last executing test programs: 18.493010303s ago: executing program 1 (id=889): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f0000000680)={0x20, 0x5}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 14.612740953s ago: executing program 1 (id=899): r0 = openat$6lowpan_enable(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) recvmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1, 0x1}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/111, 0x6f}], 0x4}}], 0x1, 0x40002002, 0x0) write$6lowpan_enable(r0, &(0x7f0000000080)='0', 0x1) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="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"/363, 0x16b}], 0x1}, 0x60044084) 14.537871535s ago: executing program 3 (id=900): socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xa, 0x100008b}, 0x0) bpf$BPF_BTF_LOAD(0x25, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefa}, 0xffffffffffffffa5) sched_setaffinity(0x0, 0x54, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) socketpair(0x2a, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) signalfd4(r1, 0x0, 0x0, 0x1000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r3}) 13.959027093s ago: executing program 2 (id=901): mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x1808014, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/716, @ANYRESHEX, @ANYRESDEC, @ANYRES16], 0x5, 0x5593, &(0x7f00000061c0)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) socket(0x2b, 0x1, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, 0x0, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000840)={0x42, 0x2, 0x2}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 12.877572397s ago: executing program 3 (id=903): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)) openat$vnet(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$netlink(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000001c0)={0x8000, 0x2, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001780), r6) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001880)={0x14, r7, 0x925, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000040)={0x3, r8, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r4, 0xffffffffffffffff, 0x0) 11.88619302s ago: executing program 2 (id=905): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000b1c0)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00'}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r7}, 0x18) r8 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) ftruncate(r4, 0x800799c) socket$inet6_udplite(0xa, 0x2, 0x88) 9.026114506s ago: executing program 1 (id=914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 8.138805338s ago: executing program 1 (id=916): clock_getres(0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109021200010000000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r4, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000140)) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = dup2(0xffffffffffffffff, r1) r6 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xbd5, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc04c560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x400, 0x1, {}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "5c0a0551"}, 0x0, 0x1, {0x0}, 0x2, 0x20000000, r5}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000480)={0x20, 0xcd850c16ca0cc67}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.136581304s ago: executing program 3 (id=917): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000028000480240001800b00010072656a6563740000140002800800014000000000050002000000000008000b40000000000900010073797a300000000014000000110001"], 0xd8}}, 0x20000000) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x8890) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x3, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 8.0072499s ago: executing program 2 (id=918): mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x1808014, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/716, @ANYRESHEX, @ANYRESDEC, @ANYRES16], 0x5, 0x5593, &(0x7f00000061c0)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) socket(0x2b, 0x1, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, 0x0, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000840)={0x42, 0x2, 0x2}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6.359248441s ago: executing program 3 (id=919): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f0000000680)={0x20, 0x5}, 0x0, 0x0}) 6.160611797s ago: executing program 2 (id=920): socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000002300)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d08fda40c6e9c515c4a2c7245660296c0460cbff563b781695432f5a83f5ab8979bf6fd1c17aaa22ada927f1feb5074053514edf5734d63b2b58e5c5b848d6fa38f7956549438addc5e72bb0cdbce326b0b3f", 0x79, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}}, 0x0) 5.811066227s ago: executing program 0 (id=923): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)={0xc0, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x98, 0x8, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x64, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x81}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) 5.69086561s ago: executing program 4 (id=925): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000"], 0xe4}}, 0x20050840) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 5.553383592s ago: executing program 0 (id=926): r0 = openat$6lowpan_enable(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) recvmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1, 0x1}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/111, 0x6f}], 0x4}}], 0x1, 0x40002002, 0x0) write$6lowpan_enable(r0, &(0x7f0000000080)='0', 0x1) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="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"/363, 0x16b}], 0x1}, 0x60044084) 5.316258889s ago: executing program 4 (id=928): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000000c0)=0xfff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 4.616531458s ago: executing program 5 (id=929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 4.505812485s ago: executing program 4 (id=930): landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8, 0x8010, 0xffffffffffffffff, 0x9ef47000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f00000002c0)={@host}) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000200)=0xb0000) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0) ioctl$VT_SETMODE(r8, 0x5602, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x1) 4.347279254s ago: executing program 5 (id=931): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, 0x0) 4.257441532s ago: executing program 1 (id=932): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000028000480240001800b00010072656a6563740000140002800800014000000000050002000000000008000b40000000000900010073797a300000000014000000110001"], 0xd8}}, 0x20000000) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x8890) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x3, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 3.666919263s ago: executing program 5 (id=933): mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x1808014, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/716, @ANYRESHEX, @ANYRESDEC, @ANYRES16], 0x5, 0x5593, &(0x7f00000061c0)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) socket(0x2b, 0x1, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, 0x0, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000840)={0x42, 0x2, 0x2}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.004131411s ago: executing program 1 (id=934): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f0000000680)={0x20, 0x5}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.349845817s ago: executing program 3 (id=935): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe880000000000000000000000000201ff02000000000000000000000000000189009078000000002041"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f37000000000000", 0x8f, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 2.184077292s ago: executing program 5 (id=936): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4640, 0x400, 0x7, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) 1.624126943s ago: executing program 0 (id=937): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5414, &(0x7f0000000000)) 1.209909211s ago: executing program 0 (id=938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) 1.207624517s ago: executing program 3 (id=939): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x1, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000440)={0x0, 0x5, 0x2, "cda0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)={0x20, 0x3, 0x2, '~K'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000500)={0x40, 0x15, 0x2, "8d53"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x24, &(0x7f0000000200)={0x0, 0x13, 0x2, "fc98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f00000000c0)={0x20, 0x16, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0}) 967.904083ms ago: executing program 0 (id=940): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x3d, 0x301, 0x270bd24, 0x25dfdbfa, {0x1, 0x0, 0xf000}}, 0x14}}, 0x0) 808.119032ms ago: executing program 4 (id=941): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e80)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) 647.23188ms ago: executing program 5 (id=942): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000000c0)=0xfff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0}}], 0x1, 0x0) 646.288551ms ago: executing program 0 (id=943): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 301.866594ms ago: executing program 4 (id=944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 226.115605ms ago: executing program 2 (id=945): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, 0x0) 134.405915ms ago: executing program 2 (id=946): openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) pipe2(0x0, 0x80800) preadv2(r0, 0x0, 0x0, 0x2, 0x11a, 0x16) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7c1c, 0x8) socket$inet(0x2, 0xa, 0x7ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet6_tcp(0xa, 0x1, 0x0) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) 66.052614ms ago: executing program 5 (id=947): openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) pipe2(0x0, 0x80800) preadv2(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x2, 0x11a, 0x16) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7c1c, 0x8) socket$inet(0x2, 0xa, 0x7ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet6_tcp(0xa, 0x1, 0x0) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) 0s ago: executing program 4 (id=948): openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) pipe2(0x0, 0x80800) preadv2(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x2, 0x11a, 0x16) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7c1c, 0x8) socket$inet(0x2, 0xa, 0x7ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet6_tcp(0xa, 0x1, 0x0) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) kernel console output (not intermixed with test programs): 136.966430][ T6175] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 139.434286][ T6204] loop4: detected capacity change from 0 to 32768 [ 139.453116][ T6204] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.60 (6204) [ 139.475421][ T6204] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 139.485592][ T6204] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 140.165159][ T6204] BTRFS info (device loop4): rebuilding free space tree [ 140.178500][ T6204] BTRFS info (device loop4): disabling free space tree [ 140.185873][ T6204] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 140.195598][ T6204] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 140.273752][ T6204] BTRFS info (device loop4): setting nodatasum [ 140.279959][ T6204] BTRFS info (device loop4): setting nodatacow [ 140.289420][ T6204] BTRFS info (device loop4): turning off barriers [ 140.295927][ T6204] BTRFS info (device loop4): force clearing of disk cache [ 140.500407][ T6233] fuse: Invalid rootmode [ 141.022502][ T6243] loop7: detected capacity change from 0 to 16384 [ 141.023009][ T5855] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 141.807259][ T6244] loop7: detected capacity change from 16384 to 0 [ 141.807731][ C0] I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 141.842460][ C1] I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 141.900992][ T5975] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 142.091094][ T5975] usb 4-1: Using ep0 maxpacket: 32 [ 142.118102][ T5975] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 142.182825][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.225166][ T5975] usb 4-1: Product: syz [ 142.239521][ T5975] usb 4-1: Manufacturer: syz [ 142.259626][ T5975] usb 4-1: SerialNumber: syz [ 142.326663][ T5975] usb 4-1: config 0 descriptor?? [ 142.358625][ T5975] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 142.438760][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.445429][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.230444][ T5975] gspca_stk1135: reg_w 0x5 err -71 [ 143.299291][ T5975] gspca_stk1135: serial bus timeout: status=0x00 [ 143.328832][ T5975] gspca_stk1135: Sensor write failed [ 143.355853][ T5975] gspca_stk1135: serial bus timeout: status=0x00 [ 143.406148][ T5975] gspca_stk1135: Sensor write failed [ 143.440393][ T5975] gspca_stk1135: serial bus timeout: status=0x00 [ 143.480928][ T5975] gspca_stk1135: Sensor read failed [ 143.487853][ T5975] gspca_stk1135: serial bus timeout: status=0x00 [ 143.616343][ T5975] gspca_stk1135: Sensor read failed [ 143.647537][ T5975] gspca_stk1135: Detected sensor type unknown (0x0) [ 143.668304][ T5975] gspca_stk1135: serial bus timeout: status=0x00 [ 143.684653][ T5975] gspca_stk1135: Sensor read failed [ 143.698690][ T5975] gspca_stk1135: serial bus timeout: status=0x00 [ 143.722778][ T5975] gspca_stk1135: Sensor read failed [ 143.757819][ T5975] gspca_stk1135: serial bus timeout: status=0x00 [ 143.875356][ T5975] gspca_stk1135: Sensor write failed [ 143.880689][ T5975] gspca_stk1135: serial bus timeout: status=0x00 [ 143.920987][ T5975] gspca_stk1135: Sensor write failed [ 143.931264][ T5975] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 144.022936][ T5975] usb 4-1: USB disconnect, device number 3 [ 147.385110][ T6305] fuse: Invalid rootmode [ 148.419405][ T6336] program syz.4.79 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.149494][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.85'. [ 153.911178][ T5975] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 154.401041][ T5975] usb 1-1: Using ep0 maxpacket: 32 [ 154.416651][ T5975] usb 1-1: unable to get BOS descriptor or descriptor too short [ 154.458958][ T5975] usb 1-1: config 120 has an invalid interface number: 58 but max is 0 [ 154.499139][ T5975] usb 1-1: config 120 has no interface number 0 [ 154.531368][ T5975] usb 1-1: config 120 interface 58 altsetting 0 endpoint 0x3 has an invalid bInterval 64, changing to 7 [ 154.572966][ T5975] usb 1-1: New USB device found, idVendor=0421, idProduct=007b, bcdDevice=6e.b5 [ 154.632525][ T5975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.685102][ T5975] usb 1-1: Product: syz [ 154.710575][ T5975] usb 1-1: Manufacturer: syz [ 154.726275][ T6405] fuse: Bad value for 'rootmode' [ 154.748323][ T5975] usb 1-1: SerialNumber: syz [ 155.585232][ T5975] rndis_host 1-1:120.58: skipping garbage [ 155.635216][ T5975] usb 1-1: bad CDC descriptors [ 155.670258][ T5975] cdc_acm 1-1:120.58: skipping garbage [ 155.778701][ T5975] usb 1-1: USB disconnect, device number 3 [ 158.689397][ T6442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.703497][ T6442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.367342][ T6442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.411066][ T6442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.849904][ T6467] fuse: Bad value for 'rootmode' [ 161.311040][ T50] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 161.462447][ T6471] netlink: 16 bytes leftover after parsing attributes in process `syz.0.113'. [ 161.490987][ T50] usb 2-1: Using ep0 maxpacket: 16 [ 161.518916][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.538687][ T50] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 161.571085][ T50] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.614738][ T50] usb 2-1: Product: syz [ 161.618940][ T50] usb 2-1: Manufacturer: syz [ 161.655112][ T50] usb 2-1: SerialNumber: syz [ 161.716159][ T50] usb 2-1: config 0 descriptor?? [ 161.759607][ T50] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 161.807847][ T50] usb 2-1: Detected FT232H [ 161.934780][ T6208] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 162.033221][ T50] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 162.110980][ T6208] usb 6-1: Using ep0 maxpacket: 32 [ 162.136344][ T6208] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 162.196669][ T6208] usb 6-1: config 0 has no interface number 0 [ 162.220969][ T6208] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 162.283483][ T6208] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 162.315360][ T6208] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.345775][ T6208] usb 6-1: Product: syz [ 162.370271][ T6208] usb 6-1: Manufacturer: syz [ 162.403927][ T6208] usb 6-1: SerialNumber: syz [ 162.417022][ T6208] usb 6-1: config 0 descriptor?? [ 162.452315][ T6479] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 162.477450][ T50] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 162.676080][ T50] usb 2-1: USB disconnect, device number 3 [ 162.771607][ T6479] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 162.946933][ T50] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 162.975371][ T50] ftdi_sio 2-1:0.0: device disconnected [ 163.119718][ T6462] loop3: detected capacity change from 0 to 32768 [ 163.193976][ T6462] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.111 (6462) [ 163.301269][ T6462] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 163.352504][ T6462] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 163.440653][ T6462] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 163.447365][ T6462] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 163.472782][ T6462] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 163.559692][ T6462] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 163.757288][ T6462] BTRFS error (device loop3): open_ctree failed: -12 [ 166.131894][ T6208] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 166.204875][ T6208] asix 6-1:0.188: probe with driver asix failed with error -71 [ 166.252251][ T6208] usb 6-1: USB disconnect, device number 3 [ 167.136483][ T6542] fuse: Bad value for 'rootmode' [ 168.596730][ T5994] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 169.400975][ T5994] usb 4-1: Using ep0 maxpacket: 32 [ 169.414513][ T5994] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 169.488513][ T5994] usb 4-1: config 0 has no interface number 0 [ 169.528880][ T5994] usb 4-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 169.688816][ T5994] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 169.838137][ T5994] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 169.864150][ T5994] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 169.894472][ T5994] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 169.973916][ T5994] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 169.983287][ T5994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.991667][ T5994] usb 4-1: Product: syz [ 169.995885][ T5994] usb 4-1: Manufacturer: syz [ 170.000492][ T5994] usb 4-1: SerialNumber: syz [ 170.023429][ T5994] usb 4-1: config 0 descriptor?? [ 170.071565][ T6546] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 170.294211][ T5994] etas_es58x 4-1:0.219: Starting syz syz (Serial Number syz) [ 170.495120][ T5994] etas_es58x 4-1:0.219: could not retrieve the product info string [ 172.589419][ T5994] usb 4-1: USB disconnect, device number 4 [ 172.612969][ T5994] etas_es58x 4-1:0.219: Disconnecting syz syz [ 173.180553][ T6569] loop1: detected capacity change from 0 to 32768 [ 173.482992][ T6569] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.132 (6569) [ 173.715479][ T6569] BTRFS error (device loop1): open_ctree failed: -4 [ 176.785499][ T6626] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 177.139923][ T6625] loop3: detected capacity change from 0 to 4096 [ 177.377906][ T6625] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 177.413709][ T6625] ntfs3(loop3): ino=1a, mi_enum_attr [ 177.429413][ T6625] ntfs3(loop3): ino=1a, mi_enum_attr [ 177.463803][ T6625] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 179.349644][ T6639] loop5: detected capacity change from 0 to 32768 [ 179.356992][ T6639] ocfs2: Unknown parameter '18446744073709551615' [ 181.656082][ T6661] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 181.861777][ T6663] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 183.239568][ T6673] netlink: 1608 bytes leftover after parsing attributes in process `syz.2.159'. [ 184.088567][ T6685] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 184.138427][ T6685] loop3: detected capacity change from 0 to 4096 [ 184.145793][ T6685] ntfs3: Unknown parameter '' [ 184.187777][ T13] Bluetooth: hci6: Frame reassembly failed (-84) [ 184.631011][ T6012] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 184.846768][ T6012] usb 6-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=e3.a4 [ 184.898446][ T6012] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.912945][ T6012] usb 6-1: Product: syz [ 184.917118][ T6012] usb 6-1: Manufacturer: syz [ 185.154441][ T6696] loop4: detected capacity change from 0 to 32768 [ 185.161818][ T6696] ocfs2: Unknown parameter '18446744073709551615' [ 185.270742][ T6012] usb 6-1: SerialNumber: syz [ 185.325366][ T6012] usb 6-1: config 0 descriptor?? [ 185.812536][ T6012] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618 [ 186.101032][ T5852] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 186.101895][ T5848] Bluetooth: hci6: command 0x1003 tx timeout [ 186.159337][ T5852] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 186.170342][ T6012] gspca_sn9c20x: Write register 1000 failed -71 [ 186.177492][ T5852] CPU: 0 UID: 0 PID: 5852 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) [ 186.177541][ T5852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 186.177566][ T5852] Workqueue: hci3 hci_rx_work [ 186.177606][ T5852] Call Trace: [ 186.177619][ T5852] [ 186.177632][ T5852] dump_stack_lvl+0x16c/0x1f0 [ 186.177686][ T5852] sysfs_warn_dup+0x7f/0xa0 [ 186.177733][ T5852] sysfs_create_dir_ns+0x24b/0x2b0 [ 186.177780][ T5852] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 186.177826][ T5852] ? find_held_lock+0x2b/0x80 [ 186.177871][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.177916][ T5852] ? do_raw_spin_unlock+0x172/0x230 [ 186.177980][ T5852] kobject_add_internal+0x2c4/0x9b0 [ 186.178046][ T5852] kobject_add+0x16e/0x240 [ 186.178103][ T5852] ? __pfx_kobject_add+0x10/0x10 [ 186.178163][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.178208][ T5852] ? do_raw_spin_unlock+0x172/0x230 [ 186.178269][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.178314][ T5852] ? kobject_put+0xab/0x590 [ 186.178377][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.178431][ T5852] device_add+0x288/0x1950 [ 186.178480][ T5852] ? __pfx_dev_set_name+0x10/0x10 [ 186.178535][ T5852] ? __pfx_device_add+0x10/0x10 [ 186.178583][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.178628][ T5852] ? mgmt_send_event_skb+0x2fb/0x460 [ 186.178682][ T5852] hci_conn_add_sysfs+0x17e/0x230 [ 186.178733][ T5852] le_conn_complete_evt+0x11ed/0x1f20 [ 186.178785][ T5852] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 186.178831][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.178887][ T5852] hci_le_conn_complete_evt+0x23c/0x370 [ 186.178939][ T5852] hci_le_meta_evt+0x357/0x5e0 [ 186.178984][ T5852] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 186.179032][ T5852] hci_event_packet+0x685/0x11c0 [ 186.179073][ T5852] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 186.179121][ T5852] ? __pfx_hci_event_packet+0x10/0x10 [ 186.179162][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.179211][ T5852] ? kcov_remote_start+0x384/0x670 [ 186.179260][ T5852] ? lockdep_hardirqs_on+0x7c/0x110 [ 186.179312][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.179371][ T5852] hci_rx_work+0x2c9/0xeb0 [ 186.179409][ T5852] ? __entry_text_end+0x1020b5/0x1020b9 [ 186.179462][ T5852] process_one_work+0x9ba/0x1b20 [ 186.179535][ T5852] ? __pfx_process_one_work+0x10/0x10 [ 186.179589][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.179645][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.179690][ T5852] ? assign_work+0x1a0/0x250 [ 186.179745][ T5852] worker_thread+0x6c8/0xf10 [ 186.179808][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.179855][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.179900][ T5852] ? __kthread_parkme+0x19e/0x250 [ 186.179938][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.179986][ T5852] ? __pfx_worker_thread+0x10/0x10 [ 186.180040][ T5852] kthread+0x3c5/0x780 [ 186.180089][ T5852] ? __pfx_kthread+0x10/0x10 [ 186.180140][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.180184][ T5852] ? rcu_is_watching+0x12/0xc0 [ 186.180227][ T5852] ? __pfx_kthread+0x10/0x10 [ 186.180279][ T5852] ret_from_fork+0x983/0xb10 [ 186.180320][ T5852] ? __pfx_ret_from_fork+0x10/0x10 [ 186.180369][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 186.180414][ T5852] ? __switch_to+0x7af/0x10d0 [ 186.180462][ T5852] ? __pfx_kthread+0x10/0x10 [ 186.180513][ T5852] ret_from_fork_asm+0x1a/0x30 [ 186.180590][ T5852] [ 186.180749][ T5852] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 186.534865][ T5852] Bluetooth: hci3: failed to register connection device [ 186.544977][ T6012] gspca_sn9c20x: Device initialization failed [ 186.551198][ T6012] gspca_sn9c20x 6-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 186.570300][ T6012] usb 6-1: USB disconnect, device number 4 [ 187.312676][ T5844] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 187.701608][ T5844] usb 4-1: Using ep0 maxpacket: 16 [ 187.723301][ T5844] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 187.761411][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.791942][ T6714] netlink: 1608 bytes leftover after parsing attributes in process `syz.5.174'. [ 187.801189][ T5844] usb 4-1: Product: syz [ 187.805349][ T5844] usb 4-1: Manufacturer: syz [ 187.809936][ T5844] usb 4-1: SerialNumber: syz [ 187.912324][ T5844] usb 4-1: config 0 descriptor?? [ 187.935654][ T5844] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 188.067101][ T5844] usb 4-1: Detected FT232H [ 188.138750][ T5844] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 188.867081][ T5844] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 189.333754][ T5844] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 189.524861][ T5844] usb 4-1: USB disconnect, device number 5 [ 189.573858][ T5844] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 189.622892][ T5844] ftdi_sio 4-1:0.0: device disconnected [ 189.816049][ T6734] kernel profiling enabled (shift: 63) [ 190.211503][ T6734] profiling shift: 63 too large [ 192.298215][ T6750] loop4: detected capacity change from 0 to 32768 [ 192.305539][ T6750] ocfs2: Unknown parameter '18446744073709551615' [ 193.983521][ T5844] hid_parser_main: 8 callbacks suppressed [ 193.983551][ T5844] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 194.121890][ T5844] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 194.149652][ T5844] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 194.166551][ T5844] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 194.229040][ T5844] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 194.257009][ T5844] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 194.306583][ T5844] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 195.001017][ T5844] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 195.029202][ T5844] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 195.081468][ T5844] hid-generic 0003:0003:0000.0005: unknown main item tag 0x0 [ 195.115076][ T5844] hid-generic 0003:0003:0000.0005: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 195.454529][ T6776] fido_id[6776]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 195.470989][ T5844] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 195.719496][ T5844] usb 1-1: Using ep0 maxpacket: 16 [ 195.730716][ T5844] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 195.741675][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.752872][ T5844] usb 1-1: Product: syz [ 195.757045][ T5844] usb 1-1: Manufacturer: syz [ 195.836859][ T5844] usb 1-1: SerialNumber: syz [ 195.876068][ T5844] usb 1-1: config 0 descriptor?? [ 195.924074][ T5844] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 196.038640][ T5844] usb 1-1: Detected FT232H [ 196.127244][ T5844] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 196.539559][ T5844] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 196.548738][ T5844] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 196.595456][ T5844] usb 1-1: USB disconnect, device number 4 [ 196.714459][ T5844] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 196.752928][ T5844] ftdi_sio 1-1:0.0: device disconnected [ 197.684468][ T6801] loop0: detected capacity change from 0 to 32768 [ 197.691869][ T6801] ocfs2: Unknown parameter '18446744073709551615' [ 198.965075][ T6810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.197'. [ 199.166395][ T6813] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 199.303572][ T6816] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 199.417118][ T6810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.197'. [ 199.899774][ T6208] hid_parser_main: 8 callbacks suppressed [ 199.899804][ T6208] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 199.917405][ T6825] raw_sendmsg: syz.0.203 forgot to set AF_INET. Fix it! [ 199.951256][ T6208] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 199.982552][ T6208] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 200.148725][ T6208] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 200.188142][ T6208] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 200.213976][ T6208] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 200.262868][ T6208] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 200.313697][ T6208] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 200.378524][ T6208] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 200.421867][ T6208] hid-generic 0003:0003:0000.0006: unknown main item tag 0x0 [ 200.470535][ T6208] hid-generic 0003:0003:0000.0006: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 200.942808][ T6835] fido_id[6835]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 201.450973][ T5994] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 201.701003][ T5994] usb 2-1: Using ep0 maxpacket: 32 [ 201.722127][ T5994] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 201.750830][ T5994] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 201.784183][ T5994] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.844106][ T5994] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 201.968494][ T5994] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 201.985414][ T5994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.010075][ T5994] usb 2-1: Product: syz [ 202.035679][ T5994] usb 2-1: Manufacturer: syz [ 202.073715][ T5994] usb 2-1: SerialNumber: syz [ 202.311201][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 202.374314][ T5994] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input5 [ 202.531241][ T5994] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 202.563002][ T5994] (id 0x00) [ 204.280169][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.286563][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.840935][ T5994] rc_core: IR keymap rc-imon-pad not found [ 204.861082][ T5994] Registered IR keymap rc-empty [ 204.896507][ T5994] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 204.974223][ T5994] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 205.007668][ T5994] imon:send_packet: packet tx failed (-71) [ 205.103410][ T5994] imon 2-1:155.0: remote input dev register failed [ 205.127377][ T5994] imon 2-1:155.0: imon_init_intf0: rc device setup failed [ 205.457290][ T5994] imon 2-1:155.0: unable to initialize intf0, err 0 [ 205.487213][ T5994] imon:imon_probe: failed to initialize context! [ 205.503875][ T5994] imon 2-1:155.0: unable to register, err -19 [ 205.800669][ T5994] usb 2-1: USB disconnect, device number 4 [ 205.843371][ T5975] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 206.891982][ T5975] usb 5-1: Using ep0 maxpacket: 32 [ 206.934632][ T5975] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 206.974208][ T5975] usb 5-1: config 0 has no interface number 0 [ 206.980306][ T5975] usb 5-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 207.292404][ T5975] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 207.355597][ T5975] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 207.416755][ T5975] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 207.487643][ T5975] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 207.551116][ T5975] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 207.562040][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.570026][ T5975] usb 5-1: Product: syz [ 207.605439][ T5975] usb 5-1: Manufacturer: syz [ 207.610089][ T5975] usb 5-1: SerialNumber: syz [ 207.803088][ T5975] usb 5-1: config 0 descriptor?? [ 208.068264][ T6877] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 208.235275][ T6208] hid_parser_main: 8 callbacks suppressed [ 208.235305][ T6208] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 208.278116][ T6896] openvswitch: netlink: Key type 31 is not supported [ 208.278342][ T6208] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 208.313624][ T6208] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 208.331169][ T6208] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 208.357086][ T6208] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 208.357148][ T5975] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz) [ 208.405772][ T6208] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 208.425690][ T6208] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 208.446536][ T6208] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 208.472330][ T6208] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 208.494941][ T6208] hid-generic 0003:0003:0000.0007: unknown main item tag 0x0 [ 208.536012][ T6208] hid-generic 0003:0003:0000.0007: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 208.761401][ T5975] etas_es58x 5-1:0.219: could not parse product info: '424242424242' [ 208.778036][ T6903] fido_id[6903]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 209.782947][ T6918] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 209.887315][ T6920] loop5: detected capacity change from 0 to 4096 [ 209.895619][ T6920] ntfs3: Unknown parameter '' [ 210.041602][ T6925] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 210.388268][ T5822] usb 5-1: USB disconnect, device number 4 [ 210.625775][ T5822] etas_es58x 5-1:0.219: Disconnecting syz syz [ 210.729487][ T6931] overlayfs: missing 'lowerdir' [ 213.005179][ T6208] hid-generic 0003:0003:0000.0008: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 213.385800][ T6963] netlink: 12 bytes leftover after parsing attributes in process `syz.5.242'. [ 213.693740][ T6952] fido_id[6952]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 214.445376][ T6996] loop5: detected capacity change from 0 to 4096 [ 214.452842][ T6996] ntfs3: Unknown parameter '' [ 218.807842][ T5975] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 218.947007][ T7030] overlayfs: missing 'lowerdir' [ 219.765688][ T5975] usb 1-1: Using ep0 maxpacket: 16 [ 219.792101][ T5975] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 219.802637][ T5975] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 219.826505][ T5975] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.861085][ T5975] usb 1-1: config 1 interface 0 has no altsetting 0 [ 219.931321][ T5975] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 219.940360][ T5975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.017319][ T5975] usb 1-1: Product: syz [ 220.028930][ T5975] usb 1-1: Manufacturer: syz [ 220.050977][ T5975] usb 1-1: SerialNumber: syz [ 220.363614][ T5975] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 221.123332][ T7046] loop1: detected capacity change from 0 to 32768 [ 221.130801][ T7046] ocfs2: Unknown parameter '18446744073709551615' [ 221.611338][ T7049] sock: sock_timestamping_bind_phc: sock not bind to device [ 221.946141][ T7053] loop3: detected capacity change from 0 to 4096 [ 221.957281][ T7053] ntfs3: Unknown parameter '' [ 222.454030][ T7063] syzkaller0: entered promiscuous mode [ 222.472720][ T7063] syzkaller0: entered allmulticast mode [ 222.988952][ T6208] usb 1-1: USB disconnect, device number 5 [ 223.034526][ T6208] usblp0: removed [ 224.763454][ T7078] overlayfs: missing 'workdir' [ 226.241457][ T7103] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 228.130993][ T5896] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 228.300960][ T5896] usb 6-1: Using ep0 maxpacket: 16 [ 228.337337][ T5896] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 228.375554][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.410924][ T5896] usb 6-1: Product: syz [ 228.415120][ T5896] usb 6-1: Manufacturer: syz [ 228.476150][ T5896] usb 6-1: SerialNumber: syz [ 228.535774][ T5896] usb 6-1: config 0 descriptor?? [ 228.576063][ T5896] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 228.622852][ T7119] fuse: Bad value for 'fd' [ 228.634261][ T5896] usb 6-1: Detected FT232H [ 229.001024][ T5896] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 229.969945][ T5896] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 229.991427][ T5896] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 230.043368][ T5896] usb 6-1: USB disconnect, device number 5 [ 230.096340][ T5896] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 230.135476][ T5896] ftdi_sio 6-1:0.0: device disconnected [ 230.944532][ T7134] overlayfs: missing 'workdir' [ 231.712254][ T7124] Bluetooth: hci4: command 0x0406 tx timeout [ 231.718386][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 231.724990][ T7124] Bluetooth: hci5: command 0x0406 tx timeout [ 231.731918][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 231.737924][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 231.743961][ T7124] Bluetooth: hci3: command 0x0406 tx timeout [ 232.368578][ T7145] loop0: detected capacity change from 0 to 4096 [ 232.525241][ T7145] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 232.583666][ T7145] ntfs3(loop0): ino=1a, mi_enum_attr [ 232.616589][ T7145] ntfs3(loop0): ino=1a, mi_enum_attr [ 232.653830][ T7145] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 235.347936][ T5844] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 235.570933][ T5844] usb 5-1: Using ep0 maxpacket: 16 [ 235.622939][ T5844] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 235.852374][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.861276][ T5844] usb 5-1: Product: syz [ 235.865479][ T5844] usb 5-1: Manufacturer: syz [ 235.870222][ T5844] usb 5-1: SerialNumber: syz [ 235.915771][ T5844] usb 5-1: config 0 descriptor?? [ 235.998782][ T7191] overlayfs: missing 'workdir' [ 236.746299][ T5844] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 236.805662][ T5844] usb 5-1: Detected FT232H [ 236.971711][ T5844] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 237.171352][ T7194] loop1: detected capacity change from 0 to 4096 [ 237.272273][ T7194] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 237.328713][ T7194] ntfs3(loop1): ino=1a, mi_enum_attr [ 237.410266][ T7205] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 237.465913][ T5844] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 237.496106][ T5844] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 237.498046][ T7194] ntfs3(loop1): ino=1a, mi_enum_attr [ 237.591283][ T5844] usb 5-1: USB disconnect, device number 5 [ 237.647979][ T5844] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 237.678233][ T5844] ftdi_sio 5-1:0.0: device disconnected [ 237.689172][ T7194] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 239.124083][ T7216] input: syz0 as /devices/virtual/input/input8 [ 239.153704][ T7216] openvswitch: netlink: IP tunnel dst address not specified [ 240.650952][ T7225] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 240.830977][ T7225] usb 5-1: Using ep0 maxpacket: 32 [ 240.853588][ T7225] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 240.880901][ T7225] usb 5-1: config 0 has no interface number 0 [ 240.901548][ T7225] usb 5-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 240.940963][ T7225] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 240.974846][ T7225] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 241.020933][ T7225] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 241.054011][ T7225] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 241.101549][ T7225] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 241.130912][ T7225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.175345][ T7225] usb 5-1: Product: syz [ 241.179534][ T7225] usb 5-1: Manufacturer: syz [ 241.206914][ T7225] usb 5-1: SerialNumber: syz [ 241.231965][ T7225] usb 5-1: config 0 descriptor?? [ 241.267373][ T7226] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 241.535400][ T7225] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz) [ 241.903674][ T7232] loop5: detected capacity change from 0 to 4096 [ 242.001639][ T7232] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 242.035861][ T7232] ntfs3(loop5): ino=1a, mi_enum_attr [ 242.061715][ T7225] etas_es58x 5-1:0.219: could not retrieve the product info string [ 242.111049][ T7232] ntfs3(loop5): ino=1a, mi_enum_attr [ 242.132122][ T7232] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 242.242817][ T7225] usb 5-1: USB disconnect, device number 6 [ 243.213681][ T7225] etas_es58x 5-1:0.219: Disconnecting syz syz [ 243.565741][ T7237] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 243.955611][ T7237] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 244.055723][ T7247] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 244.890945][ T5971] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 245.291891][ T7254] loop0: detected capacity change from 0 to 32768 [ 245.299221][ T7254] ocfs2: Unknown parameter '18446744073709551615' [ 245.421029][ T5971] usb 3-1: Using ep0 maxpacket: 8 [ 245.439609][ T5971] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 245.463140][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.746961][ T5971] usb 3-1: Product: syz [ 245.887264][ T5971] usb 3-1: Manufacturer: syz [ 245.917340][ T5971] usb 3-1: SerialNumber: syz [ 245.946567][ T5971] usb 3-1: config 0 descriptor?? [ 245.976489][ T5971] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 246.015186][ T7252] loop3: detected capacity change from 0 to 4096 [ 246.125550][ T7252] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 246.156461][ T7252] ntfs3(loop3): ino=1a, mi_enum_attr [ 246.193780][ T7252] ntfs3(loop3): ino=1a, mi_enum_attr [ 246.209331][ T7252] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 247.579821][ T5971] gspca_sonixj: reg_w1 err -110 [ 247.600743][ T5971] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 248.584799][ T5844] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 248.913717][ T9] usb 3-1: USB disconnect, device number 2 [ 249.265562][ T5844] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 249.281532][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.289540][ T5844] usb 6-1: Product: syz [ 249.304601][ T5844] usb 6-1: Manufacturer: syz [ 249.309213][ T5844] usb 6-1: SerialNumber: syz [ 249.355676][ T5844] usb 6-1: config 0 descriptor?? [ 249.502735][ T5844] usb 6-1: can't set config #0, error -71 [ 249.641513][ T5844] usb 6-1: USB disconnect, device number 6 [ 249.875434][ T5822] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 250.028874][ T7290] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 250.730067][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 250.821502][ T5822] usb 2-1: Using ep0 maxpacket: 8 [ 250.872310][ T5822] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 250.955768][ T5822] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 250.978349][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 250.996182][ T9] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 251.010946][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.029322][ T9] usb 3-1: config 0 has no interface number 0 [ 251.039232][ T5822] usb 2-1: Product: syz [ 251.054241][ T5822] usb 2-1: Manufacturer: syz [ 251.064661][ T9] usb 3-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 251.087264][ T5822] usb 2-1: SerialNumber: syz [ 251.099925][ T7296] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 251.112408][ T6076] Bluetooth: hci6: Frame reassembly failed (-84) [ 251.156561][ T7296] loop5: detected capacity change from 0 to 4096 [ 251.163831][ T7296] ntfs3: Unknown parameter '' [ 251.182017][ T5822] usb 2-1: config 0 descriptor?? [ 251.191027][ T9] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 251.237264][ T9] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 251.277944][ T9] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 251.317695][ T9] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 251.340261][ T9] usb 3-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 251.354642][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.372500][ T9] usb 3-1: Product: syz [ 251.381677][ T9] usb 3-1: Manufacturer: syz [ 251.418400][ T9] usb 3-1: SerialNumber: syz [ 251.603339][ T9] usb 3-1: config 0 descriptor?? [ 251.623246][ T7298] netlink: 'syz.3.332': attribute type 10 has an invalid length. [ 251.642093][ T7282] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 251.665594][ T7298] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.673325][ T7298] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.752501][ T7298] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.759678][ T7298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.767235][ T7298] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.774390][ T7298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.866219][ T7298] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 251.932846][ T9] etas_es58x 3-1:0.219: Starting syz syz (Serial Number syz) [ 252.134023][ T9] etas_es58x 3-1:0.219: could not parse product info: '424242424242' [ 252.237830][ T7301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.333'. [ 252.279134][ T7301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.333'. [ 252.342912][ T9] usb 3-1: USB disconnect, device number 3 [ 252.362817][ T9] etas_es58x 3-1:0.219: Disconnecting syz syz [ 252.735310][ T5844] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 252.932538][ T5844] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 252.942571][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.142142][ T5843] Bluetooth: hci6: command 0x1003 tx timeout [ 253.148822][ T5154] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 253.470951][ T5844] usb 4-1: Product: syz [ 253.475170][ T5844] usb 4-1: Manufacturer: syz [ 253.480928][ T5844] usb 4-1: SerialNumber: syz [ 253.672201][ T5844] r8152-cfgselector 4-1: Unknown version 0x0000 [ 253.710903][ T5844] r8152-cfgselector 4-1: config 0 descriptor?? [ 254.073448][ T7310] loop4: detected capacity change from 0 to 32768 [ 254.080806][ T7310] ocfs2: Unknown parameter '18446744073709551615' [ 254.289343][ T7312] netlink: 'syz.2.337': attribute type 9 has an invalid length. [ 254.361481][ T7312] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.337'. [ 254.376609][ T7248] r8152-cfgselector 4-1: USB disconnect, device number 6 [ 254.426151][ T7317] fuse: Bad value for 'rootmode' [ 256.111666][ T183] usb 2-1: USB disconnect, device number 5 [ 256.634111][ T7335] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 257.327384][ T7340] mmap: syz.5.344 (7340) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 257.919993][ T7353] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 257.978099][ T7353] loop3: detected capacity change from 0 to 4096 [ 257.979278][ T7353] ntfs3: Unknown parameter '' [ 259.941353][ T5843] Bluetooth: hci6: command 0x1003 tx timeout [ 259.948408][ T5154] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 265.524402][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.554590][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.675561][ T7417] tipc: Started in network mode [ 267.680757][ T7417] tipc: Node identity c66d055981e3, cluster identity 4711 [ 267.688681][ T7417] tipc: Enabled bearer , priority 0 [ 267.810617][ T7426] syzkaller0: entered promiscuous mode [ 267.820088][ T7426] syzkaller0: entered allmulticast mode [ 268.039234][ T7428] tipc: Resetting bearer [ 268.056931][ T7417] tipc: Resetting bearer [ 268.154213][ T7417] tipc: Disabling bearer [ 271.111666][ T7447] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.118810][ T7447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.401192][ T6208] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 271.601429][ T6208] usb 3-1: Using ep0 maxpacket: 32 [ 271.815895][ T6208] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 271.902589][ T6208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.135264][ T6208] usb 3-1: Product: syz [ 272.151511][ T6208] usb 3-1: Manufacturer: syz [ 272.156135][ T6208] usb 3-1: SerialNumber: syz [ 272.167148][ T6208] usb 3-1: config 0 descriptor?? [ 272.185410][ T6208] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 272.793124][ T7467] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 272.854421][ T7467] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 273.831088][ T5822] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 274.003685][ T5822] usb 6-1: Using ep0 maxpacket: 32 [ 274.041274][ T5822] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 274.053862][ T6208] gspca_ov534_9: reg_w failed -71 [ 274.064888][ T5822] usb 6-1: config 0 has no interface number 0 [ 274.077793][ T5822] usb 6-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 274.132160][ T5822] usb 6-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 274.250959][ T5822] usb 6-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 274.313245][ T5822] usb 6-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 274.320917][ T6208] gspca_ov534_9: Unknown sensor 0000 [ 274.323160][ T6208] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 274.324978][ T5822] usb 6-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 274.337188][ T6208] usb 3-1: USB disconnect, device number 4 [ 274.390789][ T5822] usb 6-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 274.400171][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.409614][ T5822] usb 6-1: Product: syz [ 274.520930][ T5822] usb 6-1: Manufacturer: syz [ 274.548079][ T5822] usb 6-1: SerialNumber: syz [ 274.618365][ T5822] usb 6-1: config 0 descriptor?? [ 274.643858][ T7476] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 275.128041][ T5822] etas_es58x 6-1:0.219: Starting syz syz (Serial Number syz) [ 275.336637][ T5822] etas_es58x 6-1:0.219: could not retrieve the product info string [ 276.421251][ T5822] usb 6-1: USB disconnect, device number 7 [ 276.450903][ T5822] etas_es58x 6-1:0.219: Disconnecting syz syz [ 276.734146][ T7494] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 277.023677][ T7497] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 277.115407][ T7502] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.392'. [ 277.468355][ T7504] netlink: 'syz.0.391': attribute type 4 has an invalid length. [ 279.392903][ T7524] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 279.474720][ T7524] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 281.882808][ T7538] loop3: detected capacity change from 0 to 4096 [ 281.980919][ T5822] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 282.014723][ T7538] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 282.041196][ T7538] ntfs3(loop3): ino=1a, mi_enum_attr [ 282.050552][ T7538] ntfs3(loop3): ino=1a, mi_enum_attr [ 282.087524][ T7538] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 282.153571][ T5822] usb 5-1: Using ep0 maxpacket: 32 [ 282.391351][ T5822] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 282.400100][ T5822] usb 5-1: config 0 has no interface number 0 [ 282.425735][ T5822] usb 5-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 282.451139][ T5822] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 283.200943][ T5822] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 283.307950][ T5822] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 283.359872][ T5822] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 283.418406][ T5822] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 284.235447][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.248597][ T7558] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.406'. [ 284.265347][ T5822] usb 5-1: Product: syz [ 284.269539][ T5822] usb 5-1: Manufacturer: syz [ 284.280877][ T5822] usb 5-1: SerialNumber: syz [ 284.292140][ T5822] usb 5-1: config 0 descriptor?? [ 284.332207][ T7541] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 284.804954][ T5822] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz) [ 285.011052][ T7225] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 285.020041][ T5822] etas_es58x 5-1:0.219: could not retrieve the product info string [ 285.200932][ T7225] usb 1-1: Using ep0 maxpacket: 16 [ 285.268076][ T5844] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 285.281489][ T5822] usb 5-1: USB disconnect, device number 7 [ 286.050916][ T7225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.072970][ T5822] etas_es58x 5-1:0.219: Disconnecting syz syz [ 286.101539][ T7225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.121258][ T7225] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 286.134219][ T7225] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 286.167027][ T7225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.199036][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.214414][ T7225] usb 1-1: config 0 descriptor?? [ 286.228335][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.264155][ T5844] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 286.306038][ T7571] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 286.310206][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.403308][ T5844] usb 2-1: config 0 descriptor?? [ 286.535506][ T7575] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 286.704499][ T7225] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0009/input/input9 [ 286.992107][ T5844] hid_parser_main: 26 callbacks suppressed [ 286.992137][ T5844] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 287.787072][ T5844] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 287.794180][ T5844] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 287.806118][ T5844] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 287.834641][ T5844] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 287.848214][ T7225] appleir 0003:05AC:8241.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 287.860685][ T5844] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 287.868186][ T5844] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 287.890603][ T7225] usb 1-1: USB disconnect, device number 6 [ 287.906177][ T5844] cp2112 0003:10C4:EA90.000A: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 288.013022][ T5844] cp2112 0003:10C4:EA90.000A: Part Number: 0x82 Device Version: 0xFE [ 288.065757][ T7582] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 288.235250][ T5844] cp2112 0003:10C4:EA90.000A: error requesting SMBus config [ 288.285444][ T7589] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 288.478039][ T5844] cp2112 0003:10C4:EA90.000A: probe with driver cp2112 failed with error -71 [ 288.512164][ T7581] fido_id[7581]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 288.542072][ T5844] usb 2-1: USB disconnect, device number 6 [ 288.759791][ T7584] fido_id[7584]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 289.650806][ T7595] loop1: detected capacity change from 0 to 4096 [ 289.960110][ T7595] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 289.992534][ T7595] ntfs3(loop1): ino=1a, mi_enum_attr [ 290.023053][ T7595] ntfs3(loop1): ino=1a, mi_enum_attr [ 290.037458][ T7595] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 291.238127][ T7591] loop3: detected capacity change from 0 to 40427 [ 291.344869][ T7591] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 291.414538][ T7591] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 291.511424][ T7591] F2FS-fs (loop3): invalid crc value [ 294.169665][ T7632] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 295.011994][ T7591] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 296.631476][ T7647] netlink: 256 bytes leftover after parsing attributes in process `syz.5.431'. [ 296.762992][ T7648] syz_tun: entered allmulticast mode [ 296.791468][ T7647] unsupported nlmsg_type 40 [ 296.877240][ T7649] dvmrp8: entered allmulticast mode [ 296.995972][ T7646] syz_tun: left allmulticast mode [ 298.040921][ T6012] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 298.052130][ T7660] netlink: 'syz.5.435': attribute type 8 has an invalid length. [ 298.273446][ T6012] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 298.301142][ T6012] usb 5-1: config 0 has no interface number 0 [ 298.316314][ T6012] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 298.359148][ T6012] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.407685][ T6012] usb 5-1: config 0 descriptor?? [ 298.461851][ T6012] usb 5-1: selecting invalid altsetting 1 [ 298.509401][ T6012] dvb_ttusb_budget: ttusb_init_controller: error [ 298.544102][ T6012] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 299.670361][ T7673] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 299.771857][ T6012] DVB: Unable to find symbol cx22700_attach() [ 300.044400][ T7679] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 301.118042][ T6012] DVB: Unable to find symbol tda10046_attach() [ 301.130905][ T6012] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 301.152054][ T6012] usb 5-1: USB disconnect, device number 8 [ 303.893034][ T5997] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 304.196179][ T5997] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 304.237033][ T5997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.303474][ T5997] usb 5-1: Product: syz [ 304.315501][ T5997] usb 5-1: Manufacturer: syz [ 304.332480][ T5997] usb 5-1: SerialNumber: syz [ 304.379370][ T5997] usb 5-1: config 0 descriptor?? [ 304.531784][ T5997] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 304.617943][ T7692] loop1: detected capacity change from 0 to 40427 [ 304.663032][ T7692] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 304.689780][ T7692] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 304.730295][ T7692] F2FS-fs (loop1): invalid crc value [ 305.149378][ T7692] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 305.204095][ T7692] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 305.212008][ T7692] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 305.271004][ T5822] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 305.498330][ T5822] usb 6-1: Using ep0 maxpacket: 16 [ 305.741762][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.900013][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.910174][ T5822] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 305.920144][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.935660][ T5822] usb 6-1: config 0 descriptor?? [ 306.633069][ T5997] gspca_stk1135: reg_w 0x203 err -71 [ 306.645497][ T5997] gspca_stk1135: serial bus timeout: status=0x00 [ 306.658440][ T5997] gspca_stk1135: Sensor write failed [ 306.712335][ T5997] gspca_stk1135: serial bus timeout: status=0x00 [ 306.742998][ T5997] gspca_stk1135: Sensor write failed [ 306.779613][ T5997] gspca_stk1135: serial bus timeout: status=0x00 [ 306.806373][ T5997] gspca_stk1135: Sensor read failed [ 306.828084][ T5997] gspca_stk1135: serial bus timeout: status=0x00 [ 306.868711][ T5997] gspca_stk1135: Sensor read failed [ 306.895974][ T5997] gspca_stk1135: Detected sensor type unknown (0x0) [ 306.941393][ T5997] gspca_stk1135: serial bus timeout: status=0x00 [ 307.016141][ T5997] gspca_stk1135: Sensor read failed [ 307.028176][ T5822] letsketch 0003:6161:4D15.000B: Device info: ⷷ [ 307.050060][ T5997] gspca_stk1135: serial bus timeout: status=0x00 [ 307.076249][ T5997] gspca_stk1135: Sensor read failed [ 307.110160][ T5997] gspca_stk1135: serial bus timeout: status=0x00 [ 307.191405][ T5997] gspca_stk1135: Sensor write failed [ 307.231891][ T5822] letsketch 0003:6161:4D15.000B: Device info: ᣍ [ 307.264521][ T5997] gspca_stk1135: serial bus timeout: status=0x00 [ 307.292215][ T5997] gspca_stk1135: Sensor write failed [ 307.400641][ T5997] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 307.482487][ T5822] usb 6-1: Max retries (5) exceeded reading string descriptor 202 [ 307.490544][ T5822] letsketch 0003:6161:4D15.000B: probe with driver letsketch failed with error -71 [ 307.546536][ T5997] usb 5-1: USB disconnect, device number 9 [ 307.546551][ T5822] usb 6-1: USB disconnect, device number 8 [ 308.043004][ T7741] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.050174][ T7741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.830987][ T5822] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 309.001210][ T5822] usb 5-1: Using ep0 maxpacket: 16 [ 309.018479][ T5822] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 309.033535][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 309.055101][ T5822] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 309.070598][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.081921][ T5822] usb 5-1: Product: syz [ 309.086307][ T5822] usb 5-1: Manufacturer: syz [ 309.098097][ T5822] usb 5-1: SerialNumber: syz [ 309.107488][ T5822] usb 5-1: config 0 descriptor?? [ 309.127652][ T5822] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 309.137225][ T5822] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 309.432068][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.466'. [ 309.597690][ T7756] netlink: 20 bytes leftover after parsing attributes in process `syz.2.466'. [ 309.649112][ T7761] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 309.751909][ T5822] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 309.778174][ T5822] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 310.144143][ T7766] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 310.351117][ T5997] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 310.502640][ T5822] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 310.530892][ T5997] usb 2-1: Using ep0 maxpacket: 32 [ 310.550126][ T5997] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 310.582261][ T5997] usb 2-1: config 0 has no interface number 0 [ 310.596336][ T5997] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 310.615993][ T5997] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 310.633452][ T5997] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.664137][ T5997] usb 2-1: Product: syz [ 310.680966][ T5997] usb 2-1: Manufacturer: syz [ 310.687078][ T7777] netlink: 'syz.3.472': attribute type 9 has an invalid length. [ 310.694959][ T5997] usb 2-1: SerialNumber: syz [ 310.700999][ T7777] netlink: 212396 bytes leftover after parsing attributes in process `syz.3.472'. [ 310.715453][ T5997] usb 2-1: config 0 descriptor?? [ 310.721541][ T7765] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 310.735671][ T5822] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 310.771323][ T5822] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 310.799029][ T5822] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 310.818757][ T5822] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 310.841281][ T5822] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 310.921376][ T5822] usb 5-1: USB disconnect, device number 10 [ 310.971492][ T7765] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 311.619667][ T5997] asix 2-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 311.821161][ T5997] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 311.862196][ T5997] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 311.902236][ T5997] asix 2-1:0.188: probe with driver asix failed with error -61 [ 311.981090][ T5822] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 312.033232][ T5997] usb 2-1: USB disconnect, device number 7 [ 312.325166][ T5822] usb 5-1: Using ep0 maxpacket: 32 [ 312.346278][ T5822] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 312.370869][ T5822] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.411018][ T5822] usb 5-1: config 0 has no interface number 0 [ 312.431008][ T5822] usb 5-1: config 0 interface 219 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 312.515567][ T5822] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 312.535165][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.560931][ T5822] usb 5-1: Product: syz [ 312.572922][ T5822] usb 5-1: Manufacturer: syz [ 312.587614][ T5822] usb 5-1: SerialNumber: syz [ 312.670658][ T5822] usb 5-1: config 0 descriptor?? [ 312.831005][ T5997] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 312.919745][ T5822] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz) [ 312.963532][ T5822] usb 5-1: USB disconnect, device number 11 [ 313.001198][ T7799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.479'. [ 313.043385][ T5997] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.117828][ T5997] usb 4-1: config 0 has no interfaces? [ 313.146126][ T5997] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 313.174105][ T5997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.208853][ T5997] usb 4-1: Product: syz [ 313.234570][ T5997] usb 4-1: Manufacturer: syz [ 313.254786][ T5997] usb 4-1: SerialNumber: syz [ 313.277987][ T5997] usb 4-1: config 0 descriptor?? [ 313.378935][ T7801] loop5: detected capacity change from 0 to 4096 [ 313.551289][ T7801] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 313.592573][ T7801] ntfs3(loop5): ino=1a, mi_enum_attr [ 313.622270][ T7801] ntfs3(loop5): ino=1a, mi_enum_attr [ 313.684502][ T7801] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 315.480989][ T6012] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 315.942141][ T6012] usb 2-1: Using ep0 maxpacket: 8 [ 316.265277][ T6012] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 316.344996][ T6012] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.396243][ T6012] usb 2-1: Product: syz [ 316.400435][ T6012] usb 2-1: Manufacturer: syz [ 316.457583][ T6012] usb 2-1: SerialNumber: syz [ 316.515126][ T6012] usb 2-1: config 0 descriptor?? [ 316.556044][ T6012] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 317.369938][ T5844] usb 4-1: USB disconnect, device number 7 [ 317.714866][ T7837] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 318.063959][ T7841] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 318.374841][ T7842] loop3: detected capacity change from 0 to 4096 [ 318.576900][ T7842] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 318.615055][ T7842] ntfs3(loop3): ino=1a, mi_enum_attr [ 318.621940][ T6012] gspca_sonixj: reg_w1 err -71 [ 318.661493][ T6012] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 318.679542][ T7842] ntfs3(loop3): ino=1a, mi_enum_attr [ 318.714009][ T6012] usb 2-1: USB disconnect, device number 8 [ 318.719914][ T7842] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 319.379911][ T5822] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 319.662745][ T7851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.495'. [ 319.860937][ T5822] usb 1-1: Using ep0 maxpacket: 32 [ 319.884565][ T5822] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 319.950902][ T5822] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.999783][ T5822] usb 1-1: config 0 has no interface number 0 [ 320.030957][ T5822] usb 1-1: config 0 interface 219 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 320.102594][ T5822] usb 1-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 320.131885][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.140020][ T5822] usb 1-1: Product: syz [ 320.191848][ T5822] usb 1-1: Manufacturer: syz [ 320.196523][ T5822] usb 1-1: SerialNumber: syz [ 320.228021][ T5822] usb 1-1: config 0 descriptor?? [ 320.686172][ T5822] etas_es58x 1-1:0.219: Starting syz syz (Serial Number syz) [ 320.753262][ T5822] usb 1-1: USB disconnect, device number 7 [ 323.839041][ T7885] loop3: detected capacity change from 0 to 4096 [ 323.920155][ T7885] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 323.944382][ T7885] ntfs3(loop3): ino=1a, mi_enum_attr [ 323.949849][ T7885] ntfs3(loop3): ino=1a, mi_enum_attr [ 324.033614][ T7885] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 325.731819][ T7897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.510'. [ 326.065909][ T7868] syz.1.502 (7868): drop_caches: 2 [ 326.653036][ T7907] syzkaller0: entered promiscuous mode [ 326.686876][ T7907] syzkaller0: entered allmulticast mode [ 326.707850][ T7904] loop5: detected capacity change from 0 to 4096 [ 326.745246][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.752233][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.893576][ T7904] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 326.921182][ T7904] ntfs3(loop5): ino=1a, mi_enum_attr [ 326.963949][ T7904] ntfs3(loop5): ino=1a, mi_enum_attr [ 326.969270][ T7904] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 333.495470][ T7963] netlink: 20 bytes leftover after parsing attributes in process `syz.4.528'. [ 333.565444][ T7963] netlink: 20 bytes leftover after parsing attributes in process `syz.4.528'. [ 334.931336][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 335.271042][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 335.542358][ T10] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 335.605833][ T10] usb 1-1: config 0 has no interface number 0 [ 335.644497][ T10] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 335.707488][ T7982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.720934][ T7982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.742189][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 335.760224][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.768938][ T10] usb 1-1: Product: syz [ 335.773441][ T10] usb 1-1: Manufacturer: syz [ 335.778942][ T10] usb 1-1: SerialNumber: syz [ 335.803476][ T10] usb 1-1: config 0 descriptor?? [ 335.816819][ T7982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.827526][ T7982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.923093][ T7978] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 337.581287][ T7225] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 338.107104][ T10] asix 1-1:0.188: probe with driver asix failed with error -71 [ 338.186471][ T10] usb 1-1: USB disconnect, device number 8 [ 338.229112][ T7997] netlink: 'syz.3.539': attribute type 10 has an invalid length. [ 338.250901][ T7225] usb 2-1: Using ep0 maxpacket: 32 [ 338.272923][ T7997] bond0: (slave wlan1): Opening slave failed [ 338.300640][ T7225] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 338.371935][ T7225] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.372244][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.539'. [ 338.392970][ T7225] usb 2-1: config 0 has no interface number 0 [ 338.399090][ T7225] usb 2-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 338.470892][ T7225] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 338.511364][ T7225] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 338.576471][ T7997] bond0: entered promiscuous mode [ 338.580883][ T7225] usb 2-1: config 0 interface 219 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 338.626275][ T7997] bond_slave_0: entered promiscuous mode [ 338.636468][ T7997] bond_slave_1: entered promiscuous mode [ 338.652973][ T7225] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 338.670875][ T7225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.699411][ T7997] bridge0: entered promiscuous mode [ 338.710866][ T7225] usb 2-1: Product: syz [ 338.738687][ T7225] usb 2-1: Manufacturer: syz [ 338.759702][ T7225] usb 2-1: SerialNumber: syz [ 338.787895][ T7225] usb 2-1: config 0 descriptor?? [ 339.043014][ T7225] etas_es58x 2-1:0.219: Starting syz syz (Serial Number syz) [ 339.071276][ T7225] usb 2-1: USB disconnect, device number 9 [ 339.117693][ T8011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.545'. [ 339.205157][ T8013] loop4: detected capacity change from 0 to 512 [ 339.290372][ T8013] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.546: inode has both inline data and extents flags [ 339.321879][ T8019] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 339.379363][ T8013] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.546: couldn't read orphan inode 15 (err -117) [ 339.428876][ T8013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.158853][ T8027] overlayfs: failed to resolve './file0': -2 [ 340.825055][ T5855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.222016][ T5971] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 342.421000][ T5971] usb 2-1: Using ep0 maxpacket: 32 [ 342.990154][ T8039] netlink: 'syz.4.553': attribute type 9 has an invalid length. [ 343.022862][ T5971] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 343.045404][ T8039] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.553'. [ 343.070486][ T5971] usb 2-1: config 0 has no interface number 0 [ 343.100889][ T5971] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 343.139858][ T5971] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 343.160881][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.186140][ T5971] usb 2-1: Product: syz [ 343.200737][ T5971] usb 2-1: Manufacturer: syz [ 343.223317][ T5971] usb 2-1: SerialNumber: syz [ 343.239182][ T5971] usb 2-1: config 0 descriptor?? [ 343.261957][ T8034] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 343.354475][ T8046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.362070][ T8046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.480965][ T8046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.499477][ T8034] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 343.572324][ T8046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.969206][ T5904] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 344.147820][ T5904] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 344.168220][ T5904] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 344.182406][ T5971] asix 2-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 344.199942][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.222733][ T5904] usb 6-1: config 0 descriptor?? [ 344.384916][ T5971] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 344.548092][ T5971] asix 2-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 344.594238][ T5971] asix 2-1:0.188: probe with driver asix failed with error -61 [ 344.656018][ T5971] usb 2-1: USB disconnect, device number 10 [ 345.422194][ T8063] syz_tun: entered allmulticast mode [ 346.807720][ T5971] usb 6-1: USB disconnect, device number 9 [ 347.380913][ T5971] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 347.550901][ T5971] usb 6-1: Using ep0 maxpacket: 32 [ 347.557991][ T5971] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 347.880857][ T5971] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.987920][ T5971] usb 6-1: config 0 has no interface number 0 [ 349.021878][ T5971] usb 6-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 349.063803][ T5971] usb 6-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 349.089370][ T5971] usb 6-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 349.116426][ T8088] binder: 8087:8088 ioctl 4018620d 0 returned -22 [ 349.126669][ T5971] usb 6-1: config 0 interface 219 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 349.173233][ T5971] usb 6-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 349.192807][ T5971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.221590][ T5971] usb 6-1: Product: syz [ 349.225823][ T5971] usb 6-1: Manufacturer: syz [ 349.233246][ T5971] usb 6-1: SerialNumber: syz [ 349.277512][ T5971] usb 6-1: config 0 descriptor?? [ 349.517721][ T5971] etas_es58x 6-1:0.219: Starting syz syz (Serial Number syz) [ 349.545780][ T5971] usb 6-1: USB disconnect, device number 10 [ 349.837109][ T8097] netlink: 'syz.0.571': attribute type 9 has an invalid length. [ 349.851007][ T8097] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.571'. [ 351.097314][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.573'. [ 351.274174][ T8107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.574'. [ 352.108224][ T8117] loop1: detected capacity change from 0 to 32768 [ 352.115559][ T8117] ocfs2: Unknown parameter '18446744073709551615' [ 352.915343][ T8118] loop3: detected capacity change from 0 to 4096 [ 353.156523][ T8118] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 353.253888][ T8118] ntfs3(loop3): ino=1a, mi_enum_attr [ 353.261449][ T8118] ntfs3(loop3): ino=1a, mi_enum_attr [ 353.305937][ T8118] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 353.781275][ T5822] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 355.220924][ T5822] usb 2-1: Using ep0 maxpacket: 8 [ 355.262804][ T5822] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 355.290854][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.378365][ T5822] usb 2-1: Product: syz [ 355.390855][ T5822] usb 2-1: Manufacturer: syz [ 355.400068][ T5822] usb 2-1: SerialNumber: syz [ 355.721074][ T8147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.728597][ T8147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.745184][ T5822] usb 2-1: config 0 descriptor?? [ 355.755714][ T8147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.774065][ T8147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.867061][ T5822] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 357.308950][ T5822] gspca_sonixj: reg_w1 err -71 [ 357.313940][ T5822] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 357.431615][ T5822] usb 2-1: USB disconnect, device number 11 [ 360.060662][ T8175] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 360.223885][ T8178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.593'. [ 360.710930][ T5971] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 360.868178][ T8183] loop0: detected capacity change from 0 to 512 [ 360.874566][ T5971] usb 6-1: Using ep0 maxpacket: 32 [ 360.884439][ T5971] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 360.896097][ T5971] usb 6-1: config 0 has no interface number 0 [ 360.920348][ T5971] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 360.955506][ T8183] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.595: inode has both inline data and extents flags [ 360.983599][ T5971] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 361.002910][ T5971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.031216][ T8183] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.595: couldn't read orphan inode 15 (err -117) [ 361.044430][ T8187] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 361.090877][ T5971] usb 6-1: Product: syz [ 361.095063][ T5971] usb 6-1: Manufacturer: syz [ 361.099665][ T5971] usb 6-1: SerialNumber: syz [ 361.156070][ T8183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.172367][ T5971] usb 6-1: config 0 descriptor?? [ 361.212050][ T8181] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 361.481162][ T8181] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 362.480574][ T8191] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 362.578163][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.135759][ T5971] asix 6-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 363.163761][ T8206] netlink: 'syz.0.598': attribute type 4 has an invalid length. [ 363.171738][ T8206] netlink: 152 bytes leftover after parsing attributes in process `syz.0.598'. [ 363.190354][ T8206] .`: renamed from bond0 (while UP) [ 363.333442][ T5971] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 363.343739][ T5971] asix 6-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 363.370766][ T5971] asix 6-1:0.188: probe with driver asix failed with error -61 [ 363.563870][ T7225] usb 6-1: USB disconnect, device number 11 [ 364.761064][ T5971] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 365.610977][ T5971] usb 5-1: Using ep0 maxpacket: 32 [ 365.804439][ T5971] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 365.845302][ T5971] usb 5-1: config 0 has no interface number 0 [ 365.866922][ T5971] usb 5-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 365.914008][ T5971] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 365.960888][ T7225] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 365.970887][ T5971] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 366.100907][ T5971] usb 5-1: config 0 interface 219 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 366.210982][ T7225] usb 6-1: device descriptor read/64, error -71 [ 366.306954][ T5971] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 366.350892][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.409533][ T5971] usb 5-1: Product: syz [ 366.419975][ T5971] usb 5-1: Manufacturer: syz [ 366.431174][ T5971] usb 5-1: SerialNumber: syz [ 366.442198][ T5971] usb 5-1: config 0 descriptor?? [ 366.451250][ T8208] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 366.470914][ T7225] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 366.664108][ T7225] usb 6-1: device descriptor read/64, error -71 [ 366.742237][ T5971] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz) [ 366.771249][ T7225] usb usb6-port1: attempt power cycle [ 366.823703][ T5971] usb 5-1: USB disconnect, device number 12 [ 367.242278][ T7225] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 367.281705][ T7225] usb 6-1: device descriptor read/8, error -71 [ 367.530875][ T7225] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 367.556767][ T7225] usb 6-1: device descriptor read/8, error -71 [ 367.689484][ T7225] usb usb6-port1: unable to enumerate USB device [ 368.020704][ T8242] loop3: detected capacity change from 0 to 512 [ 368.028736][ T8243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.609'. [ 368.110535][ T8242] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.610: inode has both inline data and extents flags [ 368.181133][ T8242] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.610: couldn't read orphan inode 15 (err -117) [ 368.257800][ T8242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.556207][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.461201][ T6012] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 371.640955][ T6012] usb 4-1: Using ep0 maxpacket: 8 [ 371.669635][ T6012] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 371.700848][ T6012] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.739322][ T6012] usb 4-1: Product: syz [ 371.763843][ T6012] usb 4-1: Manufacturer: syz [ 371.768460][ T6012] usb 4-1: SerialNumber: syz [ 371.860034][ T6012] usb 4-1: config 0 descriptor?? [ 371.903093][ T6012] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 371.981072][ T8278] netlink: 'syz.5.619': attribute type 4 has an invalid length. [ 372.114323][ T8278] netlink: 152 bytes leftover after parsing attributes in process `syz.5.619'. [ 372.365682][ T8278] .`: renamed from bond0 (while UP) [ 373.380531][ T6012] gspca_sonixj: reg_r err -110 [ 373.385430][ T6012] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 373.892778][ T8292] netlink: 'syz.0.623': attribute type 9 has an invalid length. [ 373.913359][ T8292] netlink: 212396 bytes leftover after parsing attributes in process `syz.0.623'. [ 374.078941][ T8296] loop1: detected capacity change from 0 to 512 [ 374.136129][ T8296] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.625: inode has both inline data and extents flags [ 374.182865][ T8296] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.625: couldn't read orphan inode 15 (err -117) [ 374.215151][ T8296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.451222][ T5904] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 374.681771][ T7248] usb 4-1: USB disconnect, device number 8 [ 375.260884][ T5904] usb 6-1: Using ep0 maxpacket: 32 [ 375.277839][ T5904] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 375.313172][ T5904] usb 6-1: config 0 has no interface number 0 [ 375.319289][ T5904] usb 6-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 375.376318][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.391693][ T5904] usb 6-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 375.461615][ T5904] usb 6-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 375.501155][ T5904] usb 6-1: config 0 interface 219 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 375.545604][ T5904] usb 6-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 375.561181][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.600902][ T5904] usb 6-1: Product: syz [ 375.605569][ T5904] usb 6-1: Manufacturer: syz [ 375.631056][ T6012] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 375.633193][ T5904] usb 6-1: SerialNumber: syz [ 375.865982][ T5904] usb 6-1: config 0 descriptor?? [ 376.620592][ T6012] usb 3-1: device descriptor read/64, error -71 [ 376.674798][ T8295] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 376.861629][ T6012] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 377.030908][ T6012] usb 3-1: device descriptor read/64, error -71 [ 377.053427][ T5904] etas_es58x 6-1:0.219: Starting syz syz (Serial Number syz) [ 377.111118][ T5904] usb 6-1: USB disconnect, device number 16 [ 377.251142][ T6012] usb usb3-port1: attempt power cycle [ 377.590984][ T6012] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 377.692910][ T6012] usb 3-1: device descriptor read/8, error -71 [ 377.947726][ T6012] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 377.971960][ T6012] usb 3-1: device descriptor read/8, error -71 [ 378.081648][ T6012] usb usb3-port1: unable to enumerate USB device [ 378.294082][ T8340] netlink: 'syz.1.637': attribute type 4 has an invalid length. [ 378.307460][ T8340] netlink: 152 bytes leftover after parsing attributes in process `syz.1.637'. [ 378.345252][ T8340] .`: renamed from bond0 (while UP) [ 378.842698][ T8346] loop1: detected capacity change from 0 to 512 [ 378.989537][ T8346] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.641: inode has both inline data and extents flags [ 379.391201][ T8346] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.641: couldn't read orphan inode 15 (err -117) [ 379.720502][ T8346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.641943][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.962882][ T6012] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 382.204995][ T6012] usb 2-1: Using ep0 maxpacket: 8 [ 382.273325][ T6012] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 382.331166][ T6012] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.370899][ T6012] usb 2-1: Product: syz [ 382.391100][ T6012] usb 2-1: Manufacturer: syz [ 382.450268][ T6012] usb 2-1: SerialNumber: syz [ 382.504026][ T6012] usb 2-1: config 0 descriptor?? [ 382.540578][ T6012] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 384.261099][ T5822] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 384.315432][ T8402] loop2: detected capacity change from 0 to 512 [ 384.351608][ T8402] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.655: inode has both inline data and extents flags [ 384.379537][ T8402] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.655: couldn't read orphan inode 15 (err -117) [ 384.425578][ T8402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.440950][ T5822] usb 6-1: Using ep0 maxpacket: 32 [ 384.455729][ T5822] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.480926][ T5822] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 384.492839][ T5822] usb 6-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 384.502659][ T6012] gspca_sonixj: reg_r err -32 [ 384.508839][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.517045][ T5822] usb 6-1: Product: syz [ 384.695316][ T5822] usb 6-1: Manufacturer: syz [ 384.705538][ T5822] usb 6-1: SerialNumber: syz [ 384.711406][ T6012] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 385.414752][ T5822] usb 6-1: config 0 descriptor?? [ 385.423235][ T6012] usb 2-1: USB disconnect, device number 12 [ 385.455177][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.890879][ T5904] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 387.090864][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 387.110209][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.125658][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.148790][ T5904] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 387.180148][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.234180][ T5904] usb 5-1: config 0 descriptor?? [ 387.246006][ T5904] hub 5-1:0.0: USB hub found [ 387.415959][ T5822] usb 6-1: USB disconnect, device number 17 [ 387.450079][ T5904] hub 5-1:0.0: 1 port detected [ 387.561855][ T8434] netlink: 'syz.2.662': attribute type 9 has an invalid length. [ 387.617977][ T8434] netlink: 212396 bytes leftover after parsing attributes in process `syz.2.662'. [ 387.900945][ T5822] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 388.100982][ T5822] usb 6-1: Using ep0 maxpacket: 32 [ 388.109158][ T5822] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 388.124251][ T5822] usb 6-1: config 0 has no interface number 0 [ 388.151403][ T5822] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 388.185245][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.199340][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.203614][ T5822] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 388.222935][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.258921][ T5822] usb 6-1: Product: syz [ 388.286947][ T5822] usb 6-1: Manufacturer: syz [ 388.300836][ T5822] usb 6-1: SerialNumber: syz [ 388.331072][ T5822] usb 6-1: config 0 descriptor?? [ 388.341437][ T8436] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 388.604813][ T8436] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 388.741517][ T5904] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 388.810359][ T5904] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 388.888889][ T5904] usbhid 5-1:0.0: can't add hid device: -32 [ 388.908248][ T5904] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 389.002772][ T5904] usb 5-1: USB disconnect, device number 13 [ 389.463771][ T5822] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 389.501547][ T5822] asix 6-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 389.532859][ T5822] asix 6-1:0.188: probe with driver asix failed with error -61 [ 389.686659][ T7225] usb 6-1: USB disconnect, device number 18 [ 389.891081][ T6012] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 390.040936][ T6012] usb 1-1: Using ep0 maxpacket: 8 [ 390.064704][ T6012] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 390.090194][ T6012] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.109442][ T6012] usb 1-1: Product: syz [ 390.130550][ T6012] usb 1-1: Manufacturer: syz [ 390.144053][ T6012] usb 1-1: SerialNumber: syz [ 390.180093][ T6012] usb 1-1: config 0 descriptor?? [ 390.201782][ T6012] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 390.371198][ T5904] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 390.521039][ T5904] usb 2-1: Using ep0 maxpacket: 8 [ 390.532510][ T5904] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 390.544276][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.555863][ T5904] usb 2-1: Product: syz [ 390.569035][ T5904] usb 2-1: Manufacturer: syz [ 390.582813][ T5904] usb 2-1: SerialNumber: syz [ 390.667998][ T5904] usb 2-1: config 0 descriptor?? [ 390.700209][ T5904] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 390.951023][ T50] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 391.120880][ T50] usb 5-1: Using ep0 maxpacket: 32 [ 391.128848][ T50] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.139251][ T50] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 391.156956][ T50] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 391.166713][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.174875][ T50] usb 5-1: Product: syz [ 391.179424][ T50] usb 5-1: Manufacturer: syz [ 391.184367][ T50] usb 5-1: SerialNumber: syz [ 391.202157][ T50] usb 5-1: config 0 descriptor?? [ 392.014926][ T6012] gspca_sonixj: reg_r err -71 [ 392.053177][ T6012] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 392.065698][ T6012] usb 1-1: USB disconnect, device number 9 [ 392.518761][ T5904] gspca_sonixj: reg_r err -32 [ 392.560922][ T5904] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 392.589894][ T5904] usb 2-1: USB disconnect, device number 13 [ 394.839970][ T50] usb 5-1: USB disconnect, device number 14 [ 395.410891][ T50] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 395.742881][ T50] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.754567][ T50] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 395.775458][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.817497][ T50] usb 5-1: config 0 descriptor?? [ 395.839714][ T50] pwc: Askey VC010 type 2 USB webcam detected. [ 396.256464][ T50] pwc: recv_control_msg error -32 req 02 val 2b00 [ 396.470034][ T50] pwc: recv_control_msg error -71 req 02 val 2c00 [ 396.479032][ T50] pwc: recv_control_msg error -71 req 04 val 1000 [ 396.500066][ T50] pwc: recv_control_msg error -71 req 04 val 1300 [ 396.528574][ T50] pwc: recv_control_msg error -71 req 04 val 1400 [ 396.550646][ T50] pwc: recv_control_msg error -71 req 02 val 2000 [ 396.569098][ T50] pwc: recv_control_msg error -71 req 02 val 2100 [ 396.613631][ T50] pwc: recv_control_msg error -71 req 04 val 1500 [ 396.637914][ T50] pwc: recv_control_msg error -71 req 02 val 2500 [ 396.681668][ T50] pwc: recv_control_msg error -71 req 02 val 2400 [ 396.721344][ T50] pwc: recv_control_msg error -71 req 02 val 2600 [ 396.757239][ T50] pwc: recv_control_msg error -71 req 02 val 2900 [ 396.805760][ T50] pwc: recv_control_msg error -71 req 02 val 2800 [ 396.887810][ T50] pwc: recv_control_msg error -71 req 04 val 1100 [ 396.915804][ T50] pwc: recv_control_msg error -71 req 04 val 1200 [ 396.957074][ T50] pwc: Registered as video103. [ 397.004060][ T50] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 397.098724][ T50] usb 5-1: USB disconnect, device number 15 [ 397.145468][ T5822] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 397.340851][ T5822] usb 3-1: Using ep0 maxpacket: 8 [ 397.371587][ T5822] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 397.413182][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.442007][ T5822] usb 3-1: Product: syz [ 397.464073][ T5822] usb 3-1: Manufacturer: syz [ 397.489562][ T5822] usb 3-1: SerialNumber: syz [ 397.531202][ T5822] usb 3-1: config 0 descriptor?? [ 397.571856][ T5822] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 397.866661][ T8542] netlink: 'syz.4.698': attribute type 9 has an invalid length. [ 397.895155][ T8542] netlink: 212396 bytes leftover after parsing attributes in process `syz.4.698'. [ 398.498666][ T8548] loop1: detected capacity change from 0 to 4096 [ 398.742305][ T8548] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 398.755542][ T8548] ntfs3(loop1): ino=1a, mi_enum_attr [ 398.766143][ T8548] ntfs3(loop1): ino=1a, mi_enum_attr [ 398.780956][ T8548] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 398.851805][ T6012] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 399.190228][ T8562] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 399.852449][ T5822] gspca_sonixj: reg_r err -110 [ 399.890974][ T5822] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 400.020156][ T6012] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 400.139902][ T5822] usb 3-1: USB disconnect, device number 9 [ 400.195543][ T6012] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 400.265754][ T8569] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 400.402851][ T6012] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.420865][ T6012] usb 5-1: config 0 descriptor?? [ 400.455319][ T8555] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 400.720911][ T7225] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 400.911025][ T7225] usb 2-1: Using ep0 maxpacket: 32 [ 400.940651][ T7225] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 400.953117][ T6012] elan 0003:04F3:0755.000C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 400.983585][ T7225] usb 2-1: config 0 has no interface number 0 [ 401.015033][ T7225] usb 2-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 401.067241][ T7225] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 401.113798][ T6012] usb 5-1: USB disconnect, device number 16 [ 401.136224][ T7225] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 401.182537][ T7225] usb 2-1: config 0 interface 219 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 401.239320][ T7225] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 401.288976][ T7225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.329424][ T7225] usb 2-1: Product: syz [ 401.339533][ T7225] usb 2-1: Manufacturer: syz [ 401.354968][ T7225] usb 2-1: SerialNumber: syz [ 401.383624][ T7225] usb 2-1: config 0 descriptor?? [ 401.407306][ T8571] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 401.549020][ T8574] fido_id[8574]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 401.706922][ T7225] etas_es58x 2-1:0.219: Starting syz syz (Serial Number syz) [ 401.802962][ T7225] usb 2-1: USB disconnect, device number 14 [ 403.322311][ T8610] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 404.229579][ T8616] netlink: 'syz.1.717': attribute type 4 has an invalid length. [ 405.857076][ T8618] loop2: detected capacity change from 0 to 4096 [ 406.069856][ T8618] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 406.104842][ T8618] ntfs3(loop2): ino=1a, mi_enum_attr [ 406.125990][ T8618] ntfs3(loop2): ino=1a, mi_enum_attr [ 406.158881][ T8618] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 406.178470][ T8620] Dead loop on virtual device ip6_vti0, fix it urgently! [ 407.724873][ T8643] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 407.733654][ T8643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.882484][ T8686] netlink: 'syz.2.736': attribute type 4 has an invalid length. [ 411.890196][ T8686] netlink: 152 bytes leftover after parsing attributes in process `syz.2.736'. [ 411.922974][ T8686] .`: renamed from bond0 (while UP) [ 411.939349][ T8680] loop3: detected capacity change from 0 to 4096 [ 412.094247][ T8680] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 412.222428][ T8680] ntfs3(loop3): ino=1a, mi_enum_attr [ 412.227931][ T8680] ntfs3(loop3): ino=1a, mi_enum_attr [ 412.252520][ T8680] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 413.741209][ T5822] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 413.980926][ T5822] usb 4-1: Using ep0 maxpacket: 16 [ 413.997222][ T5822] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 414.070074][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.105124][ T5822] usb 4-1: Product: syz [ 414.122268][ T5822] usb 4-1: Manufacturer: syz [ 414.138081][ T5822] usb 4-1: SerialNumber: syz [ 414.175315][ T5822] usb 4-1: config 0 descriptor?? [ 414.211053][ T5822] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 414.230628][ T5822] usb 4-1: Detected FT232H [ 414.650983][ T5822] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 414.870982][ T5904] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 415.070865][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 415.078110][ T5904] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 415.088328][ T5822] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 415.110753][ T5822] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 415.661823][ T5904] usb 5-1: config 1 has no interface number 1 [ 415.673713][ T5822] usb 4-1: USB disconnect, device number 9 [ 415.678587][ T5904] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 415.693120][ T5904] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 415.728445][ T5822] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 415.728576][ T5904] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 415.781820][ T5904] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 415.821607][ T5822] ftdi_sio 4-1:0.0: device disconnected [ 415.825996][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.880979][ T5904] usb 5-1: Product: syz [ 415.895329][ T5904] usb 5-1: Manufacturer: syz [ 415.899945][ T5904] usb 5-1: SerialNumber: syz [ 416.201749][ T8727] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.208909][ T8727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.362729][ T5904] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 416.682127][ T8730] loop6: detected capacity change from 0 to 524288000 [ 416.763654][ T8731] support for the xor transformation has been removed. [ 416.776684][ T5904] usb 5-1: USB disconnect, device number 17 [ 417.320473][ T8734] loop0: detected capacity change from 0 to 40427 [ 417.341494][ T8734] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 417.349254][ T8734] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 417.365616][ T8734] F2FS-fs (loop0): invalid crc value [ 417.472805][ T8734] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 417.494430][ T8734] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 417.501548][ T8734] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 418.750505][ T8749] loop5: detected capacity change from 0 to 4096 [ 418.868427][ T8749] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 418.897546][ T8749] ntfs3(loop5): ino=1a, mi_enum_attr [ 418.928634][ T8749] ntfs3(loop5): ino=1a, mi_enum_attr [ 418.977543][ T8749] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 419.320992][ T5904] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 420.331163][ T5904] usb 4-1: Using ep0 maxpacket: 16 [ 420.385049][ T5904] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 420.409308][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.458364][ T5904] usb 4-1: Product: syz [ 420.486702][ T5904] usb 4-1: Manufacturer: syz [ 420.531281][ T5904] usb 4-1: SerialNumber: syz [ 420.554935][ T5904] usb 4-1: config 0 descriptor?? [ 420.587318][ T5904] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 420.626906][ T5904] usb 4-1: Detected FT232H [ 420.627833][ T8773] loop5: detected capacity change from 0 to 512 [ 420.774332][ T8773] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.763: inode has both inline data and extents flags [ 420.803803][ T5904] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 420.872448][ T8773] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.763: couldn't read orphan inode 15 (err -117) [ 420.973478][ T8773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.217177][ T5904] ftdi_sio 4-1:0.0: GPIO initialisation failed: -32 [ 421.233596][ T5904] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 421.350948][ T8777] overlayfs: missing 'lowerdir' [ 421.770231][ T5904] usb 4-1: USB disconnect, device number 10 [ 421.905350][ T5904] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 421.932383][ T5904] ftdi_sio 4-1:0.0: device disconnected [ 421.946333][ T5853] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.535766][ T8779] loop5: detected capacity change from 0 to 4096 [ 422.778893][ T8782] loop3: detected capacity change from 0 to 32768 [ 422.786292][ T8782] ocfs2: Unknown parameter '18446744073709551615' [ 423.047914][ T8784] overlayfs: missing 'lowerdir' [ 423.421219][ T8779] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 423.437353][ T8779] ntfs3(loop5): ino=1a, mi_enum_attr [ 423.481069][ T8779] ntfs3(loop5): ino=1a, mi_enum_attr [ 423.486416][ T8779] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 425.340874][ T5971] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 425.490886][ T50] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 425.533754][ T5971] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.575081][ T5971] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.626076][ T5971] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 425.927939][ T5971] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 425.942822][ T8812] loop4: detected capacity change from 0 to 40427 [ 425.949382][ T5971] usb 6-1: Manufacturer: syz [ 425.954078][ T50] usb 2-1: Using ep0 maxpacket: 32 [ 425.959628][ T8812] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 425.967400][ T8812] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 425.971290][ T5971] usb 6-1: config 0 descriptor?? [ 425.983258][ T50] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.994634][ T8812] F2FS-fs (loop4): invalid crc value [ 426.010170][ T50] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.063518][ T50] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 426.082988][ T8812] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 426.095423][ T8812] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 426.102569][ T8812] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 426.115542][ T50] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.363906][ T50] usb 2-1: config 0 descriptor?? [ 426.759642][ T50] hub 2-1:0.0: USB hub found [ 426.777727][ T50] hub 2-1:0.0: 1 port detected [ 426.790325][ T5971] uclogic 0003:256C:006D.000D: failed retrieving Huion firmware version: -71 [ 426.797323][ T8814] loop2: detected capacity change from 0 to 4096 [ 426.854972][ T5971] uclogic 0003:256C:006D.000D: failed probing parameters: -71 [ 426.906560][ T8814] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 426.910954][ T5971] uclogic 0003:256C:006D.000D: probe with driver uclogic failed with error -71 [ 426.947389][ T8814] ntfs3(loop2): ino=1a, mi_enum_attr [ 426.972204][ T8814] ntfs3(loop2): ino=1a, mi_enum_attr [ 426.983721][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 426.992355][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 426.999782][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 427.000753][ T8814] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 427.008421][ T50] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 427.019989][ T50] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 427.049322][ T50] usbhid 2-1:0.0: can't add hid device: -71 [ 427.059122][ T50] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 427.104320][ T5971] usb 6-1: USB disconnect, device number 19 [ 427.141682][ T50] usb 2-1: USB disconnect, device number 15 [ 428.952376][ T8838] netlink: 'syz.5.778': attribute type 4 has an invalid length. [ 428.971571][ T8838] netlink: 152 bytes leftover after parsing attributes in process `syz.5.778'. [ 430.350609][ T8842] loop1: detected capacity change from 0 to 4096 [ 430.395296][ T8844] loop4: detected capacity change from 0 to 512 [ 430.499068][ T8842] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 430.548503][ T8844] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.776: inode has both inline data and extents flags [ 430.584499][ T8842] ntfs3(loop1): ino=1a, mi_enum_attr [ 430.589915][ T8842] ntfs3(loop1): ino=1a, mi_enum_attr [ 430.671100][ T8842] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 430.691205][ T8844] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.776: couldn't read orphan inode 15 (err -117) [ 430.962943][ T8844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.447112][ T8853] overlayfs: missing 'lowerdir' [ 432.045754][ T8855] capability: warning: `syz.2.784' uses 32-bit capabilities (legacy support in use) [ 432.104481][ T5855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.630929][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 432.800842][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 432.823591][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 432.853266][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.863714][ T10] usb 5-1: Product: syz [ 432.867896][ T10] usb 5-1: Manufacturer: syz [ 432.872620][ T10] usb 5-1: SerialNumber: syz [ 432.880542][ T10] usb 5-1: config 0 descriptor?? [ 432.915019][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 432.928062][ T5822] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 432.944501][ T8868] syz.0.789 (8868) used greatest stack depth: 19848 bytes left [ 433.103250][ T5822] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.134150][ T5822] usb 3-1: config 0 interface 0 has no altsetting 0 [ 433.189581][ T5822] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 433.239407][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.282094][ T5822] usb 3-1: Product: syz [ 433.286303][ T5822] usb 3-1: Manufacturer: syz [ 433.315647][ T5822] usb 3-1: SerialNumber: syz [ 434.114893][ T10] gspca_sonixj: reg_r err -32 [ 434.119668][ T10] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 434.137450][ T5822] usb 3-1: config 0 descriptor?? [ 434.155543][ T5822] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 434.169983][ T5822] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 434.186424][ T5822] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 434.199170][ T5822] usb 3-1: media controller created [ 434.255619][ T5822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 434.415537][ T8895] loop0: detected capacity change from 0 to 512 [ 434.600116][ T8895] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.797: inode has both inline data and extents flags [ 435.372795][ T8895] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.797: couldn't read orphan inode 15 (err -117) [ 435.403998][ T5822] DVB: Unable to find symbol tda10046_attach() [ 435.407415][ T8895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.460971][ T5822] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 435.469722][ T5822] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 435.904347][ T5904] usb 5-1: USB disconnect, device number 18 [ 435.972953][ T8911] overlayfs: missing 'lowerdir' [ 436.738326][ T5822] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 436.748936][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.804931][ T5822] usb 3-1: USB disconnect, device number 10 [ 437.197061][ T8919] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 437.354989][ T8922] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 439.994897][ T8938] netlink: 'syz.5.805': attribute type 4 has an invalid length. [ 440.002763][ T8938] netlink: 152 bytes leftover after parsing attributes in process `syz.5.805'. [ 440.663803][ T8944] netlink: 'syz.3.808': attribute type 9 has an invalid length. [ 440.673110][ T8944] netlink: 212396 bytes leftover after parsing attributes in process `syz.3.808'. [ 441.566691][ T8956] netlink: 'syz.3.810': attribute type 4 has an invalid length. [ 442.447220][ T8961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.814'. [ 442.447255][ T8961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.814'. [ 447.532474][ T9018] netlink: 'syz.2.828': attribute type 4 has an invalid length. [ 447.540239][ T9018] netlink: 152 bytes leftover after parsing attributes in process `syz.2.828'. [ 449.050903][ T5822] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 449.137815][ T9022] loop1: detected capacity change from 0 to 4096 [ 449.201046][ T5822] usb 4-1: Using ep0 maxpacket: 8 [ 449.211800][ T5822] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 449.215904][ T9022] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 449.222522][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.254880][ T9022] ntfs3(loop1): ino=1a, mi_enum_attr [ 449.274949][ T9022] ntfs3(loop1): ino=1a, mi_enum_attr [ 449.321102][ T9022] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 449.341977][ T5822] usb 4-1: Product: syz [ 449.420952][ T5822] usb 4-1: Manufacturer: syz [ 449.449685][ T5822] usb 4-1: SerialNumber: syz [ 449.641428][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.647869][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.727291][ T5822] usb 4-1: config 0 descriptor?? [ 450.540714][ T5822] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 451.776636][ T5822] gspca_sonixj: reg_r err -32 [ 451.810013][ T5822] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 453.243761][ T5822] usb 4-1: USB disconnect, device number 11 [ 453.830870][ T5822] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 454.020940][ T5822] usb 4-1: Using ep0 maxpacket: 8 [ 454.030607][ T5822] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 454.057490][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.136853][ T5822] usb 4-1: Product: syz [ 454.149524][ T5822] usb 4-1: Manufacturer: syz [ 454.158558][ T5822] usb 4-1: SerialNumber: syz [ 454.187803][ T5822] usb 4-1: config 0 descriptor?? [ 454.209886][ T5822] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 456.077513][ T5822] gspca_sonixj: reg_r err -32 [ 456.120886][ T5822] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 456.171482][ T5822] usb 4-1: USB disconnect, device number 12 [ 456.406872][ T9084] loop4: detected capacity change from 0 to 4096 [ 456.494513][ T9084] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 456.524026][ T9084] ntfs3(loop4): ino=1a, mi_enum_attr [ 456.529454][ T9084] ntfs3(loop4): ino=1a, mi_enum_attr [ 456.577980][ T9084] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 458.039962][ T9096] netlink: 'syz.4.849': attribute type 9 has an invalid length. [ 458.090933][ T9096] netlink: 212396 bytes leftover after parsing attributes in process `syz.4.849'. [ 458.354448][ T9105] netlink: 'syz.2.852': attribute type 4 has an invalid length. [ 458.362265][ T9105] netlink: 152 bytes leftover after parsing attributes in process `syz.2.852'. [ 459.302230][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 459.522212][ T9121] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 459.622707][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 459.962077][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 459.990823][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.000034][ T9124] fuse: Bad value for 'fd' [ 460.017094][ T10] usb 5-1: Product: syz [ 460.027154][ T10] usb 5-1: Manufacturer: syz [ 460.040803][ T10] usb 5-1: SerialNumber: syz [ 460.076991][ T10] usb 5-1: config 0 descriptor?? [ 460.116558][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 460.668438][ T9132] bridge_slave_0: left allmulticast mode [ 460.678592][ T9132] bridge_slave_0: left promiscuous mode [ 460.685425][ T9132] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.704721][ T9132] bridge_slave_1: left allmulticast mode [ 460.711598][ T9132] bridge_slave_1: left promiscuous mode [ 460.720208][ T9132] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.737670][ T9132] .`: (slave bond_slave_0): Releasing backup interface [ 460.760036][ T9132] .`: (slave bond_slave_1): Releasing backup interface [ 460.780152][ T9132] team0: Port device team_slave_0 removed [ 460.799104][ T9132] team0: Port device team_slave_1 removed [ 460.809251][ T9132] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 460.930081][ T10] gspca_sonixj: reg_r err -32 [ 460.942773][ T10] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 460.982910][ T9134] ip6gre0: entered promiscuous mode [ 461.042563][ T9134] team0: Port device ip6gre0 added [ 461.710580][ T9137] loop0: detected capacity change from 0 to 4096 [ 461.870709][ T9137] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 461.888631][ T9137] ntfs3(loop0): ino=1a, mi_enum_attr [ 461.915718][ T9137] ntfs3(loop0): ino=1a, mi_enum_attr [ 462.086812][ T6012] usb 5-1: USB disconnect, device number 19 [ 462.097491][ T9137] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 462.406123][ T9152] netlink: 'syz.4.866': attribute type 9 has an invalid length. [ 463.172813][ T9152] netlink: 212396 bytes leftover after parsing attributes in process `syz.4.866'. [ 467.052115][ T9193] netlink: 'syz.0.877': attribute type 4 has an invalid length. [ 467.060855][ T9193] netlink: 152 bytes leftover after parsing attributes in process `syz.0.877'. [ 469.405222][ T9208] netlink: 'syz.5.882': attribute type 9 has an invalid length. [ 469.444045][ T9208] netlink: 212396 bytes leftover after parsing attributes in process `syz.5.882'. [ 469.896171][ T9210] loop4: detected capacity change from 0 to 40427 [ 469.939862][ T9210] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 469.947675][ T9210] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 469.961492][ T9210] F2FS-fs (loop4): invalid crc value [ 470.055825][ T9210] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 470.070494][ T9210] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 470.077660][ T9210] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 475.041860][ T9260] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 475.469505][ T9257] loop2: detected capacity change from 0 to 4096 [ 475.587646][ T9257] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 475.634939][ T9257] ntfs3(loop2): ino=1a, mi_enum_attr [ 475.657209][ T9257] ntfs3(loop2): ino=1a, mi_enum_attr [ 475.680496][ T9257] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 475.950014][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 476.330929][ T9269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 476.597430][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 476.621475][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 476.630555][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.639057][ T10] usb 5-1: Product: syz [ 476.643492][ T10] usb 5-1: Manufacturer: syz [ 476.648095][ T10] usb 5-1: SerialNumber: syz [ 476.666478][ T10] usb 5-1: config 0 descriptor?? [ 476.689825][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 477.034022][ T9274] loop2: detected capacity change from 0 to 40427 [ 477.042041][ T9274] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 477.049831][ T9274] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 477.092248][ T9274] F2FS-fs (loop2): invalid crc value [ 477.101278][ T9270] netlink: 'syz.1.899': attribute type 4 has an invalid length. [ 477.214511][ T9274] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 477.273052][ T9274] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 477.280178][ T9274] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 477.322251][ T10] gspca_sonixj: reg_r err -32 [ 477.327018][ T10] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 477.518774][ T9270] netlink: 152 bytes leftover after parsing attributes in process `syz.1.899'. [ 478.593504][ T10] usb 5-1: USB disconnect, device number 20 [ 478.821789][ T9295] ip6gre0: entered promiscuous mode [ 478.853152][ T9295] team0: Device ip6gre0 is of different type [ 479.595733][ T9305] netlink: 'syz.4.911': attribute type 9 has an invalid length. [ 479.622125][ T9305] netlink: 212396 bytes leftover after parsing attributes in process `syz.4.911'. [ 480.443197][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 480.543869][ T9312] loop4: detected capacity change from 0 to 4096 [ 480.643954][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 480.667291][ T10] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 480.711689][ T9312] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 480.715877][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.772983][ T10] usb 6-1: Product: syz [ 480.777216][ T10] usb 6-1: Manufacturer: syz [ 480.794541][ T9312] ntfs3(loop4): ino=1a, mi_enum_attr [ 480.799970][ T9312] ntfs3(loop4): ino=1a, mi_enum_attr [ 480.840801][ T10] usb 6-1: SerialNumber: syz [ 480.856166][ T9312] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 480.891067][ T10] usb 6-1: config 0 descriptor?? [ 480.924643][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 481.973052][ T10] gspca_sonixj: reg_r err -32 [ 481.977830][ T10] sonixj 6-1:0.0: probe with driver sonixj failed with error -32 [ 482.255252][ T9323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.915'. [ 483.320275][ T9331] loop2: detected capacity change from 0 to 40427 [ 483.384926][ T9331] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 483.392860][ T9331] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 483.406089][ T9331] F2FS-fs (loop2): invalid crc value [ 483.505440][ T9331] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 483.531648][ T9331] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 483.538711][ T9331] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 484.055462][ T10] usb 6-1: USB disconnect, device number 20 [ 484.471240][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 484.651236][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 484.671235][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 484.686218][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.699014][ T9350] netlink: 'syz.4.925': attribute type 9 has an invalid length. [ 484.731158][ T10] usb 4-1: Product: syz [ 484.735364][ T10] usb 4-1: Manufacturer: syz [ 484.739967][ T10] usb 4-1: SerialNumber: syz [ 484.744720][ T9350] netlink: 212396 bytes leftover after parsing attributes in process `syz.4.925'. [ 484.794027][ T10] usb 4-1: config 0 descriptor?? [ 484.818580][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 485.453607][ T9357] netlink: 'syz.0.926': attribute type 4 has an invalid length. [ 485.472747][ T9357] netlink: 152 bytes leftover after parsing attributes in process `syz.0.926'. [ 485.567488][ T10] gspca_sonixj: reg_r err -32 [ 485.583804][ T10] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 486.975604][ T9380] loop5: detected capacity change from 0 to 40427 [ 487.022128][ T9380] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 487.029883][ T9380] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 487.053243][ T9380] F2FS-fs (loop5): invalid crc value [ 487.169625][ T9380] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 487.186165][ T9380] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 487.194590][ T9380] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 487.816775][ T6012] usb 4-1: USB disconnect, device number 13 [ 489.421801][ T6012] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 489.760835][ T6012] usb 4-1: Using ep0 maxpacket: 32 [ 489.767810][ T6012] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 489.776177][ T6012] usb 4-1: config 0 has no interface number 0 [ 489.785201][ T6012] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 489.794515][ T6012] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.828701][ T6012] usb 4-1: Product: syz [ 489.845570][ T6012] usb 4-1: Manufacturer: syz [ 489.860368][ T6012] usb 4-1: SerialNumber: syz [ 489.907093][ T6012] usb 4-1: config 0 descriptor?? [ 489.974423][ T6012] asix 4-1:0.188: probe with driver asix failed with error -22 [ 490.018792][ T9411] team0: Port device ip6gre0 removed [ 490.101451][ T6012] skbuff: skb_under_panic: text:ffffffff8a2ab7b0 len:136 put:40 head:ffff888078f89000 data:ffff888078f88fe8 tail:0x70 end:0x6c0 dev:team0 [ 490.141753][ T9411] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 490.145819][ T6012] ------------[ cut here ]------------ [ 490.163217][ T6012] kernel BUG at net/core/skbuff.c:213! [ 490.259801][ T6012] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 490.266267][ T6012] CPU: 0 UID: 0 PID: 6012 Comm: kworker/0:9 Not tainted syzkaller #0 PREEMPT(full) [ 490.275663][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 490.285738][ T6012] Workqueue: mld mld_ifc_work [ 490.290442][ T6012] RIP: 0010:skb_panic+0x157/0x1d0 [ 490.295490][ T6012] Code: b6 04 01 84 c0 74 04 3c 03 7e 21 41 56 8b 4b 70 45 89 e8 48 c7 c7 a0 fc c1 8c 41 57 56 48 89 ee 52 4c 89 e2 e8 da f6 6e f8 90 <0f> 0b 4c 89 4c 24 10 48 89 54 24 08 48 89 34 24 e8 24 51 f9 f8 4c [ 490.315114][ T6012] RSP: 0018:ffffc90004bcf6c0 EFLAGS: 00010286 [ 490.321196][ T6012] RAX: 0000000000000087 RBX: ffff88807543b8c0 RCX: ffffffff819bd255 [ 490.329178][ T6012] RDX: 0000000000000000 RSI: ffffffff819c4e39 RDI: 0000000000000005 [ 490.337159][ T6012] RBP: ffffffff8cc20fa0 R08: 0000000000000005 R09: 0000000000000000 [ 490.345139][ T6012] R10: 0000000080000000 R11: 00000000dc49c248 R12: ffffffff8a2ab7b0 [ 490.353120][ T6012] R13: 0000000000000028 R14: ffff88805640c120 R15: 00000000000006c0 [ 490.361103][ T6012] FS: 0000000000000000(0000) GS:ffff888124969000(0000) knlGS:0000000000000000 [ 490.370047][ T6012] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 490.376641][ T6012] CR2: 00007f86059e7dac CR3: 0000000059609000 CR4: 0000000000350ef0 [ 490.384623][ T6012] Call Trace: [ 490.387899][ T6012] [ 490.390833][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.396498][ T6012] ? ip6gre_header+0xc0/0x8d0 [ 490.401209][ T6012] skb_push+0xca/0xf0 [ 490.405217][ T6012] ip6gre_header+0xc0/0x8d0 [ 490.409759][ T6012] ? __pfx_ip6gre_header+0x10/0x10 [ 490.414907][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.420570][ T6012] ? find_held_lock+0x2b/0x80 [ 490.425267][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.430935][ T6012] ? __pfx_ip6gre_header+0x10/0x10 [ 490.436078][ T6012] neigh_connected_output+0x366/0x620 [ 490.441484][ T6012] ip6_finish_output2+0xad1/0x1cf0 [ 490.446635][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.452299][ T6012] __ip6_finish_output+0x3cd/0x1010 [ 490.457539][ T6012] ip6_output+0x253/0x710 [ 490.461909][ T6012] mld_sendpack+0xac1/0x1350 [ 490.466522][ T6012] ? __pfx_mld_sendpack+0x10/0x10 [ 490.471576][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.477242][ T6012] mld_ifc_work+0x740/0xbf0 [ 490.481768][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.487433][ T6012] process_one_work+0x9ba/0x1b20 [ 490.492417][ T6012] ? __pfx_process_one_work+0x10/0x10 [ 490.497821][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.503484][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.509141][ T6012] ? assign_work+0x1a0/0x250 [ 490.513763][ T6012] worker_thread+0x6c8/0xf10 [ 490.518389][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.524043][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.529701][ T6012] ? __kthread_parkme+0x19e/0x250 [ 490.534744][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.540401][ T6012] ? __pfx_worker_thread+0x10/0x10 [ 490.545544][ T6012] kthread+0x3c5/0x780 [ 490.549642][ T6012] ? __pfx_kthread+0x10/0x10 [ 490.554260][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.559923][ T6012] ? rcu_is_watching+0x12/0xc0 [ 490.564715][ T6012] ? __pfx_kthread+0x10/0x10 [ 490.569332][ T6012] ret_from_fork+0x983/0xb10 [ 490.573947][ T6012] ? __pfx_ret_from_fork+0x10/0x10 [ 490.579079][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.584737][ T6012] ? __switch_to+0x7af/0x10d0 [ 490.589440][ T6012] ? __pfx_kthread+0x10/0x10 [ 490.594060][ T6012] ret_from_fork_asm+0x1a/0x30 [ 490.598869][ T6012] [ 490.601887][ T6012] Modules linked in: [ 490.606367][ T6012] ---[ end trace 0000000000000000 ]--- [ 490.649807][ T9426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.946'. [ 490.744310][ T9430] netlink: 4 bytes leftover after parsing attributes in process `syz.5.947'. [ 490.773071][ T9431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.948'. [ 492.196709][ T5971] usb 4-1: USB disconnect, device number 14 [ 493.378837][ T6012] RIP: 0010:skb_panic+0x157/0x1d0 [ 493.383915][ T6012] Code: b6 04 01 84 c0 74 04 3c 03 7e 21 41 56 8b 4b 70 45 89 e8 48 c7 c7 a0 fc c1 8c 41 57 56 48 89 ee 52 4c 89 e2 e8 da f6 6e f8 90 <0f> 0b 4c 89 4c 24 10 48 89 54 24 08 48 89 34 24 e8 24 51 f9 f8 4c [ 493.403571][ T6012] RSP: 0018:ffffc90004bcf6c0 EFLAGS: 00010286 [ 493.409650][ T6012] RAX: 0000000000000087 RBX: ffff88807543b8c0 RCX: ffffffff819bd255 [ 493.417655][ T6012] RDX: 0000000000000000 RSI: ffffffff819c4e39 RDI: 0000000000000005 [ 493.425659][ T6012] RBP: ffffffff8cc20fa0 R08: 0000000000000005 R09: 0000000000000000 [ 493.433660][ T6012] R10: 0000000080000000 R11: 00000000dc49c248 R12: ffffffff8a2ab7b0 [ 493.441670][ T6012] R13: 0000000000000028 R14: ffff88805640c120 R15: 00000000000006c0 [ 493.449648][ T6012] FS: 0000000000000000(0000) GS:ffff888124969000(0000) knlGS:0000000000000000 [ 493.458599][ T6012] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 493.465234][ T6012] CR2: 000020000000f000 CR3: 0000000050510000 CR4: 0000000000350ef0 [ 493.473270][ T6012] Kernel panic - not syncing: Fatal exception [ 493.479599][ T6012] Kernel Offset: disabled [ 493.483913][ T6012] Rebooting in 86400 seconds..