275] ? apparmor_socket_sendmsg+0x98/0x360 [ 589.143381][T14275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.143413][T14275] sock_sendmsg_nosec+0x13a/0x180 [ 589.143453][T14275] ____sys_sendmsg+0x54e/0x850 [ 589.143496][T14275] ? __pfx_____sys_sendmsg+0x10/0x10 [ 589.143535][T14275] ? import_iovec+0x73/0xa0 [ 589.143562][T14275] ___sys_sendmsg+0x2a5/0x360 [ 589.143591][T14275] ? __lock_acquire+0x6df/0x2e50 [ 589.143631][T14275] ? __pfx____sys_sendmsg+0x10/0x10 [ 589.143659][T14275] ? __lock_acquire+0x6df/0x2e50 [ 589.143697][T14275] ? kstrtouint+0x6e/0xe0 [ 589.143768][T14275] __sys_sendmmsg+0x273/0x4d0 [ 589.143804][T14275] ? __pfx___sys_sendmmsg+0x10/0x10 [ 589.143843][T14275] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 589.143882][T14275] ? ksys_write+0x242/0x270 [ 589.143915][T14275] ? __pfx_ksys_write+0x10/0x10 [ 589.143952][T14275] __x64_sys_sendmmsg+0xa0/0xc0 [ 589.143985][T14275] do_syscall_64+0x166/0x520 [ 589.144007][T14275] ? trace_irq_disable+0x3b/0x140 [ 589.144042][T14275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.144067][T14275] ? clear_bhb_loop+0x70/0xc0 [ 589.144096][T14275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.144119][T14275] RIP: 0033:0x7f9cf3d9e0d9 [ 589.144141][T14275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.144162][T14275] RSP: 002b:00007f9cf4c0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 589.144189][T14275] RAX: ffffffffffffffda RBX: 00007f9cf4025fa0 RCX: 00007f9cf3d9e0d9 [ 589.144207][T14275] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 589.144223][T14275] RBP: 00007f9cf4c0c090 R08: 0000000000000000 R09: 0000000000000000 [ 589.144239][T14275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.144253][T14275] R13: 00007f9cf4026038 R14: 00007f9cf4025fa0 R15: 00007fff45822118 [ 589.144289][T14275] [ 589.321248][ T9309] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 589.407828][T14277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 589.523412][ T9309] usb 2-1: Using ep0 maxpacket: 8 [ 589.530415][ T9309] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 589.543030][ T9309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.576958][ T9309] pvrusb2: Hardware description: Terratec Grabster AV400 [ 589.577037][ T9309] pvrusb2: ********** [ 589.577048][ T9309] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 589.577100][ T9309] pvrusb2: Important functionality might not be entirely working. [ 589.577135][ T9309] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 589.577232][ T9309] pvrusb2: ********** [ 589.770711][ T1732] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 589.791842][ T2361] pvrusb2: Invalid write control endpoint [ 589.841893][ T2361] pvrusb2: Invalid write control endpoint [ 589.841940][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 589.843011][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 589.843052][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 589.843084][ T2361] pvrusb2: Device being rendered inoperable [ 589.843198][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 589.843658][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 589.854915][ T2361] pvrusb2: Attached sub-driver cx25840 [ 589.854962][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 589.854995][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 589.976558][ T1732] usb 3-1: Using ep0 maxpacket: 8 [ 589.982555][ T1732] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 589.987289][ T1732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.024130][ T1732] pvrusb2: Hardware description: Terratec Grabster AV400 [ 590.024215][ T1732] pvrusb2: ********** [ 590.028908][ T1732] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 590.028977][ T1732] pvrusb2: Important functionality might not be entirely working. [ 590.029056][ T1732] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 590.029101][ T1732] pvrusb2: ********** [ 590.084518][ T10] usb 2-1: USB disconnect, device number 28 [ 590.237314][ T2361] pvrusb2: Invalid write control endpoint [ 590.295581][ T2361] pvrusb2: Invalid write control endpoint [ 590.301759][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 590.311194][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 590.320596][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 590.331508][ T2361] pvrusb2: Device being rendered inoperable [ 590.331560][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 590.331615][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 590.357102][ T2361] pvrusb2: Attached sub-driver cx25840 [ 590.357136][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 590.357164][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 590.467878][ T30] usb 3-1: USB disconnect, device number 5 [ 590.840991][ T30] usb 7-1: USB disconnect, device number 35 [ 591.027922][ T9309] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 591.072591][T14294] loop7: detected capacity change from 0 to 16384 [ 591.215657][ T9309] usb 2-1: Using ep0 maxpacket: 8 [ 591.216759][ T9309] usb 2-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 591.242293][ T9309] usb 2-1: config 2 has an invalid interface number: 241 but max is 0 [ 591.242357][ T9309] usb 2-1: config 2 has no interface number 0 [ 591.242805][ T9309] usb 2-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid maxpacket 56961, setting to 1024 [ 591.243029][ T9309] usb 2-1: config 2 interface 241 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 591.243101][ T9309] usb 2-1: config 2 interface 241 has no altsetting 0 [ 591.252191][ T9309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.252282][ T9309] usb 2-1: Product: syz [ 591.252533][ T9309] usb 2-1: Manufacturer: syz [ 591.252586][ T9309] usb 2-1: SerialNumber: syz [ 591.285134][T14289] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 591.304145][ T9309] ti_usb_3410_5052 2-1:2.241: TI USB 3410 1 port adapter converter detected [ 591.346320][ T9309] usb 2-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 591.408066][T14295] loop7: detected capacity change from 16384 to 0 [ 591.410483][ C0] blk_print_req_error: 11 callbacks suppressed [ 591.410594][ C0] I/O error, dev loop7, sector 6912 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 591.524236][T14289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.524685][T14289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.546972][ T9309] usb 2-1: USB disconnect, device number 29 [ 591.573046][ T9309] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 591.584027][ T9309] ti_usb_3410_5052 2-1:2.241: device disconnected [ 591.885893][T14303] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 591.984648][T14308] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2910'. [ 592.295765][ T30] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 592.340128][T13084] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 592.416098][ T9309] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 592.458321][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 592.462780][ T30] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 592.474485][ T30] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 592.474538][ T30] usb 7-1: config 0 has no interface number 0 [ 592.474643][ T30] usb 7-1: config 0 interface 184 has no altsetting 0 [ 592.482332][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.482418][ T30] usb 7-1: Product: syz [ 592.482462][ T30] usb 7-1: Manufacturer: syz [ 592.482506][ T30] usb 7-1: SerialNumber: syz [ 592.494098][ T30] usb 7-1: config 0 descriptor?? [ 592.504358][T13084] usb 3-1: Using ep0 maxpacket: 8 [ 592.510410][T13084] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 592.522005][T13084] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.558456][T13084] pvrusb2: Hardware description: Terratec Grabster AV400 [ 592.558535][T13084] pvrusb2: ********** [ 592.558563][T13084] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 592.558582][T13084] pvrusb2: Important functionality might not be entirely working. [ 592.558596][T13084] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 592.558613][T13084] pvrusb2: ********** [ 592.631744][ T9309] usb 2-1: Using ep0 maxpacket: 8 [ 592.637826][ T9309] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 592.649004][ T9309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.675925][ T9309] pvrusb2: Hardware description: Terratec Grabster AV400 [ 592.683235][ T9309] pvrusb2: ********** [ 592.687531][ T9309] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 592.698849][ T9309] pvrusb2: Important functionality might not be entirely working. [ 592.698900][ T9309] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 592.698919][ T9309] pvrusb2: ********** [ 592.778242][ T2361] pvrusb2: Invalid write control endpoint [ 592.845054][ T2361] pvrusb2: Invalid write control endpoint [ 592.852672][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 592.864045][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 592.871820][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 592.884173][ T2361] pvrusb2: Device being rendered inoperable [ 592.884287][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 592.884387][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 592.912102][ T2361] pvrusb2: Attached sub-driver cx25840 [ 592.917833][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 592.928163][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 592.938206][ T2361] pvrusb2: Invalid write control endpoint [ 593.030300][ T2361] pvrusb2: Invalid write control endpoint [ 593.038829][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 593.049224][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 593.057655][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 593.057744][ T2361] pvrusb2: Device being rendered inoperable [ 593.068207][ T2361] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 593.068306][ T2361] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 593.074741][T13084] usb 3-1: USB disconnect, device number 6 [ 593.101102][ T2361] pvrusb2: Attached sub-driver cx25840 [ 593.101138][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 593.101167][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 593.174418][ T30] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 593.174481][ T30] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 593.174505][ T30] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 593.175260][ T30] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32 [ 593.237604][ T30] usb 2-1: USB disconnect, device number 30 [ 594.279775][T14333] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 594.360767][T14335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 594.690925][ T989] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 594.864314][ T989] usb 3-1: Using ep0 maxpacket: 16 [ 594.866144][ T989] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 594.869745][ T989] usb 3-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 594.875863][ T989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.875951][ T989] usb 3-1: Product: syz [ 594.875996][ T989] usb 3-1: Manufacturer: syz [ 594.876039][ T989] usb 3-1: SerialNumber: syz [ 595.308178][ T989] usb 7-1: USB disconnect, device number 36 [ 595.346316][ T30] usb 3-1: USB disconnect, device number 7 [ 595.536298][ T9309] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 595.698817][ T9309] usb 2-1: Using ep0 maxpacket: 8 [ 595.704811][ T9309] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 595.711223][ T9309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.731325][ T989] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 595.737840][ T9309] pvrusb2: Hardware description: Terratec Grabster AV400 [ 595.737901][ T9309] pvrusb2: ********** [ 595.737917][ T9309] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 595.738003][ T9309] pvrusb2: Important functionality might not be entirely working. [ 595.738034][ T9309] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 595.738068][ T9309] pvrusb2: ********** [ 595.937240][ T989] usb 7-1: Using ep0 maxpacket: 8 [ 595.944562][ T989] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 595.955196][ T989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.957283][ T2361] pvrusb2: Invalid write control endpoint [ 596.003675][ T989] pvrusb2: Hardware description: Terratec Grabster AV400 [ 596.011737][ T989] pvrusb2: ********** [ 596.011783][ T989] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 596.011803][ T989] pvrusb2: Important functionality might not be entirely working. [ 596.011818][ T989] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 596.011836][ T989] pvrusb2: ********** [ 596.107308][ T2361] pvrusb2: Invalid write control endpoint [ 596.114091][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 596.114114][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 596.115561][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 596.115575][ T2361] pvrusb2: Device being rendered inoperable [ 596.115630][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 596.116165][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 596.117653][ T2361] pvrusb2: Attached sub-driver cx25840 [ 596.117668][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 596.117680][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 596.207940][ T2361] pvrusb2: Invalid write control endpoint [ 596.232186][ T9309] usb 2-1: USB disconnect, device number 31 [ 596.262390][ T5699] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 596.311413][ T2361] pvrusb2: Invalid write control endpoint [ 596.318213][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 596.328242][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 596.336662][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 596.346979][ T2361] pvrusb2: Device being rendered inoperable [ 596.347028][ T2361] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 596.347086][ T2361] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 596.374744][ T2361] pvrusb2: Attached sub-driver cx25840 [ 596.374789][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 596.374818][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 596.431901][ T989] usb 7-1: USB disconnect, device number 37 [ 596.446605][ T5699] usb 3-1: Using ep0 maxpacket: 8 [ 596.456342][ T5699] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 596.461246][ T5699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.497023][ T5699] pvrusb2: Hardware description: Terratec Grabster AV400 [ 596.497059][ T5699] pvrusb2: ********** [ 596.497904][ T5699] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 596.497955][ T5699] pvrusb2: Important functionality might not be entirely working. [ 596.497980][ T5699] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 596.498013][ T5699] pvrusb2: ********** [ 596.708014][ T2361] pvrusb2: Invalid write control endpoint [ 596.805511][ T2361] pvrusb2: Invalid write control endpoint [ 596.805551][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 596.805582][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 596.805598][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 596.805614][ T2361] pvrusb2: Device being rendered inoperable [ 596.806841][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 596.806900][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 596.844464][ T2361] pvrusb2: Attached sub-driver cx25840 [ 596.844514][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 596.844547][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 596.949166][ T5699] usb 3-1: USB disconnect, device number 8 [ 597.048129][T14356] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 597.508819][ T10] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 597.685128][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 597.693421][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 597.702774][ T10] usb 7-1: too many configurations: 74, using maximum allowed: 8 [ 597.712456][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.722900][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 597.733592][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.744003][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 597.754463][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.764848][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 597.779179][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.779256][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 597.800424][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.810747][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 597.821380][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.831988][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 597.843130][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.853774][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 597.864363][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.874776][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 597.890084][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.898699][ T10] usb 7-1: Product: syz [ 597.903180][ T10] usb 7-1: Manufacturer: syz [ 597.903204][ T10] usb 7-1: SerialNumber: syz [ 598.209692][ T10] usb 7-1: USB disconnect, device number 38 [ 598.224681][ T5699] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 598.290893][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 598.399361][ T5699] usb 3-1: Using ep0 maxpacket: 32 [ 598.403354][ T5699] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 598.406439][ T5699] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 598.406523][ T5699] usb 3-1: config 0 has no interface number 0 [ 598.406997][ T5699] usb 3-1: config 0 interface 184 has no altsetting 0 [ 598.415138][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.415221][ T5699] usb 3-1: Product: syz [ 598.415264][ T5699] usb 3-1: Manufacturer: syz [ 598.415306][ T5699] usb 3-1: SerialNumber: syz [ 598.433244][ T5699] usb 3-1: config 0 descriptor?? [ 598.527599][T13084] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 598.690055][T13084] usb 2-1: Using ep0 maxpacket: 8 [ 598.692442][T13084] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 598.697528][T13084] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.728235][T13084] pvrusb2: Hardware description: Terratec Grabster AV400 [ 598.728288][T13084] pvrusb2: ********** [ 598.728315][T13084] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 598.728408][T13084] pvrusb2: Important functionality might not be entirely working. [ 598.728451][T13084] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 598.728484][T13084] pvrusb2: ********** [ 598.944709][ T2361] pvrusb2: Invalid write control endpoint [ 599.123901][ T5699] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 599.123957][ T5699] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 599.125281][ T5699] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 599.125991][ T5699] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 599.170396][ T2361] pvrusb2: Invalid write control endpoint [ 599.170434][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 599.170473][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 599.170487][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 599.170504][ T2361] pvrusb2: Device being rendered inoperable [ 599.170538][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 599.170591][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 599.183028][ T2361] pvrusb2: Attached sub-driver cx25840 [ 599.183083][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 599.183114][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 599.263077][ T5699] usb 2-1: USB disconnect, device number 32 [ 599.394568][ T10] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 599.557063][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 599.563665][ T10] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 599.571578][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.589692][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 599.589829][ T10] pvrusb2: ********** [ 599.589855][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 599.589912][ T10] pvrusb2: Important functionality might not be entirely working. [ 599.589927][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 599.589944][ T10] pvrusb2: ********** [ 599.807290][ T2361] pvrusb2: Invalid write control endpoint [ 599.869934][ T2361] pvrusb2: Invalid write control endpoint [ 599.869975][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 599.870025][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 599.870042][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 599.870060][ T2361] pvrusb2: Device being rendered inoperable [ 599.887678][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 599.887749][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 599.891202][ T2361] pvrusb2: Attached sub-driver cx25840 [ 599.891220][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 599.891235][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 600.039872][ T5699] usb 7-1: USB disconnect, device number 39 [ 600.084947][T14380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 600.456598][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 600.629986][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 600.641137][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 600.643752][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.680908][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 600.680950][ T10] pvrusb2: ********** [ 600.680976][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 600.680995][ T10] pvrusb2: Important functionality might not be entirely working. [ 600.681047][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 600.681062][ T10] pvrusb2: ********** [ 600.901010][ T2361] pvrusb2: Invalid write control endpoint [ 600.933593][ T5699] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 600.968513][ T2361] pvrusb2: Invalid write control endpoint [ 600.974374][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 600.984293][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 600.992849][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 600.992869][ T2361] pvrusb2: Device being rendered inoperable [ 600.992948][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 600.993003][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 600.993935][ T2361] pvrusb2: Attached sub-driver cx25840 [ 600.993949][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 600.993961][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 601.123228][ T10] usb 2-1: USB disconnect, device number 33 [ 601.139354][ T5699] usb 7-1: Using ep0 maxpacket: 8 [ 601.146732][ T5699] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 601.159687][ T5699] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.196510][ T5699] pvrusb2: Hardware description: Terratec Grabster AV400 [ 601.203975][ T5699] pvrusb2: ********** [ 601.208638][ T5699] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 601.219285][ T5699] pvrusb2: Important functionality might not be entirely working. [ 601.219302][ T5699] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 601.219316][ T5699] pvrusb2: ********** [ 601.271104][ T989] usb 3-1: USB disconnect, device number 9 [ 601.433928][ T2361] pvrusb2: Invalid write control endpoint [ 601.526437][ T2361] pvrusb2: Invalid write control endpoint [ 601.533697][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 601.533750][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 601.533765][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 601.533782][ T2361] pvrusb2: Device being rendered inoperable [ 601.533828][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 601.533888][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 601.606662][ T2361] pvrusb2: Attached sub-driver cx25840 [ 601.606708][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 601.606780][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 601.671226][ T10] usb 7-1: USB disconnect, device number 40 [ 602.106831][T14397] netlink: 'syz.1.2945': attribute type 10 has an invalid length. [ 602.481042][T14403] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 602.516044][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 602.679701][ T10] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 602.686202][ T10] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.686341][ T10] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 602.686422][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 602.686581][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.722921][ T10] usb 2-1: config 0 descriptor?? [ 602.797647][ T5699] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 602.830183][T13084] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 602.960138][ T5699] usb 3-1: Using ep0 maxpacket: 32 [ 602.963543][ T5699] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 602.968140][ T5699] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 602.968216][ T5699] usb 3-1: config 0 has no interface number 0 [ 602.968336][ T5699] usb 3-1: config 0 interface 184 has no altsetting 0 [ 602.980718][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.980806][ T5699] usb 3-1: Product: syz [ 602.980849][ T5699] usb 3-1: Manufacturer: syz [ 602.980894][ T5699] usb 3-1: SerialNumber: syz [ 602.999015][ T5699] usb 3-1: config 0 descriptor?? [ 603.020558][T13084] usb 7-1: Using ep0 maxpacket: 8 [ 603.026927][T13084] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 603.035681][T13084] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.066901][T13084] pvrusb2: Hardware description: Terratec Grabster AV400 [ 603.066955][T13084] pvrusb2: ********** [ 603.067020][T13084] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 603.067036][T13084] pvrusb2: Important functionality might not be entirely working. [ 603.067070][T13084] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 603.067127][T13084] pvrusb2: ********** [ 603.219502][ T10] hid-multitouch 0003:0EEF:72C4.0043: unknown main item tag 0x2 [ 603.249911][ T10] hid-multitouch 0003:0EEF:72C4.0043: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.1-1/input0 [ 603.298930][ T2361] pvrusb2: Invalid write control endpoint [ 603.439762][ T2361] pvrusb2: Invalid write control endpoint [ 603.445888][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 603.449650][ T10] usb 2-1: USB disconnect, device number 34 [ 603.464161][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 603.466014][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 603.466718][ T2361] pvrusb2: Device being rendered inoperable [ 603.491281][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 603.506463][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_i) [ 603.509063][ T2361] pvrusb2: Attached sub-driver cx25840 [ 603.509107][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 603.509139][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 603.583126][ T9309] usb 7-1: USB disconnect, device number 41 [ 603.684012][ T5699] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 603.684067][ T5699] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 603.684091][ T5699] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 603.684793][ T5699] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 604.347331][T13084] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 604.455786][ T5759] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 604.509868][T13084] usb 2-1: Using ep0 maxpacket: 8 [ 604.514445][T13084] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 604.518351][T13084] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.543999][T13084] pvrusb2: Hardware description: Terratec Grabster AV400 [ 604.544044][T13084] pvrusb2: ********** [ 604.544071][T13084] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 604.544089][T13084] pvrusb2: Important functionality might not be entirely working. [ 604.544104][T13084] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 604.544122][T13084] pvrusb2: ********** [ 604.618298][ T5759] usb 7-1: Using ep0 maxpacket: 8 [ 604.623767][ T5759] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 604.632590][ T5759] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.650618][ T5759] pvrusb2: Hardware description: Terratec Grabster AV400 [ 604.654008][ T5759] pvrusb2: ********** [ 604.654042][ T5759] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 604.654061][ T5759] pvrusb2: Important functionality might not be entirely working. [ 604.654104][ T5759] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 604.654122][ T5759] pvrusb2: ********** [ 604.761543][ T2361] pvrusb2: Invalid write control endpoint [ 604.835002][ T2361] pvrusb2: Invalid write control endpoint [ 604.840878][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 604.840897][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 604.840909][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 604.840921][ T2361] pvrusb2: Device being rendered inoperable [ 604.850492][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 604.850551][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_i) [ 604.866856][ T2361] pvrusb2: Attached sub-driver cx25840 [ 604.866962][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 604.866981][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 604.927911][ T2361] pvrusb2: Invalid write control endpoint [ 604.984220][ T2361] pvrusb2: Invalid write control endpoint [ 604.991631][ T5759] usb 2-1: USB disconnect, device number 35 [ 605.004924][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 605.004980][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 605.004996][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 605.005013][ T2361] pvrusb2: Device being rendered inoperable [ 605.005097][ T2361] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 605.005155][ T2361] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_j) [ 605.023301][ T2361] pvrusb2: Attached sub-driver cx25840 [ 605.023357][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 605.023388][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 605.151874][ T5699] usb 7-1: USB disconnect, device number 42 [ 605.827071][ T9309] usb 3-1: USB disconnect, device number 10 [ 606.081404][ T5759] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 606.245629][ T5759] usb 2-1: New USB device found, idVendor=2b73, idProduct=0034, bcdDevice= 0.40 [ 606.248916][ T5759] usb 2-1: config 1 has an invalid interface number: 5 but max is 2 [ 606.248993][ T5759] usb 2-1: config 1 has an invalid descriptor of length 4, skipping remainder of the config [ 606.249047][ T5759] usb 2-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 606.249124][ T5759] usb 2-1: config 1 has no interface number 3 [ 606.249299][ T5759] usb 2-1: config 1 interface 5 altsetting 1 endpoint 0x1 has an invalid bInterval 137, changing to 7 [ 606.249408][ T5759] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 74, changing to 7 [ 606.249483][ T5759] usb 2-1: config 1 interface 5 has no altsetting 0 [ 606.260315][ T5759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.260401][ T5759] usb 2-1: Product: syz [ 606.260445][ T5759] usb 2-1: Manufacturer: syz [ 606.260487][ T5759] usb 2-1: SerialNumber: syz [ 606.301080][ T9309] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 606.525080][ T5759] usb 2-1: 0:3 : does not exist [ 606.530288][ T9309] usb 3-1: Using ep0 maxpacket: 16 [ 606.536714][ T9309] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 606.553377][ T9309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.553444][ T9309] usb 3-1: Product: syz [ 606.553495][ T9309] usb 3-1: Manufacturer: syz [ 606.553516][ T9309] usb 3-1: SerialNumber: syz [ 606.629570][ T5759] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 606.656324][ T5759] usb 2-1: USB disconnect, device number 36 [ 606.690706][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 606.810003][ C0] raw-gadget.4 gadget.2: ignoring, device is not running [ 606.828020][ T9309] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 606.840332][ T9309] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 606.840825][ T9309] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 606.840939][ T9309] usb 3-1: media controller created [ 606.879552][ T9309] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 606.914032][ T9309] zl10353_read_register: readreg error (reg=127, ret==-71) [ 606.979548][ T9309] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 607.002246][ T9309] usb 3-1: USB disconnect, device number 11 [ 607.184176][T14435] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 607.369876][ T4982] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 607.369925][ T4982] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 607.369962][ T4982] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 607.370030][ T4982] loop0: [ 607.761241][ T5759] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 607.783008][ T9309] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 607.934628][ T5759] usb 3-1: Using ep0 maxpacket: 8 [ 607.934669][ T9309] usb 2-1: device descriptor read/64, error -71 [ 607.948300][ T5759] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 607.963289][ T5759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.981592][ T5759] pvrusb2: Hardware description: Terratec Grabster AV400 [ 607.989132][ T5759] pvrusb2: ********** [ 607.993452][ T5759] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 608.003733][ T5759] pvrusb2: Important functionality might not be entirely working. [ 608.011844][ T5759] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 608.023331][ T5759] pvrusb2: ********** [ 608.195857][ T9309] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 608.212380][ T2361] pvrusb2: Invalid write control endpoint [ 608.274880][ T2361] pvrusb2: Invalid write control endpoint [ 608.274919][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 608.275674][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 608.275779][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 608.275812][ T2361] pvrusb2: Device being rendered inoperable [ 608.276728][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 608.276936][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_i) [ 608.287063][ T2361] pvrusb2: Attached sub-driver cx25840 [ 608.287108][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 608.287191][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 608.359597][ T9309] usb 2-1: device descriptor read/64, error -71 [ 608.445479][ T10] usb 3-1: USB disconnect, device number 12 [ 608.492351][ T5705] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 608.493365][ T9309] usb usb2-port1: attempt power cycle [ 608.671609][ T5705] usb 7-1: Using ep0 maxpacket: 8 [ 608.677247][ T5705] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 608.683775][ T5705] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.701984][ T5705] pvrusb2: Hardware description: Terratec Grabster AV400 [ 608.702070][ T5705] pvrusb2: ********** [ 608.702080][ T5705] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 608.702145][ T5705] pvrusb2: Important functionality might not be entirely working. [ 608.702187][ T5705] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 608.702318][ T5705] pvrusb2: ********** [ 608.868661][ T9309] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 608.900598][ T9309] usb 2-1: device descriptor read/8, error -71 [ 608.918663][ T2361] pvrusb2: Invalid write control endpoint [ 608.968493][ T2361] pvrusb2: Invalid write control endpoint [ 608.974405][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 608.974423][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 608.974434][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 608.974447][ T2361] pvrusb2: Device being rendered inoperable [ 608.984266][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 608.984331][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_i) [ 608.985526][ T2361] pvrusb2: Attached sub-driver cx25840 [ 609.034200][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 609.034235][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 609.145306][ T5705] usb 7-1: USB disconnect, device number 43 [ 609.182099][ T9309] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 609.215767][ T9309] usb 2-1: device descriptor read/8, error -71 [ 609.333686][ T9309] usb usb2-port1: unable to enumerate USB device [ 609.365253][ T5759] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 609.538590][ T5759] usb 3-1: Using ep0 maxpacket: 32 [ 609.545563][ T5759] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 609.550240][ T5759] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 609.550328][ T5759] usb 3-1: config 0 has no interface number 0 [ 609.550470][ T5759] usb 3-1: config 0 interface 184 has no altsetting 0 [ 609.556192][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.556269][ T5759] usb 3-1: Product: syz [ 609.556328][ T5759] usb 3-1: Manufacturer: syz [ 609.556446][ T5759] usb 3-1: SerialNumber: syz [ 609.569960][ T5759] usb 3-1: config 0 descriptor?? [ 610.246791][ T5759] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 610.246854][ T5759] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 610.246897][ T5759] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 610.247617][ T5759] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 611.222845][T14461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 611.586987][ T5699] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 611.773965][ T5699] usb 7-1: Using ep0 maxpacket: 16 [ 611.780081][ T5699] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 611.797560][ T5699] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.797622][ T5699] usb 7-1: Product: syz [ 611.797641][ T5699] usb 7-1: Manufacturer: syz [ 611.797658][ T5699] usb 7-1: SerialNumber: syz [ 612.053050][ T5699] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 612.065840][ T5699] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 612.069714][ T5699] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 612.069855][ T5699] usb 7-1: media controller created [ 612.104411][ T5699] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 612.132588][ T5699] zl10353_read_register: readreg error (reg=127, ret==-71) [ 612.180872][ T5699] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 612.192987][ T5699] usb 7-1: USB disconnect, device number 44 [ 612.391285][ T9309] usb 3-1: USB disconnect, device number 13 [ 612.681984][ T5699] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 612.800864][ T9309] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 612.844191][ T5699] usb 2-1: Using ep0 maxpacket: 16 [ 612.850734][ T5699] usb 2-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 612.855103][ T5699] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 612.855201][ T5699] usb 2-1: config 0 has no interface number 0 [ 612.855325][ T5699] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.855418][ T5699] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.855484][ T5699] usb 2-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 612.855572][ T5699] usb 2-1: config 0 interface 1 has no altsetting 0 [ 612.855654][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.871142][ T5699] usb 2-1: config 0 descriptor?? [ 612.942358][ T5759] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 613.017740][ T9309] usb 3-1: Using ep0 maxpacket: 8 [ 613.023811][ T9309] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 613.030953][ T9309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.049293][ T9309] pvrusb2: Hardware description: Terratec Grabster AV400 [ 613.049343][ T9309] pvrusb2: ********** [ 613.049374][ T9309] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 613.049453][ T9309] pvrusb2: Important functionality might not be entirely working. [ 613.049495][ T9309] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 613.049534][ T9309] pvrusb2: ********** [ 613.115125][ T5759] usb 7-1: Using ep0 maxpacket: 8 [ 613.121160][ T5759] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 613.132079][ T5759] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.150426][ T5759] pvrusb2: Hardware description: Terratec Grabster AV400 [ 613.157653][ T5759] pvrusb2: ********** [ 613.157667][ T5759] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 613.157684][ T5759] pvrusb2: Important functionality might not be entirely working. [ 613.157695][ T5759] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 613.157708][ T5759] pvrusb2: ********** [ 613.267815][ T2361] pvrusb2: Invalid write control endpoint [ 613.344306][ T2361] pvrusb2: Invalid write control endpoint [ 613.344357][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 613.344387][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 613.344458][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 613.344505][ T2361] pvrusb2: Device being rendered inoperable [ 613.344850][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 613.345039][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_k) [ 613.348996][ T2361] pvrusb2: Attached sub-driver cx25840 [ 613.349102][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 613.349133][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 613.431711][ T2361] pvrusb2: Invalid write control endpoint [ 613.502351][ T9309] usb 3-1: USB disconnect, device number 14 [ 613.511880][ T2361] pvrusb2: Invalid write control endpoint [ 613.519595][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 613.529124][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 613.537200][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 613.537219][ T2361] pvrusb2: Device being rendered inoperable [ 613.537263][ T2361] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 613.537357][ T2361] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_l) [ 613.590356][ T2361] pvrusb2: Attached sub-driver cx25840 [ 613.590430][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 613.590462][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 613.626864][T14470] gfs2: not a GFS2 filesystem [ 613.678065][ T10] usb 7-1: USB disconnect, device number 45 [ 613.878785][ T5699] usbhid 2-1:0.1: can't add hid device: -71 [ 613.878939][ T5699] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 613.904124][ T5699] usb 2-1: USB disconnect, device number 41 [ 614.342543][T14482] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 614.597414][ T5705] usb 6-1: USB disconnect, device number 113 [ 614.610948][T14489] socket: no more sockets [ 614.661704][ T10] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 614.776835][ T9614] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.860738][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 614.869003][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 614.885919][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 614.885998][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 614.938061][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.938114][ T10] usb 7-1: Product: syz [ 614.938148][ T10] usb 7-1: Manufacturer: syz [ 614.938170][ T10] usb 7-1: SerialNumber: syz [ 614.941305][ T10] usb 7-1: config 0 descriptor?? [ 614.974172][ T10] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 614.986536][ T10] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 615.003801][ T9614] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.130049][ T9614] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.255702][ T9614] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.607528][ T9614] bridge_slave_1: left allmulticast mode [ 615.607581][ T9614] bridge_slave_1: left promiscuous mode [ 615.612348][ T9614] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.628519][ T10] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 615.635471][ T10] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 615.649832][ T9614] bridge_slave_0: left allmulticast mode [ 615.649874][ T9614] bridge_slave_0: left promiscuous mode [ 615.655797][ T9614] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.041478][ T5704] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 616.061772][ T9614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.098782][ T9614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.110836][ T9614] bond0 (unregistering): Released all slaves [ 616.217828][ T5704] usb 2-1: Using ep0 maxpacket: 16 [ 616.226107][ T5704] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 616.240812][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.240879][ T5704] usb 2-1: Product: syz [ 616.240914][ T5704] usb 2-1: Manufacturer: syz [ 616.240937][ T5704] usb 2-1: SerialNumber: syz [ 616.477666][ T989] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 616.503894][ T5704] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 616.522816][ T5704] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 616.538484][ T5704] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 616.549696][ T5704] usb 2-1: media controller created [ 616.569525][ T5704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 616.626888][ T5704] zl10353_read_register: readreg error (reg=127, ret==-71) [ 616.648991][ T989] usb 3-1: Using ep0 maxpacket: 8 [ 616.652146][ T989] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 616.670833][ T989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.718303][ T5704] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 616.742535][ T5704] usb 2-1: USB disconnect, device number 42 [ 616.754909][ T989] pvrusb2: Hardware description: Terratec Grabster AV400 [ 616.754930][ T989] pvrusb2: ********** [ 616.754939][ T989] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 616.754952][ T989] pvrusb2: Important functionality might not be entirely working. [ 616.754962][ T989] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 616.754975][ T989] pvrusb2: ********** [ 616.785604][ T10] em28xx 7-1:0.0: AC97 vendor ID = 0x00fc00fe [ 616.828415][ T5834] udevd[5834]: setting owner of /dev/bus/usb/002/042 to uid=0, gid=0 failed: No such file or directory [ 616.857669][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 616.958350][ T2361] pvrusb2: Invalid write control endpoint [ 616.991296][ T9614] hsr_slave_0: left promiscuous mode [ 617.005527][T14484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.007963][T14484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.017045][ T9614] hsr_slave_1: left promiscuous mode [ 617.030092][ T9614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.030143][ T9614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.048973][ T9614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.049015][ T9614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.065443][ T10] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 617.072970][ T10] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 617.075622][ T10] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 617.076016][ T10] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 617.082748][ T10] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 617.087837][ T10] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 617.117854][ T10] usb 7-1: USB disconnect, device number 46 [ 617.195128][ T9614] veth1_macvtap: left promiscuous mode [ 617.195195][ T9614] veth0_macvtap: left promiscuous mode [ 617.195427][ T9614] veth1_vlan: left promiscuous mode [ 617.195505][ T9614] veth0_vlan: left promiscuous mode [ 617.275996][ T2361] pvrusb2: Invalid write control endpoint [ 617.276040][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 617.276073][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 617.276117][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 617.276159][ T2361] pvrusb2: Device being rendered inoperable [ 617.282123][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 617.282181][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_k) [ 617.315439][ T2361] pvrusb2: Attached sub-driver cx25840 [ 617.315485][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 617.315516][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 617.410230][ T989] usb 3-1: USB disconnect, device number 15 [ 617.753788][ T5759] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 617.872017][T14532] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 617.916247][ T5759] usb 2-1: Using ep0 maxpacket: 8 [ 617.918283][ T5759] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 617.921633][ T5759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.963863][ T5759] pvrusb2: Hardware description: Terratec Grabster AV400 [ 617.963913][ T5759] pvrusb2: ********** [ 617.963942][ T5759] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 617.963996][ T5759] pvrusb2: Important functionality might not be entirely working. [ 617.964038][ T5759] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 617.964077][ T5759] pvrusb2: ********** [ 618.167202][ T2361] pvrusb2: Invalid write control endpoint [ 618.201248][ T9614] team0 (unregistering): Port device team_slave_1 removed [ 618.232204][ T9614] team0 (unregistering): Port device team_slave_0 removed [ 618.258818][ T2361] pvrusb2: Invalid write control endpoint [ 618.258859][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 618.259876][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 618.259915][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 618.259968][ T2361] pvrusb2: Device being rendered inoperable [ 618.260550][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 618.260674][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_l) [ 618.311633][ T2361] pvrusb2: Attached sub-driver cx25840 [ 618.311685][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 618.311719][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 618.332146][ T10] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 618.390938][ T9309] usb 2-1: USB disconnect, device number 43 [ 618.436555][ T30] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 618.501479][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 618.503351][ T10] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 618.506703][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.558526][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 618.558577][ T10] pvrusb2: ********** [ 618.558604][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 618.558619][ T10] pvrusb2: Important functionality might not be entirely working. [ 618.558657][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 618.558709][ T10] pvrusb2: ********** [ 618.620470][ T5277] 8021q: adding VLAN 0 to HW filter on device eth6 [ 618.620631][ T30] usb 3-1: Using ep0 maxpacket: 8 [ 618.633467][ T30] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 618.648340][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.664426][ T30] pvrusb2: Hardware description: Terratec Grabster AV400 [ 618.671828][ T30] pvrusb2: ********** [ 618.675999][ T30] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 618.676019][ T30] pvrusb2: Important functionality might not be entirely working. [ 618.676037][ T30] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 618.676049][ T30] pvrusb2: ********** [ 618.776695][ T2361] pvrusb2: Invalid write control endpoint [ 618.902708][ T2361] pvrusb2: Invalid write control endpoint [ 618.902759][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 618.902789][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 618.902799][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 618.902854][ T2361] pvrusb2: Device being rendered inoperable [ 618.902978][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 618.903551][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_l) [ 618.913315][ T2361] pvrusb2: Attached sub-driver cx25840 [ 618.913361][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 618.913397][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 618.943260][ T2361] pvrusb2: Invalid write control endpoint [ 619.042920][ T5704] usb 7-1: USB disconnect, device number 47 [ 619.150883][ T2361] pvrusb2: Invalid write control endpoint [ 619.150933][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 619.151806][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 619.151839][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 619.151871][ T2361] pvrusb2: Device being rendered inoperable [ 619.151992][ T2361] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 619.152123][ T2361] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_m) [ 619.158732][ T2361] pvrusb2: Attached sub-driver cx25840 [ 619.158776][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 619.158809][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 619.284100][ T1732] usb 3-1: USB disconnect, device number 16 [ 619.721683][ T5277] 8021q: adding VLAN 0 to HW filter on device eth7 [ 620.475520][ T5277] 8021q: adding VLAN 0 to HW filter on device eth8 [ 620.531179][ T5759] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 620.712345][ T5759] usb 2-1: Using ep0 maxpacket: 16 [ 620.719474][ T5759] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 620.740577][ T5759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.749144][ T5759] usb 2-1: Product: syz [ 620.749206][ T5759] usb 2-1: Manufacturer: syz [ 620.749229][ T5759] usb 2-1: SerialNumber: syz [ 620.932430][T14589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 621.007340][ T5759] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 621.022017][ T5759] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 621.022453][ T5759] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 621.022773][ T5759] usb 2-1: media controller created [ 621.039780][ T989] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 621.042847][ T1679] block nbd0: Possible stuck request ffff888026e1e000: control (read@0,1024B). Runtime 270 seconds [ 621.042892][ T1679] block nbd0: Possible stuck request ffff888026e1e1c0: control (read@1024,3072B). Runtime 270 seconds [ 621.075392][ T5759] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 621.102129][ T5759] zl10353_read_register: readreg error (reg=127, ret==-71) [ 621.140248][ T5759] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 621.152742][ T5759] usb 2-1: USB disconnect, device number 44 [ 621.201244][ T989] usb 7-1: Using ep0 maxpacket: 32 [ 621.202933][ T989] usb 7-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 621.205962][ T989] usb 7-1: config 2 has an invalid interface number: 88 but max is 0 [ 621.206029][ T989] usb 7-1: config 2 has no interface number 0 [ 621.206181][ T989] usb 7-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 621.206257][ T989] usb 7-1: config 2 interface 88 has no altsetting 0 [ 621.231888][ T989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 621.231918][ T989] usb 7-1: Product: syz [ 621.231936][ T989] usb 7-1: Manufacturer: syz [ 621.231953][ T989] usb 7-1: SerialNumber: syz [ 621.253715][T14585] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 621.480466][T14585] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 621.927366][ T1732] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 621.937467][ T5759] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 622.088750][ T1732] usb 2-1: Using ep0 maxpacket: 8 [ 622.094601][ T1732] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 622.098634][ T1732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.103884][ T5759] usb 3-1: Using ep0 maxpacket: 8 [ 622.119078][ T5759] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 622.132929][ T1732] pvrusb2: Hardware description: Terratec Grabster AV400 [ 622.132968][ T1732] pvrusb2: ********** [ 622.133002][ T1732] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 622.133031][ T1732] pvrusb2: Important functionality might not be entirely working. [ 622.133047][ T1732] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 622.133064][ T1732] pvrusb2: ********** [ 622.133094][ T5759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.206712][ T5759] pvrusb2: Hardware description: Terratec Grabster AV400 [ 622.206759][ T5759] pvrusb2: ********** [ 622.206788][ T5759] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 622.206908][ T5759] pvrusb2: Important functionality might not be entirely working. [ 622.206946][ T5759] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 622.206991][ T5759] pvrusb2: ********** [ 622.340710][ T2361] pvrusb2: Invalid write control endpoint [ 622.416002][ T2361] pvrusb2: Invalid write control endpoint [ 622.416065][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 622.416102][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 622.416117][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 622.416133][ T2361] pvrusb2: Device being rendered inoperable [ 622.416174][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 622.416249][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_l) [ 622.422715][ T2361] pvrusb2: Attached sub-driver cx25840 [ 622.422768][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 622.422863][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 622.423140][ T2361] pvrusb2: Invalid write control endpoint [ 622.557198][ T2361] pvrusb2: Invalid write control endpoint [ 622.557236][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 622.557272][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 622.557322][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 622.557350][ T2361] pvrusb2: Device being rendered inoperable [ 622.559419][ T2361] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 622.559714][ T2361] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_n) [ 622.566504][ T2361] pvrusb2: Attached sub-driver cx25840 [ 622.566550][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 622.566591][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 622.651500][ T9309] usb 3-1: USB disconnect, device number 17 [ 622.667732][ T10] usb 2-1: USB disconnect, device number 45 [ 622.811248][ T989] asix 7-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 622.821597][ T989] asix 7-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 622.832960][ T989] asix 7-1:2.88: probe with driver asix failed with error -71 [ 622.845100][ T989] usb 7-1: USB disconnect, device number 48 [ 623.508536][ T989] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 623.671104][ T989] usb 3-1: Using ep0 maxpacket: 8 [ 623.671888][ T989] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 623.674550][ T989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.704145][ T989] pvrusb2: Hardware description: Terratec Grabster AV400 [ 623.704185][ T989] pvrusb2: ********** [ 623.704221][ T989] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 623.704279][ T989] pvrusb2: Important functionality might not be entirely working. [ 623.704312][ T989] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 623.704354][ T989] pvrusb2: ********** [ 623.923113][ T2361] pvrusb2: Invalid write control endpoint [ 623.977620][ T2361] pvrusb2: Invalid write control endpoint [ 623.983548][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 623.983594][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 623.983609][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 623.983625][ T2361] pvrusb2: Device being rendered inoperable [ 623.983671][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 623.983732][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_n) [ 623.984750][ T2361] pvrusb2: Attached sub-driver cx25840 [ 623.984770][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 623.984785][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 624.147247][ T989] usb 3-1: USB disconnect, device number 18 [ 624.624843][ T10] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 624.820150][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 624.825999][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 624.837633][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.857645][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 624.864983][ T10] pvrusb2: ********** [ 624.869123][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 624.879574][ T10] pvrusb2: Important functionality might not be entirely working. [ 624.887595][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 624.899214][ T10] pvrusb2: ********** [ 625.036972][ T5704] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 625.072728][ T2361] pvrusb2: Invalid write control endpoint [ 625.129067][ T2361] pvrusb2: Invalid write control endpoint [ 625.135160][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 625.147173][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 625.147223][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 625.147240][ T2361] pvrusb2: Device being rendered inoperable [ 625.147310][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 625.147487][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_n) [ 625.165985][ T2361] pvrusb2: Attached sub-driver cx25840 [ 625.166005][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 625.166018][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 625.242619][ T5704] usb 7-1: Using ep0 maxpacket: 16 [ 625.244295][ T5704] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 625.259734][ T5704] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.259796][ T5704] usb 7-1: Product: syz [ 625.259857][ T5704] usb 7-1: Manufacturer: syz [ 625.259923][ T5704] usb 7-1: SerialNumber: syz [ 625.286872][ T9309] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 625.313062][ T5759] usb 2-1: USB disconnect, device number 46 [ 625.459496][ T9309] usb 3-1: Using ep0 maxpacket: 8 [ 625.461090][ T9309] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 625.470737][ T9309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.491428][ T9309] pvrusb2: Hardware description: Terratec Grabster AV400 [ 625.491510][ T9309] pvrusb2: ********** [ 625.491543][ T9309] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 625.491596][ T9309] pvrusb2: Important functionality might not be entirely working. [ 625.493336][ T9309] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 625.493371][ T9309] pvrusb2: ********** [ 625.558128][ T5704] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 625.572511][ T5704] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 625.574010][ T5704] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 625.574243][ T5704] usb 7-1: media controller created [ 625.607257][ T5704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 625.630584][ T5704] zl10353_read_register: readreg error (reg=127, ret==-71) [ 625.668126][ T5704] dvb_usb_gl861 7-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 625.680684][ T5704] usb 7-1: USB disconnect, device number 49 [ 625.717150][ T2361] pvrusb2: Invalid write control endpoint [ 625.771561][ T2361] pvrusb2: Invalid write control endpoint [ 625.778514][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 625.789361][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 625.789408][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 625.789441][ T2361] pvrusb2: Device being rendered inoperable [ 625.808359][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 625.808421][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_n) [ 625.829412][ T2361] pvrusb2: Attached sub-driver cx25840 [ 625.829470][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 625.829502][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 625.941788][ T5704] usb 3-1: USB disconnect, device number 19 [ 626.208243][ T5759] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 626.369715][ T5759] usb 2-1: Using ep0 maxpacket: 8 [ 626.375627][ T5759] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 626.379187][ T5759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.398731][ T5759] pvrusb2: Hardware description: Terratec Grabster AV400 [ 626.398781][ T5759] pvrusb2: ********** [ 626.398813][ T5759] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 626.398828][ T5759] pvrusb2: Important functionality might not be entirely working. [ 626.398879][ T5759] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 626.398929][ T5759] pvrusb2: ********** [ 626.616992][ T2361] pvrusb2: Invalid write control endpoint [ 626.663964][ T2361] pvrusb2: Invalid write control endpoint [ 626.664016][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 626.664058][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 626.664068][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 626.664123][ T2361] pvrusb2: Device being rendered inoperable [ 626.666084][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 626.666266][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_n) [ 626.672521][ T2361] pvrusb2: Attached sub-driver cx25840 [ 626.672585][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 626.672617][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 626.845811][ T5704] usb 2-1: USB disconnect, device number 47 [ 627.735226][ T9309] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 627.908684][ T9309] usb 2-1: Using ep0 maxpacket: 16 [ 627.910255][ T9309] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 627.913821][ T9309] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 627.914275][ T9309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 627.923651][ T9309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.923725][ T9309] usb 2-1: Product: syz [ 627.923811][ T9309] usb 2-1: Manufacturer: syz [ 627.923862][ T9309] usb 2-1: SerialNumber: syz [ 627.971493][ T9309] usb 2-1: config 0 descriptor?? [ 627.983349][ T9309] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 627.983424][ T9309] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 628.569826][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 628.613068][ T989] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 628.657491][ T9309] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 628.659169][ T9309] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 628.764976][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 628.767102][ T10] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 628.780257][ T989] usb 7-1: Using ep0 maxpacket: 8 [ 628.780925][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.781053][ T10] usb 3-1: Product: syz [ 628.781102][ T10] usb 3-1: Manufacturer: syz [ 628.781146][ T10] usb 3-1: SerialNumber: syz [ 628.793994][ T989] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 628.821075][ T989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.839916][ T989] pvrusb2: Hardware description: Terratec Grabster AV400 [ 628.847860][ T989] pvrusb2: ********** [ 628.852052][ T989] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 628.862365][ T989] pvrusb2: Important functionality might not be entirely working. [ 628.870294][ T989] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 628.881850][ T989] pvrusb2: ********** [ 629.033527][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 629.034338][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 629.036409][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 629.038096][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 629.039474][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 629.086702][ T10] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 629.103302][ T2361] pvrusb2: Invalid write control endpoint [ 629.117358][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 629.125855][ T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 629.126142][ T10] usb 3-1: media controller created [ 629.183629][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 629.218031][ T2361] pvrusb2: Invalid write control endpoint [ 629.226022][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 629.226065][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 629.226080][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 629.226096][ T2361] pvrusb2: Device being rendered inoperable [ 629.226143][ T2361] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 629.226196][ T2361] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_o) [ 629.260888][ T2361] pvrusb2: Attached sub-driver cx25840 [ 629.260986][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 629.261025][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 629.311249][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 629.328888][T14654] ------------[ cut here ]------------ [ 629.328932][T ** replaying previous printk message ** [ 629.328932][T14654] usb 3-1: BOGUS control dir, pipe 80001480 doesn't match bRequestType c0 [ 629.334851][T14654] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#0: syz.6.3022/14654 [ 629.358961][T14654] Modules linked in: [ 629.370831][T14654] CPU: 0 UID: 0 PID: 14654 Comm: syz.6.3022 Tainted: G L syzkaller #0 PREEMPT(full) [ 629.383655][T14654] Tainted: [L]=SOFTLOCKUP [ 629.388208][T14654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 629.399129][T14654] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 629.407823][T14654] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 629.429029][T14654] RSP: 0018:ffffc900052f78d8 EFLAGS: 00010246 [ 629.435140][T14654] RAX: 0000000000000000 RBX: ffff888031919800 RCX: 0000000080001480 [ 629.443292][T14654] RDX: ffff8880772b63e0 RSI: ffffffff8cc685a0 RDI: ffffffff90a95890 [ 629.451571][T14654] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 629.459723][T14654] R10: ffffc900052f79c0 R11: fffff52000a5ef44 R12: 1ffff110060c106c [ 629.467740][T14654] R13: ffff888030608360 R14: ffff8880772b63e0 R15: 0000000080001480 [ 629.475851][T14654] FS: 00007f128c0696c0(0000) GS:ffff88812488b000(0000) knlGS:0000000000000000 [ 629.484856][T14654] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 629.491529][T14654] CR2: 000000110c3d3deb CR3: 000000007e742000 CR4: 00000000003526f0 [ 629.499555][T14654] Call Trace: [ 629.502948][T14654] [ 629.505964][T14654] usb_start_wait_urb+0x13f/0x5b0 [ 629.511103][T14654] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 629.519437][T14654] usb_control_msg+0x234/0x3e0 [ 629.526069][T14654] gl861_ctrl_msg+0x207/0x420 [ 629.530971][T14654] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 629.536334][T14654] gl861_i2c_master_xfer+0x439/0x6a0 [ 629.541711][T14654] __i2c_transfer+0x7bf/0x1fe0 [ 629.546683][T14654] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 629.552562][T14654] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 629.558464][T14654] ? rt_mutex_lock_nested+0x156/0x1c0 [ 629.563860][T14654] ? i2c_transfer+0xc7/0x2d0 [ 629.568526][T14654] i2c_transfer+0x1cb/0x2d0 [ 629.573065][T14654] i2cdev_ioctl_rdwr+0x460/0x740 [ 629.578145][T14654] i2cdev_ioctl+0x6a5/0x880 [ 629.582701][T14654] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 629.587817][T14654] ? __fget_files+0x3a2/0x420 [ 629.592623][T14654] ? __fget_files+0x2a/0x420 [ 629.597250][T14654] ? bpf_lsm_file_ioctl+0x9/0x20 [ 629.602319][T14654] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 629.607387][T14654] __se_sys_ioctl+0xfc/0x170 [ 629.612148][T14654] do_syscall_64+0x166/0x520 [ 629.616787][T14654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.622988][T14654] ? clear_bhb_loop+0x70/0xc0 [ 629.630286][T14654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.638302][T14654] RIP: 0033:0x7f128b19e0d9 [ 629.642839][T14654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.662587][T14654] RSP: 002b:00007f128c069028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 629.671168][T14654] RAX: ffffffffffffffda RBX: 00007f128b425fa0 RCX: 00007f128b19e0d9 [ 629.679384][T14654] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 629.687591][T14654] RBP: 00007f128b235024 R08: 0000000000000000 R09: 0000000000000000 [ 629.695620][T14654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.703682][T14654] R13: 00007f128b426038 R14: 00007f128b425fa0 R15: 00007ffcbd54c568 [ 629.711852][T14654] [ 629.714945][T14654] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 629.722275][T14654] CPU: 0 UID: 0 PID: 14654 Comm: syz.6.3022 Tainted: G L syzkaller #0 PREEMPT(full) [ 629.733269][T14654] Tainted: [L]=SOFTLOCKUP [ 629.737638][T14654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 629.747740][T14654] Call Trace: [ 629.751062][T14654] [ 629.754124][T14654] vpanic+0x56d/0xa60 [ 629.758180][T14654] ? __pfx__printk+0x10/0x10 [ 629.762829][T14654] ? __pfx_vpanic+0x10/0x10 [ 629.767404][T14654] ? is_bpf_text_address+0x292/0x2b0 [ 629.772747][T14654] ? is_bpf_text_address+0x26/0x2b0 [ 629.778015][T14654] panic+0xc5/0xd0 [ 629.781806][T14654] ? __pfx_panic+0x10/0x10 [ 629.786386][T14654] __warn+0x315/0x4c0 [ 629.790432][T14654] ? usb_submit_urb+0x1057/0x18b0 [ 629.795518][T14654] ? usb_submit_urb+0x1057/0x18b0 [ 629.800598][T14654] __report_bug+0x276/0x570 [ 629.805276][T14654] ? usb_submit_urb+0x1057/0x18b0 [ 629.810365][T14654] ? __pfx___report_bug+0x10/0x10 [ 629.815485][T14654] ? stack_depot_save_flags+0x404/0x7f0 [ 629.821091][T14654] report_bug_entry+0x19b/0x290 [ 629.825999][T14654] ? usb_submit_urb+0x1100/0x18b0 [ 629.831065][T14654] ? usb_submit_urb+0x1105/0x18b0 [ 629.836128][T14654] handle_bug+0xce/0x200 [ 629.840413][T14654] exc_invalid_op+0x1a/0x50 [ 629.844957][T14654] asm_exc_invalid_op+0x1a/0x20 [ 629.849843][T14654] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 629.855531][T14654] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 629.875310][T14654] RSP: 0018:ffffc900052f78d8 EFLAGS: 00010246 [ 629.881522][T14654] RAX: 0000000000000000 RBX: ffff888031919800 RCX: 0000000080001480 [ 629.889630][T14654] RDX: ffff8880772b63e0 RSI: ffffffff8cc685a0 RDI: ffffffff90a95890 [ 629.897681][T14654] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 629.905698][T14654] R10: ffffc900052f79c0 R11: fffff52000a5ef44 R12: 1ffff110060c106c [ 629.913719][T14654] R13: ffff888030608360 R14: ffff8880772b63e0 R15: 0000000080001480 [ 629.921843][T14654] ? usb_submit_urb+0x1091/0x18b0 [ 629.926949][T14654] usb_start_wait_urb+0x13f/0x5b0 [ 629.932044][T14654] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 629.937662][T14654] usb_control_msg+0x234/0x3e0 [ 629.942471][T14654] gl861_ctrl_msg+0x207/0x420 [ 629.947217][T14654] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 629.952480][T14654] gl861_i2c_master_xfer+0x439/0x6a0 [ 629.957817][T14654] __i2c_transfer+0x7bf/0x1fe0 [ 629.962719][T14654] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 629.968587][T14654] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 629.974441][T14654] ? rt_mutex_lock_nested+0x156/0x1c0 [ 629.979862][T14654] ? i2c_transfer+0xc7/0x2d0 [ 629.984495][T14654] i2c_transfer+0x1cb/0x2d0 [ 629.989072][T14654] i2cdev_ioctl_rdwr+0x460/0x740 [ 629.994055][T14654] i2cdev_ioctl+0x6a5/0x880 [ 629.998592][T14654] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 630.003650][T14654] ? __fget_files+0x3a2/0x420 [ 630.008384][T14654] ? __fget_files+0x2a/0x420 [ 630.013037][T14654] ? bpf_lsm_file_ioctl+0x9/0x20 [ 630.018027][T14654] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 630.023096][T14654] __se_sys_ioctl+0xfc/0x170 [ 630.027750][T14654] do_syscall_64+0x166/0x520 [ 630.032372][T14654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.038476][T14654] ? clear_bhb_loop+0x70/0xc0 [ 630.043206][T14654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.049131][T14654] RIP: 0033:0x7f128b19e0d9 [ 630.053578][T14654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.073300][T14654] RSP: 002b:00007f128c069028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 630.081768][T14654] RAX: ffffffffffffffda RBX: 00007f128b425fa0 RCX: 00007f128b19e0d9 [ 630.089798][T14654] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 630.097804][T14654] RBP: 00007f128b235024 R08: 0000000000000000 R09: 0000000000000000 [ 630.105827][T14654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 630.113838][T14654] R13: 00007f128b426038 R14: 00007f128b425fa0 R15: 00007ffcbd54c568 [ 630.121924][T14654] [ 630.125632][T14654] Kernel Offset: disabled [ 630.129979][T14654] Rebooting in 86400 seconds..