last executing test programs: 39.532436812s ago: executing program 0 (id=3697): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234-1234-123456789612', 0x24, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000100)='PRIV', 0x4, 0x1e8000) pwrite64(r0, 0x0, 0x0, 0x1ffe00) io_pgetevents(0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0) pwrite64(r0, &(0x7f0000000100)='TOCBLOCK', 0x8, 0x100200) pwrite64(r0, &(0x7f0000000140)="03a38dff062862478316ab1b5fe27c636f6e66696712dc4694df9832365b35884d930c954002d5dc7f55661b0a1b2fe28cac00b56d2cebc4e5e5222c894947bbcd58e7280739368bdc58a121effcc627f26c44db39bf3e8cb89054cad1d12965abc3218b4423de0badb5f5d191cad1902c1246b9eb7f2bd7ad605fc8ee98b8ee63061e8bf23b8b2dcb", 0x89, 0x100224) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 38.062097185s ago: executing program 0 (id=3699): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r3, &(0x7f000000a540), 0x0, 0x4000041) 33.207536999s ago: executing program 0 (id=3703): socket$nl_xfrm(0x10, 0x3, 0x6) fsetxattr(0xffffffffffffffff, &(0x7f0000001080)=@random={'user.', '/dev/ocfs2_control\x00'}, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) accept$inet(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48}) 31.289420023s ago: executing program 0 (id=3713): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r3, &(0x7f000000a540), 0x0, 0x4000041) 29.986389222s ago: executing program 0 (id=3716): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="c60a0100000000006111b400000000008510000002000000850000000700000095000e000000000095000000000000003764e7be95cd1b051a0f3cd983c673d1cc389e632d686ff6bfc1884d28861b616a4e21cc0c6b735256c1d8389642393b41331d67072eac14cc61e5392e2bfdb6c35de43684005670f403f1fc05a286a2029fb37849d0ec6f224dd3578c7a5f29bfec9c769e5eb33f3737ee2f36d9d6bd53f70c048c0985405510c8994db5"], &(0x7f0000000240)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='algo=zstd dict=d', 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)=ANY=[], 0x3f8}, 0x1, 0x0, 0x0, 0x8890}, 0x20008010) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "68c4502393926b50", "09f700", "1ab6c0e5"}, 0x28) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x2}], 0x2, 0x40018002, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r5) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 28.048645684s ago: executing program 0 (id=3720): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1cc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x4}]}, 0x3c}}, 0x4) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f0104000000"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb00000000003f000018280000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[], 0xd) init_module(&(0x7f0000002540)={{0x7f, 0x45, 0x4c, 0x46, 0xee, 0xa, 0x6, 0x5, 0x7, 0x2, 0x6, 0x3, 0x27a, 0x40, 0x5a, 0xca9b, 0x9, 0x38, 0x3, 0xb, 0xc, 0xc6}, [{0x3, 0xfffffffd, 0x80, 0x7fffffff, 0x86b, 0x6, 0x5, 0x7}, {0x3, 0x401, 0x3e9f0c59, 0x8000, 0x8, 0x8001, 0x3ff, 0x9}, {0x2, 0x4, 0x8, 0x8, 0x4, 0x1ff, 0x9, 0x3194}], "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"}, 0x10e8, &(0x7f0000003640)='\x00') preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/184, 0xb8}, {&(0x7f0000001500)=""/4102, 0x1006}], 0x2, 0x8f, 0xb) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000006000000000000000200008409010000040000000400000001000000000000000001000009000000003000002e"], &(0x7f0000000f40)=""/4079, 0x42, 0xfef, 0x8}, 0x28) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r6 = fsopen(&(0x7f0000000100)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='\x05\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000a30000000030a030000000000000000000a000007040008800900010073797a31000000000900030073797a3200000000140000001100010000000000000000000700000a"], 0x58}, 0x1, 0x0, 0x0, 0x601f478fc29b58c8}, 0x20008894) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0xa, @pix={0xfffffffa, 0x5, 0x3234564e, 0x7, 0xfffffffe, 0xffffffff, 0x9, 0xe, 0x3, 0x1, 0x2, 0x7}}) 12.868713949s ago: executing program 32 (id=3720): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1cc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x4}]}, 0x3c}}, 0x4) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f0104000000"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb00000000003f000018280000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[], 0xd) init_module(&(0x7f0000002540)={{0x7f, 0x45, 0x4c, 0x46, 0xee, 0xa, 0x6, 0x5, 0x7, 0x2, 0x6, 0x3, 0x27a, 0x40, 0x5a, 0xca9b, 0x9, 0x38, 0x3, 0xb, 0xc, 0xc6}, [{0x3, 0xfffffffd, 0x80, 0x7fffffff, 0x86b, 0x6, 0x5, 0x7}, {0x3, 0x401, 0x3e9f0c59, 0x8000, 0x8, 0x8001, 0x3ff, 0x9}, {0x2, 0x4, 0x8, 0x8, 0x4, 0x1ff, 0x9, 0x3194}], "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"}, 0x10e8, &(0x7f0000003640)='\x00') preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/184, 0xb8}, {&(0x7f0000001500)=""/4102, 0x1006}], 0x2, 0x8f, 0xb) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000006000000000000000200008409010000040000000400000001000000000000000001000009000000003000002e"], &(0x7f0000000f40)=""/4079, 0x42, 0xfef, 0x8}, 0x28) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r6 = fsopen(&(0x7f0000000100)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='\x05\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000a30000000030a030000000000000000000a000007040008800900010073797a31000000000900030073797a3200000000140000001100010000000000000000000700000a"], 0x58}, 0x1, 0x0, 0x0, 0x601f478fc29b58c8}, 0x20008894) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0xa, @pix={0xfffffffa, 0x5, 0x3234564e, 0x7, 0xfffffffe, 0xffffffff, 0x9, 0xe, 0x3, 0x1, 0x2, 0x7}}) 12.436248739s ago: executing program 2 (id=3766): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x54, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 10.136436254s ago: executing program 4 (id=3773): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000880)={0x53, 0xfffffffffffffffd, 0x0, 0x3, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xfffffffc, 0x12, 0x4, 0x0}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xfffffffe, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0x1ff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) r2 = fsopen(&(0x7f0000000140)='securityfs\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000d49ed10100030000000000040004001000000010000200000000002000050002"], 0x24, 0x1) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000040)=0x7) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000080)=0xffff) r3 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000040)={0x4, &(0x7f0000000b00)=[{0x41, '\x00', @buffer={"9434e04e3d433a46422d3c339667b7658f00", 0x20}, 0x4}, {0x2c, '\x00', @buffer={"189bb929b5af897d6a3bee029128341252f3a11b7cad0a23222390f424ea31c4", 0x20}, 0xfffffffe}, {0xd, '\x00', @buffer={"0c520b2ea8dbf8875d6bac650e76b86dcf5eb4e1469506358d460a40d42c22f0", 0x20}, 0xd02d}, {0x40, '\x00', @buffer={"02d848d078dcfe7b3154300848a04f774cf30400320466d89ae788a6e4048b6a", 0x20}, 0xa}, {0xf, '\x00', @data=0x8de, 0x8}]}) socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) syz_io_uring_setup(0xf02, &(0x7f0000000000)={0x0, 0x8dac, 0x80000, 0xf7fffffd, 0x40058}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000080007a000000430000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1e, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 9.939270293s ago: executing program 4 (id=3774): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) getcwd(&(0x7f0000000000)=""/204, 0xcc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @private2, 0x52}]}, &(0x7f0000000440)=0x10) syz_usb_connect(0x0, 0x17e, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x40045436, 0x2) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000180)) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x80000}) syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 9.923210763s ago: executing program 1 (id=3775): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x200, 0x0) get_mempolicy(0x0, 0x0, 0x705c, &(0x7f00000b0000/0x2000)=nil, 0x3) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r4 = fanotify_init(0x1, 0x1) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x134) fanotify_mark(r4, 0x451, 0x8000000, r5, 0x0) fanotify_mark(r4, 0x141, 0x40001029, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00068008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) r7 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r7, r8, 0x0, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x1, 0x209, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x100}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x38ad, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x1006, 0x1ba, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x0, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, 0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r14 = landlock_create_ruleset(&(0x7f0000000140)={0x2001, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r14, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r15 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r15, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r15, &(0x7f0000000000)="124353012008ba00000037510800", 0xe, 0x4008005, &(0x7f00000000c0)={0x11, 0xe5, r16, 0x1, 0x7}, 0x14) read$FUSE(r13, &(0x7f00000002c0)={0x2020}, 0x2020) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000000040)=[0x401, 0x8, 0x5, 0x4, 0x4, 0x93b3, 0x809, 0x40000003, 0x42, 0x7, 0xfffffffa, 0x8, 0x7, 0x0, 0x1], 0x1, 0x20000001}) 9.622659446s ago: executing program 1 (id=3776): socket$nl_netfilter(0x10, 0x3, 0xc) openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0xc0100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$phonet_pipe(0x23, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff, 0x0, r3}}], 0x1, 0x0, 0x0) 9.279201565s ago: executing program 1 (id=3777): r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x10, 0x803, 0x0) syz_usb_connect$hid(0x6, 0xbb30abfa5dd3bc38, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x458, 0x501a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 8.866331217s ago: executing program 2 (id=3778): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 8.725313829s ago: executing program 2 (id=3780): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x3c, r2, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x3c}}, 0x400400c) 8.70503821s ago: executing program 2 (id=3781): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1cc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x4}]}, 0x3c}}, 0x4) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[], 0xd) init_module(&(0x7f0000002540)={{0x7f, 0x45, 0x4c, 0x46, 0xee, 0xa, 0x6, 0x5, 0x7, 0x2, 0x6, 0x3, 0x27a, 0x40, 0x5a, 0xca9b, 0x9, 0x38, 0x3, 0xb, 0xc, 0xc6}, [{0x3, 0xfffffffd, 0x80, 0x7fffffff, 0x86b, 0x6, 0x5, 0x7}, {0x3, 0x401, 0x3e9f0c59, 0x8000, 0x8, 0x8001, 0x3ff, 0x9}, {0x2, 0x4, 0x8, 0x8, 0x4, 0x1ff, 0x9, 0x3194}], "6511bc79ff172cf2de52c85c3d340b9eea732e409084dead0030b917290b3ce8ef71186b0da4a52c269233375d483f1ffc1319979e7968c4d22060616f5bc2021852828be3c007fefa04c5cfff34611160334a13cb7a494f4e631adca27e166dc24465209bf8fdab2576b2566d44ecf5e059a1ab94dd8b4971590a91d3d9b12e2fa151240ca96037cbf959cff0eed43338b76b50c13ceaf7ef1d0a441660d561b963575b4955d20f5102e17a3cd4a240533ab71bbb62c98a3fa914992b46a6bfb5500b2e50c7df2536f0fa817b35871c186e109d54a0131366460af0a8493c7a05ea23bd21cccb17940a182391f79eb9836e90408b15c59d43a48b311fdfee1757a96ddcec6c7ba78a176f2ab7dba7bd37343756198b3c87007488e27e6090e805f02bf69a7e6e4a1fde6314cdbd2ea00eaca5479b6bff9bc347b6072865b66ab8751f1bc81b47b7cd48a66f4c9d3c36ce96911815cf50e766e503dbcfa67fa9a80f468d12ea4499a849c9fa4c58a3ddd6728dd8f221009124a48ac4d6a45eb27e6cfd761e3611cb4300e9336571a1a6331bdd083d58ea79f4288db75a5068c88ccdaa2c22f61c54c02f244c1f69e11823c81af730b1e7535158e967145d4148435b95b1da53ba6e0379e5c9d59866d966c4f7570a47ee5644acf90874fee3a15987172931882719353554a453baa8b348037fe29a417d9a625400dee4065c2ef9c977235365650b659a63ab8d4b5e4df77db740d1ab00cec2c4daace1f786ff3cdf536de952c52026b3e7a2ba97f5d2bd271f7da326432d6e77dca3933f997860c98809bd983d6eceff457666dc806fbac16461ca5fabfa8feca08949b164a1488a10912f41c22f3a2f41400fda45691cd750d712f19844ca6260f2068940924eeedd9b7d984e272358dbe70d16c35bc598039bef87fbe3eba361588e2874b9f8b6a6c1c84457e47eb9f88debbb62c9fcd6e175a66b466ab8da0cc6ca35d7a45c88e9b6ef2d5d0cc904af56ab005321a2e506298f659c2bc80e0ab9a387c7967ab8e803016b7fb9509e7ce9f749311b59c4d7d8661c7f16363f7a6b04291b6216a05ec8376d51cf9d43cf3db28647af68b1e532861df0a5b57a338ef1340a149d02ab0707b1d037bfbc4655e269149e6e4d7da70dfc652b6731a390ecf711fbbce0e4404a6f3ed837879b6e9b32f81ce6f00a141e833681135a30645554f3d719289d50cd46063612ff165864f16e9cd57fe1291d6cc9c2a4c212c0a1a0c34a5a48cdea56803cb7232e762daf342a4e3ff33678077c33116fda5f044dc4807cd0e4b3ccb7373ec82b9213aef5ca5e425089cfbc90192cbdc98294c7346a650bd84264f360eb05eeb381d5591e6e13ae17e961dbd7f0be81b153c886fa09b2d28d9f5b2560a031df2cb141702a442dfbb158c0265cebe573e2de55d73a5f11bee804f1facf827140465a8c99d4e6413f2b30978f7a1fc0a32887aae39bf3cf8b0bfd63bf86418bf41e9a440927580d71d9945ab64ff50815e4b8c5bb54c50b6d258577af2f34159b61bbd5f74a94aa5aff3bc37e82c70aa02c38657f75f760f2e65d145e7a838e9b1b7605beb0b3a1eb54d0686ffbcd15c9fbecacf84feaf1aa7c29edca7be28cef768b65cd579772807179c6711199adab2fffd10a6d48ad8a18c7fcf41144eb0110b450c5e0cd333b3d35457d2b6331ceb5cc1b5d5f5a6ca7cd601bfffd524966ed0bc3a4a279d482e2281a76e5f830d0511474dbe25f01619cf484de732618e2d98c3bd69cbe65786a913b4aac5b831c838e0ad0989ffe25b2571a896bb3cf632dda6b40939d290e94c97a986615ed291a522157cfab8b9dc814e787bcd72c8aa7d7dd56e4ef1571701227f225226d53022953e790eeee8829c2985b21cfaf58b361a2bd0485e16532fd5eddccaf4b4bdbdb27da2065f7c1fa5d04fbecd496a8e4fb751806bca7c9a3cb909a7b6a2944164f04f6f2bbc83fee00d87020cb05d48641428e6264895ff7f9d0fac7e10ef320191c51c469932f6155ba10e14f71e432ca6e6d3c6565937b23dc1a7747c5fe5c4119a51ad4a44d64db8513c4329944cdcc257f4ecdf64227ae8a386bc715ee2900cc654465c42fcab01270f721b053fec84223100cae4055d36d8b5ba63787bc3990889a1d3a355d1e5df282eb24afae963cff9af7e14faf8114aba2987199e6c1a2a0abf8a90150f9bdda836b04a1aaf0ab40c6e35aa28729efbf787b59ddde705dd86096c1a211cb37879256029905439a7e2cbeea9fe1e9e8f446064291360838dc1d1644c96924f72d5f3def91a56875fbc162a422f291ed7e1aac78be2f8fdf110cd648b2c7078a16db065f48df5a582c4e002ca1d448b6286629e0ea8d4cfd96546ed2aee46ea9002fdc7c6faff61166e66fc3926a25d43dd7ebf09e1c984ae3659d574cf18f81569e06e3e0756100ca59bbbff81ecc4b80e1d9fb95307ac575694078736b1479061bf8b68b7a8ecd23fdb7e636a991222309a4cddf53d0d2af6cbd96c70852c77fd046a8483c0dff7055ce59786aa29c8855b3b9d97cc9f39c5a079eafb0cb8011feecfe5ea5a9664419807a8b2a6b6fa2d3b43b55b51ecc8d9fc744f7970c0863e5905d336a1946fa96c50f2c344c16e3e3167285270f13321e2be39cf7fb7254a7166a706ca249cb7a4624d892e3bc5d434c660ae3c7bf45a74cff6d36d919a95646371f960ce5c3002148b8c4eefaaf39495a61723242e91a3d8856636ca4d8f71581944b2f09011c35d405ac424b75af7a28574bd6d032ccde30bdf06f20c0116e93d49992b050a00c66fb17822afdc1c84af9307a58f38522faadf8f63c6b4ce6ad81d7720827d9f2a0706c3b0f40e829ebd7a596e0928c90e6488c64a103737a89ffa9c13d0f15d25112eae46c3ec69644048956b31a44f91bbd53f0b560baeff887a5a14942695149c65d3b03ecd813db275f710faaaadeb0453c3ddb66c48408391df842dc9a4e079aca0598630a1c181a6dfaa2e118d1fb6c4b913f98ce07c6211c640fae2aff7b931e0ba615ec18af50310f42f4c4234775d250be40c947ee11fa8f07852801ef869626989124af241590f3e4455ac2c45984fb768c063be25fa40cb16fa705dc69404b60eade3aa7b89c840c271760fe3e29a370abb39f0bcebfc1d292947100234fddee3b6d892dc26478a3bd27e8bf2e03a29906032011295489a6a7f3b2c3cff6af1fa3942dd03aced4095c96aca185de163c3e1d65999bcdb7fcc7025022516d60a179ef6319a698f4a5a3ac6d1f42a16c3a0b45a977b9668a200dd504f2398a9e709639b68528016a16b383e1c4b5dad7411fe48f9f55b62c940c62901459d65f61e40b92635b09f0a8af9a311510ec918468aab36554286d6bf7af7149650fe81a954c88e142eb100069b5c9ae2b5e9e1da402ea7755fa98535c753eaf71e041f392f4059da330c61da64d6df987929f897e2182e38e2fd7ee7b0a69eef8a69bdf5aa379c10a6eb83fcf9b8ba1d465b39f080149aa145ae54f866d3c399122e501b3f819aaef957f077ade94de37fc69864482a4a9c3cf493ca4df6fa1841dfd52d24f5d81835c9772c0e47c08263b9a8717b816c11c69d7d525916ab14dc82a8bebb845bde5729ee9c8a5320d12c08e21b2e78238b239494445af136936c5cc69fbd48fa3a734be7da52fd0b2eb30c70abd7de7385c9b0a92f0a6235131f1e9182a49d06644eb97bf219c48d8a0bd7763d45f94910d1d47ffbd82eb4300f559d04afeeeb7efaadb87b0f1ca2f9d56c548d485440f86e434526abaff8f0c66628bf6b8dd12d7c70942fe3a2584ecaebba8b716fd3ebb9c73a3b7f55507c38c2b03949a399d5088d1b8064c05d63a8ae634ae61699add6e7d6669cf161ebfdf0bc88c21b199dc239dda14a9b5b20be1e025cafbe62ba47e9c052f7cce1b755d95faabf4a6ba3ab7b38f9666a3c9257f938a580d32bd258f0e061ac5c1e649729c85665160ce5da075feed8590a8daf138d63f8bc4137da645307d39a6555df0aec98e3c14459c2bdc066b2e6f416cd95ed36d1be5b8f730da667157f29fa89a4f6a9feb4e220630a466299d47a830472d27358fe26c34fbe85fc171bf9a46005ef15237783b2a01c3eaac2aa12ee46d306515f475a81e79cae85db4e404b93cc75c828b0a6d11f1fbe7d64b7eb469e4a8816f865732c9035c15a58e4e7f5a4b0fa0b4497a5948ac44223de80b65f4551193ad47008ec5bef4c96778966be522a47b813642ac85ed6ee71c337e427d5efdb0cb769906937476fa4f525927924dd5731acf998a5c6b9b43529d7555ae14e7131c2ed834e911a52e9a00549c6fc05fed2ed1ce3c2bddcfdda2a667954bfc12a586affc742943effc6c2abe22cac0f3ecce5835b4a8fcadbf0f1218de52c677f34c33e5d714e56880e6dbcff35e6a2b3022cb9d68158fa39b4aee6018db43226623b6ac6a8cde06c9f8934e95705bd319e07a4cc8ded3e5b005f47fd25bd42211d9d5702b747446099abf93d8f3b1d72b39a5971cdcdcf770182e67cf34814784d96ac367091b83ec8df99dafa653fcd3ca40ed9c1e61c37db1ee67ef3cd2afe40049db887790ab01a5292b0c5a4d255c929cfeef39a045a4bb32a834c2aa6b7901c646c991ba40d8a11bc28ba9dfeaf468a88970cd9cb7753475d745d54ef58d8a180e5526cf0f5338a7a539e2d9187bae56cb28bdbbcaac7ba0d68f2656f50d4f986cacaaa94439adb8c5277557c59ec63748d997c61d04a621dcca04abe6bee8b584da324402dd3cdd2d8d3ce7c122e8f2ed1f8fc774fee68aa4f473f2f4843e5488c2f82396bd600bd4aa8b77c988b883840a0a02ddf44f893c2987a93112a4a58ec96f230363eaac4addc20a9eb04dee1a0c57517bb237090100b1528444471e5e8f4db74269c80acd0f6a83ebe76f278cca98ad82ad89d5a2cef7d37a3162adac219706c084ef7188adf09bc3021c7984068a3a7a582c465810798ab23b5007451d690489a3599f3662708906ed040c3357bb8da1162420d02c6f5260597ac0db527429b15c0383f43190e5efaad7057157016af24c3b440d998ef36cc5c2aee490e7b2843225110cbbb1cad276439244f1991990606c2cfa428673079014603edc4d0ec16c57ff486f17d91f018e823fe046ce88547bb233dba123fbdd51c027d63134f60ffe3b2614b5d2e022560d91b3a0c7013864c8a120a69d1c4f37b4f8ae4dfafe491e0eac07ea7b95006bda5937c61de31375028a9ca339fdeae433c62ff2bfd2618d06fd606add82a70fe486731ef0528d572923a9538cea0e9d1c9218a89e777b40d86b1329caec5bacaf768af47db6c6786e43e38212ad9cd78ca5f97ad0431517bf1e4cc150b6ebe0e82422f96074a1d1c06e6ae3b80de058c7733d733f792f10c2d0767f6b252b99675cf9b437a7634a6b7330033fcaeff3b28de8e7ad6c9776665068e6b34ffe61c19d1e302d574064cd45ce661c43d33c895cd6acd9f2327c2fb7a421706770399ed10b780583f6e12e441ebd0d66a9199dd766b05521c0fc20eb15b4ba9fa9331ce8e591fbe171afd5cb4d6aabe02fbac2b93c5ce501aff129f016786c3be387808d8f756bfea46bfbd8b0b3d0397db6efb48c7cc8fb20f1a28fc684645ce5ddd15355f767beb9eb32fb70525e61c1fc98a77f96b5aeb3992cd3ae201c14a29222269c1a8593c6057d02f3bc5bdc90003a78e5aef8e0a172c24b05ed20c3fb8af299fd4af5837a1f19bfcf9e"}, 0x10e8, &(0x7f0000003640)='\x00') preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000200)=""/184, 0xb8}, {&(0x7f0000001500)=""/4102, 0x1006}], 0x2, 0x8f, 0xb) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000006000000000000000200008409010000040000000400000001000000000000000001000009000000003000002e"], &(0x7f0000000f40)=""/4079, 0x42, 0xfef, 0x8}, 0x28) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r5 = fsopen(&(0x7f0000000100)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='\x05\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000a30000000030a030000000000000000000a000007040008800900010073797a31000000000900030073797a3200000000140000001100010000000000000000000700000a"], 0x58}, 0x1, 0x0, 0x0, 0x601f478fc29b58c8}, 0x20008894) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0xa, @pix={0xfffffffa, 0x5, 0x3234564e, 0x7, 0xfffffffe, 0xffffffff, 0x9, 0xe, 0x3, 0x1, 0x2, 0x7}}) 8.459765309s ago: executing program 1 (id=3784): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x54, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 7.61856271s ago: executing program 3 (id=3785): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x200, 0x0) get_mempolicy(0x0, 0x0, 0x705c, &(0x7f00000b0000/0x2000)=nil, 0x3) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r4 = fanotify_init(0x1, 0x1) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x134) fanotify_mark(r4, 0x451, 0x8000000, r5, 0x0) fanotify_mark(r4, 0x141, 0x40001029, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00068008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) r7 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r7, r8, 0x0, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x1, 0x209, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x100}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x38ad, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x1006, 0x1ba, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x0, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, 0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r14 = landlock_create_ruleset(&(0x7f0000000140)={0x2001, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r14, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r15 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r15, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r15, &(0x7f0000000000)="124353012008ba00000037510800", 0xe, 0x4008005, &(0x7f00000000c0)={0x11, 0xe5, r16, 0x1, 0x7}, 0x14) read$FUSE(r13, &(0x7f00000002c0)={0x2020}, 0x2020) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000000040)=[0x401, 0x8, 0x5, 0x4, 0x4, 0x93b3, 0x809, 0x40000003, 0x42, 0x7, 0xfffffffa, 0x8, 0x7, 0x0, 0x1], 0x1, 0x20000001}) 7.112042961s ago: executing program 3 (id=3786): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x0) socket(0x400000000010, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000dc2000/0x3000)=nil, &(0x7f0000a61000/0x3000)=nil, 0x3000}) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r6 = socket(0x2d, 0x2, 0x0) bind$xdp(r6, &(0x7f0000000080)={0x2d, 0x0, r5, 0xc}, 0x10) r7 = socket(0x2d, 0x2, 0x0) bind$xdp(r7, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r7) read$char_usb(r1, &(0x7f0000000140)=""/160, 0xa0) syz_usb_disconnect(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x0) lsm_get_self_attr(0x64, &(0x7f0000000040)={0x0, 0x0, 0xd1, 0xb1, ""/177}, &(0x7f0000000140)=0xd1, 0x1) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r9, 0x0, 0x0, @in6={0xa, 0x4e22, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf}}}, 0x90) 6.665257113s ago: executing program 4 (id=3787): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) clock_gettime(0x0, &(0x7f0000000180)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x54000}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16005782973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)}], 0x2}, 0x20004000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 5.900780219s ago: executing program 4 (id=3788): socket$nl_xfrm(0x10, 0x3, 0x6) fsetxattr(0xffffffffffffffff, &(0x7f0000001080)=@random={'user.', '/dev/ocfs2_control\x00'}, 0x0, 0x0, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2}) 1.76382921s ago: executing program 3 (id=3789): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 1.749609198s ago: executing program 1 (id=3790): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x3c, r2, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}]}, 0x3c}}, 0x400400c) 1.500184996s ago: executing program 2 (id=3791): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x20000840) 1.369202473s ago: executing program 3 (id=3792): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000000)="1546b2000000000000008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f20800b179aa90", 0x2e) 1.303147964s ago: executing program 3 (id=3793): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) clock_gettime(0x0, &(0x7f0000000180)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x54000}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="63f805d76494962b72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36", 0x3f}], 0x1}, 0x20004000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 1.020802943s ago: executing program 1 (id=3794): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0x20, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr$smack_xattr_label(r1, &(0x7f0000000c80)='security.SMACK64IPOUT\x00', 0x0, 0x0, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc0000000000000000000000000000000000000000000000000000000000000000000004000100000a0060", @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00'], 0xb8}}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4040095}, 0x40010) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x39, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0xfd, 0xc8e}, {0x16}]}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r7, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r8, 0x400448ca, 0x0) ioctl(r8, 0x400448c9, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00'}) 631.387119ms ago: executing program 4 (id=3795): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x200, 0x0) get_mempolicy(0x0, 0x0, 0x705c, &(0x7f00000b0000/0x2000)=nil, 0x3) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r4 = fanotify_init(0x1, 0x1) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x134) fanotify_mark(r4, 0x451, 0x8000000, r5, 0x0) fanotify_mark(r4, 0x141, 0x40001029, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00068008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) r7 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, 0x0) syz_ublk_add_dev(r7, r8, r9, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x1, 0x209, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x100}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x38ad, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x1006, 0x1ba, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0x0, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, 0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r14 = landlock_create_ruleset(&(0x7f0000000140)={0x2001, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r14, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r15 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r15, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r15, &(0x7f0000000000)="124353012008ba00000037510800", 0xe, 0x4008005, &(0x7f00000000c0)={0x11, 0xe5, r16, 0x1, 0x7}, 0x14) read$FUSE(r13, &(0x7f00000002c0)={0x2020}, 0x2020) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000000040)=[0x401, 0x8, 0x5, 0x4, 0x4, 0x93b3, 0x809, 0x40000003, 0x42, 0x7, 0xfffffffa, 0x8, 0x7, 0x0, 0x1], 0x1, 0x20000001}) 412.328358ms ago: executing program 2 (id=3796): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, 0x0) 308.373542ms ago: executing program 3 (id=3797): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x0) socket(0x400000000010, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}, 0x3}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000dc2000/0x3000)=nil, &(0x7f0000a61000/0x3000)=nil, 0x3000}) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r6 = socket(0x2d, 0x2, 0x0) bind$xdp(r6, &(0x7f0000000080)={0x2d, 0x0, r5, 0xc}, 0x10) r7 = socket(0x2d, 0x2, 0x0) bind$xdp(r7, 0x0, 0x0) close(r7) read$char_usb(r1, &(0x7f0000000140)=""/160, 0xa0) syz_usb_disconnect(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x0) lsm_get_self_attr(0x64, &(0x7f0000000040)={0x0, 0x0, 0xd1, 0xb1, ""/177}, &(0x7f0000000140)=0xd1, 0x1) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r9, 0x0, 0x0, @in6={0xa, 0x4e22, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf}}}, 0x90) 0s ago: executing program 4 (id=3798): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) kernel console output (not intermixed with test programs): 4375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3000'. [ 620.046010][T14375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3000'. [ 620.566607][ T2184] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 620.705214][ T5681] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 620.717243][ T2184] usb 5-1: Using ep0 maxpacket: 32 [ 620.731082][ T2184] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 620.733070][ T2184] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 620.733093][ T2184] usb 5-1: config 0 has no interface number 0 [ 620.733134][ T2184] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 620.733154][ T2184] usb 5-1: config 0 interface 1 has no altsetting 0 [ 620.905001][ T2184] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.905027][ T2184] usb 5-1: Product: syz [ 620.905040][ T2184] usb 5-1: Manufacturer: syz [ 620.906686][ T2184] usb 5-1: SerialNumber: syz [ 621.777002][ T2184] usb 5-1: config 0 descriptor?? [ 621.795563][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 621.815253][ T5681] usb 4-1: Using ep0 maxpacket: 8 [ 621.816112][ T5681] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 621.818456][ T5681] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 621.818479][ T5681] usb 4-1: config 0 has no interface number 0 [ 621.818520][ T5681] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 621.818543][ T5681] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 621.818563][ T5681] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 621.818603][ T5681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.885722][ T5681] usb 4-1: config 0 descriptor?? [ 621.914294][ T5681] ldusb 4-1:0.55: Interrupt in endpoint not found [ 621.975387][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 621.976365][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 621.979904][ T10] usb 3-1: config index 0 descriptor too short (expected 164, got 36) [ 621.979928][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.979973][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 621.980011][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.023944][ T10] usb 3-1: config 0 descriptor?? [ 622.080206][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 622.112037][ T2184] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 622.124592][ T2184] cx231xx 5-1:0.1: Failed to read PCB config [ 622.124673][ T2184] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 622.160533][ T2184] usb 5-1: USB disconnect, device number 19 [ 622.274260][ T5681] usb 4-1: USB disconnect, device number 25 [ 622.585487][ T5920] usb 3-1: USB disconnect, device number 44 [ 622.636617][ T2184] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 622.788083][ T2184] usb 5-1: Using ep0 maxpacket: 32 [ 622.794907][ T2184] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 622.815954][ T2184] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 622.815982][ T2184] usb 5-1: config 0 has no interface number 0 [ 622.816026][ T2184] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 622.816047][ T2184] usb 5-1: config 0 interface 1 has no altsetting 0 [ 622.820818][ T2184] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.820853][ T2184] usb 5-1: Product: syz [ 622.820867][ T2184] usb 5-1: Manufacturer: syz [ 622.820881][ T2184] usb 5-1: SerialNumber: syz [ 622.894586][ T2184] usb 5-1: config 0 descriptor?? [ 623.746755][ T4906] block nbd8: Receive control failed (result -32) [ 623.754490][ T59] block nbd8: Receive control failed (result -32) [ 623.796396][ T2184] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 623.796901][ T2184] cx231xx 5-1:0.1: Failed to read PCB config [ 623.796965][ T2184] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 623.799847][ T2184] usb 5-1: USB disconnect, device number 20 [ 624.975974][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.976051][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.784274][T14455] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3032'. [ 625.799572][T14454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3033'. [ 625.799594][T14454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3033'. [ 626.035460][ T5829] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 626.125314][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 626.185207][ T5829] usb 1-1: Using ep0 maxpacket: 8 [ 626.186128][ T5829] usb 1-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 626.187712][ T5829] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.194788][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.194813][ T5829] usb 1-1: Product: syz [ 626.194826][ T5829] usb 1-1: Manufacturer: syz [ 626.194840][ T5829] usb 1-1: SerialNumber: syz [ 626.253735][ T5829] usb 1-1: config 0 descriptor?? [ 626.275259][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 626.276162][ T10] usb 5-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 626.277568][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.279969][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.279991][ T10] usb 5-1: Product: syz [ 626.280005][ T10] usb 5-1: Manufacturer: syz [ 626.280019][ T10] usb 5-1: SerialNumber: syz [ 626.324154][ T10] usb 5-1: config 0 descriptor?? [ 626.344000][ T10] gspca_main: t613-2.14.0 probing 17a1:0128 [ 626.561377][ T5829] gspca_main: t613-2.14.0 probing 17a1:0128 [ 626.563102][ T5829] gspca_t613: unknown sensor 0000 [ 626.563187][ T5829] t613 1-1:0.0: probe with driver t613 failed with error -22 [ 626.588838][ T5829] usb 1-1: USB disconnect, device number 42 [ 626.766311][T14456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.766891][T14456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.262642][ T4906] Bluetooth: hci5: command 0x0406 tx timeout [ 628.271658][ T10] gspca_t613: unknown sensor 0000 [ 628.271806][ T10] t613 5-1:0.0: probe with driver t613 failed with error -22 [ 628.299501][ T10] usb 5-1: USB disconnect, device number 21 [ 628.926839][ T5829] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 629.039203][T14500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3048'. [ 629.039225][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3048'. [ 629.077399][ T5829] usb 3-1: Using ep0 maxpacket: 8 [ 629.078214][ T5829] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 629.081280][ T5829] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 629.081304][ T5829] usb 3-1: config 0 has no interface number 0 [ 629.081343][ T5829] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 629.081364][ T5829] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 629.081380][ T5829] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 629.081415][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.170173][ T5829] usb 3-1: config 0 descriptor?? [ 629.183217][ T5829] ldusb 3-1:0.55: Interrupt in endpoint not found [ 629.517812][T14394] usb 3-1: USB disconnect, device number 45 [ 630.035255][ T5920] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 630.205490][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 630.206433][ T5920] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 630.208125][ T5920] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 630.208148][ T5920] usb 2-1: config 0 has no interface number 0 [ 630.208190][ T5920] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 630.208212][ T5920] usb 2-1: config 0 interface 1 has no altsetting 0 [ 630.210967][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.210989][ T5920] usb 2-1: Product: syz [ 630.211004][ T5920] usb 2-1: Manufacturer: syz [ 630.211018][ T5920] usb 2-1: SerialNumber: syz [ 630.326418][ T5920] usb 2-1: config 0 descriptor?? [ 630.558905][ T5920] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 630.564749][ T5920] cx231xx 2-1:0.1: Failed to read PCB config [ 630.564822][ T5920] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 630.602531][ T5920] usb 2-1: USB disconnect, device number 37 [ 631.743646][T14526] block nbd9: shutting down sockets [ 631.756682][T14537] loop0: detected capacity change from 0 to 3904 [ 631.765263][ T5920] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 631.880216][T14537] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 631.880245][T14537] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 631.880256][T14537] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 631.880313][T14537] loop0: [ 631.945180][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 631.946110][ T5920] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 631.947547][ T5920] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 631.947569][ T5920] usb 2-1: config 0 has no interface number 0 [ 631.947610][ T5920] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 631.947631][ T5920] usb 2-1: config 0 interface 1 has no altsetting 0 [ 631.950146][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.950166][ T5920] usb 2-1: Product: syz [ 631.950179][ T5920] usb 2-1: Manufacturer: syz [ 631.950193][ T5920] usb 2-1: SerialNumber: syz [ 631.960530][ T5920] usb 2-1: config 0 descriptor?? [ 632.214792][ T5920] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 632.226837][ T5920] cx231xx 2-1:0.1: Failed to read PCB config [ 632.226911][ T5920] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 632.232869][ T5920] usb 2-1: USB disconnect, device number 38 [ 632.574265][T14554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3065'. [ 632.886105][T14554] veth9: entered promiscuous mode [ 633.678391][T14574] loop0: detected capacity change from 0 to 3904 [ 634.564419][T14577] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 634.564445][T14577] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 634.564458][T14577] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 634.564523][T14577] loop0: [ 634.575537][T14576] block nbd9: shutting down sockets [ 634.586686][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 634.765203][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 634.767520][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 634.771151][ T10] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 634.771175][ T10] usb 4-1: config 0 has no interface number 0 [ 634.771218][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 634.771239][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 634.771262][ T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 634.771286][ T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 634.771306][ T10] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 634.771346][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.860181][ T10] usb 4-1: config 0 descriptor?? [ 634.976825][ T10] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 635.214919][ T5829] usb 4-1: USB disconnect, device number 26 [ 635.267868][ T5829] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 635.280188][T14594] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3079'. [ 635.497007][T14594] IPv6: Can't replace route, no match found [ 636.115260][ T5829] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 636.315343][ T5829] usb 1-1: Using ep0 maxpacket: 8 [ 636.316450][ T5829] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 636.319058][ T5829] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.319108][ T5829] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 636.319134][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 636.375925][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 636.375941][ T5829] usb 1-1: Product: syz [ 636.375948][ T5829] usb 1-1: Manufacturer: syz [ 636.375956][ T5829] usb 1-1: SerialNumber: syz [ 636.434221][ T5829] usb 1-1: config 0 descriptor?? [ 637.954441][ T5829] rc_core: IR keymap rc-imon-rsc not found [ 637.954460][ T5829] Registered IR keymap rc-empty [ 638.071904][ T5829] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 638.162405][ T5829] input: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input65 [ 638.205694][T14623] loop0: detected capacity change from 0 to 3904 [ 638.308594][ T5829] usb 1-1: USB disconnect, device number 43 [ 638.314641][T14623] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 638.314667][T14623] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 638.314679][T14623] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 638.314749][T14623] loop0: [ 639.099525][T14636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3077'. [ 639.443739][T14636] veth3: entered promiscuous mode [ 639.785135][T14660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 641.158438][ T5714] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 641.305309][ T5714] usb 3-1: Using ep0 maxpacket: 32 [ 641.306233][ T5714] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 641.307529][ T5714] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 641.307552][ T5714] usb 3-1: config 0 has no interface number 0 [ 641.307593][ T5714] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 641.307614][ T5714] usb 3-1: config 0 interface 1 has no altsetting 0 [ 641.323889][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.323915][ T5714] usb 3-1: Product: syz [ 641.323928][ T5714] usb 3-1: Manufacturer: syz [ 641.323940][ T5714] usb 3-1: SerialNumber: syz [ 641.342046][ T5714] usb 3-1: config 0 descriptor?? [ 641.558215][ T5714] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 641.558708][ T5714] cx231xx 3-1:0.1: Failed to read PCB config [ 641.558772][ T5714] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 641.564414][ T5714] usb 3-1: USB disconnect, device number 46 [ 641.995303][ T5709] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 642.195227][ T5709] usb 3-1: Using ep0 maxpacket: 32 [ 642.198940][ T5709] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 642.202416][ T5709] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 642.202440][ T5709] usb 3-1: config 0 has no interface number 0 [ 642.202482][ T5709] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 642.202503][ T5709] usb 3-1: config 0 interface 1 has no altsetting 0 [ 642.209762][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.209785][ T5709] usb 3-1: Product: syz [ 642.209799][ T5709] usb 3-1: Manufacturer: syz [ 642.209811][ T5709] usb 3-1: SerialNumber: syz [ 642.333279][ T5709] usb 3-1: config 0 descriptor?? [ 642.667144][T14719] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 643.596418][T14717] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3124'. [ 643.715004][ T5709] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 643.731467][ T5709] cx231xx 3-1:0.1: Failed to read PCB config [ 643.731534][ T5709] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 643.741118][ T5709] usb 3-1: USB disconnect, device number 47 [ 644.456531][ T5598] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 644.605196][ T5598] usb 5-1: Using ep0 maxpacket: 8 [ 644.606149][ T5598] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 644.608089][ T5598] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.608137][ T5598] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 644.608164][ T5598] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 644.611845][ T5598] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 644.611867][ T5598] usb 5-1: Product: syz [ 644.611881][ T5598] usb 5-1: Manufacturer: syz [ 644.611892][ T5598] usb 5-1: SerialNumber: syz [ 644.692667][ T5598] usb 5-1: config 0 descriptor?? [ 644.715339][ T5681] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 644.785268][ T5598] rc_core: IR keymap rc-imon-rsc not found [ 644.785289][ T5598] Registered IR keymap rc-empty [ 644.790605][ T5598] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 644.794992][ T5598] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input67 [ 644.875207][ T5681] usb 4-1: Using ep0 maxpacket: 32 [ 644.876091][ T5681] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 644.918304][ T5681] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 644.918332][ T5681] usb 4-1: config 0 has no interface number 0 [ 644.918375][ T5681] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 644.918389][ T5681] usb 4-1: config 0 interface 1 has no altsetting 0 [ 644.937536][ T5681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.937563][ T5681] usb 4-1: Product: syz [ 644.937578][ T5681] usb 4-1: Manufacturer: syz [ 644.937591][ T5681] usb 4-1: SerialNumber: syz [ 644.976096][ T5681] usb 4-1: config 0 descriptor?? [ 645.089824][ T5709] usb 5-1: USB disconnect, device number 22 [ 645.137841][T14763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3140'. [ 645.199327][ T5681] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 645.207669][ T5681] cx231xx 4-1:0.1: Failed to read PCB config [ 645.207739][ T5681] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 645.255769][ T5681] usb 4-1: USB disconnect, device number 27 [ 645.301100][T14763] veth11: entered promiscuous mode [ 645.755350][ T5681] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 645.906738][ T5681] usb 4-1: Using ep0 maxpacket: 32 [ 645.913212][ T5681] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 645.915251][ T5681] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 645.915274][ T5681] usb 4-1: config 0 has no interface number 0 [ 645.915316][ T5681] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 645.915336][ T5681] usb 4-1: config 0 interface 1 has no altsetting 0 [ 645.967622][ T5709] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 645.972287][ T5681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.972312][ T5681] usb 4-1: Product: syz [ 645.972379][ T5681] usb 4-1: Manufacturer: syz [ 645.972393][ T5681] usb 4-1: SerialNumber: syz [ 646.005413][ T5681] usb 4-1: config 0 descriptor?? [ 646.115826][ T5709] usb 5-1: Using ep0 maxpacket: 8 [ 646.123289][ T5709] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 646.142453][ T5709] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.142505][ T5709] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 646.142598][ T5709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 646.179086][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 646.179102][ T5709] usb 5-1: Product: syz [ 646.179109][ T5709] usb 5-1: Manufacturer: syz [ 646.179117][ T5709] usb 5-1: SerialNumber: syz [ 646.208837][ T5709] usb 5-1: config 0 descriptor?? [ 646.317394][ T5709] rc_core: IR keymap rc-imon-rsc not found [ 646.317409][ T5709] Registered IR keymap rc-empty [ 646.318826][ T5709] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 646.483614][ T5709] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input68 [ 646.565551][ T4906] Bluetooth: hci0: command 0x0405 tx timeout [ 646.793872][T14806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3154'. [ 646.900941][ T5709] usb 5-1: USB disconnect, device number 23 [ 647.050832][ T5681] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 647.051295][ T5681] cx231xx 4-1:0.1: Failed to read PCB config [ 647.051357][ T5681] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 647.060558][ T5681] usb 4-1: USB disconnect, device number 28 [ 647.176003][T14806] veth5: entered promiscuous mode [ 647.481670][ T59] block nbd9: Receive control failed (result -32) [ 647.482247][ T4906] block nbd9: Receive control failed (result -32) [ 649.105466][T14844] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3166'. [ 649.195402][ T5709] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 649.345247][ T5709] usb 2-1: Using ep0 maxpacket: 32 [ 649.347869][ T5709] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 649.349981][ T5709] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 649.350005][ T5709] usb 2-1: config 0 has no interface number 0 [ 649.350047][ T5709] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 649.350065][ T5709] usb 2-1: config 0 interface 1 has no altsetting 0 [ 649.352910][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.352932][ T5709] usb 2-1: Product: syz [ 649.352946][ T5709] usb 2-1: Manufacturer: syz [ 649.352959][ T5709] usb 2-1: SerialNumber: syz [ 649.385479][ T5709] usb 2-1: config 0 descriptor?? [ 649.680125][ T5709] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 649.682076][ T5709] cx231xx 2-1:0.1: Failed to read PCB config [ 649.682141][ T5709] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 649.702801][ T5709] usb 2-1: USB disconnect, device number 39 [ 653.091655][T14864] netlink: 'syz.4.3177': attribute type 4 has an invalid length. [ 653.413321][T14877] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 653.630774][T14878] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3181'. [ 655.002095][T14899] netlink: 'syz.2.3189': attribute type 4 has an invalid length. [ 655.535161][ T5714] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 655.685450][ T5714] usb 5-1: Using ep0 maxpacket: 8 [ 655.686353][ T5714] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 655.687780][ T5714] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 655.687803][ T5714] usb 5-1: config 0 has no interface number 0 [ 655.687845][ T5714] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 655.687869][ T5714] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 655.687893][ T5714] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 655.687917][ T5714] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 655.687956][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.693028][ T5714] usb 5-1: config 0 descriptor?? [ 655.831400][ T5714] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 655.928611][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 655.981230][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 655.983577][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 656.030749][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 656.046101][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 656.894044][ T5714] usb 5-1: USB disconnect, device number 24 [ 656.906502][ T5714] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 657.026122][T14924] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3196'. [ 657.627274][T14949] loop0: detected capacity change from 0 to 3904 [ 657.990331][T14949] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 657.990361][T14949] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 657.990374][T14949] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 657.990425][T14949] loop0: [ 658.335703][T14959] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 658.405293][ T4906] Bluetooth: hci1: command tx timeout [ 659.225238][ T5598] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 659.378783][ T5598] usb 4-1: Using ep0 maxpacket: 8 [ 659.383634][ T5598] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 659.400641][ T5598] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.400695][ T5598] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 659.400727][ T5598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 659.404452][ T5598] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 659.404478][ T5598] usb 4-1: Product: syz [ 659.404492][ T5598] usb 4-1: Manufacturer: syz [ 659.404506][ T5598] usb 4-1: SerialNumber: syz [ 659.483402][T14979] loop0: detected capacity change from 0 to 3904 [ 659.496799][ T5598] usb 4-1: config 0 descriptor?? [ 659.550442][T14979] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 659.550469][T14979] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 659.550479][T14979] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 659.550522][T14979] loop0: [ 659.757778][ T5598] rc_core: IR keymap rc-imon-rsc not found [ 659.757793][ T5598] Registered IR keymap rc-empty [ 659.758868][ T5598] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 659.770406][ T5598] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input69 [ 659.882011][ T5598] usb 4-1: USB disconnect, device number 29 [ 660.465237][T14993] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 660.486632][ T4906] Bluetooth: hci1: command tx timeout [ 660.831095][T15006] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3225'. [ 660.831120][T15006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3225'. [ 661.120774][T14906] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.120900][T14906] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.121035][T14906] bridge_slave_0: entered allmulticast mode [ 661.123641][T14906] bridge_slave_0: entered promiscuous mode [ 661.173537][T14906] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.173670][T14906] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.174444][T14906] bridge_slave_1: entered allmulticast mode [ 661.191327][T14906] bridge_slave_1: entered promiscuous mode [ 661.261284][T15018] loop0: detected capacity change from 0 to 3904 [ 661.389409][T15021] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 661.389436][T15021] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 661.389449][T15021] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 661.389505][T15021] loop0: [ 661.501511][T14906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.518084][T14906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.722509][T15024] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 662.565237][ T4906] Bluetooth: hci1: command tx timeout [ 662.630820][T14906] team0: Port device team_slave_0 added [ 662.670248][T14906] team0: Port device team_slave_1 added [ 662.700753][T15031] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 662.877011][T14906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.877028][T14906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.877053][T14906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.882867][T14906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.882883][T14906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.882909][T14906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.059953][T15041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3238'. [ 663.059976][T15041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3238'. [ 663.089588][T14906] hsr_slave_0: entered promiscuous mode [ 663.090456][T14906] hsr_slave_1: entered promiscuous mode [ 663.091473][T14906] debugfs: 'hsr0' already exists in 'hsr' [ 663.091498][T14906] Cannot create hsr debugfs directory [ 664.356463][ T4957] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 664.356492][ T4957] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 664.356504][ T4957] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 664.356564][ T4957] loop0: [ 664.634142][T15062] netlink: 'syz.4.3244': attribute type 4 has an invalid length. [ 664.648348][ T4906] Bluetooth: hci1: command tx timeout [ 664.894227][T15066] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 665.135930][T15077] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3250'. [ 665.135951][T15077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3250'. [ 665.184033][T15079] loop0: detected capacity change from 0 to 3904 [ 665.299575][T15079] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 665.299603][T15079] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 665.299616][T15079] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 665.299755][T15079] loop0: [ 665.783867][T14906] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.838730][T15096] netlink: 'syz.3.3256': attribute type 4 has an invalid length. [ 666.116211][ T59] block nbd10: Receive control failed (result -32) [ 666.122872][ T4906] block nbd10: Receive control failed (result -32) [ 666.217262][T15107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 666.495946][T14906] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.892636][T15125] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3268'. [ 666.892655][T15125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3268'. [ 667.026349][T15130] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3267'. [ 667.369413][T15139] netlink: 'syz.0.3269': attribute type 4 has an invalid length. [ 667.388893][T14906] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.414611][T15138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 667.416958][ T59] block nbd11: Receive control failed (result -32) [ 667.425470][ T4906] block nbd11: Receive control failed (result -32) [ 667.714474][T14906] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.346559][ T5598] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 668.505205][ T5598] usb 4-1: Using ep0 maxpacket: 32 [ 668.506155][ T5598] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 668.509238][ T5598] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 668.509260][ T5598] usb 4-1: config 0 has no interface number 0 [ 668.509302][ T5598] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 668.509323][ T5598] usb 4-1: config 0 interface 1 has no altsetting 0 [ 668.512790][ T5598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.512812][ T5598] usb 4-1: Product: syz [ 668.512824][ T5598] usb 4-1: Manufacturer: syz [ 668.512846][ T5598] usb 4-1: SerialNumber: syz [ 668.591266][ T5598] usb 4-1: config 0 descriptor?? [ 668.813425][ T5598] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 668.868836][T15168] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 668.919478][ T5598] cx231xx 4-1:0.1: Failed to read PCB config [ 668.919556][ T5598] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 668.954356][ T5598] usb 4-1: USB disconnect, device number 30 [ 669.335173][ T5598] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 669.381709][T14906] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 669.432924][T14906] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 669.434373][T14906] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 669.485522][ T5598] usb 4-1: Using ep0 maxpacket: 32 [ 669.490841][ T5598] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 669.519770][ T5598] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 669.519797][ T5598] usb 4-1: config 0 has no interface number 0 [ 669.520154][ T5598] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 669.520223][ T5598] usb 4-1: config 0 interface 1 has no altsetting 0 [ 669.567640][ T5598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.567668][ T5598] usb 4-1: Product: syz [ 669.567682][ T5598] usb 4-1: Manufacturer: syz [ 669.567697][ T5598] usb 4-1: SerialNumber: syz [ 669.599768][ T5598] usb 4-1: config 0 descriptor?? [ 669.966050][T14906] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 669.971546][T14906] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 670.040593][T14906] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 670.042275][T14906] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 670.151702][T14906] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 670.383917][T14906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.431536][T14906] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.447557][ T3349] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.447808][ T3349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.474947][ T3349] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.491300][ T3349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.072022][T15211] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 671.221236][ T5598] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 671.263925][ T5598] cx231xx 4-1:0.1: Failed to read PCB config [ 671.263975][ T5598] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 671.305233][ T5598] usb 4-1: USB disconnect, device number 31 [ 671.621698][T15220] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3294'. [ 672.626453][T15246] comedi: No check for data length of config insn id 1025 is implemented [ 672.626471][T15246] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 672.626483][T15246] comedi: Assuming n=15 is correct [ 672.685857][T14906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.759850][T14906] veth0_vlan: entered promiscuous mode [ 672.913681][T14906] veth1_vlan: entered promiscuous mode [ 672.989034][T15249] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 673.118214][ T4906] block nbd12: Receive control failed (result -32) [ 673.118324][ T59] block nbd12: Receive control failed (result -32) [ 673.181154][T14906] veth0_macvtap: entered promiscuous mode [ 673.188893][T14906] veth1_macvtap: entered promiscuous mode [ 673.233885][T14906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.240042][ T5709] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 673.294546][T14906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.385195][ T5709] usb 1-1: Using ep0 maxpacket: 32 [ 673.390140][ T5709] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 673.391288][ T5709] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 673.391311][ T5709] usb 1-1: config 0 has no interface number 0 [ 673.391350][ T5709] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 673.391371][ T5709] usb 1-1: config 0 interface 1 has no altsetting 0 [ 673.442797][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.442823][ T5709] usb 1-1: Product: syz [ 673.442837][ T5709] usb 1-1: Manufacturer: syz [ 673.442850][ T5709] usb 1-1: SerialNumber: syz [ 673.479993][ T5709] usb 1-1: config 0 descriptor?? [ 674.750197][ T5709] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 674.751759][ T5709] cx231xx 1-1:0.1: Failed to read PCB config [ 674.751829][ T5709] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 674.777928][ T5709] usb 1-1: USB disconnect, device number 44 [ 674.906254][ T123] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.907164][ T123] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.989099][ T123] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.088422][ T123] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.299127][ T5709] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 675.421546][ T2932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.421569][ T2932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.525535][ T5709] usb 1-1: Using ep0 maxpacket: 32 [ 675.534432][ T5709] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 675.544253][ T5709] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 675.544280][ T5709] usb 1-1: config 0 has no interface number 0 [ 675.545253][ T5709] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 675.545275][ T5709] usb 1-1: config 0 interface 1 has no altsetting 0 [ 675.584124][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.584150][ T5709] usb 1-1: Product: syz [ 675.584163][ T5709] usb 1-1: Manufacturer: syz [ 675.584177][ T5709] usb 1-1: SerialNumber: syz [ 675.603691][ T5709] usb 1-1: config 0 descriptor?? [ 675.965865][ T3402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.965883][ T3402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.292653][T15288] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 677.622488][ T4906] Bluetooth: hci0: command 0x0405 tx timeout [ 678.048874][T15289] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 678.059941][ T5709] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 678.068289][ T5709] cx231xx 1-1:0.1: Failed to read PCB config [ 678.068361][ T5709] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 678.088312][ T5709] usb 1-1: USB disconnect, device number 45 [ 680.186927][T15319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3321'. [ 680.232961][ T59] block nbd13: Receive control failed (result -32) [ 680.248922][ T4906] block nbd13: Receive control failed (result -32) [ 680.398906][T15319] veth5: entered promiscuous mode [ 680.722335][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 680.756705][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 680.762565][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 680.764015][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 680.820569][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 680.889742][T15334] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 682.913181][ T4906] Bluetooth: hci4: command tx timeout [ 684.435619][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3334'. [ 684.547460][T15375] veth21: entered promiscuous mode [ 684.888382][T15390] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 684.966779][ T4906] Bluetooth: hci4: command tx timeout [ 685.711564][T15410] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3343'. [ 686.535571][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.535642][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.715702][T15328] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.715943][T15328] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.716926][T15328] bridge_slave_0: entered allmulticast mode [ 686.719616][T15328] bridge_slave_0: entered promiscuous mode [ 686.773896][T15328] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.774094][T15328] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.774294][T15328] bridge_slave_1: entered allmulticast mode [ 686.800655][T15328] bridge_slave_1: entered promiscuous mode [ 686.886245][T15418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 686.952799][T15418] comedi: No check for data length of config insn id 1025 is implemented [ 686.952816][T15418] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 686.952827][T15418] comedi: Assuming n=15 is correct [ 687.035574][T15328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.043874][T15328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.048078][ T4906] Bluetooth: hci4: command tx timeout [ 687.243223][T15328] team0: Port device team_slave_0 added [ 687.293981][T15328] team0: Port device team_slave_1 added [ 687.397442][T15328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.397458][T15328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.397483][T15328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.403036][T15328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.403052][T15328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.403077][T15328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.505213][ T5598] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 687.510486][T15435] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 687.655237][ T5598] usb 2-1: Using ep0 maxpacket: 32 [ 687.656253][ T5598] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 687.658000][ T5598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.658030][ T5598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.658067][ T5598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.740388][ T5598] usb 2-1: config 0 descriptor?? [ 687.756708][ T5598] hub 2-1:0.0: USB hub found [ 688.732856][ T5598] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 688.811972][T15328] hsr_slave_0: entered promiscuous mode [ 688.813321][T15328] hsr_slave_1: entered promiscuous mode [ 688.814279][T15328] debugfs: 'hsr0' already exists in 'hsr' [ 688.814303][T15328] Cannot create hsr debugfs directory [ 689.159574][ T4906] Bluetooth: hci4: command tx timeout [ 689.192550][ T5598] usbhid 2-1:0.0: can't add hid device: -71 [ 689.192670][ T5598] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 689.227663][ T5598] usb 2-1: USB disconnect, device number 41 [ 689.948468][T15460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 690.011024][T15456] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 690.345604][T15464] comedi: No check for data length of config insn id 1025 is implemented [ 690.345661][T15464] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 690.345675][T15464] comedi: Assuming n=15 is correct [ 691.144404][T15474] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 691.234968][T15328] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.235002][T15328] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.013874][T15492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 692.132435][T15492] comedi: No check for data length of config insn id 1025 is implemented [ 692.132467][T15492] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 692.132479][T15492] comedi: Assuming n=15 is correct [ 692.437289][T15328] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 692.437332][T15328] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.925206][ T5819] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 694.003191][T15512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.038923][T15512] comedi: No check for data length of config insn id 1025 is implemented [ 694.038942][T15512] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 694.038969][T15512] comedi: Assuming n=15 is correct [ 694.088126][ T5819] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 694.093652][ T5819] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.106616][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.106642][ T5819] usb 4-1: Product: syz [ 694.106655][ T5819] usb 4-1: Manufacturer: syz [ 694.106668][ T5819] usb 4-1: SerialNumber: syz [ 694.118676][ T5819] usb 4-1: config 0 descriptor?? [ 694.431567][T15517] loop0: detected capacity change from 0 to 3904 [ 694.647761][T15328] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.647796][T15328] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.702232][T15517] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 694.702259][T15517] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 694.702270][T15517] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 694.702336][T15517] loop0: [ 695.190742][T15520] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 695.501154][ T5819] usb 4-1: USB disconnect, device number 32 [ 695.955222][ T5709] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 696.155292][ T5709] usb 2-1: Using ep0 maxpacket: 8 [ 696.158154][ T5709] usb 2-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 696.159455][ T5709] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.164280][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.164302][ T5709] usb 2-1: Product: syz [ 696.164316][ T5709] usb 2-1: Manufacturer: syz [ 696.164329][ T5709] usb 2-1: SerialNumber: syz [ 696.182442][ T5709] usb 2-1: config 0 descriptor?? [ 696.195845][ T5709] gspca_main: t613-2.14.0 probing 17a1:0128 [ 696.389828][T15526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.390574][T15526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.395538][ T5709] gspca_t613: unknown sensor 0000 [ 696.395621][ T5709] t613 2-1:0.0: probe with driver t613 failed with error -22 [ 696.409946][ T5709] usb 2-1: USB disconnect, device number 42 [ 696.469089][T15328] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.469111][T15328] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.086258][ T5819] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 697.386288][ T5819] usb 3-1: Using ep0 maxpacket: 32 [ 697.387182][ T5819] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 697.391861][ T5819] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 697.391907][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.413019][ T5819] usb 3-1: config 0 descriptor?? [ 697.458449][ T5819] hub 3-1:0.0: bad descriptor, ignoring hub [ 697.458487][ T5819] hub 3-1:0.0: probe with driver hub failed with error -5 [ 697.468747][ T5819] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 697.912121][T15328] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 697.970445][T15328] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 697.972219][T15328] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 698.093792][T15328] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 698.102852][T15328] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 698.137380][T15328] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 698.140068][T15328] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 698.216997][T15328] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 698.576845][T15328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.603368][T15328] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.613001][ T123] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.613306][ T123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.630437][ T3402] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.630631][ T3402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.047263][ T2184] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 700.082439][ T5681] usb 3-1: USB disconnect, device number 48 [ 701.057646][T15616] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 701.124511][ T2184] usb 4-1: Using ep0 maxpacket: 8 [ 701.164635][ T2184] usb 4-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 701.194415][ T2184] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.197882][ T2184] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.197906][ T2184] usb 4-1: Product: syz [ 701.197919][ T2184] usb 4-1: Manufacturer: syz [ 701.197933][ T2184] usb 4-1: SerialNumber: syz [ 701.222280][ T2184] usb 4-1: config 0 descriptor?? [ 701.284311][ T2184] gspca_main: t613-2.14.0 probing 17a1:0128 [ 701.504238][T15603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.509460][T15603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.534759][ T2184] gspca_t613: unknown sensor 0000 [ 701.534849][ T2184] t613 4-1:0.0: probe with driver t613 failed with error -22 [ 701.545550][T15328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.550326][ T2184] usb 4-1: USB disconnect, device number 33 [ 701.566548][ T5714] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 701.656196][T15328] veth0_vlan: entered promiscuous mode [ 701.681216][T15328] veth1_vlan: entered promiscuous mode [ 701.718364][ T5714] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 701.719518][ T5714] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.726315][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.726339][ T5714] usb 2-1: Product: syz [ 701.726352][ T5714] usb 2-1: Manufacturer: syz [ 701.726366][ T5714] usb 2-1: SerialNumber: syz [ 701.736528][ T5714] usb 2-1: config 0 descriptor?? [ 701.798035][T15328] veth0_macvtap: entered promiscuous mode [ 701.818570][T15328] veth1_macvtap: entered promiscuous mode [ 701.847626][T15328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.867410][T15328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.103257][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.117012][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.133875][ T3422] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.154748][ T3349] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.981208][T15609] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 703.168558][ T5714] usb 2-1: USB disconnect, device number 43 [ 704.043417][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.043437][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.308754][T15652] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3403'. [ 704.363310][ T3352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.363332][ T3352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.445184][ T5598] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 704.597180][ T5598] usb 3-1: Using ep0 maxpacket: 32 [ 704.599924][ T5598] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 704.601312][ T5598] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 704.601351][ T5598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.671483][ T5598] usb 3-1: config 0 descriptor?? [ 704.752629][ T5598] hub 3-1:0.0: bad descriptor, ignoring hub [ 704.752669][ T5598] hub 3-1:0.0: probe with driver hub failed with error -5 [ 704.755999][ T5598] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 706.185481][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033ce6c00: rx timeout, send abort [ 706.641054][ C0] vcan0: j1939_tp_rxtimer: 0xffff888073b20400: rx timeout, send abort [ 706.685676][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033ce6c00: abort rx timeout. Force session deactivation [ 707.141280][ C0] vcan0: j1939_tp_rxtimer: 0xffff888073b20400: abort rx timeout. Force session deactivation [ 707.329438][ T5598] usb 3-1: USB disconnect, device number 49 [ 709.501152][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 709.544586][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 709.572036][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 709.625818][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 709.648005][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 710.532719][T15725] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3424'. [ 711.744825][ T4906] Bluetooth: hci2: command tx timeout [ 711.837009][ T5819] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 712.007105][ T5819] usb 1-1: Using ep0 maxpacket: 8 [ 712.008105][ T5819] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 712.009818][ T5819] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 712.009840][ T5819] usb 1-1: config 179 has no interface number 0 [ 712.009883][ T5819] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 712.009908][ T5819] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 712.009933][ T5819] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 712.009956][ T5819] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 712.009981][ T5819] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 712.010028][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.036854][T15731] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 712.337501][T15742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3428'. [ 712.337526][T15742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3428'. [ 712.362680][ T5681] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input73 [ 712.601321][T15747] Invalid ELF header type: 2 != 1 [ 713.521923][T15752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3429'. [ 713.758328][T15752] veth3: entered promiscuous mode [ 713.765343][ T4906] Bluetooth: hci2: command tx timeout [ 713.929510][T15735] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 715.081333][T15772] nbd: must specify a size in bytes for the device [ 715.207730][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 715.207781][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 715.208595][ T5681] usb 1-1: USB disconnect, device number 46 [ 715.505532][T15784] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3435'. [ 715.613152][T15788] loop0: detected capacity change from 0 to 6 [ 715.670057][T15788] Dev loop0: unable to read RDB block 6 [ 715.670098][T15788] loop0: unable to read partition table [ 715.670291][T15788] loop0: partition table beyond EOD, truncated [ 715.670310][T15788] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 715.847510][ T59] Bluetooth: hci2: command tx timeout [ 715.896114][T15701] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.896336][T15701] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.896552][T15701] bridge_slave_0: entered allmulticast mode [ 715.901165][T15701] bridge_slave_0: entered promiscuous mode [ 715.933448][T15701] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.933650][T15701] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.933885][T15701] bridge_slave_1: entered allmulticast mode [ 715.958833][T15701] bridge_slave_1: entered promiscuous mode [ 716.061911][T15701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.079321][T15793] comedi: No check for data length of config insn id 1025 is implemented [ 716.079338][T15793] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 716.079350][T15793] comedi: Assuming n=15 is correct [ 716.173672][T15701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.234684][T15701] team0: Port device team_slave_0 added [ 716.244499][T15701] team0: Port device team_slave_1 added [ 716.324028][T15701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.324045][T15701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.324071][T15701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.381589][T15701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.381605][T15701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.381629][T15701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.607510][T15701] hsr_slave_0: entered promiscuous mode [ 716.633224][T15701] hsr_slave_1: entered promiscuous mode [ 716.642448][T15701] debugfs: 'hsr0' already exists in 'hsr' [ 716.642473][T15701] Cannot create hsr debugfs directory [ 718.392239][ T4906] Bluetooth: hci2: command tx timeout [ 718.632338][T15824] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3447'. [ 719.945706][T15831] loop0: detected capacity change from 0 to 6 [ 720.041965][T15831] Dev loop0: unable to read RDB block 6 [ 720.042009][T15831] loop0: unable to read partition table [ 720.042186][T15831] loop0: partition table beyond EOD, truncated [ 720.042217][T15831] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 720.095687][T13480] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 720.283583][T13480] usb 2-1: Using ep0 maxpacket: 8 [ 720.306289][T13480] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 720.313879][T13480] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.313938][T13480] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 720.313964][T13480] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 720.317602][T13480] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 720.317634][T13480] usb 2-1: Product: syz [ 720.317648][T13480] usb 2-1: Manufacturer: syz [ 720.317662][T13480] usb 2-1: SerialNumber: syz [ 720.326230][T13480] usb 2-1: config 0 descriptor?? [ 720.485507][T13480] rc_core: IR keymap rc-imon-rsc not found [ 720.485528][T13480] Registered IR keymap rc-empty [ 720.524636][T13480] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 720.527161][T13480] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input75 [ 720.580305][T15701] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.690071][T13480] usb 2-1: USB disconnect, device number 44 [ 720.961541][T15841] comedi: No check for data length of config insn id 1025 is implemented [ 720.961556][T15841] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 720.961567][T15841] comedi: Assuming n=15 is correct [ 721.338465][T15849] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3455'. [ 721.533279][ T5714] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 721.602687][T13480] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 721.631284][T15701] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.676046][ T5714] usb 3-1: device descriptor read/64, error -71 [ 721.687711][ T5598] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 721.758625][T13480] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 721.759721][T13480] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.764967][T13480] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.764992][T13480] usb 4-1: Product: syz [ 721.768449][T13480] usb 4-1: Manufacturer: syz [ 721.768469][T13480] usb 4-1: SerialNumber: syz [ 721.833003][T13480] usb 4-1: config 0 descriptor?? [ 721.845284][ T5598] usb 2-1: Using ep0 maxpacket: 8 [ 721.846166][ T5598] usb 2-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 721.847380][ T5598] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.854444][ T5598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.854470][ T5598] usb 2-1: Product: syz [ 721.854483][ T5598] usb 2-1: Manufacturer: syz [ 721.854491][ T5598] usb 2-1: SerialNumber: syz [ 721.891906][ T5598] usb 2-1: config 0 descriptor?? [ 721.915236][ T5714] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 721.937163][ T5598] gspca_main: t613-2.14.0 probing 17a1:0128 [ 722.055304][ T5714] usb 3-1: device descriptor read/64, error -71 [ 722.113803][T15849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.124699][T15849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.130188][ T5598] gspca_t613: unknown sensor 0000 [ 722.130271][ T5598] t613 2-1:0.0: probe with driver t613 failed with error -22 [ 722.142919][ T5598] usb 2-1: USB disconnect, device number 45 [ 722.182331][ T5714] usb usb3-port1: attempt power cycle [ 722.372615][T15701] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.475273][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 722.517165][ T5714] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 722.535778][ T5714] usb 3-1: device descriptor read/8, error -71 [ 722.659553][T15701] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.665164][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 722.670557][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 722.673901][ T9] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 722.673925][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.673943][ T9] usb 1-1: config 0 has no interface number 0 [ 722.673986][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.746503][ T9] usb 1-1: config 0 descriptor?? [ 722.768253][ T9] ldusb 1-1:0.55: Interrupt in endpoint not found [ 722.775242][ T5714] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 722.797411][ T5714] usb 3-1: device descriptor read/8, error -71 [ 722.905938][ T5714] usb usb3-port1: unable to enumerate USB device [ 723.154698][ T9] usb 1-1: USB disconnect, device number 47 [ 724.259004][ T5714] usb 4-1: USB disconnect, device number 34 [ 724.471457][T15701] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 725.340444][T15701] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 725.342571][T15701] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 725.522089][T15701] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 725.603444][T15701] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 725.644764][T15701] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 725.646625][T15701] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 725.704421][T15886] loop0: detected capacity change from 0 to 3904 [ 725.723640][T15701] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 725.741620][T15886] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 725.741646][T15886] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 725.741658][T15886] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 725.741715][T15886] loop0: [ 725.853876][T15888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 726.367221][T15701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.465292][T15701] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.503365][ T3350] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.505673][ T3350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.535891][T15906] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3472'. [ 726.579153][ T1059] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.579322][ T1059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.675195][T14394] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 726.846962][T14394] usb 3-1: Using ep0 maxpacket: 8 [ 726.847772][T14394] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 726.884984][T14394] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.885173][T14394] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 726.885198][T14394] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 726.885221][T14394] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 726.897097][T14394] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 726.897123][T14394] usb 3-1: Product: syz [ 726.897137][T14394] usb 3-1: Manufacturer: syz [ 726.897151][T14394] usb 3-1: SerialNumber: syz [ 726.968020][T14394] usb 3-1: config 0 descriptor?? [ 727.013027][T15914] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3474'. [ 727.106950][T14394] rc_core: IR keymap rc-imon-rsc not found [ 727.106971][T14394] Registered IR keymap rc-empty [ 727.141224][T14394] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 727.155178][ T2184] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 727.157313][T14394] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input76 [ 727.218373][T14394] imon_raw 3-1:0.0: probe with driver imon_raw failed with error -90 [ 727.343560][ T2184] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 727.344729][ T2184] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.348839][ T2184] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.348860][ T2184] usb 1-1: Product: syz [ 727.348874][ T2184] usb 1-1: Manufacturer: syz [ 727.348888][ T2184] usb 1-1: SerialNumber: syz [ 727.492584][ T2184] usb 1-1: config 0 descriptor?? [ 727.526866][T14394] usb 3-1: USB disconnect, device number 54 [ 727.929164][T15921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.062532][T15921] comedi: No check for data length of config insn id 1025 is implemented [ 728.062550][T15921] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 728.062561][T15921] comedi: Assuming n=15 is correct [ 728.196737][T15927] loop0: detected capacity change from 0 to 3904 [ 728.300365][T15927] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 728.300393][T15927] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 728.300406][T15927] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 728.300459][T15927] loop0: [ 728.642512][T15701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.243472][T15701] veth0_vlan: entered promiscuous mode [ 729.263014][T15701] veth1_vlan: entered promiscuous mode [ 729.312282][T15701] veth0_macvtap: entered promiscuous mode [ 729.349954][T15701] veth1_macvtap: entered promiscuous mode [ 729.393186][T15701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.411933][T15701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.446758][ T1059] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.680156][ T5819] usb 1-1: USB disconnect, device number 48 [ 729.882439][ T1059] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.934066][ T1059] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.944782][ T3352] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.573296][T15935] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 730.736074][T15962] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3483'. [ 730.736095][T15962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3483'. [ 730.775173][ T3350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.775193][ T3350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.964720][ T3352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.964741][ T3352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.980501][ T5681] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 731.135313][ T5681] usb 4-1: Using ep0 maxpacket: 8 [ 731.136600][ T5681] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 731.138382][ T5681] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.138425][ T5681] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 731.138449][ T5681] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 731.138470][ T5681] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 731.142455][ T5681] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 731.142479][ T5681] usb 4-1: Product: syz [ 731.142493][ T5681] usb 4-1: Manufacturer: syz [ 731.142508][ T5681] usb 4-1: SerialNumber: syz [ 731.238954][ T5681] usb 4-1: config 0 descriptor?? [ 731.335262][ T5681] rc_core: IR keymap rc-imon-rsc not found [ 731.335282][ T5681] Registered IR keymap rc-empty [ 731.338325][ T5681] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 731.367344][ T5681] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input77 [ 731.385258][ T5681] imon_raw 4-1:0.0: probe with driver imon_raw failed with error -90 [ 731.525493][ T5681] usb 4-1: USB disconnect, device number 35 [ 731.649640][T15980] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3487'. [ 731.742402][T15982] loop0: detected capacity change from 0 to 3904 [ 731.774451][T15982] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 731.774477][T15982] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 731.774490][T15982] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 731.774541][T15982] loop0: [ 733.477306][T15997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3492'. [ 733.736196][T15997] veth7: entered promiscuous mode [ 734.852928][T16017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.949238][T16017] comedi: No check for data length of config insn id 1025 is implemented [ 734.949255][T16017] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 734.949267][T16017] comedi: Assuming n=15 is correct [ 735.072474][T16029] loop0: detected capacity change from 0 to 3904 [ 735.149756][T16029] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 735.149785][T16029] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 735.149798][T16029] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 735.149852][T16029] loop0: [ 735.508402][ T5681] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 736.265071][ T5681] usb 4-1: Using ep0 maxpacket: 8 [ 736.273870][ T5681] usb 4-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 736.286268][ T5681] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.293424][ T5681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.293449][ T5681] usb 4-1: Product: syz [ 736.293462][ T5681] usb 4-1: Manufacturer: syz [ 736.293474][ T5681] usb 4-1: SerialNumber: syz [ 736.469362][ T5681] usb 4-1: config 0 descriptor?? [ 736.510180][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880320bec00: rx timeout, send abort [ 736.577613][ T5681] gspca_main: t613-2.14.0 probing 17a1:0128 [ 736.695793][T16027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.705553][T16027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.752753][ T5681] gspca_t613: unknown sensor 0000 [ 736.752842][ T5681] t613 4-1:0.0: probe with driver t613 failed with error -22 [ 736.829278][ T5681] usb 4-1: USB disconnect, device number 36 [ 737.010246][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880320bec00: abort rx timeout. Force session deactivation [ 737.019257][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804ff34400: rx timeout, send abort [ 737.295253][ T5819] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 737.519382][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804ff34400: abort rx timeout. Force session deactivation [ 737.818067][ T5819] usb 1-1: Using ep0 maxpacket: 8 [ 738.125877][ T5819] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 738.256522][ T5819] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 738.256549][ T5819] usb 1-1: config 0 has no interface number 0 [ 738.262413][ T5819] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 738.262477][ T5819] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 738.262501][ T5819] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 738.262526][ T5819] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 738.262568][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.273683][ T5819] usb 1-1: config 0 descriptor?? [ 738.321890][ T5819] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 738.844658][T13480] usb 1-1: USB disconnect, device number 49 [ 738.844753][ C1] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 738.927347][T13480] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 738.927438][T16048] ldusb: No device or device unplugged -19 [ 739.231617][T16088] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3519'. [ 739.231641][T16088] openvswitch: netlink: Flow key attr not present in new flow. [ 739.260593][T16088] comedi: No check for data length of config insn id 1025 is implemented [ 739.260610][T16088] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 739.260620][T16088] comedi: Assuming n=15 is correct [ 739.471025][T16086] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 741.630931][T16097] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 743.088110][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b532000: rx timeout, send abort [ 743.529479][T16124] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3530'. [ 743.529503][T16124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3530'. [ 743.556276][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880565a7800: rx timeout, send abort [ 743.588208][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b532000: abort rx timeout. Force session deactivation [ 743.967339][T16137] openvswitch: netlink: Flow actions attr not present in new flow. [ 744.026794][T16137] comedi: No check for data length of config insn id 1025 is implemented [ 744.026813][T16137] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 744.026826][T16137] comedi: Assuming n=15 is correct [ 744.056347][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880565a7800: abort rx timeout. Force session deactivation [ 744.584792][T13480] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 744.699733][T16144] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 744.719903][T16152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3537'. [ 744.791134][T16149] loop0: detected capacity change from 0 to 3904 [ 745.087911][T13480] usb 5-1: Using ep0 maxpacket: 8 [ 745.187336][T13480] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 745.319110][T13480] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 745.319139][T13480] usb 5-1: config 0 has no interface number 0 [ 745.319190][T13480] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 745.319213][T13480] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 745.319240][T13480] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 745.319262][T13480] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 745.319299][T13480] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.536076][T13480] usb 5-1: config 0 descriptor?? [ 745.646061][T16151] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 745.646090][T16151] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 745.646103][T16151] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 745.646174][T16151] loop0: [ 745.957988][T13480] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 745.977435][T13480] usb 5-1: USB disconnect, device number 25 [ 746.056569][ T59] block nbd14: Receive control failed (result -32) [ 746.069928][ T4906] block nbd14: Receive control failed (result -32) [ 746.106560][T13480] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 746.147334][T16152] veth5: entered promiscuous mode [ 746.369978][T16170] openvswitch: netlink: Flow actions attr not present in new flow. [ 746.397363][T16170] comedi: No check for data length of config insn id 1025 is implemented [ 746.397381][T16170] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 746.397393][T16170] comedi: Assuming n=15 is correct [ 746.809966][T16177] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 747.219262][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.219332][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.571666][T16186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 747.852165][T16188] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 748.928686][T16194] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3554'. [ 749.396794][T16208] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 749.449055][T16209] netlink: 23 bytes leftover after parsing attributes in process `syz.2.3560'. [ 750.557675][T16218] openvswitch: netlink: Flow actions attr not present in new flow. [ 750.585223][ T5819] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 750.605195][ T5598] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 750.616801][T16218] comedi: No check for data length of config insn id 1025 is implemented [ 750.616817][T16218] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 750.616829][T16218] comedi: Assuming n=15 is correct [ 750.875942][ T5598] usb 1-1: Using ep0 maxpacket: 32 [ 751.558704][ T5598] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 751.561347][ T5598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.561377][ T5598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.561414][ T5598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.571851][ T5598] usb 1-1: config 0 descriptor?? [ 751.585144][ T5819] usb 4-1: Using ep0 maxpacket: 8 [ 751.586043][ T5819] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 751.587667][ T5819] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 751.587689][ T5819] usb 4-1: config 0 has no interface number 0 [ 751.587729][ T5819] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 751.587751][ T5819] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 751.587776][ T5819] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 751.587801][ T5819] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 751.587842][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.591773][ T5598] hub 1-1:0.0: USB hub found [ 751.703755][ T5819] usb 4-1: config 0 descriptor?? [ 751.818224][ T5819] usb 4-1: can't set config #0, error -71 [ 751.837820][ T5819] usb 4-1: USB disconnect, device number 37 [ 752.081106][ T5598] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 752.088120][ T5598] usbhid 1-1:0.0: can't add hid device: -71 [ 752.088236][ T5598] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 752.114936][ T5598] usb 1-1: USB disconnect, device number 50 [ 753.483466][T16251] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3574'. [ 754.085185][T16233] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 754.645393][T16273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3582'. [ 754.765340][T16276] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3582'. [ 754.835305][T14394] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 754.925192][ T5681] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 754.985161][T14394] usb 5-1: Using ep0 maxpacket: 32 [ 754.985740][T14394] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 754.986902][T14394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.986920][T14394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.986942][T14394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.044286][T14394] usb 5-1: config 0 descriptor?? [ 755.055437][T14394] hub 5-1:0.0: USB hub found [ 755.135425][ T5681] usb 2-1: Using ep0 maxpacket: 8 [ 755.136166][ T5681] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 755.137455][ T5681] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 755.137479][ T5681] usb 2-1: config 0 has no interface number 0 [ 755.137521][ T5681] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 755.137643][ T5681] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 755.137657][ T5681] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 755.137670][ T5681] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 755.137728][ T5681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.242726][ T5681] usb 2-1: config 0 descriptor?? [ 755.300525][ T5681] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 755.303252][T16264] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 755.461793][T14394] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 755.509455][T14394] usbhid 5-1:0.0: can't add hid device: -71 [ 755.509573][T14394] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 755.548466][T14394] usb 5-1: USB disconnect, device number 26 [ 756.997057][ C1] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 756.997141][ T5920] usb 2-1: USB disconnect, device number 46 [ 757.356574][T16282] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 757.732026][T16298] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3588'. [ 758.614141][T16318] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 759.080825][ T5920] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 760.453328][ T5681] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 760.676509][ T5681] usb 1-1: Using ep0 maxpacket: 32 [ 760.679488][ T5681] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 760.682139][ T5681] usb 1-1: config index 0 descriptor too short (expected 164, got 36) [ 760.682164][ T5681] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.682210][ T5681] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 760.682252][ T5681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.694435][ T5681] usb 1-1: config 0 descriptor?? [ 760.755648][ T5681] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 761.054352][T16345] netlink: 'syz.3.3601': attribute type 4 has an invalid length. [ 761.135619][ T5920] usb 1-1: USB disconnect, device number 51 [ 761.445549][T16326] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 762.225578][ T5681] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 763.249302][ T5681] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 763.255872][ T5681] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.258537][ T5681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.258562][ T5681] usb 2-1: Product: syz [ 763.258576][ T5681] usb 2-1: Manufacturer: syz [ 763.258590][ T5681] usb 2-1: SerialNumber: syz [ 763.316395][ T5681] usb 2-1: config 0 descriptor?? [ 764.205143][ T2184] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 764.355165][ T2184] usb 1-1: Using ep0 maxpacket: 8 [ 764.356102][ T2184] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 764.357769][ T2184] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 764.357794][ T2184] usb 1-1: config 0 has no interface number 0 [ 764.357839][ T2184] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 764.357872][ T2184] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 764.357895][ T2184] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 764.357921][ T2184] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 764.357960][ T2184] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.516213][ T2184] usb 1-1: config 0 descriptor?? [ 765.517832][T14394] usb 2-1: USB disconnect, device number 47 [ 765.712648][T16384] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 765.942855][ T2184] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 765.981809][ T2184] usb 1-1: USB disconnect, device number 52 [ 766.000195][ T2184] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 766.991389][ T4906] block nbd15: Receive control failed (result -32) [ 766.991408][ T59] block nbd15: Receive control failed (result -32) [ 767.267355][T16413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 767.425233][ T5598] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 768.345110][ T5598] usb 3-1: Using ep0 maxpacket: 32 [ 768.345754][ T5598] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 768.346949][ T5598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.346984][ T5598] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.347021][ T5598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.359876][ T5598] usb 3-1: config 0 descriptor?? [ 768.364401][ T5598] hub 3-1:0.0: USB hub found [ 768.515281][T14394] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 768.665311][T14394] usb 2-1: Using ep0 maxpacket: 32 [ 768.666402][T14394] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 768.672638][T14394] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 768.672662][T14394] usb 2-1: config 0 has no interface number 0 [ 768.672705][T14394] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 768.672725][T14394] usb 2-1: config 0 interface 1 has no altsetting 0 [ 768.676647][T14394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.676671][T14394] usb 2-1: Product: syz [ 768.676685][T14394] usb 2-1: Manufacturer: syz [ 768.676700][T14394] usb 2-1: SerialNumber: syz [ 768.835589][T16406] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 768.872612][T14394] usb 2-1: config 0 descriptor?? [ 768.949019][ T5598] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 769.612087][T16422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.612725][T16422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.614765][T14394] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 769.616322][T14394] cx231xx 2-1:0.1: Failed to read PCB config [ 769.616388][T14394] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 769.617912][ T5598] usbhid 3-1:0.0: can't add hid device: -71 [ 769.618023][ T5598] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 769.677468][T14394] usb 2-1: USB disconnect, device number 48 [ 769.731658][ T5598] usb 3-1: USB disconnect, device number 55 [ 771.135375][T16441] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3633'. [ 771.135399][T16441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3633'. [ 771.604070][T16446] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 772.725173][ T5714] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 772.875232][ T5714] usb 4-1: Using ep0 maxpacket: 8 [ 772.876400][ T5714] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 772.967086][ T5714] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 772.967112][ T5714] usb 4-1: config 0 has no interface number 0 [ 772.967156][ T5714] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 772.967181][ T5714] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 772.967206][ T5714] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 772.967232][ T5714] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 772.967275][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.032719][T16465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3638'. [ 774.910344][ T5714] usb 4-1: config 0 descriptor?? [ 775.292216][T16465] veth7: entered promiscuous mode [ 775.375437][ T5714] usb 4-1: can't set config #0, error -71 [ 775.385978][ T5714] usb 4-1: USB disconnect, device number 38 [ 775.881433][ T5598] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 776.056856][ T5598] usb 2-1: Using ep0 maxpacket: 32 [ 776.062621][T16487] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 776.065621][ T5598] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 776.244152][ T5598] usb 2-1: config index 0 descriptor too short (expected 164, got 36) [ 776.244213][ T5598] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.244379][ T5598] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 776.244496][ T5598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.722804][ T5598] usb 2-1: config 0 descriptor?? [ 777.014414][ T5598] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 777.175201][ T2184] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 777.325241][ T2184] usb 5-1: Using ep0 maxpacket: 32 [ 777.345621][ T2184] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 777.365623][ T2184] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.365655][ T2184] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.365694][ T2184] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.511181][ T2184] usb 5-1: config 0 descriptor?? [ 777.673911][T16493] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 777.958132][ T2184] hub 5-1:0.0: USB hub found [ 778.400092][T13480] usb 2-1: USB disconnect, device number 49 [ 778.653605][ T2184] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 779.084904][ T2184] usbhid 5-1:0.0: can't add hid device: -71 [ 779.085659][ T2184] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 779.797288][ T2184] usb 5-1: USB disconnect, device number 27 [ 780.085164][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 780.585132][ T2184] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 780.798350][ T2184] usb 5-1: device descriptor read/64, error -71 [ 780.858185][T16523] loop0: detected capacity change from 0 to 2049 [ 780.954850][T16525] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 780.954881][T16525] ldm_validate_privheads(): Disk read failed. [ 780.954926][T16525] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 0. [ 780.954940][T16525] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 1. [ 780.954953][T16525] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 780.954966][T16525] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 780.955250][T16525] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 780.955297][T16525] loop0: [ 780.955316][T16525] loop0: partition table partially beyond EOD, truncated [ 781.055329][ T5819] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 781.065220][ T2184] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 781.225152][ T5819] usb 3-1: Using ep0 maxpacket: 8 [ 781.225937][ T5819] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 781.227229][ T5819] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 781.227254][ T5819] usb 3-1: config 0 has no interface number 0 [ 781.227295][ T5819] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 781.227319][ T5819] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 781.227342][ T5819] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 781.227367][ T5819] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 781.227406][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.256234][ T2184] usb 5-1: device descriptor read/64, error -71 [ 781.334145][ T5819] usb 3-1: config 0 descriptor?? [ 781.357640][ T5819] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 781.368158][ T2184] usb usb5-port1: attempt power cycle [ 781.459110][T16540] loop0: detected capacity change from 0 to 3904 [ 781.507126][T16540] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 781.507156][T16540] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 781.507169][T16540] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 781.507228][T16540] loop0: [ 781.625178][T13480] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 781.688281][ T5598] usb 3-1: USB disconnect, device number 56 [ 781.688323][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 781.705299][ T2184] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 781.728960][ T2184] usb 5-1: device descriptor read/8, error -71 [ 781.775165][T13480] usb 2-1: Using ep0 maxpacket: 32 [ 781.776075][T13480] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 781.779918][T13480] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 781.779943][T13480] usb 2-1: config 0 has no interface number 0 [ 781.779986][T13480] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 781.780007][T13480] usb 2-1: config 0 interface 1 has no altsetting 0 [ 781.799117][T13480] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.799145][T13480] usb 2-1: Product: syz [ 781.799159][T13480] usb 2-1: Manufacturer: syz [ 781.799174][T13480] usb 2-1: SerialNumber: syz [ 781.799840][ T5598] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 781.825597][T16516] ldusb: No device or device unplugged -19 [ 781.895127][T13480] usb 2-1: config 0 descriptor?? [ 781.945185][ T5819] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 782.025420][ T2184] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 782.050436][ T2184] usb 5-1: device descriptor read/8, error -71 [ 782.105127][ T5819] usb 1-1: Using ep0 maxpacket: 32 [ 782.106036][ T5819] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 782.114579][ T5819] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.114631][ T5819] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 782.114673][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.133314][T13480] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 782.135520][T13480] cx231xx 2-1:0.1: Failed to read PCB config [ 782.135586][T13480] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 782.160383][ T2184] usb usb5-port1: unable to enumerate USB device [ 782.212870][ T5819] usb 1-1: config 0 descriptor?? [ 782.277754][ T5819] hub 1-1:0.0: bad descriptor, ignoring hub [ 782.277793][ T5819] hub 1-1:0.0: probe with driver hub failed with error -5 [ 782.283314][ T5819] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 782.329321][T13480] usb 2-1: USB disconnect, device number 50 [ 782.502492][ T59] block nbd16: Receive control failed (result -32) [ 782.509132][ T4906] block nbd16: Receive control failed (result -32) [ 782.595276][ T2184] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 782.695253][T13480] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 782.745159][ T2184] usb 3-1: Using ep0 maxpacket: 32 [ 782.747184][ T2184] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 782.748507][ T2184] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.748524][ T2184] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.748548][ T2184] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.753014][ T2184] usb 3-1: config 0 descriptor?? [ 782.805396][ T2184] hub 3-1:0.0: USB hub found [ 782.875172][T13480] usb 2-1: Using ep0 maxpacket: 32 [ 782.878768][T13480] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 782.880126][T13480] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 782.880140][T13480] usb 2-1: config 0 has no interface number 0 [ 782.880164][T13480] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 782.880176][T13480] usb 2-1: config 0 interface 1 has no altsetting 0 [ 782.882767][T13480] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.882791][T13480] usb 2-1: Product: syz [ 782.882805][T13480] usb 2-1: Manufacturer: syz [ 782.882819][T13480] usb 2-1: SerialNumber: syz [ 782.961123][T13480] usb 2-1: config 0 descriptor?? [ 783.163014][ T2184] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 783.179031][ T2184] usbhid 3-1:0.0: can't add hid device: -71 [ 783.179143][ T2184] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 783.199758][ T2184] usb 3-1: USB disconnect, device number 57 [ 784.520789][T13480] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 784.523111][T13480] cx231xx 2-1:0.1: Failed to read PCB config [ 784.523180][T13480] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 784.628754][T13480] usb 2-1: USB disconnect, device number 51 [ 784.987347][ T5598] usb 1-1: USB disconnect, device number 53 [ 785.062057][T16562] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 786.124233][T16566] loop0: detected capacity change from 0 to 2049 [ 786.221873][T16566] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 786.221905][T16566] ldm_validate_privheads(): Disk read failed. [ 786.221951][T16566] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 0. [ 786.221966][T16566] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 1. [ 786.221979][T16566] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 786.221992][T16566] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 786.222006][T16566] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 786.222048][T16566] loop0: [ 786.222067][T16566] loop0: partition table partially beyond EOD, truncated [ 787.025165][ T5598] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 787.176746][ T5598] usb 2-1: Using ep0 maxpacket: 8 [ 787.178219][ T5598] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 787.184650][ T5598] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 787.184678][ T5598] usb 2-1: config 0 has no interface number 0 [ 787.184719][ T5598] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 787.184742][ T5598] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 787.184764][ T5598] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 787.184788][ T5598] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 787.184833][ T5598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.217345][ T5598] usb 2-1: config 0 descriptor?? [ 787.257216][ T5598] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 787.426471][ T5681] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 787.586593][ T5681] usb 1-1: device descriptor read/64, error -71 [ 787.614969][ T5598] usb 2-1: USB disconnect, device number 52 [ 787.615099][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 787.625380][ T5819] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 787.805323][ T5819] usb 4-1: Using ep0 maxpacket: 32 [ 787.806929][ T5819] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 787.810512][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.810543][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.810589][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.820706][ T5819] usb 4-1: config 0 descriptor?? [ 787.832637][ T5819] hub 4-1:0.0: USB hub found [ 787.838190][ T5681] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 787.874193][ T4906] block nbd17: Receive control failed (result -32) [ 787.875105][ T59] block nbd17: Receive control failed (result -32) [ 787.985184][ T5681] usb 1-1: device descriptor read/64, error -71 [ 788.105930][ T5681] usb usb1-port1: attempt power cycle [ 788.233221][ T5819] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 788.251508][ T5819] usbhid 4-1:0.0: can't add hid device: -71 [ 788.251586][ T5819] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 788.286514][ T5819] usb 4-1: USB disconnect, device number 39 [ 788.458024][ T5681] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 788.475716][ T5681] usb 1-1: device descriptor read/8, error -71 [ 788.816615][ T5681] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 788.835748][ T5681] usb 1-1: device descriptor read/8, error -71 [ 788.837456][T16596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3679'. [ 788.955492][ T5681] usb usb1-port1: unable to enumerate USB device [ 788.986444][T16596] veth9: entered promiscuous mode [ 789.095615][ T5598] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 789.859967][T16610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 791.568240][T16633] loop0: detected capacity change from 0 to 6 [ 791.770641][T16637] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 792.686336][T16625] block nbd18: server does not support multiple connections per device. [ 792.686875][T16625] block nbd18: shutting down sockets [ 792.707208][T16633] Dev loop0: unable to read RDB block 6 [ 792.707242][T16633] loop0: unable to read partition table [ 792.707361][T16633] loop0: partition table beyond EOD, truncated [ 792.707384][T16633] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 792.725141][ T5681] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 792.875136][ T5681] usb 5-1: Using ep0 maxpacket: 8 [ 792.877798][ T5681] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 792.878459][ T5681] usb 5-1: config 0 has no interfaces? [ 792.880765][ T5681] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 792.880788][ T5681] usb 5-1: Product: syz [ 792.880804][ T5681] usb 5-1: Manufacturer: syz [ 792.880818][ T5681] usb 5-1: SerialNumber: syz [ 792.921309][ T5681] usb 5-1: config 0 descriptor?? [ 792.987203][T16643] loop0: detected capacity change from 0 to 3904 [ 793.257412][T16645] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 793.564587][T16643] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 793.564665][T16643] ldm_validate_privheads(): Disk read failed. [ 793.829338][T16643] ldm_parse_tocblock(): TOCBLOCK's first bitmap is 'config', should be '(bG_|'. [ 793.829893][T16643] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 793.830115][T16643] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 793.830132][T16643] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 793.830272][T16643] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 793.830851][T16643] loop0: [ 793.830975][T16643] loop0: partition table partially beyond EOD, truncated [ 793.840765][ T5598] usb 5-1: USB disconnect, device number 32 [ 795.609183][ T5681] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 796.176717][ T5681] usb 3-1: Using ep0 maxpacket: 8 [ 796.365663][ T5598] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 796.568838][ T5598] usb 2-1: device descriptor read/64, error -71 [ 797.175288][ T5598] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 797.207487][ T5681] usb 3-1: device descriptor read/all, error -71 [ 797.355374][ T5598] usb 2-1: device descriptor read/64, error -71 [ 797.462336][T16646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 797.467752][ T5598] usb usb2-port1: attempt power cycle [ 799.165110][ T5598] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 799.229116][ T5598] usb 2-1: device descriptor read/8, error -71 [ 799.541367][T16670] loop0: detected capacity change from 0 to 6 [ 799.544246][T16666] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 799.597234][T16670] Dev loop0: unable to read RDB block 6 [ 799.597266][T16670] loop0: unable to read partition table [ 799.597371][T16670] loop0: partition table beyond EOD, truncated [ 799.597382][T16670] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 799.950341][T16673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 802.485150][T14394] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 802.666866][T14394] usb 3-1: Using ep0 maxpacket: 8 [ 802.744227][T14394] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 802.885578][T14394] usb 3-1: config 0 has no interfaces? [ 803.065727][T16703] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 803.657456][T14394] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 803.657492][T14394] usb 3-1: Product: syz [ 803.657505][T14394] usb 3-1: Manufacturer: syz [ 803.657518][T14394] usb 3-1: SerialNumber: syz [ 803.761450][T16704] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 804.366808][T14394] usb 3-1: config 0 descriptor?? [ 804.394208][T16706] loop0: detected capacity change from 0 to 6 [ 804.485484][T14394] usb 3-1: can't set config #0, error -71 [ 804.501463][T14394] usb 3-1: USB disconnect, device number 60 [ 804.533666][T16706] Dev loop0: unable to read RDB block 6 [ 804.533710][T16706] loop0: unable to read partition table [ 804.533905][T16706] loop0: partition table beyond EOD, truncated [ 804.533923][T16706] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 804.710501][T16711] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 805.296664][T16712] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 805.678348][ T4906] Bluetooth: hci4: command 0x0406 tx timeout [ 806.259390][T16715] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 808.405275][ T5819] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 808.496491][ T4957] Dev loop0: unable to read RDB block 6 [ 808.496534][ T4957] loop0: unable to read partition table [ 808.496743][ T4957] loop0: partition table beyond EOD, truncated [ 808.555303][ T5819] usb 4-1: Using ep0 maxpacket: 8 [ 808.556112][ T5819] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 808.558002][ T5819] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.561140][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 808.561165][ T5819] usb 4-1: Product: syz [ 808.561180][ T5819] usb 4-1: Manufacturer: syz [ 808.561193][ T5819] usb 4-1: SerialNumber: syz [ 808.565801][T16725] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 808.708343][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.733951][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.230691][T16747] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 809.412311][ T5819] usb 4-1: config 0 descriptor?? [ 810.198590][ T5819] imon_raw 4-1:0.0: IR endpoint missing [ 810.262833][ T5819] usb 4-1: USB disconnect, device number 40 [ 810.346196][ T59] block nbd18: Receive control failed (result -32) [ 814.921807][T16786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 815.006959][T16787] comedi: No check for data length of config insn id 1025 is implemented [ 815.006978][T16787] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 815.006990][T16787] comedi: Assuming n=15 is correct [ 815.087035][ T5819] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 815.255085][ T5819] usb 5-1: Using ep0 maxpacket: 32 [ 815.256021][ T5819] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 815.257492][ T5819] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 815.257515][ T5819] usb 5-1: config 0 has no interface number 0 [ 815.257557][ T5819] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 815.257578][ T5819] usb 5-1: config 0 interface 1 has no altsetting 0 [ 815.260392][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.260416][ T5819] usb 5-1: Product: syz [ 815.260430][ T5819] usb 5-1: Manufacturer: syz [ 815.260445][ T5819] usb 5-1: SerialNumber: syz [ 815.272105][ T5819] usb 5-1: config 0 descriptor?? [ 816.047340][ T5819] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 816.054554][ T5819] cx231xx 5-1:0.1: Failed to read PCB config [ 816.054626][ T5819] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 816.060422][ T5819] usb 5-1: USB disconnect, device number 33 [ 816.457689][ T59] block nbd19: Receive control failed (result -32) [ 816.600979][ T4906] block nbd19: Receive control failed (result -32) [ 817.585436][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 817.605448][T16791] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 817.765261][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 817.768387][ T10] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 817.770466][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 817.770481][ T10] usb 4-1: config 0 has no interface number 0 [ 817.770507][ T10] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 817.770526][ T10] usb 4-1: config 0 interface 1 has no altsetting 0 [ 817.774365][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.774390][ T10] usb 4-1: Product: syz [ 817.774403][ T10] usb 4-1: Manufacturer: syz [ 817.774416][ T10] usb 4-1: SerialNumber: syz [ 817.793654][ T10] usb 4-1: config 0 descriptor?? [ 818.076563][ T10] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 818.101882][ T10] cx231xx 4-1:0.1: Failed to read PCB config [ 818.101967][ T10] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 818.115309][ T10] usb 4-1: USB disconnect, device number 41 [ 818.388090][ T4906] block nbd20: Receive control failed (result -32) [ 818.396775][ T59] block nbd20: Receive control failed (result -32) [ 818.485508][ T5714] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 818.635130][ T5714] usb 2-1: Using ep0 maxpacket: 8 [ 818.635184][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 818.635924][ T5714] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 818.640868][ T5714] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.640917][ T5714] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 818.640942][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 818.640966][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 818.643380][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 818.643406][ T5714] usb 2-1: Product: syz [ 818.643421][ T5714] usb 2-1: Manufacturer: syz [ 818.643435][ T5714] usb 2-1: SerialNumber: syz [ 818.739870][ T5714] usb 2-1: config 0 descriptor?? [ 818.785089][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 818.786010][ T10] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 818.787559][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 818.787583][ T10] usb 4-1: config 0 has no interface number 0 [ 818.787624][ T10] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 818.787644][ T10] usb 4-1: config 0 interface 1 has no altsetting 0 [ 818.790994][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.791017][ T10] usb 4-1: Product: syz [ 818.791032][ T10] usb 4-1: Manufacturer: syz [ 818.791047][ T10] usb 4-1: SerialNumber: syz [ 818.803827][ T10] usb 4-1: config 0 descriptor?? [ 818.868906][ T5714] rc_core: IR keymap rc-imon-rsc not found [ 818.868924][ T5714] Registered IR keymap rc-empty [ 818.889616][ T5714] rc rc0: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 818.905696][ T5714] input: iMON Station as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input80 [ 819.047485][ T5714] imon_raw 2-1:0.0: probe with driver imon_raw failed with error -90 [ 819.330855][ T5714] usb 2-1: USB disconnect, device number 57 [ 819.355605][T16823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 819.382028][T14882] udevd[14882]: setting mode of /dev/bus/usb/002/057 to 020664 failed: No such file or directory [ 819.383745][T14882] udevd[14882]: setting owner of /dev/bus/usb/002/057 to uid=0, gid=0 failed: No such file or directory [ 819.492555][T16823] comedi: No check for data length of config insn id 1025 is implemented [ 819.492790][T16823] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 819.492811][T16823] comedi: Assuming n=15 is correct [ 819.638985][ T10] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 819.641003][ T10] cx231xx 4-1:0.1: Failed to read PCB config [ 819.641073][ T10] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 819.711116][ T10] usb 4-1: USB disconnect, device number 42 [ 820.230018][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 820.259145][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 820.274437][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 820.276675][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 820.280298][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 821.875261][ T4906] block nbd21: Receive control failed (result -32) [ 821.877426][ T59] block nbd21: Receive control failed (result -32) [ 822.485268][ T4906] Bluetooth: hci3: command tx timeout [ 822.526182][T16879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 822.551353][T16879] comedi: No check for data length of config insn id 1025 is implemented [ 822.551371][T16879] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 822.551383][T16879] comedi: Assuming n=15 is correct [ 822.755121][ T5714] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 822.885202][ T5714] usb 5-1: device descriptor read/64, error -71 [ 823.122693][ T3349] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.135463][ T5714] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 823.275110][ T5714] usb 5-1: device descriptor read/64, error -71 [ 823.386564][ T5714] usb usb5-port1: attempt power cycle [ 823.631360][T16893] nbd: must specify a size in bytes for the device [ 823.714737][ T3349] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.725182][ T5714] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 823.747859][ T5714] usb 5-1: device descriptor read/8, error -71 [ 823.985165][ T5714] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 824.010641][ T5714] usb 5-1: device descriptor read/8, error -71 [ 824.055362][ T10] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 824.115582][ T5714] usb usb5-port1: unable to enumerate USB device [ 824.209272][ T3349] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.275175][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 824.275990][ T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 824.277473][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 824.277499][ T10] usb 3-1: config 179 has no interface number 0 [ 824.277555][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 824.277582][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 824.277609][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 824.277635][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 824.277661][ T10] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 824.277702][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.283946][T16896] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 824.498449][T16896] Invalid ELF header type: 2 != 1 [ 824.573565][ T4906] Bluetooth: hci3: command tx timeout [ 824.894440][T16910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 824.997662][T16910] comedi: No check for data length of config insn id 1025 is implemented [ 824.997680][T16910] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 824.997693][T16910] comedi: Assuming n=15 is correct [ 826.150281][ T3349] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.174608][ T5681] usb 3-1: USB disconnect, device number 61 [ 826.174685][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 826.174748][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 826.645439][ T4906] Bluetooth: hci3: command tx timeout [ 828.904244][ T4906] Bluetooth: hci3: command tx timeout [ 829.048060][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 829.900001][T16925] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 830.916928][T16935] nbd: must specify a size in bytes for the device [ 831.313090][T16945] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 831.605971][T16838] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.606522][T16838] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.606802][T16838] bridge_slave_0: entered allmulticast mode [ 831.652365][T16838] bridge_slave_0: entered promiscuous mode [ 831.701410][T16838] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.703075][T16838] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.703411][T16838] bridge_slave_1: entered allmulticast mode [ 831.743058][T16838] bridge_slave_1: entered promiscuous mode [ 832.009144][T16953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 832.097634][T16953] comedi: No check for data length of config insn id 1025 is implemented [ 832.097660][T16953] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 832.097673][T16953] comedi: Assuming n=15 is correct [ 832.316106][T16838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.345687][T16838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.516009][T13480] BUG: unable to handle page fault for address: ffffc9000ea62010 [ 832.516030][T13480] #PF: supervisor read access in kernel mode [ 832.516041][T13480] #PF: error_code(0x0000) - not-present page [ 832.516052][T13480] PGD 13ffcc067 P4D 13ffcc067 PUD 1ae8c067 PMD 33886067 PTE 0 [ 832.516104][T13480] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 832.516246][T13480] CPU: 1 UID: 0 PID: 13480 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 832.516274][T13480] Tainted: [L]=SOFTLOCKUP [ 832.516281][T13480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 832.516293][T13480] Workqueue: usb_hub_wq hub_event [ 832.516407][T13480] RIP: 0010:kcov_remote_start+0x287/0x6f0 [ 832.516457][T13480] Code: b3 8d 4c 8b b8 b8 72 9f 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 00 10 22 8e 4d 8b 3f 49 81 ff 00 10 22 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 2b c0 09 03 84 c0 74 0e 49 8b 07 49 [ 832.516473][T13480] RSP: 0018:ffffc900042277e8 EFLAGS: 00010287 [ 832.516490][T13480] RAX: 0000000000000000 RBX: ffff8880331fdd00 RCX: 0000000000000000 [ 832.516503][T13480] RDX: 000000000e1142ea RSI: 0000000000000001 RDI: ffffffff8bca7720 [ 832.516516][T13480] RBP: 0000000000100000 R08: ffffffff8b497c40 R09: 0000000000000000 [ 832.516530][T13480] R10: 0000000000000000 R11: ffffffff8e1c3100 R12: 0000000000000002 [ 832.516543][T13480] R13: 0000000000000001 R14: ffff888039a4c100 R15: ffffc9000ea62000 [ 832.516557][T13480] FS: 0000000000000000(0000) GS:ffff888125d32000(0000) knlGS:0000000000000000 [ 832.516572][T13480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 832.516585][T13480] CR2: ffffc9000ea62010 CR3: 000000003e846000 CR4: 00000000003526f0 [ 832.516611][T13480] Call Trace: [ 832.516622][T13480] [ 832.516635][T13480] hub_event+0x15d/0x4cf0 [ 832.516666][T13480] ? rt_spin_unlock+0x163/0x200 [ 832.516703][T13480] ? __lock_acquire+0x683/0x2ce0 [ 832.516723][T13480] ? register_lock_class+0x31/0x2e0 [ 832.516741][T13480] ? __lock_acquire+0x683/0x2ce0 [ 832.516762][T13480] ? do_raw_spin_lock+0x12b/0x2f0 [ 832.516786][T13480] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 832.516811][T13480] ? __pfx_hub_event+0x10/0x10 [ 832.516834][T13480] ? process_scheduled_works+0xa20/0x14e0 [ 832.516858][T13480] ? rcu_is_watching+0x15/0xb0 [ 832.516880][T13480] ? process_scheduled_works+0xa20/0x14e0 [ 832.516900][T13480] process_scheduled_works+0xa8e/0x14e0 [ 832.516931][T13480] ? __pfx_process_scheduled_works+0x10/0x10 [ 832.516954][T13480] ? assign_work+0x3cf/0x5d0 [ 832.516975][T13480] worker_thread+0xa47/0xfb0 [ 832.517002][T13480] ? __kthread_parkme+0x71/0x1f0 [ 832.517028][T13480] kthread+0x388/0x470 [ 832.517052][T13480] ? __pfx_worker_thread+0x10/0x10 [ 832.517079][T13480] ? __pfx_kthread+0x10/0x10 [ 832.517104][T13480] ret_from_fork+0x514/0xb70 [ 832.517141][T13480] ? __pfx_ret_from_fork+0x10/0x10 [ 832.517166][T13480] ? __switch_to+0xc89/0x1420 [ 832.517190][T13480] ? __pfx_kthread+0x10/0x10 [ 832.517215][T13480] ret_from_fork_asm+0x1a/0x30 [ 832.517249][T13480] [ 832.517261][T13480] Modules linked in: [ 832.517282][T13480] CR2: ffffc9000ea62010 [ 832.517297][T13480] ---[ end trace 0000000000000000 ]--- [ 832.517308][T13480] RIP: 0010:kcov_remote_start+0x287/0x6f0 [ 832.517339][T13480] Code: b3 8d 4c 8b b8 b8 72 9f 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 00 10 22 8e 4d 8b 3f 49 81 ff 00 10 22 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 2b c0 09 03 84 c0 74 0e 49 8b 07 49 [ 832.517356][T13480] RSP: 0018:ffffc900042277e8 EFLAGS: 00010287 [ 832.517371][T13480] RAX: 0000000000000000 RBX: ffff8880331fdd00 RCX: 0000000000000000 [ 832.517384][T13480] RDX: 000000000e1142ea RSI: 0000000000000001 RDI: ffffffff8bca7720 [ 832.517398][T13480] RBP: 0000000000100000 R08: ffffffff8b497c40 R09: 0000000000000000 [ 832.517411][T13480] R10: 0000000000000000 R11: ffffffff8e1c3100 R12: 0000000000000002 [ 832.517425][T13480] R13: 0000000000000001 R14: ffff888039a4c100 R15: ffffc9000ea62000 [ 832.517438][T13480] FS: 0000000000000000(0000) GS:ffff888125d32000(0000) knlGS:0000000000000000 [ 832.517455][T13480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 832.517468][T13480] CR2: ffffc9000ea62010 CR3: 000000003e846000 CR4: 00000000003526f0 [ 832.517531][T13480] Kernel panic - not syncing: Fatal exception [ 832.517799][T13480] Kernel Offset: disabled