last executing test programs: 18m44.406716765s ago: executing program 3 (id=1410): r0 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x28040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) socket$rxrpc(0x21, 0x2, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x1e, 0x4, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = fanotify_init(0x10, 0x8000) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x40442, 0x0) fallocate(r8, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r8, 0x0) fanotify_mark(r7, 0x1, 0x8001033, r8, 0x0) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x2) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r9, &(0x7f00000003c0), &(0x7f00000003c0)=@tcp=r10, 0x2}, 0x20) 18m35.216133479s ago: executing program 2 (id=1415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00}) socket(0x2b, 0x800, 0x7) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x6, 0x2, 0x0, 0x6, 0x808, 0x4003}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r4, 0x8b32, &(0x7f0000000040)) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f}}, 0x20) inotify_init1(0x800) close_range(r5, r5, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x3a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 18m33.549273269s ago: executing program 3 (id=1418): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r1, 0x89e1, &(0x7f00000000c0)='lapb') socket$inet6_tcp(0xa, 0x1, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000014c0), 0x4, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./security\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./security/tomoyo/domain_policy\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f000000ad40)={0x2020}, 0x203b) syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) 18m30.587402037s ago: executing program 3 (id=1420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000005c0), &(0x7f00000006c0), 0x8, 0xc6, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x9, &(0x7f0000000340)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) move_pages(r2, 0x2, &(0x7f00000000c0)=[&(0x7f0000358000/0x1000)=nil, &(0x7f0000388000/0x2000)=nil], &(0x7f0000000100)=[0x0, 0xfffffff0, 0x0, 0x52a, 0x8, 0x3], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = syz_open_pts(r5, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0xff81, 0x100, 0x0, 0x7fdf, 0x1, "db2d416fbecfb8635452b768e08ee2df361089"}) ioctl$TIOCSTI(r6, 0x5412, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000004c0)={0x0, 'vlan0\x00', {0x4}, 0x1036}) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$packet_tx_ring(r7, 0x107, 0xd, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 18m29.227841217s ago: executing program 2 (id=1421): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) rename(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') close_range(r1, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r3, 0x2000000) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r3, 0x1, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010003ffffc74001020301090224000108000401000809050c00000207020700000000000027090000000000000000"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) 18m28.919500176s ago: executing program 3 (id=1422): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0xab0, 0x8f8, 0x12, 0x60d, 0x0, 0x202, 0x9e0, 0x2e8, 0x2e8, 0x9e0, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x8b0, 0x8f8, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x32, 0x1}, {0x9, 0x1}, {0x4, 0x2}, {0xc}, {0x8001}, {0x8001, 0x2}, {0x8, 0x1}, {0x1}, {0xfffffc00, 0x2}, {0x3}, {0xb46, 0x3}], [{0x8, 0x6}, {0x9, 0x5}, {0x6, 0x94}, {0x8, 0x9}, {0x401, 0x4}, {0x7f, 0xc}, {0x0, 0xb}, {0x6, 0xfffffffb}, {0x3, 0x1}, {0x7, 0x1}, {0x5, 0xe584}], 0x3, 0x9}, {[{0x8, 0x3}, {0x3904}, {0x8, 0x2}, {0x3, 0x3}, {0x2, 0x3}, {0x10000}, {0x5bf8cbd5, 0x3}, {0x3, 0x1}, {0x9, 0x1}, {0x4}, {0x80000000, 0x2}], [{0xb, 0x8000}, {0x43aa, 0x9}, {0x0, 0x7f}, {0x8000, 0x8}, {0x1}, {0xfffffff7, 0x200}, {0x808, 0x6}, {0xfffffff7, 0x4}, {0x6, 0x5}, {0x576, 0x5}, {0x4, 0x6}], 0x3, 0x2}, {[{0x5fa0b8ea, 0x1}, {0x1, 0x1}, {0x41fd4935}, {0x5, 0x1}, {0x6, 0x3}, {0x3, 0x3}, {0x7, 0x2}, {0xfffffffb, 0x1}, {0x1, 0x1}, {0x4, 0x2}, {0x3eb, 0x3}], [{0x805, 0x3}, {0x5}, {0x5, 0x100}, {0x0, 0x5}, {0x1, 0x9}, {0x8, 0xc54}, {0x7, 0xfffffff9}, {0x7fffffff, 0x5fe}, {0x672ca0a5, 0x8}, {0xffffffff, 0x1}, {0x5, 0x7fff}], 0x5, 0x3}, {[{}, {0x8001}, {0x9, 0x3}, {0x2}, {0x7f}, {0x4}, {0x7, 0x9a4c8d3ffb66c6c5}, {0xfffff09b, 0x2}, {0x4}, {0x0, 0x2}, {0x2, 0x1}], [{0x191, 0x1c}, {0x0, 0x9c07}, {0x24df, 0x2}, {0xfffffa9d, 0x9}, {0x3, 0xff}, {0x80, 0x1}, {0x10000, 0x5}, {0x1, 0x1}, {0x22, 0xac}, {0x3, 0x63bbea2e}, {0x81, 0xabad}], 0xff, 0xb}, {[{0x4, 0x1}, {0xfffffffa, 0x3}, {0x97}, {0x2e400000}, {0x3, 0x2}, {0x5a93, 0x3}, {0x6, 0x39dd1294ad71c003}, {0x8, 0x3}, {0x3a, 0x1}, {0x5, 0x2}, {0x3d5, 0x3}], [{0x40, 0x4}, {0x1, 0x7ece}, {0x1, 0xf9}, {0x8, 0x7}, {0xc, 0x4}, {0x9, 0x80}, {0x2, 0x4}, {0x5, 0x5}, {0x464e, 0x73}, {0x800, 0x9}, {0x85, 0x38b1}], 0x7, 0x8}, {[{0x8001, 0x2}, {0x7}, {0xc0, 0x2}, {0x7, 0x1}, {0x8, 0x1}, {0xf, 0x1}, {0x7, 0x2}, {0xffffffb0}, {0x0, 0x1}, {0x5, 0x1}, {0xb}], [{0x9, 0x1}, {0xce5, 0x2}, {0xffff, 0x7ff}, {0xcc7c, 0x6}, {0xf0, 0x4}, {0x8, 0xb2}, {0x9, 0x5}, {0x6, 0xfff}, {0x7013f9bd, 0x5}, {0x298, 0x2d86}, {0x7b, 0x20b4}], 0x3, 0x86}, {[{0x64c}, {0x0, 0x3}, {0x2, 0x3}, {0x1}, {0x4, 0x1}, {0xffff}, {0x3}, {0x4, 0x3}, {0x5, 0x3}, {0xf, 0x2}, {0xfffffffb}], [{0x6, 0x1}, {0x8, 0x8}, {0x69, 0x7ff}, {0x7, 0x7}, {0x6d62edf, 0x5}, {0x80, 0x4}, {0x0, 0x9}, {0x1, 0x5}, {0x1, 0x7}, {0x101, 0x6}, {0x2, 0x6}], 0x3, 0x2}, {[{0x9, 0x3}, {0x8, 0x1}, {0x7, 0x1}, {0x4a9, 0x2}, {0x40, 0x2}, {0x5, 0x3}, {0x9, 0x1}, {0x5}, {0x9, 0x1}, {0xfffffff9, 0x2}, {0x7818b862, 0x1}], [{0x7fff, 0x5}, {0xfe, 0x6}, {0x1, 0x4}, {0x7fff, 0xdd0c}, {0x4}, {0x4, 0x1}, {0x6, 0x7}, {0xfffffff5, 0x3ff}, {0x80000000, 0xfb2}, {0x8}, {0x7, 0x3}], 0x5, 0xa}, {[{0xa, 0x1}, {0x4, 0x3}, {0x4, 0x2}, {0x3, 0x3}, {0x4, 0x2}, {0x25e}, {0x2, 0x3}, {0x0, 0x1}, {0xdf5, 0x3}, {0x0, 0x1}, {0xe, 0x2}], [{0x3, 0x7}, {0x1, 0x6}, {0x5, 0x5}, {0xffe00000, 0x4}, {0x10, 0x401}, {0x7, 0x5a}, {0x2}, {0x0, 0x4}, {0x7, 0x10000}, {0x0, 0x101}, {0x9, 0xfffffffa}], 0x0, 0x9}, {[{0x4, 0x2}, {0x4, 0x3}, {0xfffffff8, 0x1}, {0xff, 0x2}, {0x6}, {0x1ff, 0x1}, {0x2, 0x3}, {0xe}, {0x3b51, 0x1}, {0x7, 0x3}, {0x7fff}], [{0xff}, {0x3b2, 0xaaf0}, {0x8, 0xeffe}, {0x80000001, 0x9}, {0x200, 0x7}, {0xf50, 0x7fff}, {0x97, 0x10001}, {0x7, 0x7}, {0x9c37, 0x3}, {0x4, 0x6}, {0x8, 0x5}], 0xb, 0x1}, {[{0xffffff44, 0x3}, {0xfffffffd}, {0x0, 0x3}, {0x0, 0x3}, {0x7, 0x2432787ee9c7eb13}, {0xd, 0x2}, {0xffff8000, 0x3}, {0xedd2, 0x3}, {0x7}, {0x10}, {0x0, 0x3}], [{0xe, 0x5}, {0xc6f, 0x401}, {0x1, 0x2}, {0x5, 0x3}, {0xffff, 0xffff5d63}, {0x3, 0x3}, {0x6, 0x704}, {0x7, 0x86a}, {0x2}, {0x100000, 0x1}, {0x2, 0xd}], 0x8}], 0x9}}, @common=@icmp6={{0x28}, {0xd, "ea98", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'vcan0\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x5, 0x24, "d8a8c8a584f6607ab62735146bd5fc7fc221094cc78e2ee6645f9841b10b"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xb10) bind$nfc_llcp(r2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r4, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x509840, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x4001, 0x315080) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @win={{0x0, 0x8000, 0x2, 0x2}, 0x2, 0x0, &(0x7f0000000340)={{0xae04, 0x5, 0x6, 0x7}}, 0x8, 0x0, 0x4}}) pipe2$9p(&(0x7f00000001c0), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 18m27.824528567s ago: executing program 3 (id=1425): kexec_load(0x5a63, 0x0, &(0x7f00000005c0), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x4f, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615f", 0x69}, {&(0x7f0000000ac0)="3fe4c8", 0x3}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32", 0x2b}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8", 0x58}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f", 0x1b}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40841) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x11) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000008c0)=ANY=[], 0x0, 0x3f, 0x0, 0x0, 0xb}, 0x28) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r7 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c89770000fdfd", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x800041, &(0x7f00000001c0)='discard') 18m27.571855023s ago: executing program 2 (id=1426): unshare(0x2c020400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x38, r5, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) wait4(r1, 0x0, 0x8, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f000046a000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0x2000, 0x3}) r7 = getpid() r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, 0x0, &(0x7f0000000000)) process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000140)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 18m26.089012069s ago: executing program 3 (id=1428): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x12, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6e, '\x00', 0x0, 0x13}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xaece, 0x0) preadv(r7, &(0x7f0000000440)=[{&(0x7f0000000080)=""/39, 0x27}, {&(0x7f0000002740)=""/4110, 0x100e}], 0x2, 0xa, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x4f63}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r9, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20) 18m23.564861092s ago: executing program 2 (id=1429): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = syz_open_dev$media(0x0, 0x30000000000000a, 0x41) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000000)=@nullb, 0x0, &(0x7f0000000040)='gfs2\x00', 0x800, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x2c9c1) socket(0x11, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r7}, &(0x7f0000000300)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) 18m16.762822751s ago: executing program 2 (id=1437): rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000400)={0x0, 0x2, 0x7ffffffffffffffc, 0x2}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a6b000/0x1000)=nil, &(0x7f0000cf1000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ca2000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000cae000/0x2000)=nil, 0x0}, 0x68) syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102400, 0x19000) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './my_sys/bus/pci/devices/0000:00:01.0/config', [{0x20, '#! '}], 0xa, "e24c8abc1a246d261ba35b1950"}, 0x41) sendfile(r4, r4, 0x0, 0x6) 18m12.81037613s ago: executing program 2 (id=1441): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf", 0x66) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0]) socket(0x3, 0x803, 0x40000) close(r0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) 18m10.507090807s ago: executing program 32 (id=1428): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x12, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6e, '\x00', 0x0, 0x13}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xaece, 0x0) preadv(r7, &(0x7f0000000440)=[{&(0x7f0000000080)=""/39, 0x27}, {&(0x7f0000002740)=""/4110, 0x100e}], 0x2, 0xa, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x4f63}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r9, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20) 17m57.508790944s ago: executing program 33 (id=1441): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf", 0x66) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0]) socket(0x3, 0x803, 0x40000) close(r0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) 15.214233087s ago: executing program 0 (id=4759): r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) readahead(r0, 0x3, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r1, 0xc040583f, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x10) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) close(0xffffffffffffffff) r6 = socket(0x10, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) close_range(r6, r7, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x3, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r9, 0x7800, 0x22b384db60457e3a, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x65, 0x0, 0xee, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') 12.698511628s ago: executing program 0 (id=4766): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300030c0000000000040000000000030005000000000002000000e00000020000000000000000030006000000000002000000ac141400000000000000000002000100000000000000000000000000020013"], 0x60}, 0x1, 0x7}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r2, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000600)=""/66, 0x42}, {&(0x7f0000000180)=""/92, 0x5c}, {&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x4}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x40018000}], 0x3, 0x2, 0x0) syz_usb_connect$uac1(0x0, 0xfe, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1044, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xec, 0x3, 0x1, 0x7, 0xb0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa, 0x1e}, [@extension_unit={0x8, 0x24, 0x8, 0x3, 0x7, 0x5, "a7"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x101, 0x2, 0x5, 0xed0, 0x4, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x10, 0x9ed, 0x7f, "ca988a04c9"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xc, 0x1, 0x4, 0x3, "719251ba"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x3, 0x5d, 0x0, "fb9853ebba2f05"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x3, 0x12, 0x40, "", "176a"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x8001, 0x7ff, 0x7, "575f8e85"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0xf7, 0x3, {0x7, 0x25, 0x1, 0x4, 0x6, 0xb2a}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x7, 0x1, 0x3}, @as_header={0x7, 0x24, 0x1, 0x3}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xa, 0x1, 0x9, 0x42, "8f81604b"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x762, 0xe8, 0x9}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x100, 0x7, 0xac, 0x42}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x4, 0x9, {0x7, 0x25, 0x1, 0x8, 0xc, 0x7}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x83, 0x0, 0x1, 0x20, 0x2}, 0x1d, &(0x7f0000000340)={0x5, 0xf, 0x1d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x34be30f5c450f927, 0x8, 0xe, 0x9, 0x1}, @wireless={0xb, 0x10, 0x1, 0x12, 0x40, 0x1, 0x7, 0x0, 0xdd}, @ptm_cap={0x3}]}, 0x4, [{0x6, &(0x7f0000000380)=@string={0x6, 0x3, "9508a36c"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x429}}]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, &(0x7f0000000240)="235913100000004a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x20000010) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x0, 0x0, 0x7, 0x7, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x50000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xfd, 0x2}, {0xb000, 0xf066ce738b004ad5, 0xc, 0x0, 0x27, 0xc5, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x25000, 0xb, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0x8080000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x3f, 0x2}, {0xb000, 0x0, 0x9, 0x5, 0x2, 0x1, 0x1, 0x80, 0x10, 0xff, 0x6, 0xc0}, {0x1eeed1001, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x50000, 0x50000, 0x8, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x1, 0x2}, {0x809fffb, 0x8cc}, {0xdddd1000}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xd, 0xf801, 0x4, [0x80000004, 0x0, 0x10000, 0xfffffffffffdfffb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000740)={0x20, 0x16, 0x2, "e6d0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)={0x0, 0x30, 0xf, "b13f075e28bff79c4b6c06295c4a28"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.960263055s ago: executing program 1 (id=4770): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14}, 0x94) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 9.501685842s ago: executing program 6 (id=4776): r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) readahead(r0, 0x3, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r1, 0xc040583f, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x10) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) close(0xffffffffffffffff) r6 = socket(0x10, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) close_range(r6, r7, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x3, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r9, 0x7800, 0x22b384db60457e3a, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x65, 0x0, 0xee, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') 8.018999867s ago: executing program 0 (id=4779): socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$kcm(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001700010026bd7000f9dbdf35340dc17294019c4e0941d425080000000800050007000000"], 0x1c}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000700)="c5", 0x1}], 0x1) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xf, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x5, 0x85, 0x4, 0x4}]}) r6 = fanotify_init(0x200, 0x0) writev(r6, &(0x7f0000000380)=[{&(0x7f0000000240)="e0335d1583aaa5d4", 0x8}], 0x1) rseq(&(0x7f0000000180), 0x20, 0x2000000000000000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003540)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000093da363d7102a43cc4f3d3d9176ee3364a6bffdf6919e889fb7f149a63ad62c668f9a92b84a547571e92d47c8d1f57814f752e566ca28daef6366235a49346a9fc165cf5f579a69eb19126ef9a02", @ANYRES16=r8, @ANYBLOB="010025bd7000fddbdf253b00000008000300", @ANYRES16=0x0, @ANYBLOB="1e003300c014fe00ffffffffffff080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="000007008e6983", @ANYRES16=r8, @ANYBLOB="000227bd7000fedbdf253200000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000039000000"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.327268267s ago: executing program 1 (id=4782): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(&(0x7f0000000840)='./file0\x00', 0x145) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)=@sha1={0x1, "ca216891e220ecfc0c1d3ae6ce7c38427759547c"}, 0x15, 0x1) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) 6.280420685s ago: executing program 6 (id=4784): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r4 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) 6.161222393s ago: executing program 5 (id=4785): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) syz_open_dev$vim2m(0x0, 0x8, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000420001000000000000000000030100000f0000003c00010000112233445566778899aabb86dd2c00001c00002bff07000000000000010253aa58fe6cbdf0357065ae44132403b1fd606412c32500006704000280040003"], 0x5c}}, 0x0) socket(0x2, 0x3, 0xff) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r3 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) poll(&(0x7f0000000540)=[{r4, 0x2020}], 0x1, 0xb8) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) 5.921956017s ago: executing program 1 (id=4786): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000200), 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='./file0\n', 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='1\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='loop\n', 0x5) close(r5) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') write(0xffffffffffffffff, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e) nanosleep(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) read(0xffffffffffffffff, &(0x7f00000009c0), 0x100) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/class/block/nvme0n1/wwid\x00', 0x0, 0x0) 5.273897409s ago: executing program 1 (id=4787): r0 = socket$inet6(0xa, 0x2, 0x0) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) gettid() r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0x8000, 0x100009, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x2, @rand_addr, 0xed9f}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000240)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1b00", 0x64, 0x11, 0x0, @local, @mcast2, {[], {0x4000, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "1983426a97e3503bbbc12ef01ae488918c1ea89a08a25f78de9f802d2628cc4b", "b6af91bfb69252b136c8f50eaee89ebe", {"26e39726e261b1997fe90de7841c2e1f", "8def4140df2b9c11e876f120f5f7bfc5"}}}}}}}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) rmdir(&(0x7f0000000280)='./file0/file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 5.221911788s ago: executing program 6 (id=4788): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) 4.86191184s ago: executing program 4 (id=4789): fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r2, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) 4.785094305s ago: executing program 6 (id=4790): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x28, 0x7f, 0x6, 0xfffff00c}, {0x6, 0x4, 0x3, 0x1000}]}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000002c80)={0x2020}, 0x2020) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x101280, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20024080}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000000c0)={0x8, 0xa6, 0x2, 0x9, 0x3, 0xead}) 4.695102578s ago: executing program 1 (id=4791): r0 = syz_usb_connect(0x3, 0x4e, &(0x7f0000000580)=ANY=[@ANYBLOB="92010002000000401107500500000102030109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d02"], 0x0) syz_usb_ep_read(r0, 0xd, 0x0, 0x0) syz_usb_ep_read(r0, 0xd, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x7f) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$evdev(0x0, 0x0, 0x200) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[], 0x0) syz_usb_disconnect(r3) syz_usb_disconnect(0xffffffffffffffff) 4.595931661s ago: executing program 4 (id=4792): socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x8, 0x91, 0x6}) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x96b, 0xb, 0x400}) syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) 3.669837402s ago: executing program 6 (id=4793): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14}, 0x94) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.399750865s ago: executing program 5 (id=4794): epoll_create1(0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockopt$llc_int(r2, 0x10c, 0x5, 0x0, &(0x7f0000000040)) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0xa, &(0x7f0000000300)=""/162, &(0x7f00000003c0)=0xa2) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000440)={'\x00', 0x5, 0x1, 0x7, 0x6, 0x6, 0xffffffffffffffff}) prlimit64(r4, 0x5, &(0x7f0000000540)={0x8, 0x6}, &(0x7f0000000580)) syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x100000000000000) 3.106853336s ago: executing program 4 (id=4795): r0 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf", 0x66) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x9, &(0x7f0000000280)=[{0xc721, 0x3, 0x3}, {0x7f, 0x5, 0xff, 0x16}, {0x19, 0x6, 0x2, 0xb}, {0x5b, 0x0, 0x1, 0x5}, {0x1000, 0x0, 0xbf, 0x3}, {0x8, 0x80, 0x40, 0x3}, {0x6, 0x25, 0x1, 0x1}, {0x3ff, 0x0, 0x3, 0x6}, {0x101, 0x9, 0xff, 0x3}]}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) 2.986869058s ago: executing program 0 (id=4796): kexec_load(0x5a63, 0x0, &(0x7f00000005c0), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x4f, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615f", 0x69}, {&(0x7f0000000ac0)}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32", 0x2b}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8", 0x58}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c48", 0x18}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40841) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x11) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000008c0)=ANY=[], 0x0, 0x3f, 0x0, 0x0, 0xb}, 0x28) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x800041, &(0x7f00000001c0)='discard') 2.393420156s ago: executing program 5 (id=4797): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000200), 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='./file0\n', 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='1\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='loop\n', 0x5) close(r5) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') write(0xffffffffffffffff, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e) nanosleep(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) read(0xffffffffffffffff, &(0x7f00000009c0), 0x100) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/class/block/nvme0n1/wwid\x00', 0x0, 0x0) 2.211826959s ago: executing program 0 (id=4798): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r4 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) 2.021684514s ago: executing program 5 (id=4799): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000001, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r5, 0x0, 0x200006, 0x0) splice(r4, 0x0, r1, 0x0, 0x7fffffffffffffff, 0x1) write(r0, &(0x7f00000001c0)='G', 0x1) 1.988403845s ago: executing program 4 (id=4800): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) 1.871698177s ago: executing program 4 (id=4801): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf", 0x66) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) 1.792085047s ago: executing program 5 (id=4802): timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}}, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x801, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000002c0)={0x10000018}) syz_genetlink_get_family_id$fou(&(0x7f0000000340), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) ioctl(r4, 0x8b32, &(0x7f0000000040)) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'netdevsim0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x1, 0x0) write(r7, &(0x7f0000000200)='0', 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="687567653d6ea0a525821fc858ee0f083cc476f9255f7665722c0000"]) r8 = io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x4017, 0x2, 0x3, 0x1fb, 0x0, r1}) setns(0xc9, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f0000000200), 0x4) close_range(r8, 0xffffffffffffffff, 0x0) 1.007074957s ago: executing program 0 (id=4803): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) readahead(r0, 0x3, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r1, 0xc040583f, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x10) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) close(0xffffffffffffffff) r6 = socket(0x10, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) close_range(r6, r7, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x3, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r9, 0x7800, 0x22b384db60457e3a, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x65, 0x0, 0xee, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') 745.974283ms ago: executing program 4 (id=4804): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x25) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f00000012c0)=""/102376, 0x18fe8) sched_setaffinity(r2, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) 698.855615ms ago: executing program 1 (id=4805): syz_extract_tcp_res(0x0, 0x6, 0x5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0xc5, &(0x7f0000000300)={0x0, 0x10f211, 0x4, 0x2002, 0x40001c, 0x0, r0}, &(0x7f00000007c0), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x1e, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaa2aabbaaaaaaaaaaf49a6a81e72a2c009326756bab79cc7b59ca8f0b2ff65741245cd234ceeb2e047e5d583aa2bbf8f7f75f1940071b3710a2ee1e332384f7f4f23ba3a740f0ae9e7456b54a260fb078739e1e87903043561b9ad74a7e41fc374790d67fcc4f37c2bac694da28b7e57cfb084d7b582553f7c2c7b222062c79812844375829f97bc11499659ce3412f80d4408e7b2507f6258c5f9876a33907a2e7b67073697a3e59a1e8473cdef536c75543c26d96b3511ba12f25f784bc046cb8752dedd943230d55e989413d07cdf15b272db9817696ac04af0468262b6615c4c5450000000000"], 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000740000/0x1000)=nil, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r3, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @private0, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000680)="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", 0x102}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x39, &(0x7f0000000600)=[{&(0x7f0000000240)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r3, 0x1) socket$kcm(0x10, 0x2, 0x0) 130.579469ms ago: executing program 5 (id=4806): socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x8, 0x91, 0x6}) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x96b, 0xb, 0x400}) syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) 0s ago: executing program 6 (id=4807): r0 = syz_open_dev$loop(&(0x7f0000000540), 0xd0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x5, 0x4, 0x2}, 0x50) socketpair(0x1, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r4, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r4, &(0x7f00000003c0), &(0x7f0000000300)=@tcp=r5, 0x1}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) ftruncate(0xffffffffffffffff, 0x6000000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup3(0xffffffffffffffff, r6, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0x4c09, 0x0) kernel console output (not intermixed with test programs): idProduct=852a, bcdDevice=6d.39 [ 1715.187385][T21346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1715.209896][T13750] usb 1-1: config index 0 descriptor too short (expected 2075, got 27) [ 1715.238268][T21346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1715.247694][T13750] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 1715.294425][T13750] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1715.334958][T21346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1715.343869][T13750] usb 1-1: config 0 has no interface number 0 [ 1715.364296][T13750] usb 1-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1715.407838][T13750] usb 1-1: config 0 interface 200 has no altsetting 0 [ 1715.423438][T21346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1715.462211][T13750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.481604][T21346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1715.504824][T13750] usb 1-1: Product: syz [ 1715.509550][T13750] usb 1-1: Manufacturer: syz [ 1715.517353][T10002] usb 5-1: USB disconnect, device number 123 [ 1715.537193][T13750] usb 1-1: SerialNumber: syz [ 1715.570604][T13750] usb 1-1: config 0 descriptor?? [ 1715.805667][T13750] usbhid 1-1:0.200: couldn't find an input interrupt endpoint [ 1715.836014][T13750] usb 1-1: USB disconnect, device number 9 [ 1717.124809][T13750] usb 6-1: new low-speed USB device number 75 using dummy_hcd [ 1717.133143][T10002] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 1717.295303][T10002] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1717.315014][T13750] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1717.325892][T10002] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1717.341113][T13750] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 1717.358511][T10002] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1717.372814][T13750] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 1717.390143][T10002] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1717.448465][T10002] usb 5-1: Product: syz [ 1717.452031][T13750] usb 6-1: string descriptor 0 read error: -22 [ 1717.464798][T10002] usb 5-1: Manufacturer: syz [ 1717.747888][ T5688] usb 7-1: new low-speed USB device number 97 using dummy_hcd [ 1717.848038][T13724] usb 2-1: USB disconnect, device number 126 [ 1717.936436][T10002] usb 5-1: SerialNumber: syz [ 1718.000866][ T5688] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1718.048376][ T5688] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 1718.176825][ T5688] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 1718.427216][ T5688] usb 7-1: string descriptor 0 read error: -22 [ 1718.442315][T10002] usb 5-1: config 0 descriptor?? [ 1718.448013][T13750] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.451886][ T5688] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.464499][T21384] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1718.482247][T13750] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1718.515858][T21403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4289'. [ 1718.554733][T21399] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1718.593504][ T5688] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1718.830110][ T5688] usb 7-1: USB disconnect, device number 97 [ 1718.839256][T13750] usb 6-1: USB disconnect, device number 75 [ 1718.970153][T13724] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1719.176243][T13724] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1719.227763][T13724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.252086][T13724] usb 1-1: Product: syz [ 1719.268757][T13724] usb 1-1: Manufacturer: syz [ 1719.280926][T13724] usb 1-1: SerialNumber: syz [ 1719.505598][T13724] usb 1-1: USB2VGA dongle found at address 10 [ 1719.599670][T13724] usb 1-1: Allocated 8 output buffers [ 1719.655312][T13724] usb 1-1: Failed to early initialize device [ 1719.840414][ T5688] usb 5-1: USB disconnect, device number 124 [ 1719.887749][T21420] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4296'. [ 1719.943651][T21409] usb 1-1: Failed to initialize device [ 1720.012696][T21409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1720.057684][T21409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1720.525346][T13724] usb 1-1: USB disconnect, device number 10 [ 1720.595174][T21431] NILFS (nullb0): couldn't find nilfs on the device [ 1720.644415][ T5688] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1720.907523][ T5688] usb 7-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 1721.468522][ T5688] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1721.480932][ T5688] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1721.492173][ T5688] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.503679][ T5688] usb 7-1: config 0 descriptor?? [ 1723.744006][ T5688] hid_parser_main: 4007 callbacks suppressed [ 1723.744041][ T5688] asus 0003:0B05:1ABE.008E: unknown main item tag 0x0 [ 1723.773200][ T5688] asus 0003:0B05:1ABE.008E: unknown main item tag 0x0 [ 1723.784216][ T5688] asus 0003:0B05:1ABE.008E: unknown main item tag 0x0 [ 1723.800881][ T5688] asus 0003:0B05:1ABE.008E: unknown main item tag 0x0 [ 1723.816069][ T5688] asus 0003:0B05:1ABE.008E: unknown main item tag 0x0 [ 1723.823553][ T5688] asus 0003:0B05:1ABE.008E: unknown main item tag 0x0 [ 1723.832053][ T5688] asus 0003:0B05:1ABE.008E: unknown main item tag 0x0 [ 1723.839950][ T5688] asus 0003:0B05:1ABE.008E: unknown main item tag 0x0 [ 1723.849151][ T5688] asus 0003:0B05:1ABE.008E: unknown main item tag 0x0 [ 1724.001161][ T5688] asus 0003:0B05:1ABE.008E: unknown main item tag 0x0 [ 1724.012773][T21461] loop2: detected capacity change from 0 to 2640 [ 1724.021290][ T5688] asus 0003:0B05:1ABE.008E: item fetching failed at offset 322/483 [ 1724.027008][T21461] buffer_io_error: 321 callbacks suppressed [ 1724.027023][T21461] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 1724.045883][T21461] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 1724.055041][T21461] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 1724.064257][T21461] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 1724.073382][T21461] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 1724.082552][T21461] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 1724.091836][T21461] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 1724.101096][T21461] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 1724.110276][T21461] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 1724.119672][T21461] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 1724.177456][ T5688] asus 0003:0B05:1ABE.008E: Asus hid parse failed: -22 [ 1724.201973][ T5688] asus 0003:0B05:1ABE.008E: probe with driver asus failed with error -22 [ 1724.379973][ T5688] usb 7-1: USB disconnect, device number 98 [ 1724.727526][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1725.874394][T13726] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1726.068075][T13726] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1726.151707][T13726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.220492][T13726] usb 1-1: Product: syz [ 1726.257196][T13726] usb 1-1: Manufacturer: syz [ 1726.265559][T21494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1726.290986][T13726] usb 1-1: SerialNumber: syz [ 1726.358414][T13726] usb 1-1: USB2VGA dongle found at address 11 [ 1726.418954][T21497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1726.453814][T13726] usb 1-1: Allocated 8 output buffers [ 1726.497759][T13726] usb 1-1: Failed to early initialize device [ 1727.029564][T21498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1727.077074][T21474] usb 1-1: Failed to initialize device [ 1727.248722][T21498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1727.454839][T13726] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1727.770967][T13726] usb 6-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.40 [ 1727.783080][T13726] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1727.831433][T13726] usb 6-1: string descriptor 0 read error: -22 [ 1727.856850][T13732] usb 1-1: USB disconnect, device number 11 [ 1727.873913][T13726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.006999][T13726] hid_parser_main: 308 callbacks suppressed [ 1730.007014][T13726] aquacomputer_d5next 0003:0C70:F001.008F: unknown main item tag 0x0 [ 1730.033161][T13726] aquacomputer_d5next 0003:0C70:F001.008F: unknown main item tag 0x0 [ 1730.033633][ T30] audit: type=1800 audit(1787136597.232:1539): pid=21532 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.4332" name="addr_trtype" dev="configfs" ino=69398 res=0 errno=0 [ 1730.073983][ T30] audit: type=1800 audit(1787136597.272:1540): pid=21532 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.4332" name="addr_traddr" dev="configfs" ino=69399 res=0 errno=0 [ 1730.100834][ T30] audit: type=1800 audit(1787136597.302:1541): pid=21532 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.4332" name="addr_trsvcid" dev="configfs" ino=69990 res=0 errno=0 [ 1730.101070][T21532] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 1730.138748][T13726] aquacomputer_d5next 0003:0C70:F001.008F: unknown main item tag 0x0 [ 1730.143523][T21500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1730.169516][T13726] aquacomputer_d5next 0003:0C70:F001.008F: unknown main item tag 0x0 [ 1730.170693][T21500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1730.189870][T13726] aquacomputer_d5next 0003:0C70:F001.008F: unknown main item tag 0x0 [ 1730.189996][T21533] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1730.224405][T13724] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1730.226603][T13750] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1730.251062][T13726] aquacomputer_d5next 0003:0C70:F001.008F: unknown main item tag 0x0 [ 1730.260819][T13726] aquacomputer_d5next 0003:0C70:F001.008F: unknown main item tag 0x0 [ 1730.281284][T13726] aquacomputer_d5next 0003:0C70:F001.008F: unknown main item tag 0x0 [ 1730.292812][T13726] aquacomputer_d5next 0003:0C70:F001.008F: unknown main item tag 0x0 [ 1730.301830][T13726] aquacomputer_d5next 0003:0C70:F001.008F: unknown main item tag 0x0 [ 1730.365147][T13726] aquacomputer_d5next 0003:0C70:F001.008F: hidraw0: USB HID vff.7f Device [HID 0c70:f001] on usb-dummy_hcd.5-1/input0 [ 1730.385606][T13724] usb 1-1: device descriptor read/64, error -71 [ 1730.415366][T13750] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1730.439502][T13750] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1730.460365][T13726] usb 6-1: USB disconnect, device number 76 [ 1730.479633][T13750] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1730.521837][T13750] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.557655][T13750] usb 5-1: config 0 descriptor?? [ 1731.151930][T13724] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1731.271171][T13750] usb 5-1: language id specifier not provided by device, defaulting to English [ 1731.627759][T21546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1731.741838][T13750] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0090/input/input111 [ 1731.757383][T21547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1731.841788][T21547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1731.979267][T13750] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0090/input/input112 [ 1732.528000][T13750] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0090/input/input113 [ 1732.674549][T10060] block nbd0: Possible stuck request ffff8880280c6900: control (read@0,1024B). Runtime 90 seconds [ 1732.708010][T10060] block nbd0: Possible stuck request ffff8880280c6ac0: control (read@1024,1024B). Runtime 90 seconds [ 1732.722728][T10060] block nbd0: Possible stuck request ffff8880280c6c80: control (read@2048,1024B). Runtime 90 seconds [ 1732.735036][T10060] block nbd0: Possible stuck request ffff8880280c6e40: control (read@3072,1024B). Runtime 90 seconds [ 1732.776557][T21549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4339'. [ 1732.808064][T13750] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0090/input/input114 [ 1732.814415][T13724] usb 1-1: device descriptor read/64, error -71 [ 1733.013745][T13724] usb usb1-port1: attempt power cycle [ 1733.134261][ T5688] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1733.134372][T13741] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1733.166843][T13750] uclogic 0003:256C:006D.0090: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 1733.174383][T13726] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1733.220965][T13750] usb 5-1: USB disconnect, device number 125 [ 1733.261437][T21561] fido_id[21561]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1733.316015][ T5688] usb 7-1: Using ep0 maxpacket: 32 [ 1733.329309][ T5688] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1733.349875][ T5688] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 1733.359401][ T5688] usb 7-1: config 0 has no interface number 0 [ 1733.366572][T13726] usb 6-1: Using ep0 maxpacket: 32 [ 1733.372258][ T5688] usb 7-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1733.375390][T13741] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1733.383524][ T5688] usb 7-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1733.383717][T13726] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1733.396833][T13741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.415413][T13741] usb 2-1: Product: syz [ 1733.423075][ T5688] usb 7-1: config 0 interface 12 has no altsetting 0 [ 1733.427747][T13741] usb 2-1: Manufacturer: syz [ 1733.440076][T13741] usb 2-1: SerialNumber: syz [ 1733.448161][T13726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.457361][T13726] usb 6-1: Product: syz [ 1733.462008][T13726] usb 6-1: Manufacturer: syz [ 1733.464312][T13741] usb 2-1: USB2VGA dongle found at address 127 [ 1733.467438][T13726] usb 6-1: SerialNumber: syz [ 1733.480353][T13741] usb 2-1: Allocated 8 output buffers [ 1733.481399][ T5688] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.491003][T13741] usb 2-1: Failed to early initialize device [ 1733.496055][T13726] usb 6-1: config 0 descriptor?? [ 1733.507302][ T5688] usb 7-1: Product: syz [ 1733.511903][ T5688] usb 7-1: Manufacturer: syz [ 1733.517190][ T5688] usb 7-1: SerialNumber: syz [ 1733.524675][T13726] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1733.535621][ T5688] usb 7-1: config 0 descriptor?? [ 1733.541111][T13726] dvb-usb: bulk message failed: -22 (4/0) [ 1733.547671][T13726] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1733.560848][ T5688] f81534 7-1:0.12: unsupported endpoint max packet size [ 1733.572241][T13726] dvb-usb: bulk message failed: -22 (5/0) [ 1733.579098][T13726] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1733.591732][T13726] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1733.602239][T13726] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1733.604237][T13750] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 1733.611132][T13726] usb 6-1: media controller created [ 1733.630607][T13726] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1733.646603][T13726] usb 6-1: selecting invalid altsetting 3 [ 1733.652922][T13726] ttusb2: set interface to alts=3 failed [ 1733.680115][T13726] DVB: Unable to find symbol tda10086_attach() [ 1733.687195][T13726] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1733.697239][T13726] dvb-usb: bulk message failed: -22 (4/0) [ 1733.703535][T13726] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1733.716464][T13726] dvb-usb: bulk message failed: -22 (5/0) [ 1733.722765][T13726] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1733.733962][T13726] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1733.749064][T13726] usb 6-1: USB disconnect, device number 77 [ 1733.785286][T13750] usb 5-1: not running at top speed; connect to a high speed hub [ 1733.797842][T13750] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1733.807157][T13726] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1733.815386][T13750] usb 5-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 1733.827972][T13750] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1733.859509][T13750] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 1733.874369][T13750] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.891151][T13750] usb 5-1: config 0 descriptor?? [ 1733.901429][T13750] uvcvideo 5-1:0.0: Found UVC 9.00 device (046d:0825) [ 1733.913018][T21554] usb 2-1: Failed to initialize device [ 1733.921524][T21554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1733.933193][T21554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1734.426697][T13726] usb 2-1: USB disconnect, device number 127 [ 1734.526639][T13750] uvcvideo 5-1:0.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1734.538126][T13750] uvcvideo 5-1:0.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 48). [ 1734.548378][T13750] uvcvideo 5-1:0.1: Failed to initialize the device (-71). [ 1734.568130][T13750] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -71 [ 1734.582023][T13750] usb 5-1: USB disconnect, device number 126 [ 1734.654275][T13741] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1734.824349][T13741] usb 6-1: Using ep0 maxpacket: 8 [ 1734.830453][T13741] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1734.841279][T13741] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1734.850136][T13741] usb 6-1: config 0 has no interface number 0 [ 1734.856985][T13741] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1734.868992][T13741] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1734.879759][T13741] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.891300][T13741] usb 6-1: config 0 descriptor?? [ 1734.900340][T13741] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1735.086980][T21583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1735.101780][T21577] iowarrior 6-1:0.1: Error -90 while submitting URB [ 1735.109908][T13741] usb 6-1: USB disconnect, device number 78 [ 1735.153493][T21584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1735.216113][T21583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1735.604576][ T8688] block nbd1: Possible stuck request ffff888028120000: control (read@0,1024B). Runtime 90 seconds [ 1735.639491][T21586] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4350'. [ 1735.675074][T21588] futex_wake_op: syz.5.4351 tries to shift op by 144; fix this program [ 1735.690675][T21588] tmpfs: Bad value for 'huge' [ 1736.601942][T13750] usb 7-1: USB disconnect, device number 99 [ 1736.617488][T21596] futex_wake_op: syz.4.4354 tries to shift op by 144; fix this program [ 1736.663202][T21596] tmpfs: Bad value for 'huge' [ 1736.804491][T13741] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1736.933896][T21612] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1736.978707][T13741] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1736.999931][T13741] usb 2-1: no configurations [ 1737.011480][T13741] usb 2-1: can't read configurations, error -22 [ 1737.054378][T13750] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1737.136415][T10002] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1737.154428][T13741] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1737.227119][T13750] usb 7-1: Using ep0 maxpacket: 32 [ 1737.242599][T13750] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1737.269837][T13750] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1737.279837][T13750] usb 7-1: Product: syz [ 1737.292312][T13750] usb 7-1: Manufacturer: syz [ 1737.299012][T13750] usb 7-1: SerialNumber: syz [ 1737.315199][T10002] usb 5-1: Using ep0 maxpacket: 8 [ 1737.328439][T10002] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1737.340397][T13741] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1737.369314][T13750] usb 7-1: config 0 descriptor?? [ 1737.392033][T13741] usb 2-1: no configurations [ 1737.405372][T10002] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1737.423078][T13750] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1737.433971][T13741] usb 2-1: can't read configurations, error -22 [ 1737.446918][T10002] usb 5-1: config 0 has no interface number 0 [ 1737.458740][T13750] dvb-usb: bulk message failed: -22 (4/0) [ 1737.471325][T13741] usb usb2-port1: attempt power cycle [ 1737.479373][T10002] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1737.772790][T13750] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1737.797063][T10002] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1737.809186][T13750] dvb-usb: bulk message failed: -22 (5/0) [ 1737.816881][T13750] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1737.828690][T10002] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.844968][T10002] usb 5-1: config 0 descriptor?? [ 1737.856510][T13750] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1737.873912][T10002] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1737.890344][T13750] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1737.900105][T13750] usb 7-1: media controller created [ 1737.991087][T13750] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1738.047675][T13750] usb 7-1: selecting invalid altsetting 3 [ 1738.054107][T13750] ttusb2: set interface to alts=3 failed [ 1738.087756][T13750] DVB: Unable to find symbol tda10086_attach() [ 1738.101282][T21611] iowarrior 5-1:0.1: Error -90 while submitting URB [ 1738.111360][T13750] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1738.124293][T13741] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1738.144552][T20945] usb 5-1: USB disconnect, device number 127 [ 1738.167735][T13741] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1738.184382][T13750] dvb-usb: bulk message failed: -22 (4/0) [ 1738.197274][T13741] usb 2-1: no configurations [ 1738.206353][T13750] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1738.223083][T13741] usb 2-1: can't read configurations, error -22 [ 1738.235310][T13750] dvb-usb: bulk message failed: -22 (5/0) [ 1738.250073][T13750] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1738.261608][T13750] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1738.301925][T13750] usb 7-1: USB disconnect, device number 100 [ 1738.323580][T13750] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1738.354274][T13741] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1738.375348][T13741] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1738.388503][T13741] usb 2-1: no configurations [ 1738.393593][T13741] usb 2-1: can't read configurations, error -22 [ 1738.402467][T13741] usb usb2-port1: unable to enumerate USB device [ 1738.761345][T21632] syzkaller0: entered promiscuous mode [ 1738.767551][T21632] syzkaller0: entered allmulticast mode [ 1738.793088][T21632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4366'. [ 1740.944240][T13724] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1741.094247][T20945] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1741.124405][T13724] usb 2-1: Using ep0 maxpacket: 32 [ 1741.130496][T13724] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1741.144810][T13724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.153683][T13724] usb 2-1: Product: syz [ 1741.158282][T13724] usb 2-1: Manufacturer: syz [ 1741.163444][T13724] usb 2-1: SerialNumber: syz [ 1741.170704][T13724] usb 2-1: config 0 descriptor?? [ 1741.178157][T13724] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1741.186671][T13724] dvb-usb: bulk message failed: -22 (4/0) [ 1741.192989][T13724] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1741.204598][T13724] dvb-usb: bulk message failed: -22 (5/0) [ 1741.210907][T13724] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1741.223648][T13724] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1741.234328][T13724] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1741.243217][T13724] usb 2-1: media controller created [ 1741.246603][T20945] usb 7-1: Using ep0 maxpacket: 8 [ 1741.257231][T20945] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1741.260140][T13724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1741.268703][T20945] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1741.286794][T20945] usb 7-1: config 0 has no interface number 0 [ 1741.287677][T13724] usb 2-1: selecting invalid altsetting 3 [ 1741.293549][T20945] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1741.300051][T13724] ttusb2: set interface to alts=3 failed [ 1741.320842][T20945] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1741.335259][T20945] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1741.353880][T20945] usb 7-1: config 0 descriptor?? [ 1741.377318][T13724] DVB: Unable to find symbol tda10086_attach() [ 1741.385003][T20945] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1741.391430][T13724] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1741.484817][T13724] dvb-usb: bulk message failed: -22 (4/0) [ 1741.498097][T13724] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1741.526191][T13724] dvb-usb: bulk message failed: -22 (5/0) [ 1741.544195][T13724] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1741.560467][T13724] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1741.584636][T13724] usb 2-1: USB disconnect, device number 6 [ 1741.595137][T21661] iowarrior 7-1:0.1: Error -90 while submitting URB [ 1741.643771][T20945] usb 7-1: USB disconnect, device number 101 [ 1742.431784][T13724] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1742.452191][T21666] bond3: entered promiscuous mode [ 1742.487488][T21666] bond3: entered allmulticast mode [ 1742.501501][T21666] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1742.786561][T13726] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1742.841776][T21691] futex_wake_op: syz.5.4384 tries to shift op by 144; fix this program [ 1742.861232][T21691] tmpfs: Bad value for 'huge' [ 1742.866698][T13724] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1742.965780][T13726] usb 7-1: Using ep0 maxpacket: 8 [ 1742.974453][T13726] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1742.992452][T13726] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1743.003657][T13726] usb 7-1: config 0 has no interface number 0 [ 1743.011607][T13726] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1743.022927][T13726] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.032171][T21700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4388'. [ 1743.033948][T13726] usb 7-1: config 0 descriptor?? [ 1743.048278][T13724] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1743.060432][T13726] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 1743.067869][T13724] usb 2-1: no configurations [ 1743.081928][T13724] usb 2-1: can't read configurations, error -22 [ 1743.214316][T13724] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1743.263346][T13750] usb 7-1: USB disconnect, device number 102 [ 1743.395034][T13724] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1743.405332][T13724] usb 2-1: no configurations [ 1743.410388][T13724] usb 2-1: can't read configurations, error -22 [ 1743.418235][T13724] usb usb2-port1: attempt power cycle [ 1743.784496][T13724] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1743.855560][T13724] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1743.941040][T13724] usb 2-1: no configurations [ 1743.963889][T13724] usb 2-1: can't read configurations, error -22 [ 1744.094509][T13724] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1744.148573][T13724] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1744.441319][T13724] usb 2-1: no configurations [ 1744.471090][T13724] usb 2-1: can't read configurations, error -22 [ 1744.523343][T13724] usb usb2-port1: unable to enumerate USB device [ 1744.996760][T21731] jffs2: notice: (21731) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 2 orphan) found. [ 1745.031372][T21736] loop4: detected capacity change from 0 to 7 [ 1745.904378][T21736] Dev loop4: unable to read RDB block 7 [ 1745.922462][T21736] loop4: unable to read partition table [ 1745.940893][T21736] loop4: partition table beyond EOD, truncated [ 1746.046300][T21736] loop_reread_partitions: partition scan of loop4 (~h"+x|Q` ) failed (rc=-5) [ 1746.058759][T21747] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4404'. [ 1746.208856][T10189] Bluetooth: hci3: Frame reassembly failed (-84) [ 1746.376009][T21758] bond4: entered promiscuous mode [ 1746.385123][T21758] bond4: entered allmulticast mode [ 1746.391866][T21758] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1748.257977][T11126] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1748.267401][ T4915] Bluetooth: hci3: command 0xfc11 tx timeout [ 1748.390715][T20945] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1748.745467][T20945] usb 1-1: Using ep0 maxpacket: 8 [ 1748.753156][T20945] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1748.775679][T20945] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1748.785905][T20945] usb 1-1: config 0 has no interface number 0 [ 1748.795651][T20945] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1748.812090][T21793] bond5: Removing last arp target with arp_interval on [ 1748.819035][T20945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1748.832199][T21793] bond5: entered promiscuous mode [ 1748.846446][T21793] bond5: entered allmulticast mode [ 1748.859897][T20945] usb 1-1: config 0 descriptor?? [ 1748.897494][T20945] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 1748.930770][T21793] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1749.103325][T13724] usb 1-1: USB disconnect, device number 15 [ 1749.135576][T21805] loop2: detected capacity change from 0 to 2640 [ 1749.145774][T21805] buffer_io_error: 320 callbacks suppressed [ 1749.145788][T21805] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 1749.161560][T21805] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 1749.170956][T21805] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 1749.180237][T21805] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 1749.189420][T21805] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 1749.198777][T21805] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 1749.208015][T21805] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 1749.217314][T21805] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 1749.226497][T21805] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 1749.235685][T21805] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 1750.134447][T20945] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1750.306006][T20945] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1750.339591][ T4915] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1750.361559][ T4915] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1750.373308][T13750] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1750.383103][ T4915] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1750.395763][ T4915] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1750.403907][ T4915] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1750.415255][T20945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1750.439658][T20945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1750.453075][T20945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.476035][T20945] usb 5-1: config 0 descriptor?? [ 1750.564301][T10002] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1750.572913][T13750] usb 1-1: device descriptor read/64, error -71 [ 1750.692590][T21838] jffs2: notice: (21838) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 2 orphan) found. [ 1750.878918][T10002] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1750.891102][T10002] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1750.915834][T10002] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1750.931944][T10002] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.934369][T13750] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1750.965607][T10002] usb 7-1: config 0 descriptor?? [ 1751.087601][T13750] usb 1-1: device descriptor read/64, error -71 [ 1751.133592][T20945] usb 5-1: string descriptor 0 read error: -71 [ 1751.143770][T20945] uclogic 0003:256C:006D.0091: failed retrieving string descriptor #200: -71 [ 1751.155769][T20945] uclogic 0003:256C:006D.0091: failed retrieving pen parameters: -71 [ 1751.166266][T20945] uclogic 0003:256C:006D.0091: failed probing pen v2 parameters: -71 [ 1751.175429][T21825] bridge0: port 1(bridge_slave_0) entered blocking state [ 1751.175514][T21825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1751.175626][T21825] bridge_slave_0: entered allmulticast mode [ 1751.176957][T21825] bridge_slave_0: entered promiscuous mode [ 1751.185520][T20945] uclogic 0003:256C:006D.0091: failed probing parameters: -71 [ 1751.193694][T21825] bridge0: port 2(bridge_slave_1) entered blocking state [ 1751.205587][T13750] usb usb1-port1: attempt power cycle [ 1751.227073][T21825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1751.230695][T20945] uclogic 0003:256C:006D.0091: probe with driver uclogic failed with error -71 [ 1751.235093][T21825] bridge_slave_1: entered allmulticast mode [ 1751.252804][T21825] bridge_slave_1: entered promiscuous mode [ 1751.267075][T20945] usb 5-1: USB disconnect, device number 2 [ 1751.309175][T21825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1751.323378][T21825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1751.355892][T21825] team0: Port device team_slave_0 added [ 1751.364482][T21825] team0: Port device team_slave_1 added [ 1751.389991][T21825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1751.397739][T21825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1751.426670][T21825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1751.435146][T10002] usbhid 7-1:0.0: can't add hid device: -71 [ 1751.440922][T21825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1751.448922][T10002] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1751.452342][T21825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1751.452368][T21825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1751.482610][T10002] usb 7-1: USB disconnect, device number 103 [ 1751.559309][T21825] hsr_slave_0: entered promiscuous mode [ 1751.567090][T21825] hsr_slave_1: entered promiscuous mode [ 1751.573800][T21825] debugfs: 'hsr0' already exists in 'hsr' [ 1751.580184][T21825] Cannot create hsr debugfs directory [ 1751.584280][T13750] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1751.617692][T13750] usb 1-1: device descriptor read/8, error -71 [ 1751.864549][T13750] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1751.895742][T13750] usb 1-1: device descriptor read/8, error -71 [ 1751.960015][T21861] loop2: detected capacity change from 0 to 2640 [ 1752.037825][T13750] usb usb1-port1: unable to enumerate USB device [ 1752.493252][ T4915] Bluetooth: hci3: command tx timeout [ 1753.345167][T13732] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1754.576330][ T4915] Bluetooth: hci3: command tx timeout [ 1754.894336][T13732] usb 7-1: Using ep0 maxpacket: 8 [ 1754.903669][T13732] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1754.925774][T13732] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1754.937791][T13732] usb 7-1: config 0 has no interface number 0 [ 1754.960928][T13732] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1754.996740][T21825] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1755.014576][T13732] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1755.032428][T21825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1755.042870][T13732] usb 7-1: config 0 descriptor?? [ 1755.054946][T13724] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1755.066037][T13732] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 1755.080166][T21825] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1755.237775][T13724] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1755.250456][T13724] usb 1-1: config 0 has no interfaces? [ 1755.261862][T13724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1755.319548][T13724] usb 1-1: config 0 descriptor?? [ 1755.326911][T13732] usb 7-1: USB disconnect, device number 104 [ 1755.584987][T13732] usb 1-1: USB disconnect, device number 20 [ 1755.975816][T21825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1756.050645][T21825] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1756.090003][T21825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1756.129403][T21825] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1756.156782][T21825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1756.194306][T13726] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1756.235645][T21893] bond7: Removing last arp target with arp_interval on [ 1756.256828][T21893] bond7: entered promiscuous mode [ 1756.277946][T21893] bond7: entered allmulticast mode [ 1756.302148][T21893] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1756.376787][T13726] usb 1-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00 [ 1756.425719][T13726] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1756.428030][T21910] futex_wake_op: syz.6.4448 tries to shift op by 144; fix this program [ 1756.473801][T13726] usb 1-1: config 1 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 10 [ 1756.483035][T21910] tmpfs: Bad value for 'huge' [ 1756.509123][T21896] NILFS (nullb0): couldn't find nilfs on the device [ 1756.529956][T13726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.532083][T21825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1756.546190][T13726] usb 1-1: Product: syz [ 1756.559286][T13726] usb 1-1: Manufacturer: syz [ 1756.607635][T13726] usb 1-1: SerialNumber: syz [ 1756.639664][T13726] whiteheat 1-1:1.0: required endpoints missing [ 1756.644914][ T4915] Bluetooth: hci3: command tx timeout [ 1756.670907][T21825] 8021q: adding VLAN 0 to HW filter on device team0 [ 1756.692239][ T7261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1756.700079][ T7261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1756.756351][T11192] bridge0: port 2(bridge_slave_1) entered blocking state [ 1756.764255][T11192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1756.838837][ T5688] usb 1-1: USB disconnect, device number 21 [ 1757.849455][T21929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4452'. [ 1757.860195][T21929] syz_tun: left allmulticast mode [ 1757.865892][T21929] syz_tun: left promiscuous mode [ 1757.871680][T21929] bridge0: port 3(syz_tun) entered disabled state [ 1757.881019][T21929] bridge_slave_1: left allmulticast mode [ 1757.887532][T21929] bridge_slave_1: left promiscuous mode [ 1757.893859][T21929] bridge0: port 2(bridge_slave_1) entered disabled state [ 1757.903991][T21929] bridge_slave_0: left allmulticast mode [ 1757.910770][T21929] bridge_slave_0: left promiscuous mode [ 1757.917352][T21929] bridge0: port 1(bridge_slave_0) entered disabled state [ 1758.724713][ T4915] Bluetooth: hci3: command tx timeout [ 1758.810677][T21825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1760.075305][T13732] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1760.278738][T13732] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1760.304025][T13732] usb 5-1: config 0 has no interfaces? [ 1760.328312][T13732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.464112][T13732] usb 5-1: config 0 descriptor?? [ 1760.781743][T13724] usb 5-1: USB disconnect, device number 3 [ 1761.076785][T21825] veth0_vlan: entered promiscuous mode [ 1761.121244][T21825] veth1_vlan: entered promiscuous mode [ 1761.194928][T21983] NILFS (nullb0): couldn't find nilfs on the device [ 1761.213721][T21825] veth0_macvtap: entered promiscuous mode [ 1761.232549][T21825] veth1_macvtap: entered promiscuous mode [ 1761.247434][T21825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1761.263068][T21825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1761.315760][T11192] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.352298][T11192] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.363099][T13724] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1761.406555][T11192] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.427251][T11192] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.535029][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1761.549148][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1761.560386][T13724] usb 5-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00 [ 1761.573277][T13724] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1761.586990][T13724] usb 5-1: config 1 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 10 [ 1761.593484][T11192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1761.613057][T11192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1761.613506][T13724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.631045][T13724] usb 5-1: Product: syz [ 1761.640337][T13724] usb 5-1: Manufacturer: syz [ 1761.645687][T13724] usb 5-1: SerialNumber: syz [ 1761.676005][T13724] whiteheat 5-1:1.0: required endpoints missing [ 1762.347725][T13724] usb 5-1: USB disconnect, device number 4 [ 1763.127104][T12401] block nbd0: Possible stuck request ffff8880280c6900: control (read@0,1024B). Runtime 120 seconds [ 1763.156140][T12401] block nbd0: Possible stuck request ffff8880280c6ac0: control (read@1024,1024B). Runtime 120 seconds [ 1763.231819][T12401] block nbd0: Possible stuck request ffff8880280c6c80: control (read@2048,1024B). Runtime 120 seconds [ 1763.298632][T12401] block nbd0: Possible stuck request ffff8880280c6e40: control (read@3072,1024B). Runtime 120 seconds [ 1763.739477][T22006] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4472'. [ 1764.424833][T13732] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 1764.618543][T13732] usb 1-1: not running at top speed; connect to a high speed hub [ 1764.639720][T13732] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1764.724465][T13732] usb 1-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 1764.736244][T13724] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1764.746704][T13732] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1764.774212][T13732] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 1764.796018][T13732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.817981][T13732] usb 1-1: config 0 descriptor?? [ 1764.847000][T22022] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4479'. [ 1764.848243][T13732] uvcvideo 1-1:0.0: Found UVC 9.00 device (046d:0825) [ 1764.904742][T13724] usb 5-1: Using ep0 maxpacket: 32 [ 1764.911242][T13724] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1764.924888][T13724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.933791][T13724] usb 5-1: Product: syz [ 1764.939194][T13724] usb 5-1: Manufacturer: syz [ 1764.944289][T13724] usb 5-1: SerialNumber: syz [ 1764.956129][T13724] usb 5-1: config 0 descriptor?? [ 1764.970146][T13724] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1764.978613][T13724] dvb-usb: bulk message failed: -22 (4/0) [ 1764.985347][T13724] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1764.997060][T13724] dvb-usb: bulk message failed: -22 (5/0) [ 1765.003445][T13724] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1765.018707][T13724] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1765.029712][T13724] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1765.038669][T13724] usb 5-1: media controller created [ 1765.074752][T13724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1765.110555][T13724] usb 5-1: selecting invalid altsetting 3 [ 1765.117627][T13724] ttusb2: set interface to alts=3 failed [ 1765.163436][T13724] DVB: Unable to find symbol tda10086_attach() [ 1765.176163][T13724] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1765.187806][T22018] dvb-usb: bulk message failed: -22 (7/0) [ 1765.197171][T22018] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1765.209761][T13724] dvb-usb: bulk message failed: -22 (4/0) [ 1765.216554][T13724] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1765.228578][T22018] ttusb2: i2c transfer failed. [ 1765.236439][T13724] dvb-usb: bulk message failed: -22 (5/0) [ 1765.467659][T13732] uvcvideo 1-1:0.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1765.478886][T13724] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1765.490516][T13724] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1765.500454][T13732] uvcvideo 1-1:0.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 48). [ 1765.510636][T13732] uvcvideo 1-1:0.1: Failed to initialize the device (-71). [ 1765.526610][T13724] usb 5-1: USB disconnect, device number 5 [ 1765.541678][T13732] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -71 [ 1765.586845][T13732] usb 1-1: USB disconnect, device number 22 [ 1765.636574][T13724] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1765.687239][ T8688] block nbd1: Possible stuck request ffff888028120000: control (read@0,1024B). Runtime 120 seconds [ 1766.274220][T13724] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1766.349370][T22043] loop4: detected capacity change from 0 to 7 [ 1766.365592][T22045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4486'. [ 1766.372082][T22043] Dev loop4: unable to read RDB block 7 [ 1766.385985][T22043] loop4: AHDI p2 p3 [ 1766.390310][T22043] loop4: partition table partially beyond EOD, truncated [ 1766.399324][T22043] loop4: p3 start 335544320 is beyond EOD, truncated [ 1766.435235][T13724] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1766.451065][T13724] usb 5-1: config 0 has no interfaces? [ 1766.460640][T13724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.492613][T13724] usb 5-1: config 0 descriptor?? [ 1766.786301][T13741] usb 5-1: USB disconnect, device number 6 [ 1766.884952][T11126] Bluetooth: hci0: command 0xfc11 tx timeout [ 1766.892480][ T4915] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1767.389860][T13741] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1767.669775][T13741] usb 5-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00 [ 1767.681151][T13741] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1767.692452][T13741] usb 5-1: config 1 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 10 [ 1767.708448][T13741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.714422][T13726] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1767.717464][T13741] usb 5-1: Product: syz [ 1767.730229][T13741] usb 5-1: Manufacturer: syz [ 1767.735329][T13741] usb 5-1: SerialNumber: syz [ 1767.744510][T13741] whiteheat 5-1:1.0: required endpoints missing [ 1767.886386][T13726] usb 1-1: Using ep0 maxpacket: 32 [ 1767.892663][T13726] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1767.905693][T13726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.914825][T13726] usb 1-1: Product: syz [ 1767.919391][T13726] usb 1-1: Manufacturer: syz [ 1767.924587][T13726] usb 1-1: SerialNumber: syz [ 1767.931239][T13726] usb 1-1: config 0 descriptor?? [ 1767.940286][T13726] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1767.948865][T13726] dvb-usb: bulk message failed: -22 (4/0) [ 1767.952461][T14988] usb 5-1: USB disconnect, device number 7 [ 1767.955231][T13726] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1767.975908][T13726] dvb-usb: bulk message failed: -22 (5/0) [ 1767.982959][T13726] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1767.998633][T13726] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1768.009651][T13726] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1768.018952][T13726] usb 1-1: media controller created [ 1768.029926][T13726] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1768.045429][T13726] usb 1-1: selecting invalid altsetting 3 [ 1768.051767][T13726] ttusb2: set interface to alts=3 failed [ 1768.081074][T13726] DVB: Unable to find symbol tda10086_attach() [ 1768.088632][T13726] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1768.101787][T13726] dvb-usb: bulk message failed: -22 (4/0) [ 1768.108394][T13726] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1768.122371][T13726] dvb-usb: bulk message failed: -22 (5/0) [ 1768.131909][T13726] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1768.143373][T13726] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1768.153715][T22059] dvb-usb: bulk message failed: -22 (7/0) [ 1768.176063][T22059] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1768.188990][T22059] ttusb2: i2c transfer failed. [ 1768.201817][T14988] usb 1-1: USB disconnect, device number 23 [ 1768.223702][T14988] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1768.365181][T13741] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1768.386291][T22065] bond8: Removing last arp target with arp_interval on [ 1768.395860][T22065] bond8: entered promiscuous mode [ 1768.401479][T22065] bond8: entered allmulticast mode [ 1768.408766][T22065] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1768.527526][T13741] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1768.541435][T13741] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1768.576565][T13741] usb 6-1: config 0 descriptor?? [ 1768.668816][T13741] cp210x 6-1:0.0: cp210x converter detected [ 1768.774805][T13724] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1768.944948][T22063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1769.004651][T13724] usb 5-1: not running at top speed; connect to a high speed hub [ 1769.029880][T13724] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1769.045377][T22063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1769.057918][T22079] syzkaller0: entered promiscuous mode [ 1769.065572][T13724] usb 5-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 1769.073111][T22079] syzkaller0: entered allmulticast mode [ 1769.085135][T13724] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1769.088100][T13741] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1769.105452][T13724] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 1769.116246][T13724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1769.142339][T13741] cp210x 6-1:0.0: querying part number failed [ 1769.146573][T13724] usb 5-1: config 0 descriptor?? [ 1769.155899][T13741] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1769.177478][T13724] uvcvideo 5-1:0.0: Found UVC 9.00 device (046d:0825) [ 1769.188132][T22079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4499'. [ 1769.573061][T13724] uvcvideo 5-1:0.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1769.654303][T13732] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1769.785982][T13724] uvcvideo 5-1:0.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 48). [ 1769.797502][T13724] uvcvideo 5-1:0.1: Failed to initialize the device (-71). [ 1769.820847][T13724] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -71 [ 1769.829951][T13732] usb 2-1: Using ep0 maxpacket: 32 [ 1769.837599][T13732] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1769.850386][T13724] usb 5-1: USB disconnect, device number 8 [ 1769.857284][T13732] usb 2-1: config 0 has no interfaces? [ 1769.868925][T13732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.877943][T13732] usb 2-1: Product: syz [ 1769.882502][T13732] usb 2-1: Manufacturer: syz [ 1769.887664][T13732] usb 2-1: SerialNumber: syz [ 1769.895206][T13732] usb 2-1: config 0 descriptor?? [ 1770.040916][T22089] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4503'. [ 1770.076819][ T7261] Bluetooth: hci0: Frame reassembly failed (-84) [ 1770.090165][ T7261] Bluetooth: hci0: Frame reassembly failed (-84) [ 1770.176893][T13724] hid_parser_main: 4007 callbacks suppressed [ 1770.177715][T13724] hid-generic 0000:0000:0000.0092: unknown main item tag 0x0 [ 1770.205526][T13724] hid-generic 0000:0000:0000.0092: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1770.352954][T22098] futex_wake_op: syz.4.4506 tries to shift op by 144; fix this program [ 1770.369368][T22098] tmpfs: Bad value for 'huge' [ 1770.654599][T13724] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1770.816199][T13724] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1770.826744][T13724] usb 5-1: config 0 has no interfaces? [ 1770.832767][T13724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.843323][T13724] usb 5-1: config 0 descriptor?? [ 1771.057129][T20945] usb 5-1: USB disconnect, device number 9 [ 1771.137514][T13724] usb 6-1: USB disconnect, device number 79 [ 1771.180034][T13724] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1771.203762][T13724] cp210x 6-1:0.0: device disconnected [ 1771.934272][T20945] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1771.963067][T22115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4510'. [ 1772.087946][ T4915] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1772.096683][T11126] Bluetooth: hci0: command 0xfc11 tx timeout [ 1772.115593][T20945] usb 5-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00 [ 1772.127093][T20945] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1772.138457][T20945] usb 5-1: config 1 interface 0 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 10 [ 1772.157851][T20945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.177838][T20945] usb 5-1: Product: syz [ 1772.182642][T20945] usb 5-1: Manufacturer: syz [ 1772.187936][T20945] usb 5-1: SerialNumber: syz [ 1772.199872][T20945] whiteheat 5-1:1.0: required endpoints missing [ 1772.254252][T13741] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1772.404892][T13741] usb 1-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 1772.408070][T13732] usb 2-1: USB disconnect, device number 11 [ 1772.417966][T20945] usb 5-1: USB disconnect, device number 10 [ 1772.436688][T13741] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1772.462353][T13741] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1772.515981][T13741] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.750699][T13732] usb 1-1: USB disconnect, device number 24 [ 1773.796161][T22137] NILFS (nullb0): couldn't find nilfs on the device [ 1774.019847][T20945] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 1774.097147][T20945] hid-generic 0000:0000:0000.0093: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1777.815113][T20945] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1778.156168][T20945] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1778.187776][T20945] usb 1-1: config 0 has no interfaces? [ 1778.201715][T13732] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1778.207200][T20945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.300384][T20945] usb 1-1: config 0 descriptor?? [ 1778.344594][T13732] usb 5-1: device descriptor read/64, error -71 [ 1778.525000][T13724] usb 1-1: USB disconnect, device number 25 [ 1778.544634][T13729] usb 7-1: new full-speed USB device number 105 using dummy_hcd [ 1778.604283][T13732] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1778.839693][T13729] usb 7-1: not running at top speed; connect to a high speed hub [ 1779.054263][T13724] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1779.084907][T13732] usb 5-1: device descriptor read/64, error -71 [ 1779.490945][T13729] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1779.506175][T13729] usb 7-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 1779.515819][T13729] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1779.527037][T13729] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 1779.537933][T13729] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.549013][T13729] usb 7-1: config 0 descriptor?? [ 1779.558304][T13729] uvcvideo 7-1:0.0: Found UVC 9.00 device (046d:0825) [ 1779.576360][T22189] loop4: detected capacity change from 0 to 7 [ 1779.601427][T22189] Dev loop4: unable to read RDB block 7 [ 1779.605237][T13732] usb usb5-port1: attempt power cycle [ 1779.610791][T22189] loop4: AHDI p2 p3 [ 1779.618908][T22189] loop4: partition table partially beyond EOD, truncated [ 1779.628944][T22189] loop4: p3 start 335544320 is beyond EOD, truncated [ 1779.666125][T13724] usb 1-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00 [ 1779.691804][T13724] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1779.703487][T13724] usb 1-1: config 1 interface 0 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 10 [ 1779.737724][T13724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.757312][T13724] usb 1-1: Product: syz [ 1779.809030][T13724] usb 1-1: Manufacturer: syz [ 1779.814831][T13724] usb 1-1: SerialNumber: syz [ 1779.827319][T13724] usb 1-1: can't set config #1, error -71 [ 1779.836983][T13724] usb 1-1: USB disconnect, device number 26 [ 1779.855974][T22194] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4537'. [ 1779.866320][T22194] bridge_slave_1: left allmulticast mode [ 1779.872579][T22194] bridge_slave_1: left promiscuous mode [ 1779.887730][T22194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1779.929872][T22194] bridge_slave_0: left allmulticast mode [ 1779.940447][T10325] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 1779.953192][T10325] hid-generic 0000:0000:0000.0094: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1779.964022][T13732] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1779.986788][T22194] bridge_slave_0: left promiscuous mode [ 1780.015077][T22194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1780.020547][T13729] uvcvideo 7-1:0.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1780.184266][T13732] usb 5-1: device not accepting address 13, error -71 [ 1780.235348][T13729] uvcvideo 7-1:0.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 48). [ 1780.251629][T13729] uvcvideo 7-1:0.1: Failed to initialize the device (-71). [ 1780.262916][T13729] uvcvideo 7-1:0.0: probe with driver uvcvideo failed with error -71 [ 1780.288341][T13729] usb 7-1: USB disconnect, device number 105 [ 1780.295098][T13724] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1780.959901][T13724] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1781.211439][T13724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.241283][T13724] usb 1-1: config 0 descriptor?? [ 1781.266870][T13724] cp210x 1-1:0.0: cp210x converter detected [ 1781.662154][T22201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1781.810316][T22201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1781.927823][T13724] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1781.972154][T13724] cp210x 1-1:0.0: querying part number failed [ 1782.085949][T13724] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1782.226831][T22216] netlink: 'syz.6.4547': attribute type 1 has an invalid length. [ 1782.235424][T22216] netlink: 232 bytes leftover after parsing attributes in process `syz.6.4547'. [ 1782.245398][T22216] netlink: 'syz.6.4547': attribute type 1 has an invalid length. [ 1783.581048][T22225] bond3: Removing last arp target with arp_interval on [ 1783.635774][T22225] bond3: entered promiscuous mode [ 1783.668771][T22225] bond3: entered allmulticast mode [ 1783.699303][T22225] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1784.164930][T14988] usb 1-1: USB disconnect, device number 27 [ 1784.210841][T14988] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1784.319321][T14988] cp210x 1-1:0.0: device disconnected [ 1784.523663][T22245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4554'. [ 1784.557502][T22245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4554'. [ 1784.747045][T22252] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4555'. [ 1784.798123][T14988] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 1784.883934][T14988] hid-generic 0000:0000:0000.0095: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1785.214382][T13732] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 1785.264215][T13724] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1785.385333][T13732] usb 2-1: not running at top speed; connect to a high speed hub [ 1785.399453][T13732] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1785.422323][T13732] usb 2-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 1785.436379][T13724] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1785.453428][T13732] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1785.467957][T13724] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1785.484790][T13732] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 1785.505019][T13724] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1785.516567][T13732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.529371][T13724] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1785.551876][T13732] usb 2-1: config 0 descriptor?? [ 1785.567306][T13724] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1785.589668][T13732] uvcvideo 2-1:0.0: Found UVC 9.00 device (046d:0825) [ 1785.599893][T13724] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1785.618825][T13724] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1785.654353][T13724] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1785.686745][T13724] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1785.710745][T13724] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1785.737353][T13724] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1785.758026][T13724] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1785.774579][T13724] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1785.802110][T13724] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1785.819953][T13724] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1785.846089][T13724] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1785.889505][T13724] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1785.917812][T13724] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1786.024260][T13732] uvcvideo 2-1:0.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1786.037453][T13724] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1786.050832][T13724] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1786.063182][T13724] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1786.077326][T13724] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1786.093457][T13724] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1786.094135][T22279] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4564'. [ 1786.102200][T13724] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1786.168219][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1786.299968][T13732] uvcvideo 2-1:0.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 48). [ 1786.700275][T13724] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1787.210122][T13732] uvcvideo 2-1:0.1: Failed to initialize the device (-71). [ 1787.218357][T13724] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1787.234544][T13724] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1787.248460][T13724] usb 5-1: Product: syz [ 1787.262379][T13724] usb 5-1: Manufacturer: syz [ 1787.284370][T13724] usb 5-1: SerialNumber: syz [ 1787.293370][T13724] usb 5-1: config 0 descriptor?? [ 1787.306907][T13724] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1787.318646][T13732] uvcvideo 2-1:0.0: probe with driver uvcvideo failed with error -71 [ 1787.341918][T13732] usb 2-1: USB disconnect, device number 12 [ 1787.460956][T22290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4566'. [ 1787.503190][T22290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4566'. [ 1787.540722][T20945] usb 5-1: USB disconnect, device number 15 [ 1787.562859][T20945] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1787.824316][T13732] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1787.900579][T22298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4569'. [ 1788.076052][T13732] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1788.151988][T13732] usb 2-1: config 0 has no interfaces? [ 1788.212158][T13732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.286392][T13732] usb 2-1: config 0 descriptor?? [ 1788.778652][T13724] usb 2-1: USB disconnect, device number 13 [ 1789.452801][ T4915] Bluetooth: hci0: command 0xfc11 tx timeout [ 1789.484497][T11126] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1789.744348][T13724] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1790.065535][T13724] usb 2-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00 [ 1790.097197][T13724] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1790.118013][T13724] usb 2-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 10 [ 1790.147125][T13724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.157449][ T5688] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1790.266358][T13724] usb 2-1: Product: syz [ 1790.282529][T13724] usb 2-1: Manufacturer: syz [ 1790.291496][T13724] usb 2-1: SerialNumber: syz [ 1790.595343][T22320] syzkaller0: entered promiscuous mode [ 1790.604243][ T5688] usb 6-1: device descriptor read/64, error -71 [ 1790.617973][T13724] usb 2-1: can't set config #1, error -71 [ 1790.631503][T13724] usb 2-1: USB disconnect, device number 14 [ 1790.679671][T22320] syzkaller0: entered allmulticast mode [ 1790.780556][T22328] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4578'. [ 1790.821756][T22320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4575'. [ 1790.822090][T22328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4578'. [ 1790.854333][ T5688] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1790.994271][ T5688] usb 6-1: device descriptor read/64, error -71 [ 1791.114464][T13724] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 1791.123260][ T5688] usb usb6-port1: attempt power cycle [ 1791.145645][T22334] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4580'. [ 1791.316580][T13724] usb 2-1: not running at top speed; connect to a high speed hub [ 1791.327564][T13724] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1791.360352][T13724] usb 2-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 1791.371250][T13724] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1791.404727][T13724] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 1791.446194][T13724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.494717][ T5688] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1791.558155][ T5688] usb 6-1: device descriptor read/8, error -71 [ 1791.582626][T13724] usb 2-1: config 0 descriptor?? [ 1791.697468][T13724] uvcvideo 2-1:0.0: Found UVC 9.00 device (046d:0825) [ 1791.744952][T14988] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 1791.894403][T22344] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4584'. [ 1791.929336][T14988] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1791.974287][T13732] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1791.993213][T14988] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 1792.097998][T14988] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1792.133746][T13724] uvcvideo 2-1:0.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1792.164065][T14988] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1792.254987][T10190] Bluetooth: hci0: Frame reassembly failed (-84) [ 1792.298642][T14988] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1792.374044][T14988] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1792.450702][T14988] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1792.512678][T14988] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1792.933164][T14988] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1793.388630][T14988] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1793.511478][T12401] block nbd0: Possible stuck request ffff8880280c6900: control (read@0,1024B). Runtime 150 seconds [ 1793.524624][T12401] block nbd0: Possible stuck request ffff8880280c6ac0: control (read@1024,1024B). Runtime 150 seconds [ 1793.525343][T14988] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1793.536879][T12401] block nbd0: Possible stuck request ffff8880280c6c80: control (read@2048,1024B). Runtime 150 seconds [ 1793.556532][T12401] block nbd0: Possible stuck request ffff8880280c6e40: control (read@3072,1024B). Runtime 150 seconds [ 1793.570560][T13724] uvcvideo 2-1:0.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 48). [ 1793.570607][T13724] uvcvideo 2-1:0.1: Failed to initialize the device (-71). [ 1793.594945][T13724] uvcvideo 2-1:0.0: probe with driver uvcvideo failed with error -71 [ 1793.599266][T13724] usb 2-1: USB disconnect, device number 15 [ 1793.657363][T14988] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1793.657416][T14988] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1793.657443][T14988] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1793.662811][T14988] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1793.662857][T14988] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1793.662884][T14988] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1793.664869][T14988] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1793.664921][T14988] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1793.664947][T14988] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1793.668143][T14988] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1793.668169][T14988] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1793.668185][T14988] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1793.668761][ T30] audit: type=1400 audit(1787136660.872:1542): avc: denied { write } for pid=22353 comm="syz.1.4586" name="nodes" dev="configfs" ino=67144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1793.682479][T14988] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1793.682525][T14988] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1793.682797][T14988] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1793.684299][T13732] usb 1-1: Using ep0 maxpacket: 32 [ 1793.684871][T13732] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1793.685769][T13732] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1793.685792][T13732] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1793.685812][T13732] usb 1-1: config 0 has no interface number 0 [ 1793.685843][T13732] usb 1-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1793.694622][T13732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.694650][T13732] usb 1-1: Product: syz [ 1793.694665][T13732] usb 1-1: Manufacturer: syz [ 1793.694681][T13732] usb 1-1: SerialNumber: syz [ 1793.696804][ T30] audit: type=1400 audit(1787136660.902:1543): avc: denied { write } for pid=22353 comm="syz.1.4586" name="nodes" dev="configfs" ino=67144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1793.696938][T13732] usb 1-1: config 0 descriptor?? [ 1793.703064][T14988] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1793.703091][T14988] usb 7-1: Product: syz [ 1793.703107][T14988] usb 7-1: Manufacturer: syz [ 1793.703123][T14988] usb 7-1: SerialNumber: syz [ 1793.715925][T14988] usb 7-1: config 0 descriptor?? [ 1793.766719][T14988] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 1794.185649][T13724] usb 7-1: USB disconnect, device number 106 [ 1794.187582][T13724] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 1794.244510][T11126] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1795.263295][T13724] usb 1-1: USB disconnect, device number 28 [ 1795.284737][T22364] loop4: detected capacity change from 0 to 7 [ 1795.290753][T22364] Dev loop4: unable to read RDB block 7 [ 1795.520214][T22364] loop4: AHDI p2 p3 [ 1795.692770][T22364] loop4: partition table partially beyond EOD, truncated [ 1795.708220][T22366] NILFS (nullb0): couldn't find nilfs on the device [ 1795.732700][T22364] loop4: p3 start 335544320 is beyond EOD, truncated [ 1795.770108][T11179] block nbd1: Possible stuck request ffff888028120000: control (read@0,1024B). Runtime 150 seconds [ 1797.278608][T14988] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1797.307179][ T30] audit: type=1400 audit(1787136664.512:1544): avc: denied { write } for pid=22383 comm="syz.1.4597" name="nodes" dev="configfs" ino=67144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1797.454783][T14988] usb 1-1: device descriptor read/64, error -71 [ 1797.503091][ T30] audit: type=1400 audit(1787136664.612:1545): avc: denied { write } for pid=22383 comm="syz.1.4597" name="nodes" dev="configfs" ino=67144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1797.724270][T14988] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1797.846537][T20945] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 1797.915061][T20945] hid-generic 0000:0000:0000.0096: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1797.929703][T14988] usb 1-1: device descriptor read/64, error -71 [ 1798.068921][T22395] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1798.077900][T14988] usb usb1-port1: attempt power cycle [ 1798.298209][T13729] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1798.316810][T22399] syzkaller0: entered promiscuous mode [ 1798.333031][T22399] syzkaller0: entered allmulticast mode [ 1798.451199][T22402] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4596'. [ 1798.454655][T14988] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1798.463633][T22402] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4596'. [ 1798.480243][T13729] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1798.502841][T13729] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1798.527731][T13729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.561420][T13729] usb 5-1: config 0 descriptor?? [ 1798.566782][T14988] usb 1-1: device descriptor read/8, error -71 [ 1798.589963][T22405] futex_wake_op: syz.1.4602 tries to shift op by 144; fix this program [ 1798.630882][T22405] tmpfs: Bad value for 'huge' [ 1798.874951][T14988] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1798.951701][T14988] usb 1-1: device descriptor read/8, error -71 [ 1799.155757][T14988] usb usb1-port1: unable to enumerate USB device [ 1799.672995][T22417] jffs2: notice: (22417) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 2 orphan) found. [ 1799.907107][T22412] NILFS (nullb0): couldn't find nilfs on the device [ 1801.661889][T14988] usb 5-1: USB disconnect, device number 16 [ 1803.869248][T22455] bond3: Removing last arp target with arp_interval on [ 1803.888023][T13729] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 1803.919121][T13729] hid-generic 0000:0000:0000.0097: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1804.047035][T22455] bond3: entered promiscuous mode [ 1804.064263][T22455] bond3: entered allmulticast mode [ 1804.074537][T22455] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1804.222057][T22472] jffs2: notice: (22472) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 2 orphan) found. [ 1804.492807][T22474] NILFS (nullb0): couldn't find nilfs on the device [ 1806.030554][T22492] netlink: 'syz.6.4622': attribute type 1 has an invalid length. [ 1806.049864][T22492] netlink: 232 bytes leftover after parsing attributes in process `syz.6.4622'. [ 1806.060237][T22492] netlink: 'syz.6.4622': attribute type 1 has an invalid length. [ 1807.159280][T22501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1807.638751][T22508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1809.200410][T22512] bond1: Removing last arp target with arp_interval on [ 1809.240026][T22512] bond1: entered promiscuous mode [ 1809.254403][T22512] bond1: entered allmulticast mode [ 1809.276677][T22512] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1809.318496][T22519] syzkaller0: entered promiscuous mode [ 1809.324943][T22519] syzkaller0: entered allmulticast mode [ 1809.449187][T22526] jffs2: notice: (22526) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 2 orphan) found. [ 1811.957695][ T4915] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1812.009880][ T4915] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1812.072999][ T4915] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1812.319262][ T4915] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1812.331320][ T4915] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1813.273812][T22565] bond2: Removing last arp target with arp_interval on [ 1813.286038][T22565] bond2: entered promiscuous mode [ 1813.291669][T22565] bond2: entered allmulticast mode [ 1813.298755][T22565] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1814.164355][T14988] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1814.314709][T14988] usb 6-1: device descriptor read/64, error -71 [ 1814.729309][T11126] Bluetooth: hci0: command tx timeout [ 1814.914224][T14988] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1815.122412][T22552] bridge0: port 1(bridge_slave_0) entered blocking state [ 1815.131286][T22552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1815.146263][T22552] bridge_slave_0: entered allmulticast mode [ 1815.154879][T14988] usb 6-1: device descriptor read/64, error -71 [ 1815.296253][T14988] usb usb6-port1: attempt power cycle [ 1815.617090][T22552] bridge_slave_0: entered promiscuous mode [ 1815.628948][T22552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1815.636851][T22552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1815.644930][T22552] bridge_slave_1: entered allmulticast mode [ 1816.074692][T22552] bridge_slave_1: entered promiscuous mode [ 1816.084245][T14988] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1816.102824][T22552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1816.116723][T22552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1816.156274][T22552] team0: Port device team_slave_0 added [ 1816.167479][T22552] team0: Port device team_slave_1 added [ 1816.199789][T22552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1816.209673][T22552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1816.239784][T22552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1816.254085][T22552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1816.262677][T22552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1816.292859][T22552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1816.348436][T22552] hsr_slave_0: entered promiscuous mode [ 1816.355514][T22552] hsr_slave_1: entered promiscuous mode [ 1816.362439][T22552] debugfs: 'hsr0' already exists in 'hsr' [ 1816.369188][T22552] Cannot create hsr debugfs directory [ 1816.806288][T11126] Bluetooth: hci0: command tx timeout [ 1816.806411][T14988] usb 6-1: device descriptor read/8, error -71 [ 1816.864269][ T5696] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1817.410535][ T5696] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1817.443017][ T5696] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1817.477032][ T5696] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1817.501873][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.546462][ T5696] usb 1-1: config 0 descriptor?? [ 1818.196853][T22552] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1818.241647][ T5696] usb 1-1: language id specifier not provided by device, defaulting to English [ 1818.243821][T22552] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1818.308526][T22552] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1818.348475][T22552] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1818.398247][T22552] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1818.465165][T22552] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1818.510945][T22552] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1818.565612][T22552] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1818.671417][ T5696] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0098/input/input115 [ 1818.812377][ T5696] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0098/input/input116 [ 1818.856102][T22552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1818.885818][T11126] Bluetooth: hci0: command tx timeout [ 1818.915959][ T5696] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0098/input/input117 [ 1818.932329][T22552] 8021q: adding VLAN 0 to HW filter on device team0 [ 1819.005960][ T7261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1819.013807][ T7261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1819.065704][ T5696] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0098/input/input118 [ 1819.092430][T10948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1819.100282][T10948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1819.161445][ T5696] uclogic 0003:256C:006D.0098: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 1819.259947][ T5696] usb 1-1: USB disconnect, device number 33 [ 1819.345969][T22651] fido_id[22651]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1819.992698][T22655] NILFS (nullb0): couldn't find nilfs on the device [ 1820.974664][T11126] Bluetooth: hci0: command tx timeout [ 1821.077587][T22552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1821.126506][T22679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4667'. [ 1821.163863][T22679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4667'. [ 1821.229768][T22679] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4667'. [ 1821.433447][T22691] nvmet: disable ns before setting buffered_io value. [ 1821.471213][T22691] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1821.505599][T13732] IPVS: starting estimator thread 0... [ 1821.579414][T22552] veth0_vlan: entered promiscuous mode [ 1821.605905][T22552] veth1_vlan: entered promiscuous mode [ 1821.612078][T22694] IPVS: using max 39 ests per chain, 93600 per kthread [ 1821.682092][T22552] veth0_macvtap: entered promiscuous mode [ 1821.701182][T22552] veth1_macvtap: entered promiscuous mode [ 1821.738472][T22552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1821.777894][T22552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1821.818457][ T79] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1821.836866][ T79] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1821.867513][T13732] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 1821.884859][T12888] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1821.964487][ T79] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1821.986888][T10948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1821.999881][T10948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1822.029825][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1822.039167][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1822.054554][T13724] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1822.068169][T13732] usb 5-1: not running at top speed; connect to a high speed hub [ 1822.092561][T13732] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1822.113836][T13732] usb 5-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 1822.123868][T13732] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1822.136176][T13732] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 1822.146475][T13732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1822.196959][T13732] usb 5-1: config 0 descriptor?? [ 1822.208932][T13732] uvcvideo 5-1:0.0: Found UVC 9.00 device (046d:0825) [ 1822.284355][T20945] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1822.294324][T13724] usb 1-1: Using ep0 maxpacket: 32 [ 1822.308346][T13724] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1822.322173][T13724] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1822.332704][T13724] usb 1-1: config 0 has no interface number 0 [ 1822.343741][T13724] usb 1-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1822.363351][T13724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.372318][T13724] usb 1-1: Product: syz [ 1822.377708][T13724] usb 1-1: Manufacturer: syz [ 1822.382796][T13724] usb 1-1: SerialNumber: syz [ 1822.390702][T13724] usb 1-1: config 0 descriptor?? [ 1822.479715][T20945] usb 2-1: device descriptor read/64, error -71 [ 1822.610882][T13732] uvcvideo 5-1:0.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1822.774451][T20945] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1822.825072][T13732] uvcvideo 5-1:0.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 48). [ 1822.849887][T13732] uvcvideo 5-1:0.1: Failed to initialize the device (-71). [ 1822.893258][T13732] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -71 [ 1822.914271][T20945] usb 2-1: device descriptor read/64, error -71 [ 1822.921390][T13732] usb 5-1: USB disconnect, device number 17 [ 1823.048175][T20945] usb usb2-port1: attempt power cycle [ 1823.394235][T20945] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1823.433538][T22716] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4676'. [ 1823.445052][T20945] usb 2-1: device descriptor read/8, error -71 [ 1823.697132][T20945] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1823.748887][T20945] usb 2-1: device descriptor read/8, error -71 [ 1823.876173][T20945] usb usb2-port1: unable to enumerate USB device [ 1823.925613][T10060] block nbd0: Possible stuck request ffff8880280c6900: control (read@0,1024B). Runtime 180 seconds [ 1823.966349][T10060] block nbd0: Possible stuck request ffff8880280c6ac0: control (read@1024,1024B). Runtime 180 seconds [ 1824.010380][T10060] block nbd0: Possible stuck request ffff8880280c6c80: control (read@2048,1024B). Runtime 180 seconds [ 1824.061719][T10060] block nbd0: Possible stuck request ffff8880280c6e40: control (read@3072,1024B). Runtime 180 seconds [ 1824.454522][T22727] netlink: 'syz.6.4679': attribute type 1 has an invalid length. [ 1824.463076][T22727] netlink: 232 bytes leftover after parsing attributes in process `syz.6.4679'. [ 1824.473144][T22727] netlink: 'syz.6.4679': attribute type 1 has an invalid length. [ 1824.972936][T22731] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1825.627699][T13729] usb 1-1: USB disconnect, device number 34 [ 1825.669440][T22737] nvmet: disable ns before setting buffered_io value. [ 1825.678803][T22737] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1825.857811][T11179] block nbd1: Possible stuck request ffff888028120000: control (read@0,1024B). Runtime 180 seconds [ 1826.087553][T13729] IPVS: starting estimator thread 0... [ 1826.115022][T13732] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1826.184918][T22748] IPVS: using max 47 ests per chain, 112800 per kthread [ 1826.240654][T22752] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4688'. [ 1826.254720][T20945] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1826.365291][T14988] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1826.380698][T13732] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 1826.392630][T13732] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1826.403279][T13732] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1826.414220][T20945] usb 1-1: Using ep0 maxpacket: 32 [ 1826.416117][T20945] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1826.420422][T13732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.431906][T20945] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1826.443922][T13732] dln2 2-1:1.0: USB write failed: -90 [ 1826.455079][T13732] dln2 2-1:1.0: failed to initialize hardware [ 1826.466503][T13732] dln2 2-1:1.0: probe with driver dln2 failed with error -90 [ 1826.470055][T20945] usb 1-1: config 0 has no interface number 0 [ 1826.500611][T20945] usb 1-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1826.534286][T20945] usb 1-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1826.554318][T20945] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1826.562481][T14988] usb 5-1: not running at top speed; connect to a high speed hub [ 1826.571072][T14988] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1826.588049][T20945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.600718][T14988] usb 5-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 1826.611313][T20945] usb 1-1: Product: syz [ 1826.624914][T20945] usb 1-1: Manufacturer: syz [ 1826.629982][T14988] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1826.641097][T20945] usb 1-1: SerialNumber: syz [ 1826.656456][T14988] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 1826.667422][T20945] usb 1-1: config 0 descriptor?? [ 1826.677058][T14988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.689706][T20945] f81534 1-1:0.12: unsupported endpoint max packet size [ 1826.698412][T14988] usb 5-1: config 0 descriptor?? [ 1826.719283][T14988] uvcvideo 5-1:0.0: Found UVC 9.00 device (046d:0825) [ 1826.877461][T13732] usb 2-1: USB disconnect, device number 20 [ 1827.135340][T14988] uvcvideo 5-1:0.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1827.564742][T13724] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1827.653473][T14988] uvcvideo 5-1:0.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 48). [ 1827.675371][T14988] uvcvideo 5-1:0.1: Failed to initialize the device (-71). [ 1827.692927][T14988] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -71 [ 1827.707054][T14988] usb 5-1: USB disconnect, device number 18 [ 1827.727630][T13724] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1827.745611][T13724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.757452][T13724] usb 6-1: config 0 descriptor?? [ 1827.768823][T13724] cp210x 6-1:0.0: cp210x converter detected [ 1827.954366][T20945] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1827.979145][T22771] netlink: 'syz.4.4693': attribute type 1 has an invalid length. [ 1827.988314][T22771] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4693'. [ 1827.998645][T22771] netlink: 'syz.4.4693': attribute type 1 has an invalid length. [ 1828.059773][T13724] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1828.146021][T20945] usb 2-1: device descriptor read/64, error -71 [ 1828.831541][T20945] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1828.863774][T13724] cp210x 6-1:0.0: querying part number failed [ 1828.872358][T13724] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1828.975191][T22779] nvmet: disable ns before setting buffered_io value. [ 1828.991149][T22779] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1829.005104][T20945] usb 2-1: device descriptor read/64, error -71 [ 1829.114512][T20945] usb usb2-port1: attempt power cycle [ 1829.206624][T13724] usb 1-1: USB disconnect, device number 35 [ 1829.340092][T22794] futex_wake_op: syz.6.4701 tries to shift op by 144; fix this program [ 1829.358141][T22794] tmpfs: Bad value for 'huge' [ 1829.510515][T20945] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1829.536103][T20945] usb 2-1: device descriptor read/8, error -71 [ 1829.634317][T13724] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1829.776724][T20945] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1829.847532][T20945] usb 2-1: device descriptor read/8, error -71 [ 1830.007453][T20945] usb usb2-port1: unable to enumerate USB device [ 1830.186534][T22802] futex_wake_op: syz.4.4703 tries to shift op by 144; fix this program [ 1830.236465][T22802] tmpfs: Bad value for 'huge' [ 1830.567882][T13750] usb 6-1: USB disconnect, device number 88 [ 1830.587694][T13750] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1830.611326][T13750] cp210x 6-1:0.0: device disconnected [ 1830.669206][T22811] nvmet: disable ns before setting buffered_io value. [ 1830.676806][T13724] usb 1-1: Using ep0 maxpacket: 8 [ 1830.683718][T13724] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1830.698218][T22811] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1830.715261][T13724] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1830.731644][T13724] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1830.763419][T13724] usb 1-1: config 0 has no interface number 0 [ 1830.784635][T13726] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1830.800892][T13724] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1830.824808][T13724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.853367][T13724] usb 1-1: config 0 descriptor?? [ 1830.870158][T22813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1830.900320][T13724] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 1831.025253][T13726] usb 5-1: not running at top speed; connect to a high speed hub [ 1831.036511][T13726] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1831.258796][T13726] usb 5-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 1831.276842][T13750] usb 1-1: USB disconnect, device number 36 [ 1831.298068][T13726] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1831.335541][T13726] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 1831.370774][T13726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1831.408748][T13726] usb 5-1: config 0 descriptor?? [ 1831.441208][T13726] uvcvideo 5-1:0.0: Found UVC 9.00 device (046d:0825) [ 1831.707851][T22828] futex_wake_op: syz.1.4712 tries to shift op by 144; fix this program [ 1831.787957][T22829] tmpfs: Bad value for 'huge' [ 1831.854666][T13726] uvcvideo 5-1:0.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1831.894649][T22833] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4715'. [ 1831.903700][T22838] futex_wake_op: syz.1.4716 tries to shift op by 144; fix this program [ 1832.057756][T13726] uvcvideo 5-1:0.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 48). [ 1832.298714][T22838] tmpfs: Bad value for 'huge' [ 1832.694359][T13750] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 1832.924362][T13750] usb 7-1: device descriptor read/64, error -71 [ 1832.939810][T13726] uvcvideo 5-1:0.1: Failed to initialize the device (-71). [ 1833.194440][T13750] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 1833.414696][T13750] usb 7-1: device descriptor read/64, error -71 [ 1833.614456][T13750] usb usb7-port1: attempt power cycle [ 1834.010738][T13726] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -71 [ 1834.034287][T13726] usb 5-1: USB disconnect, device number 19 [ 1834.106162][T13750] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 1834.730804][T13750] usb 7-1: device descriptor read/8, error -71 [ 1835.196527][T13750] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 1835.275951][T13750] usb 7-1: device descriptor read/8, error -71 [ 1835.404699][T13750] usb usb7-port1: unable to enumerate USB device [ 1835.874819][T13741] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1835.883478][T13750] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 1835.905223][T22878] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4728'. [ 1836.057548][T13741] usb 2-1: Using ep0 maxpacket: 32 [ 1836.063681][T13750] usb 7-1: Using ep0 maxpacket: 8 [ 1836.077285][T13741] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1836.094985][T13750] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1836.111395][T13741] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1836.125539][T13750] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1836.144245][T13741] usb 2-1: config 0 has no interface number 0 [ 1836.151017][T13750] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1836.162353][T13741] usb 2-1: config 0 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1836.184604][T13750] usb 7-1: config 0 has no interface number 0 [ 1836.194338][T13750] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1836.221728][T13741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.232508][T13741] usb 2-1: Product: syz [ 1836.239873][T13750] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.250466][T13741] usb 2-1: Manufacturer: syz [ 1836.262007][T13741] usb 2-1: SerialNumber: syz [ 1836.276573][T13750] usb 7-1: config 0 descriptor?? [ 1836.293274][T13741] usb 2-1: config 0 descriptor?? [ 1836.305793][T13750] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 1836.354711][T13724] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 1836.517243][T13724] usb 1-1: not running at top speed; connect to a high speed hub [ 1836.525882][T13724] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1836.538343][T13724] usb 1-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 1836.548334][T13724] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1836.565809][T13724] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 1836.580145][T13724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.595373][T13724] usb 1-1: config 0 descriptor?? [ 1836.717813][T13750] usb 7-1: USB disconnect, device number 111 [ 1836.717814][T13724] uvcvideo 1-1:0.0: Found UVC 9.00 device (046d:0825) [ 1836.737205][T22890] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1837.074332][T13726] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1837.111456][T13724] uvcvideo 1-1:0.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1837.214509][T13726] usb 5-1: device descriptor read/64, error -71 [ 1837.313426][T13724] uvcvideo 1-1:0.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 48). [ 1837.904570][T22901] program syz.6.4737 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1837.914907][T22901] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1837.971470][T13724] uvcvideo 1-1:0.1: Failed to initialize the device (-71). [ 1838.013080][T13724] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -71 [ 1838.034882][T13726] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1838.043984][T13724] usb 1-1: USB disconnect, device number 37 [ 1838.174350][T13726] usb 5-1: device descriptor read/64, error -71 [ 1838.300808][T13726] usb usb5-port1: attempt power cycle [ 1838.714847][T13726] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1838.779250][T13726] usb 5-1: device descriptor read/8, error -71 [ 1838.903560][T13724] usb 2-1: USB disconnect, device number 25 [ 1839.094223][T13726] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1839.174064][T13726] usb 5-1: device descriptor read/8, error -71 [ 1839.406247][T13726] usb usb5-port1: unable to enumerate USB device [ 1839.870659][T13726] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1839.912307][T22926] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4739'. [ 1840.032807][T22930] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1840.066094][T13726] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 1840.096805][T13726] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1840.114590][T13726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.314858][T13750] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 1840.494392][T13750] usb 7-1: Using ep0 maxpacket: 8 [ 1840.536820][T22922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1840.564955][T13750] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1840.590007][T13750] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1840.614127][T22922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1840.629405][T13750] usb 7-1: config 0 has no interface number 0 [ 1840.646143][T13750] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1840.675454][T13750] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.728023][T13750] usb 7-1: config 0 descriptor?? [ 1840.761439][T13750] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 1841.022865][T13750] usb 7-1: USB disconnect, device number 112 [ 1841.082699][ T30] audit: type=1400 audit(1787136708.272:1546): avc: denied { append } for pid=22920 comm="syz.1.4743" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1841.254636][T13726] usbhid 2-1:1.0: can't add hid device: -71 [ 1841.391356][T13726] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1841.415777][T13726] usb 2-1: USB disconnect, device number 26 [ 1842.495916][T22958] syzkaller0: entered promiscuous mode [ 1842.502123][T22958] syzkaller0: entered allmulticast mode [ 1842.508447][T13726] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 1842.644296][T13750] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1842.721236][T13726] usb 1-1: not running at top speed; connect to a high speed hub [ 1842.743566][T13726] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1842.789690][T13726] usb 1-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 1842.834423][T13726] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1842.879573][T13726] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 1842.920493][T13726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.109800][T13726] usb 1-1: config 0 descriptor?? [ 1843.233509][T13726] uvcvideo 1-1:0.0: Found UVC 9.00 device (046d:0825) [ 1843.879860][T13726] uvcvideo 1-1:0.1: Failed to set UVC probe control : -71 (exp. 48). [ 1843.939034][T13726] uvcvideo 1-1:0.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 48). [ 1844.038365][T13726] uvcvideo 1-1:0.1: Failed to initialize the device (-71). [ 1844.195926][T13726] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -71 [ 1844.404453][T13726] usb 1-1: USB disconnect, device number 38 [ 1844.545987][T13750] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1844.566241][T13750] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1844.578432][T13750] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 1844.596964][T13750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.606168][T13750] usb 2-1: Product: syz [ 1844.610768][T13750] usb 2-1: Manufacturer: syz [ 1844.616388][T13750] usb 2-1: SerialNumber: syz [ 1844.640622][T13750] sisusb 2-1:1.0: Invalid USB2VGA device [ 1844.647531][T13750] sisusb 2-1:1.0: probe with driver sisusb failed with error -22 [ 1845.310362][T22968] bond1: Removing last arp target with arp_interval on [ 1845.321938][T22955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1845.459243][T22955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1845.591727][T22968] bond1: entered promiscuous mode [ 1846.037592][T14988] usb 2-1: USB disconnect, device number 27 [ 1846.166010][T22968] bond1: entered allmulticast mode [ 1846.392508][T22968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1846.519181][T22987] netlink: 'syz.5.4761': attribute type 1 has an invalid length. [ 1846.528327][T22987] netlink: 232 bytes leftover after parsing attributes in process `syz.5.4761'. [ 1846.538401][T22987] netlink: 'syz.5.4761': attribute type 1 has an invalid length. [ 1847.608383][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1847.833130][T23006] netlink: 'syz.1.4768': attribute type 1 has an invalid length. [ 1847.841784][T23006] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4768'. [ 1847.851816][T23006] netlink: 'syz.1.4768': attribute type 1 has an invalid length. [ 1848.005130][T13726] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1848.312527][T13726] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1848.521435][T13726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1848.569746][T13726] usb 1-1: config 0 descriptor?? [ 1848.590270][T13726] cp210x 1-1:0.0: cp210x converter detected [ 1848.597831][T23008] bridge0: port 3(syz_tun) entered blocking state [ 1848.605090][T23008] bridge0: port 3(syz_tun) entered disabled state [ 1848.612266][T23008] syz_tun: entered allmulticast mode [ 1848.618871][T23008] syz_tun: entered promiscuous mode [ 1848.625115][T23008] bridge0: port 3(syz_tun) entered blocking state [ 1848.632189][T23008] bridge0: port 3(syz_tun) entered forwarding state [ 1848.941817][T23001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1848.964912][T23001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1849.065645][T13726] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1849.087132][T13726] cp210x 1-1:0.0: querying part number failed [ 1849.114150][T13726] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1849.454793][T13726] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1849.624225][T13726] usb 2-1: Using ep0 maxpacket: 32 [ 1849.630342][T13726] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1849.641530][T13726] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1849.650544][T13726] usb 2-1: config 0 has no interface number 0 [ 1849.658483][T13726] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1849.664630][T13741] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1849.671075][T13726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.686787][T13726] usb 2-1: Product: syz [ 1849.691397][T13726] usb 2-1: Manufacturer: syz [ 1849.696803][T13726] usb 2-1: SerialNumber: syz [ 1849.703715][T13726] usb 2-1: config 0 descriptor?? [ 1849.711855][T13726] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1849.722764][T13726] em28xx 2-1:0.132: Video interface 132 found: [ 1849.825985][T13741] usb 6-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1849.838606][T13741] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1849.850180][T13741] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 1849.866053][T13741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.875127][T13741] usb 6-1: Product: syz [ 1849.879717][T13741] usb 6-1: Manufacturer: syz [ 1849.884831][T13741] usb 6-1: SerialNumber: syz [ 1849.894665][T13741] sisusb 6-1:1.0: Invalid USB2VGA device [ 1849.901587][T13741] sisusb 6-1:1.0: probe with driver sisusb failed with error -22 [ 1850.127826][T13726] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1850.158420][T23025] nvmet: disable ns before setting buffered_io value. [ 1850.168406][T23025] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1850.308743][T23022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1850.318985][T23022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1851.195370][T14988] usb 6-1: USB disconnect, device number 89 [ 1851.294793][T13726] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1851.664700][T13726] em28xx 2-1:0.132: board has no eeprom [ 1851.690231][T23037] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1851.723689][T13729] usb 1-1: USB disconnect, device number 39 [ 1851.742366][T13729] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1851.754766][T13726] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1851.763901][T13729] cp210x 1-1:0.0: device disconnected [ 1851.771193][T13726] em28xx 2-1:0.132: analog set to bulk mode. [ 1851.783706][T13724] em28xx 2-1:0.132: Registering V4L2 extension [ 1851.902281][T13726] usb 2-1: USB disconnect, device number 28 [ 1851.916846][T13724] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1851.932061][T13726] em28xx 2-1:0.132: Disconnecting em28xx [ 1852.244712][T13729] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1853.468433][T23056] No source specified [ 1853.526162][T13729] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1853.597640][T13729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1853.620269][T13724] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1853.650234][T13724] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1853.658848][T13729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1853.671982][T13724] em28xx 2-1:0.132: No AC97 audio processor [ 1853.678938][T13729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.736381][T13724] usb 2-1: Decoder not found [ 1853.743432][T13729] usb 1-1: config 0 descriptor?? [ 1853.834983][T13724] em28xx 2-1:0.132: failed to create media graph [ 1853.871871][T13724] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1854.032181][T10060] block nbd0: Possible stuck request ffff8880280c6900: control (read@0,1024B). Runtime 210 seconds [ 1854.080259][T10060] block nbd0: Possible stuck request ffff8880280c6ac0: control (read@1024,1024B). Runtime 210 seconds [ 1854.161899][T10060] block nbd0: Possible stuck request ffff8880280c6c80: control (read@2048,1024B). Runtime 210 seconds [ 1854.191813][T23068] nvmet: disable ns before setting buffered_io value. [ 1854.201803][T10060] block nbd0: Possible stuck request ffff8880280c6e40: control (read@3072,1024B). Runtime 210 seconds [ 1854.213417][T23068] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1854.665898][T13729] usb 1-1: language id specifier not provided by device, defaulting to English [ 1854.678570][T13724] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1854.704784][T13726] em28xx 2-1:0.132: Closing input extension [ 1854.727550][T13726] em28xx 2-1:0.132: Freeing device [ 1854.733478][T23074] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4788'. [ 1855.073430][T23081] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1855.093919][T13729] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0099/input/input119 [ 1855.205281][T13729] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0099/input/input120 [ 1855.297432][T13729] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0099/input/input121 [ 1855.607365][T13729] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0099/input/input122 [ 1855.741900][T13729] uclogic 0003:256C:006D.0099: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 1855.974454][ T8688] block nbd1: Possible stuck request ffff888028120000: control (read@0,1024B). Runtime 210 seconds [ 1856.153789][T13729] usb 1-1: USB disconnect, device number 40 [ 1856.363758][T14988] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1856.415165][T13741] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 1856.615507][T13741] usb 7-1: Using ep0 maxpacket: 32 [ 1856.621762][T14988] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1856.633249][T13741] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1856.652188][T14988] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1856.670165][T13741] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 1856.684819][T14988] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1856.701618][T13741] usb 7-1: config 0 has no interface number 0 [ 1856.710815][T13741] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1856.722315][T14988] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 1856.735364][T14988] usb 2-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1856.752684][T13741] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1856.770801][T14988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1856.784335][T13741] usb 7-1: Product: syz [ 1856.791791][T14988] usb 2-1: Product: syz [ 1856.798331][T13741] usb 7-1: Manufacturer: syz [ 1856.805351][T14988] usb 2-1: Manufacturer: syz [ 1856.811894][T13741] usb 7-1: SerialNumber: syz [ 1856.819442][T14988] usb 2-1: SerialNumber: syz [ 1856.831377][T13741] usb 7-1: config 0 descriptor?? [ 1856.852786][T13741] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1856.866140][T14988] sisusb 2-1:1.0: Invalid USB2VGA device [ 1856.883535][T14988] sisusb 2-1:1.0: probe with driver sisusb failed with error -22 [ 1856.895773][T13741] em28xx 7-1:0.132: Video interface 132 found: [ 1857.256290][T13741] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 1857.284505][T23091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1857.319942][T23091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1857.428409][T23103] NILFS (nullb0): couldn't find nilfs on the device [ 1857.470894][T23110] nvmet: disable ns before setting buffered_io value. [ 1857.561676][T23110] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1857.740036][T13741] em28xx 7-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1857.757711][T13724] usb 2-1: USB disconnect, device number 29 [ 1857.772218][T13741] em28xx 7-1:0.132: board has no eeprom [ 1857.835738][T23118] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4800'. [ 1857.864256][T13741] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1857.876189][T13741] em28xx 7-1:0.132: analog set to bulk mode. [ 1857.888014][T13750] em28xx 7-1:0.132: Registering V4L2 extension [ 1858.761747][T13741] usb 7-1: USB disconnect, device number 113 [ 1858.768810][T13750] em28xx 7-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1858.789433][T13741] em28xx 7-1:0.132: Disconnecting em28xx [ 1859.037184][T23128] futex_wake_op: syz.5.4802 tries to shift op by 144; fix this program [ 1859.137801][T23128] tmpfs: Bad value for 'huge' [ 1859.682941][T13750] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 1859.741447][T13750] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 1859.857180][T13750] em28xx 7-1:0.132: No AC97 audio processor [ 1860.184758][T13750] usb 7-1: Decoder not found [ 1860.190420][T13750] em28xx 7-1:0.132: failed to create media graph [ 1860.303016][T13750] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 1860.320822][T13750] em28xx 7-1:0.132: Remote control support is not available for this card. [ 1860.331724][T13741] em28xx 7-1:0.132: Closing input extension [ 1860.338581][T13741] ================================================================== [ 1860.347441][T13741] BUG: KASAN: slab-use-after-free in media_device_unregister+0x59d/0x610 [ 1860.356703][T13741] Read of size 8 at addr ffff88802a5cc210 by task kworker/0:6/13741 [ 1860.365467][T13741] [ 1860.368015][T13741] CPU: 0 UID: 0 PID: 13741 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1860.368036][T13741] Tainted: [L]=SOFTLOCKUP [ 1860.368040][T13741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1860.368049][T13741] Workqueue: usb_hub_wq hub_event [ 1860.368065][T13741] Call Trace: [ 1860.368069][T13741] [ 1860.368074][T13741] dump_stack_lvl+0x100/0x190 [ 1860.368089][T13741] print_report+0x13d/0x4b0 [ 1860.368110][T13741] ? __virt_addr_valid+0x239/0x430 [ 1860.368125][T13741] ? media_device_unregister+0x59d/0x610 [ 1860.368140][T13741] kasan_report+0xdf/0x1c0 [ 1860.368158][T13741] ? media_device_unregister+0x59d/0x610 [ 1860.368176][T13741] media_device_unregister+0x59d/0x610 [ 1860.368193][T13741] em28xx_unregister_media_device+0x4e/0xe0 [ 1860.368211][T13741] em28xx_release_resources+0x79/0x1b0 [ 1860.368230][T13741] em28xx_usb_disconnect.cold+0x17d/0x253 [ 1860.368248][T13741] usb_unbind_interface+0x1dd/0x9e0 [ 1860.368262][T13741] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1860.368275][T13741] device_remove+0x12a/0x180 [ 1860.368286][T13741] device_release_driver_internal+0x44e/0x620 [ 1860.368300][T13741] bus_remove_device+0x2bc/0x560 [ 1860.368317][T13741] ? __pfx_bus_remove_device+0x10/0x10 [ 1860.368333][T13741] ? __pfx_device_remove_attrs+0x10/0x10 [ 1860.368351][T13741] device_del+0x376/0x9b0 [ 1860.368362][T13741] ? __pfx_device_del+0x10/0x10 [ 1860.368371][T13741] ? kobject_put+0xb9/0x640 [ 1860.368386][T13741] usb_disable_device+0x367/0x810 [ 1860.368398][T13741] usb_disconnect+0x2e2/0x9a0 [ 1860.368410][T13741] hub_event+0x1bb1/0x4420 [ 1860.368424][T13741] ? __lock_acquire+0x4c5/0x1ec0 [ 1860.368439][T13741] ? do_raw_spin_unlock+0x145/0x1e0 [ 1860.368456][T13741] ? __pfx_hub_event+0x10/0x10 [ 1860.368466][T13741] ? debug_object_deactivate+0x2e4/0x3b0 [ 1860.368481][T13741] ? rcu_is_watching+0x13/0xc0 [ 1860.368492][T13741] process_one_work+0xa23/0x1940 [ 1860.368508][T13741] ? __pfx_process_one_work+0x10/0x10 [ 1860.368522][T13741] ? __pfx_hub_event+0x10/0x10 [ 1860.368533][T13741] worker_thread+0x5ef/0xe50 [ 1860.368546][T13741] ? __pfx_worker_thread+0x10/0x10 [ 1860.368559][T13741] ? kthread+0x13a/0x450 [ 1860.368569][T13741] ? __pfx_worker_thread+0x10/0x10 [ 1860.368581][T13741] kthread+0x373/0x450 [ 1860.368591][T13741] ? __pfx_kthread+0x10/0x10 [ 1860.368603][T13741] ret_from_fork+0x730/0xd60 [ 1860.368619][T13741] ? __pfx_ret_from_fork+0x10/0x10 [ 1860.368635][T13741] ? __switch_to+0x800/0x10f0 [ 1860.368646][T13741] ? __pfx_kthread+0x10/0x10 [ 1860.368657][T13741] ret_from_fork_asm+0x1a/0x30 [ 1860.368676][T13741] [ 1860.368680][T13741] [ 1860.643341][T13741] Allocated by task 13750: [ 1860.648173][T13741] kasan_save_stack+0x30/0x50 [ 1860.653299][T13741] kasan_save_track+0x14/0x30 [ 1860.658419][T13741] __kasan_kmalloc+0xaa/0xb0 [ 1860.663443][T13741] __kmalloc_cache_noprof+0x2e7/0x6b0 [ 1860.669322][T13741] em28xx_v4l2_init.cold+0x94/0x3a40 [ 1860.675112][T13741] em28xx_init_extension+0x13a/0x200 [ 1860.680898][T13741] request_module_async+0x61/0x80 [ 1860.686412][T13741] process_one_work+0xa23/0x1940 [ 1860.691818][T13741] worker_thread+0x5ef/0xe50 [ 1860.696839][T13741] kthread+0x373/0x450 [ 1860.701299][T13741] ret_from_fork+0x730/0xd60 [ 1860.706328][T13741] ret_from_fork_asm+0x1a/0x30 [ 1860.711546][T13741] [ 1860.714077][T13741] Freed by task 13750: [ 1860.718520][T13741] kasan_save_stack+0x30/0x50 [ 1860.723642][T13741] kasan_save_track+0x14/0x30 [ 1860.728775][T13741] kasan_save_free_info+0x3b/0x70 [ 1860.734273][T13741] __kasan_slab_free+0x5f/0x80 [ 1860.739488][T13741] kfree+0x22b/0x6c0 [ 1860.743744][T13741] kref_put.isra.0+0x53/0x75 [ 1860.748772][T13741] em28xx_v4l2_init.cold+0x280/0x3a40 [ 1860.754653][T13741] em28xx_init_extension+0x13a/0x200 [ 1860.760441][T13741] request_module_async+0x61/0x80 [ 1860.765943][T13741] process_one_work+0xa23/0x1940 [ 1860.771346][T13741] worker_thread+0x5ef/0xe50 [ 1860.776367][T13741] kthread+0x373/0x450 [ 1860.780814][T13741] ret_from_fork+0x730/0xd60 [ 1860.785837][T13741] ret_from_fork_asm+0x1a/0x30 [ 1860.791055][T13741] [ 1860.793582][T13741] The buggy address belongs to the object at ffff88802a5cc000 [ 1860.793582][T13741] which belongs to the cache kmalloc-8k of size 8192 [ 1860.809008][T13741] The buggy address is located 528 bytes inside of [ 1860.809008][T13741] freed 8192-byte region [ffff88802a5cc000, ffff88802a5ce000) [ 1860.824248][T13741] [ 1860.826777][T13741] The buggy address belongs to the physical page: [ 1860.833793][T13741] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a5c8 [ 1860.843396][T13741] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1860.852709][T13741] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1860.860988][T13741] page_type: f5(slab) [ 1860.865338][T13741] raw: 00fff00000000040 ffff88801c025280 dead000000000100 dead000000000122 [ 1860.874750][T13741] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1860.884161][T13741] head: 00fff00000000040 ffff88801c025280 dead000000000100 dead000000000122 [ 1860.893668][T13741] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1860.903173][T13741] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1860.912679][T13741] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1860.922181][T13741] page dumped because: kasan: bad access detected [ 1860.929197][T13741] page_owner tracks the page as allocated [ 1860.935448][T13741] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11288, tgid 11283 (syz.4.1474), ts 814281420990, free_ts 811608479480 [ 1860.957382][T13741] post_alloc_hook+0xfd/0x120 [ 1860.962502][T13741] get_page_from_freelist+0xf46/0x3500 [ 1860.968477][T13741] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 1860.974935][T13741] new_slab+0xa2/0x660 [ 1860.979382][T13741] refill_objects+0xe3/0x410 [ 1860.984400][T13741] __pcs_replace_empty_main+0x372/0x680 [ 1860.990468][T13741] __kmalloc_cache_noprof+0x47b/0x6b0 [ 1860.996345][T13741] uhid_queue_event+0x46/0xe0 [ 1861.001467][T13741] hidpp_remove+0x58/0xb0 [ 1861.006200][T13741] hid_device_remove+0xd1/0x270 [ 1861.011504][T13741] device_remove+0xcb/0x180 [ 1861.016427][T13741] device_release_driver_internal+0x44e/0x620 [ 1861.023070][T13741] bus_remove_device+0x2bc/0x560 [ 1861.028482][T13741] device_del+0x376/0x9b0 [ 1861.033212][T13741] hid_destroy_device+0x19c/0x240 [ 1861.038706][T13741] uhid_char_release+0xeb/0x210 [ 1861.044016][T13741] page last free pid 11258 tgid 11258 stack trace: [ 1861.051140][T13741] __free_frozen_pages+0x79f/0x1090 [ 1861.056830][T13741] qlist_free_all+0x47/0xf0 [ 1861.061756][T13741] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1861.067741][T13741] __kasan_slab_alloc+0x69/0x90 [ 1861.073050][T13741] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1861.079029][T13741] ptlock_alloc+0x1f/0x70 [ 1861.083762][T13741] pte_alloc_one+0x82/0x3d0 [ 1861.088683][T13741] do_fault+0x86c/0x1750 [ 1861.093326][T13741] __handle_mm_fault+0x187d/0x2a00 [ 1861.098915][T13741] handle_mm_fault+0x37b/0xa30 [ 1861.104128][T13741] __get_user_pages+0x1178/0x32a0 [ 1861.109632][T13741] get_dump_page+0x27e/0x3d0 [ 1861.114655][T13741] dump_user_range+0x18d/0xad0 [ 1861.119862][T13741] elf_core_dump+0x2d68/0x3d20 [ 1861.125074][T13741] vfs_coredump+0x281a/0x54a0 [ 1861.130205][T13741] get_signal+0x1f2a/0x21e0 [ 1861.135140][T13741] [ 1861.137668][T13741] Memory state around the buggy address: [ 1861.143827][T13741] ffff88802a5cc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1861.152664][T13741] ffff88802a5cc180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1861.161500][T13741] >ffff88802a5cc200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1861.170332][T13741] ^ [ 1861.175348][T13741] ffff88802a5cc280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1861.184182][T13741] ffff88802a5cc300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1861.193014][T13741] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1861.941648][T13741] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1861.949579][T13741] CPU: 0 UID: 0 PID: 13741 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1861.961666][T13741] Tainted: [L]=SOFTLOCKUP [ 1861.966395][T13741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1861.977450][T13741] Workqueue: usb_hub_wq hub_event [ 1861.982963][T13741] Call Trace: [ 1861.986548][T13741] [ 1861.989763][T13741] dump_stack_lvl+0x100/0x190 [ 1861.994902][T13741] vpanic+0x553/0x970 [ 1861.999260][T13741] ? __pfx_vpanic+0x10/0x10 [ 1862.004188][T13741] ? media_device_unregister+0x59d/0x610 [ 1862.010359][T13741] panic+0xd1/0xe0 [ 1862.014424][T13741] ? __pfx_panic+0x10/0x10 [ 1862.019252][T13741] ? media_device_unregister+0x59d/0x610 [ 1862.025423][T13741] ? preempt_schedule_common+0x3c/0xb0 [ 1862.031408][T13741] check_panic_on_warn.cold+0x19/0x34 [ 1862.037306][T13741] end_report.part.0+0x3a/0x90 [ 1862.042523][T13741] kasan_report.cold+0xe/0x18 [ 1862.047646][T13741] ? media_device_unregister+0x59d/0x610 [ 1862.053820][T13741] media_device_unregister+0x59d/0x610 [ 1862.059801][T13741] em28xx_unregister_media_device+0x4e/0xe0 [ 1862.066268][T13741] em28xx_release_resources+0x79/0x1b0 [ 1862.072253][T13741] em28xx_usb_disconnect.cold+0x17d/0x253 [ 1862.078524][T13741] usb_unbind_interface+0x1dd/0x9e0 [ 1862.084221][T13741] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1862.090504][T13741] device_remove+0x12a/0x180 [ 1862.095525][T13741] device_release_driver_internal+0x44e/0x620 [ 1862.102174][T13741] bus_remove_device+0x2bc/0x560 [ 1862.107584][T13741] ? __pfx_bus_remove_device+0x10/0x10 [ 1862.113566][T13741] ? __pfx_device_remove_attrs+0x10/0x10 [ 1862.119742][T13741] device_del+0x376/0x9b0 [ 1862.124475][T13741] ? __pfx_device_del+0x10/0x10 [ 1862.129778][T13741] ? kobject_put+0xb9/0x640 [ 1862.134707][T13741] usb_disable_device+0x367/0x810 [ 1862.140210][T13741] usb_disconnect+0x2e2/0x9a0 [ 1862.145338][T13741] hub_event+0x1bb1/0x4420 [ 1862.150182][T13741] ? __lock_acquire+0x4c5/0x1ec0 [ 1862.155588][T13741] ? do_raw_spin_unlock+0x145/0x1e0 [ 1862.161295][T13741] ? __pfx_hub_event+0x10/0x10 [ 1862.166505][T13741] ? debug_object_deactivate+0x2e4/0x3b0 [ 1862.172678][T13741] ? rcu_is_watching+0x13/0xc0 [ 1862.177904][T13741] process_one_work+0xa23/0x1940 [ 1862.183313][T13741] ? __pfx_process_one_work+0x10/0x10 [ 1862.189198][T13741] ? __pfx_hub_event+0x10/0x10 [ 1862.194409][T13741] worker_thread+0x5ef/0xe50 [ 1862.199434][T13741] ? __pfx_worker_thread+0x10/0x10 [ 1862.205030][T13741] ? kthread+0x13a/0x450 [ 1862.209667][T13741] ? __pfx_worker_thread+0x10/0x10 [ 1862.215275][T13741] kthread+0x373/0x450 [ 1862.219721][T13741] ? __pfx_kthread+0x10/0x10 [ 1862.224752][T13741] ret_from_fork+0x730/0xd60 [ 1862.229778][T13741] ? __pfx_ret_from_fork+0x10/0x10 [ 1862.235378][T13741] ? __switch_to+0x800/0x10f0 [ 1862.240495][T13741] ? __pfx_kthread+0x10/0x10 [ 1862.245515][T13741] ret_from_fork_asm+0x1a/0x30 [ 1862.250737][T13741] [ 1862.254236][T13741] Kernel Offset: disabled [ 1862.258966][T13741] Rebooting in 86400 seconds..