last executing test programs: 14m56.635469033s ago: executing program 0 (id=34): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000"], 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x1c}], 0x1, 0x0, 0x0, 0x4004040}, 0x4000040) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) 14m50.387066855s ago: executing program 0 (id=42): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) prctl$PR_SCHED_CORE(0x23, 0x3, 0x0, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = fsopen(&(0x7f0000000200)='sysfs\x00', 0x1) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, r4, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000140)={0xc, r4}) ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0xf) acct(0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) socket(0x1e, 0x4, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)=0xff) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000180)={0x8000, 0x4, 0x4, 0x8001, 0x12, "ca02959273afd722"}) 14m48.550939671s ago: executing program 0 (id=49): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r2, &(0x7f0000002240)=""/237, 0xed, 0x4eb) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000c80)={0x2, 0x0, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r4 = syz_clone(0x2000000, &(0x7f00000024c0)="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", 0x55b, 0x0, 0x0, 0x0) r5 = syz_open_procfs$namespace(r4, &(0x7f0000001380)='ns/uts\x00') open_by_handle_at(r5, &(0x7f0000000040)=ANY=[@ANYRES8=r5], 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x72c2, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x2c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)=0x80, 0x4) syz_open_dev$sndpcmc(&(0x7f0000002480), 0x0, 0x0) 14m46.176289425s ago: executing program 0 (id=54): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x7) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x4) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000280)={r6, 0x1, 0x6, @random="cd3b51e16525"}, 0x10) sendmsg$inet6(r4, 0x0, 0x4048043) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000017c00000400fc800c000180083f0600", @ANYRES32=0x0, @ANYBLOB="080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 14m43.400876259s ago: executing program 0 (id=57): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r1, 0x4) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e459, 0x700000000000000) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0) 14m41.345396742s ago: executing program 0 (id=62): openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r3, 0x2, 0x0) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 14m25.20598731s ago: executing program 32 (id=62): openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r3, 0x2, 0x0) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 15.166492601s ago: executing program 4 (id=2549): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001500), 0x0, 0x202, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x9c, 0xb, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x400}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xfd}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x89f}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24000009}, 0x20000000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = socket(0x2d, 0x2, 0x0) setsockopt$inet6_tcp_buf(r1, 0x11d, 0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000012c0)={0xc}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048055}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5218) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 12.640786983s ago: executing program 5 (id=2555): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 12.243951124s ago: executing program 1 (id=2556): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e300", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x48) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000804) socket$kcm(0x2, 0x200000000000001, 0x106) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) memfd_create(&(0x7f0000000740)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x1aX\x87\xf5\x1aP\x06\x9a\xa9\xa0\x98 )\xe3\xa1\xa2\xb1D\xe0\x15S\x89/m\xb71%\x80\x04Q\x1dN\xb0\x19\x81\x16@\xc0\xc4\"g\xd7Z\xb3\x17\xd1\xe7\x1b\xbd\xdck\x95\x16\x17\x95\xce\xa6\x92_\xe4\x9a\xaeA-\x02\x161\x8c\xe7\xa6.)\xadpM\x19\x1c\xcd\xf6S\x9a(:\x90\xb1\x8ft\xeb#\x82\x17\x8d\x00\xcaY\xe9\xf7\xee\x91\bx\x80\xa4\xa0\x16\b\x8b,\xdb\x88\x1e\xc1m\x91\xf0S\xc4\xc9\xefEBT\x8e\xff6\xff\xbb\xd4\xbe&\xf5St\v\xe1\x98;q\\\x1c\xe9\xcc\xfeV\xc3M5\xa9\xec\xc9\x8a\xee7\xbb\xa4\x1f\xc8\xfb\xaar15\xdf\\\xf4d\xc0\xc7\xf3\x88\x13\x94^01\xfc_\x91B\xacp\x8f\xfdx\xa5\xa9_t\x86\xe3%\xf1q\x00\x89c\x05H\x92\xa6\x93je\xfa\xd148\xd0N7', 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 12.112796264s ago: executing program 4 (id=2558): mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) 12.026307585s ago: executing program 5 (id=2559): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x3b, @rand_addr=0x64010101, 0x4e24, 0x3, 'lc\x00', 0x4, 0x3237, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x518) r3 = fsopen(&(0x7f0000000100)='erofs\x00', 0x1) close(r3) 11.768181123s ago: executing program 4 (id=2562): socket$kcm(0x2d, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000200)=""/238) ioprio_set$pid(0x3, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) 10.54328703s ago: executing program 1 (id=2564): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x40000000015, 0x5, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x1ff, 0xfffffffd}) unshare(0x2040400) r3 = eventfd(0x3) sync_file_range(r3, 0x4, 0x0, 0x7) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000280), 0x1, 0x1a2100) poll(&(0x7f00000000c0)=[{r4, 0x9746}], 0x1, 0x3) 10.475240475s ago: executing program 2 (id=2565): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet6_buf(r0, 0x3a, 0x20, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xdf) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x121100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x800001000091}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) mount(&(0x7f00000003c0)=@md0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x578410eb) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xc8) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) dup(r4) ftruncate(0xffffffffffffffff, 0x200004) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/152) 9.080921801s ago: executing program 2 (id=2567): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) move_pages(r1, 0x4, &(0x7f0000000240)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil], 0x0, &(0x7f00000002c0)=[0x0, 0x0], 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x7) sendto$inet(r0, &(0x7f00000001c0)='l', 0x1, 0x24008015, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = getpgrp(0xffffffffffffffff) getpgrp(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r4}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001d80), 0x1, 0x0) io_uring_setup(0x3d7d, &(0x7f0000000100)={0x0, 0xb2d0, 0x800, 0x3, 0x1f2}) writev(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) 8.659699225s ago: executing program 3 (id=2568): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x20008044) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, 0x0, 0x0) 8.655881627s ago: executing program 1 (id=2569): bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04030b005b01000000000000ff01"], 0xe) write$cgroup_int(r1, &(0x7f0000000080)=0x1, 0x12) 8.535399981s ago: executing program 6 (id=2570): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000005c0), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000001500)=[{&(0x7f00000002c0)="02044a00ea0e6000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8223f0ffff74c43824cee84400007ffe18c99e70d67b732f9b5702de81f5227339", 0x44}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d21609000a3164ae439862807a158983661a6d23", 0x17}, {&(0x7f0000000040)="df3b46a133000000000000", 0xb}, {&(0x7f0000002340)="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", 0xe8f}], 0x5}, 0x40040) 7.759252865s ago: executing program 3 (id=2571): socket$kcm(0x2, 0xa, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x2080, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x2, 0x5, 0x9, 0x8, 0x1ff, 0x8, 0x1400000000000000}, &(0x7f00000007c0)={0x5, 0xffffffff, 0xa, 0x1, 0x58, 0x3, 0x5, 0x81}, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) openat$dlm_monitor(0xffffff9c, &(0x7f0000000140), 0x241, 0x0) syz_emit_ethernet(0x9c, &(0x7f0000000b40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @val={@val={0x88a8, 0x1}, {0x8100, 0x1, 0x0, 0x1}}, {@ipv6={0x86dd, @dccp_packet={0x5, 0x6, "795382", 0x5e, 0x21, 0x1, @empty, @mcast1, {[@routing={0x73, 0x2, 0x1, 0x40, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}]}], {{0x4e24, 0x4e21, 0x4, 0x1, 0x4, 0x0, 0x0, 0x4, 0x5, "97c45f", 0x4, "021920"}, "e8ddf55627382a42ccb6c3dc3e79f2bb5e4a1ad8aa2bb0b07db321cc789c4471c04026066b12831ca465a624e20da03d60653c0e5e8d"}}}}}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, r2, 0x1, 0xffffbffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}]}, 0x48}}, 0x20000000) 6.829910159s ago: executing program 2 (id=2572): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) unshare(0x2c020400) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r1, r2, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) r3 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r3, 0xc008af7b, &(0x7f0000000140)={0x2, 0x3}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) close(r4) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f3, &(0x7f00000002c0)={'sit0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x0, 0x10, 0x3, 0x80001000, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0xfffe, 0x0, 0xfb, 0x89, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1b}}}}}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCRTMSG(r7, 0x890d, 0x0) sendmmsg$inet(r7, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e", 0xc7}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}], 0x2, 0x240080e4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], &(0x7f00000001c0)=""/27, 0x27, 0x1b, 0x1, 0x4}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="050000000c0000004200000040000000c0000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 6.801576489s ago: executing program 1 (id=2573): unshare(0x22020600) r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r1 = fsmount(r0, 0x0, 0x0) setreuid(0x0, 0xee01) openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) 6.175414514s ago: executing program 6 (id=2574): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0xfffffd83, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.941546841s ago: executing program 5 (id=2575): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000001c0)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x1, 0x2, 0x2, 0x1, {0x1}}, 0x5) 5.832789174s ago: executing program 2 (id=2576): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e300", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x48) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000804) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) memfd_create(&(0x7f0000000740)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x1aX\x87\xf5\x1aP\x06\x9a\xa9\xa0\x98 )\xe3\xa1\xa2\xb1D\xe0\x15S\x89/m\xb71%\x80\x04Q\x1dN\xb0\x19\x81\x16@\xc0\xc4\"g\xd7Z\xb3\x17\xd1\xe7\x1b\xbd\xdck\x95\x16\x17\x95\xce\xa6\x92_\xe4\x9a\xaeA-\x02\x161\x8c\xe7\xa6.)\xadpM\x19\x1c\xcd\xf6S\x9a(:\x90\xb1\x8ft\xeb#\x82\x17\x8d\x00\xcaY\xe9\xf7\xee\x91\bx\x80\xa4\xa0\x16\b\x8b,\xdb\x88\x1e\xc1m\x91\xf0S\xc4\xc9\xefEBT\x8e\xff6\xff\xbb\xd4\xbe&\xf5St\v\xe1\x98;q\\\x1c\xe9\xcc\xfeV\xc3M5\xa9\xec\xc9\x8a\xee7\xbb\xa4\x1f\xc8\xfb\xaar15\xdf\\\xf4d\xc0\xc7\xf3\x88\x13\x94^01\xfc_\x91B\xacp\x8f\xfdx\xa5\xa9_t\x86\xe3%\xf1q\x00\x89c\x05H\x92\xa6\x93je\xfa\xd148\xd0N7', 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 5.775226584s ago: executing program 1 (id=2577): socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x110) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) 5.71546364s ago: executing program 6 (id=2578): ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @empty}, 0x290, 0x0, 0x0, 0x0, 0x8000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, 0x0, 0x2, 0x6}}, 0x20) 5.133754177s ago: executing program 1 (id=2579): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) move_pages(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000002c0)=[0x0, 0x0], 0x5) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @sack_perm], 0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = getpgrp(0xffffffffffffffff) getpgrp(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001d80), 0x1, 0x0) io_uring_setup(0x3d7d, &(0x7f0000000100)={0x0, 0xb2d0, 0x800, 0x3, 0x1f2}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) 4.881619762s ago: executing program 6 (id=2580): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400020077673200000000000000000000000000340008803000008006000500030000002400010000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4c010}, 0x20000010) 4.631167065s ago: executing program 3 (id=2581): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x40000000015, 0x5, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x1ff, 0xfffffffd}) unshare(0x2040400) r3 = eventfd(0x3) sync_file_range(r3, 0x4, 0x0, 0x7) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000280), 0x1, 0x1a2100) poll(&(0x7f00000000c0)=[{r4, 0x9746}], 0x1, 0x3) 4.57934253s ago: executing program 5 (id=2582): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e979", 0x5}], 0x1}], 0x1, 0x40800) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000140)=ANY=[@ANYBLOB]) 4.235839017s ago: executing program 6 (id=2583): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}}], 0x1, 0x20008044) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, 0x0, 0x0) 4.188228114s ago: executing program 4 (id=2584): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) move_pages(r1, 0x4, &(0x7f0000000240)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil], 0x0, &(0x7f00000002c0)=[0x0, 0x0], 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x7) sendto$inet(r0, &(0x7f00000001c0)='l', 0x1, 0x24008015, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = getpgrp(0xffffffffffffffff) getpgrp(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r4}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001d80), 0x1, 0x0) io_uring_setup(0x3d7d, &(0x7f0000000100)={0x0, 0xb2d0, 0x800, 0x3, 0x1f2}) writev(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) 3.494469809s ago: executing program 2 (id=2585): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0xfffffffc, 0x100, 0xce, 0x2c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1000}, 0x50) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04030b005b01000000000000ff01"], 0xe) write$cgroup_int(r1, &(0x7f0000000080)=0x1, 0x12) 2.910354573s ago: executing program 5 (id=2586): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0xc80) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.596562902s ago: executing program 6 (id=2587): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x3b, @rand_addr=0x64010101, 0x4e24, 0x3, 'lc\x00', 0x4, 0x3237, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x518) r3 = fsopen(&(0x7f0000000100)='erofs\x00', 0x1) close(r3) 2.595864231s ago: executing program 3 (id=2588): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000140)={0x3, @capture={0x0, 0x1, {0x9, 0x6ab}, 0xecd, 0x1}}) 1.439005592s ago: executing program 4 (id=2589): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) unshare(0x2c020400) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r1, r2, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) r3 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r3, 0xc008af7b, &(0x7f0000000140)={0x2, 0x3}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) close(r4) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f3, &(0x7f00000002c0)={'sit0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x0, 0x10, 0x3, 0x80001000, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0xfffe, 0x0, 0xfb, 0x89, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1b}}}}}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCRTMSG(r7, 0x890d, 0x0) sendmmsg$inet(r7, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e", 0xc7}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}], 0x2, 0x240080e4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], &(0x7f00000001c0)=""/27, 0x27, 0x1b, 0x1, 0x4}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="050000000c0000004200000040000000c0000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 1.315634725s ago: executing program 3 (id=2590): openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.138682053s ago: executing program 4 (id=2591): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0xa004}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000440)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x1, 0xc8ff9f55e8dc000f, 0x0, 0x0, '\x00', {0x0, 0x6, "00b295", 0x0, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) 1.031719234s ago: executing program 3 (id=2592): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, 0x0, 0x2, 0x6}}, 0x20) 1.021575289s ago: executing program 2 (id=2593): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet6_buf(r0, 0x3a, 0x20, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xdf) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x121100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x800001000091}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mount(&(0x7f00000003c0)=@md0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x578410eb) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xc8) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) dup(r3) ftruncate(0xffffffffffffffff, 0x200004) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/152) 0s ago: executing program 5 (id=2594): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000001c0)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x1, 0x2, 0x2, 0x1, {0x1}}, 0x5) kernel console output (not intermixed with test programs): usb 2-1: Manufacturer: syz [ 626.785296][ T5763] usb 2-1: SerialNumber: syz [ 627.429578][ T5763] usb 2-1: config 0 descriptor?? [ 627.439505][T10688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1431'. [ 627.448708][T10688] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1431'. [ 627.481394][T10688] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1431'. [ 627.523792][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1431'. [ 627.675940][ T5763] usb 2-1: Firmware version (0.0) predates our first public release. [ 627.698517][ T5763] usb 2-1: Please update to version 0.2 or newer [ 627.793274][T10697] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 627.803164][ T5763] usb 2-1: USB disconnect, device number 20 [ 630.249017][T10721] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 630.961989][ T5812] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 631.700304][ T5812] usb 5-1: Using ep0 maxpacket: 32 [ 631.707574][ T5812] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 631.821637][ T5812] usb 5-1: config 0 has no interface number 0 [ 631.857728][ T5812] usb 5-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 631.893530][T10732] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1443'. [ 631.905220][T10732] netlink: 'syz.6.1443': attribute type 2 has an invalid length. [ 632.233448][ T5812] usb 5-1: config 0 interface 85 has no altsetting 0 [ 632.530917][ T5750] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 632.589268][ T5812] usb 5-1: string descriptor 0 read error: -71 [ 632.733506][ T5812] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 633.059075][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.064449][ T5750] usb 6-1: Using ep0 maxpacket: 16 [ 633.085289][ T5750] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.096744][ T5783] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 633.112608][ T5750] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 633.118574][ T5812] usb 5-1: config 0 descriptor?? [ 633.133734][T10741] overlayfs: failed to resolve './file2': -2 [ 633.136261][ T5812] usb 5-1: can't set config #0, error -71 [ 633.158648][ T5750] usb 6-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 633.176863][ T5812] usb 5-1: USB disconnect, device number 16 [ 633.188000][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1447'. [ 633.197309][ T5750] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 633.203894][T10744] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1447'. [ 633.206059][ T5750] usb 6-1: Product: syz [ 633.226750][ T5750] usb 6-1: Manufacturer: syz [ 633.231538][ T5750] usb 6-1: SerialNumber: syz [ 633.250045][ T5750] usb 6-1: config 0 descriptor?? [ 633.252329][T10744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1447'. [ 633.268537][ T5783] usb 4-1: Using ep0 maxpacket: 8 [ 633.275388][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1447'. [ 633.276541][ T5783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.300210][ T5783] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 633.313831][ T5783] usb 4-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 633.323123][ T5783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.336953][ T5783] usb 4-1: config 0 descriptor?? [ 634.083755][ T5812] usb 6-1: USB disconnect, device number 18 [ 634.199827][ T5763] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 635.451377][ T5783] usbhid 4-1:0.0: can't add hid device: -71 [ 635.457494][ T5783] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 635.470075][ T5783] usb 4-1: USB disconnect, device number 17 [ 635.524858][ T5763] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 635.534432][ T5763] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.552968][ T5763] usb 7-1: config 0 descriptor?? [ 635.567999][ T5763] cp210x 7-1:0.0: cp210x converter detected [ 636.814444][ T5763] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 637.656940][ T5763] usb 7-1: cp210x converter now attached to ttyUSB0 [ 638.053918][ T30] usb 7-1: USB disconnect, device number 15 [ 638.224824][ T30] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 638.257699][ T30] cp210x 7-1:0.0: device disconnected [ 638.301798][T10782] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1457'. [ 638.301822][T10782] netlink: 'syz.1.1457': attribute type 2 has an invalid length. [ 638.719443][ T5763] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 639.112795][ T5763] usb 5-1: Using ep0 maxpacket: 32 [ 639.144011][ T5763] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 639.179191][ T5763] usb 5-1: config 0 has no interface number 0 [ 639.211689][ T5763] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 639.235580][T10795] overlayfs: failed to resolve './file2': -2 [ 639.255485][ T5763] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 640.339001][ T5763] usb 5-1: config 0 interface 85 has no altsetting 0 [ 640.350767][ T5763] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 640.360073][ T5763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.370077][ T5763] usb 5-1: Product: syz [ 640.374448][ T5763] usb 5-1: Manufacturer: syz [ 640.379077][ T5763] usb 5-1: SerialNumber: syz [ 640.408115][ T5763] usb 5-1: config 0 descriptor?? [ 640.673116][ T30] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 641.426779][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.438019][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.451313][ T30] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 641.461115][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.573761][ T30] usb 3-1: config 0 descriptor?? [ 641.621235][ T5763] appletouch 5-1:0.85: Geyser mode initialized. [ 641.642094][ T5763] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input23 [ 642.019941][ T5750] usb 5-1: USB disconnect, device number 17 [ 642.511006][ T5783] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 643.835393][ T5750] appletouch 5-1:0.85: input: appletouch disconnected [ 643.953671][ T5783] usb 4-1: Using ep0 maxpacket: 16 [ 643.971506][ T5783] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.041511][ T5783] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 644.043297][T10827] random: crng reseeded on system resumption [ 644.057599][ T5812] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 644.091973][ T5783] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 644.124819][ T5783] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 644.156006][ T5783] usb 4-1: Product: syz [ 644.162184][ T5783] usb 4-1: Manufacturer: syz [ 644.173258][ T5783] usb 4-1: SerialNumber: syz [ 644.215464][ T5783] usb 4-1: config 0 descriptor?? [ 644.231569][ T5812] usb 7-1: Using ep0 maxpacket: 8 [ 644.251325][ T5812] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.294447][ T5812] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 644.309899][ T5812] usb 7-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 644.320270][ T5812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.333823][T10835] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1473'. [ 644.343361][T10835] netlink: 'syz.5.1473': attribute type 2 has an invalid length. [ 644.392789][ T5812] usb 7-1: config 0 descriptor?? [ 644.550216][ T30] usbhid 3-1:0.0: can't add hid device: -71 [ 644.564875][ T30] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 644.610080][ T5783] usb 4-1: USB disconnect, device number 18 [ 644.652748][ T30] usb 3-1: USB disconnect, device number 14 [ 644.732334][T10839] program syz.2.1475 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 644.979904][T10842] 9pnet_fd: Insufficient options for proto=fd [ 645.060872][ T5812] usbhid 7-1:0.0: can't add hid device: -71 [ 645.068249][ T5812] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 645.109077][ T5812] usb 7-1: USB disconnect, device number 16 [ 645.630259][T10852] overlayfs: failed to resolve './file1/file0': -2 [ 647.043467][T10853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.960871][ T5783] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 648.445413][ T5783] usb 4-1: Using ep0 maxpacket: 32 [ 648.490083][ T5783] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 648.529094][ T5783] usb 4-1: config 0 has no interface number 0 [ 648.559512][ T5783] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 648.589185][ T5783] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 648.622920][ T5783] usb 4-1: config 0 interface 85 has no altsetting 0 [ 648.662189][ T5783] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 649.135365][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.151941][ T5783] usb 4-1: Product: syz [ 649.161329][ T5783] usb 4-1: Manufacturer: syz [ 649.178280][ T5783] usb 4-1: SerialNumber: syz [ 649.215591][ T5783] usb 4-1: config 0 descriptor?? [ 649.828308][ T5783] appletouch 4-1:0.85: Geyser mode initialized. [ 649.838146][ T5783] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input24 [ 650.050790][ T5783] usb 4-1: USB disconnect, device number 19 [ 650.103408][ T5783] appletouch 4-1:0.85: input: appletouch disconnected [ 651.977850][T10892] 9pnet_fd: Insufficient options for proto=fd [ 652.216718][T10895] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 652.428398][ T5750] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 652.599049][ T5750] usb 4-1: Using ep0 maxpacket: 32 [ 652.800943][ T5750] usb 4-1: config 0 has an invalid interface number: 37 but max is 1 [ 652.827014][ T5750] usb 4-1: config 0 has no interface number 1 [ 652.846920][ T5750] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 653.911365][ T5750] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 654.780078][ T5750] usb 4-1: Product: syz [ 654.784565][ T5750] usb 4-1: Manufacturer: syz [ 654.789312][ T5750] usb 4-1: SerialNumber: syz [ 654.813605][ T5750] usb 4-1: config 0 descriptor?? [ 655.306218][ T5750] usb 4-1: Could not set interface, error -71 [ 655.700145][ T5750] usb 4-1: USB disconnect, device number 20 [ 656.688481][ T5630] block nbd1: Receive control failed (result -107) [ 656.725938][T10923] block nbd1: shutting down sockets [ 656.963343][T10936] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1505'. [ 657.329965][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 657.338765][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 657.701421][T10941] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 661.972174][ T5750] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 662.156842][ T5750] usb 3-1: Using ep0 maxpacket: 16 [ 662.748220][ T5750] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.796550][ T5750] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 662.835343][T10973] binder: 10971:10973 ioctl 4018620d 0 returned -22 [ 662.839482][ T5750] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 662.957467][T10977] binder: 10971:10977 ioctl c0306201 0 returned -14 [ 663.869178][ T5750] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 663.877456][ T5750] usb 3-1: Product: syz [ 663.881804][ T5750] usb 3-1: Manufacturer: syz [ 663.890005][ T5750] usb 3-1: SerialNumber: syz [ 663.949404][ T5750] usb 3-1: config 0 descriptor?? [ 664.031524][ T5750] usb 3-1: can't set config #0, error -71 [ 664.511171][ T5750] usb 3-1: USB disconnect, device number 15 [ 667.303517][T11009] 9pnet_fd: Insufficient options for proto=fd [ 670.794614][T11035] binder: 11034:11035 ioctl 4018620d 0 returned -22 [ 670.828335][T11035] binder: 11034:11035 ioctl c0306201 0 returned -14 [ 670.916071][T11037] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1540'. [ 670.950058][T11037] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1540'. [ 672.165859][ T5812] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 672.817108][ T5812] usb 5-1: Using ep0 maxpacket: 32 [ 673.042126][ T5812] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 673.047694][T11066] overlayfs: missing 'lowerdir' [ 673.056106][ T5812] usb 5-1: config 0 has no interface number 0 [ 673.067232][ T5812] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 673.079480][ T5812] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 673.089698][ T5812] usb 5-1: config 0 interface 85 has no altsetting 0 [ 673.624393][ T5812] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 673.642437][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.659970][ T5812] usb 5-1: Product: syz [ 673.668379][ T5812] usb 5-1: Manufacturer: syz [ 673.678384][ T5812] usb 5-1: SerialNumber: syz [ 673.704992][ T5812] usb 5-1: config 0 descriptor?? [ 674.332499][ T5812] appletouch 5-1:0.85: Geyser mode initialized. [ 674.364254][ T5812] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input25 [ 674.564309][ T5783] usb 5-1: USB disconnect, device number 18 [ 674.806935][ T5783] appletouch 5-1:0.85: input: appletouch disconnected [ 676.174770][T11102] random: crng reseeded on system resumption [ 676.493229][ T5812] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 676.654160][ T5812] usb 2-1: device descriptor read/64, error -71 [ 677.615407][ T5812] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 677.742667][T11076] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 677.764499][ T5812] usb 2-1: device descriptor read/64, error -71 [ 677.882921][ T5812] usb usb2-port1: attempt power cycle [ 681.045088][ T5812] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 681.526348][ T5812] usb 2-1: device descriptor read/8, error -71 [ 682.614478][T11138] overlayfs: failed to resolve './file1': -2 [ 683.396467][T11147] random: crng reseeded on system resumption [ 683.580975][T11156] fuse: Bad value for 'fd' [ 688.354751][T11194] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 688.594574][T11199] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1588'. [ 688.676131][T11199] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1588'. [ 688.728332][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1588'. [ 693.015377][T11227] random: crng reseeded on system resumption [ 693.919745][T11238] binder: 11236:11238 ioctl 4018620d 0 returned -22 [ 693.963918][T11238] binder: 11236:11238 ioctl c0306201 0 returned -14 [ 697.116690][ T5783] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 697.364764][T11245] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 698.292291][ T5783] usb 4-1: Using ep0 maxpacket: 16 [ 698.312359][ T5783] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.328685][ T5783] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 698.344640][ T5783] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 698.354374][ T5783] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 698.368107][ T5783] usb 4-1: Product: syz [ 698.372757][ T5783] usb 4-1: Manufacturer: syz [ 698.378218][ T5783] usb 4-1: SerialNumber: syz [ 698.917673][ T5783] usb 4-1: config 0 descriptor?? [ 698.938989][T11285] random: crng reseeded on system resumption [ 699.443858][T11292] SQUASHFS error: Failed to read block 0x0: -5 [ 700.242691][ T5812] usb 4-1: USB disconnect, device number 21 [ 701.040771][T11308] serio: Serial port ttyS3 [ 707.301915][T11353] random: crng reseeded on system resumption [ 708.958603][ T5763] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 709.587620][ T5763] usb 2-1: Using ep0 maxpacket: 32 [ 709.596730][ T5763] usb 2-1: config 0 has an invalid interface number: 144 but max is 0 [ 709.624324][ T5763] usb 2-1: config 0 has no interface number 0 [ 709.633359][ T5763] usb 2-1: too many endpoints for config 0 interface 144 altsetting 33: 53, using maximum allowed: 30 [ 709.656075][ T5763] usb 2-1: config 0 interface 144 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 709.712697][ T5763] usb 2-1: config 0 interface 144 has no altsetting 0 [ 709.732142][ T5763] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 709.742695][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.784165][ T5763] usb 2-1: Product: syz [ 710.047815][ T5763] usb 2-1: Manufacturer: syz [ 710.076671][ T5763] usb 2-1: SerialNumber: syz [ 710.122910][ T5763] usb 2-1: config 0 descriptor?? [ 710.368984][ T5763] airspy 2-1:0.144: usb_control_msg() failed -71 request 09 [ 710.384518][ T5763] airspy 2-1:0.144: Could not detect board [ 710.407323][ T5763] airspy 2-1:0.144: probe with driver airspy failed with error -71 [ 710.477119][ T5763] usb 2-1: USB disconnect, device number 25 [ 711.515107][T11394] random: crng reseeded on system resumption [ 712.758942][T11404] random: crng reseeded on system resumption [ 713.811768][T11413] random: crng reseeded on system resumption [ 714.076769][T11417] overlayfs: missing 'lowerdir' [ 716.257329][T11434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1657'. [ 716.902070][ T5922] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.995117][ T5922] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.102177][ T9906] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.341980][ T5922] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.958657][T11450] random: crng reseeded on system resumption [ 719.126432][T11459] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 719.952364][T11472] overlayfs: missing 'lowerdir' [ 720.209402][ T5812] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 720.519272][ T5812] usb 2-1: Using ep0 maxpacket: 32 [ 720.546481][ T5812] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 720.565961][ T5812] usb 2-1: config 0 has no interface number 0 [ 720.596297][ T5812] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 720.667115][ T5812] usb 2-1: config 0 interface 85 has no altsetting 0 [ 720.721635][ T5812] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 720.743688][ T30] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 720.760959][ T5763] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 720.779797][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.946587][ T5763] usb 6-1: Using ep0 maxpacket: 16 [ 720.968774][ T5763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.013547][ T5763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.055210][ T5763] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 721.120270][ T5763] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 721.161842][ T5763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.193022][ T5812] usb 2-1: Product: syz [ 721.197344][ T5812] usb 2-1: Manufacturer: syz [ 721.202082][ T5812] usb 2-1: SerialNumber: syz [ 721.204510][ T5763] usb 6-1: config 0 descriptor?? [ 721.217491][ T5812] usb 2-1: config 0 descriptor?? [ 721.352739][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 721.384364][ T30] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.395597][ T30] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 721.415277][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 721.438632][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 721.448604][ T30] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 721.642918][ T5812] appletouch 2-1:0.85: Failed to read mode from device. [ 721.675806][ T5812] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 721.711127][ T30] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 721.762151][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 721.809840][T11483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.818481][ T30] usb 5-1: Product: syz [ 721.818527][ T30] usb 5-1: Manufacturer: syz [ 721.818550][ T30] usb 5-1: SerialNumber: syz [ 721.857566][T11483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.995242][ T30] usb 5-1: config 0 descriptor?? [ 722.213157][ T5763] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 722.215705][ T5812] usb 2-1: USB disconnect, device number 26 [ 722.249479][ T5763] hid_parser_main: 464 callbacks suppressed [ 722.249523][ T5763] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 722.285420][ T5763] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 722.311401][ T5763] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 722.351525][ T5763] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 722.364671][ T5763] microsoft 0003:045E:07DA.0009: no inputs found [ 722.371162][ T5763] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 722.390156][ T5763] usb 6-1: USB disconnect, device number 19 [ 722.434686][ T30] radio-si470x 5-1:0.0: DeviceID=0xc8c1 ChipID=0x0256 [ 722.540907][T11506] fido_id[11506]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 722.700439][ T30] radio-si470x 5-1:0.0: software version 200, hardware version 193 [ 722.924394][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 722.931197][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 722.946873][ T30] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 723.055877][ T30] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 723.162607][ T30] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 723.433724][ T30] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 723.521522][ T30] usb 5-1: USB disconnect, device number 19 [ 723.566064][T11514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1683'. [ 725.390444][T11526] overlayfs: missing 'lowerdir' [ 726.791091][T11542] random: crng reseeded on system resumption [ 728.023262][ T5763] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 728.589175][ T5763] usb 7-1: Using ep0 maxpacket: 32 [ 728.606313][ T5763] usb 7-1: config 0 has an invalid interface number: 144 but max is 0 [ 728.619793][ T5763] usb 7-1: config 0 has no interface number 0 [ 728.632735][ T5763] usb 7-1: too many endpoints for config 0 interface 144 altsetting 33: 53, using maximum allowed: 30 [ 728.657988][ T5763] usb 7-1: config 0 interface 144 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 728.710866][ T5763] usb 7-1: config 0 interface 144 has no altsetting 0 [ 728.754655][ T5763] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 728.767701][ T5763] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.777061][ T5763] usb 7-1: Product: syz [ 728.781905][ T5763] usb 7-1: Manufacturer: syz [ 728.786692][ T5763] usb 7-1: SerialNumber: syz [ 728.802453][ T5763] usb 7-1: config 0 descriptor?? [ 729.102799][ T5763] airspy 7-1:0.144: usb_control_msg() failed -71 request 09 [ 729.125073][ T5763] airspy 7-1:0.144: Could not detect board [ 729.140530][ T5763] airspy 7-1:0.144: probe with driver airspy failed with error -71 [ 729.157675][ T5763] usb 7-1: USB disconnect, device number 17 [ 729.773666][ T5763] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 730.868817][ T5763] usb 4-1: Using ep0 maxpacket: 8 [ 730.903577][ T5763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.931479][ T5763] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 730.966570][ T5763] usb 4-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 730.993562][ T5763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.032988][ T5763] usb 4-1: config 0 descriptor?? [ 735.718091][ T5763] usbhid 4-1:0.0: can't add hid device: -71 [ 735.738493][ T5763] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 735.817929][ T5763] usb 4-1: USB disconnect, device number 22 [ 736.257797][ T5763] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 736.441983][ T5763] usb 4-1: device descriptor read/64, error -71 [ 736.452011][ T30] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 736.644937][ T30] usb 3-1: Using ep0 maxpacket: 32 [ 736.665505][ T30] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 736.677948][ T30] usb 3-1: config 0 has no interface number 0 [ 736.684147][ T30] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 736.696917][ T30] usb 3-1: config 0 interface 85 has no altsetting 0 [ 736.713740][ T30] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 736.736587][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.751246][ T5763] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 736.760577][ T30] usb 3-1: Product: syz [ 736.767184][ T30] usb 3-1: Manufacturer: syz [ 736.777930][ T30] usb 3-1: SerialNumber: syz [ 736.806639][ T30] usb 3-1: config 0 descriptor?? [ 736.923810][ T5763] usb 4-1: device descriptor read/64, error -71 [ 737.485290][ T5763] usb usb4-port1: attempt power cycle [ 737.531658][ T30] appletouch 3-1:0.85: Failed to read mode from device. [ 737.544272][ T30] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 737.926964][ T5763] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 738.113594][ T30] usb 3-1: USB disconnect, device number 16 [ 738.132013][ T5763] usb 4-1: device descriptor read/8, error -71 [ 738.764826][ T5763] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 738.879238][ T5763] usb 4-1: device descriptor read/8, error -71 [ 739.103869][ T5763] usb usb4-port1: unable to enumerate USB device [ 740.091586][T11638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1728'. [ 740.673015][ T5783] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 741.977161][ T5783] usb 2-1: Using ep0 maxpacket: 8 [ 742.034422][ T5783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.103350][ T5783] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 742.176745][ T5783] usb 2-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 742.251713][ T5783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.325222][ T5783] usb 2-1: config 0 descriptor?? [ 743.593726][ T5783] usbhid 2-1:0.0: can't add hid device: -71 [ 743.634233][ T5783] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 743.681926][ T5783] usb 2-1: USB disconnect, device number 27 [ 743.921703][T11502] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 744.193828][T11502] usb 5-1: Using ep0 maxpacket: 32 [ 744.342028][T11502] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 744.458593][T11502] usb 5-1: config 0 interface 0 has no altsetting 0 [ 744.483941][T11502] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 744.600950][T11502] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.650599][T11502] usb 5-1: config 0 descriptor?? [ 745.866951][T11502] corsair-psu 0003:1B1C:1C09.000A: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 745.994749][T11502] corsair-psu 0003:1B1C:1C09.000A: unable to initialize device (-71) [ 746.035961][T11502] corsair-psu 0003:1B1C:1C09.000A: probe with driver corsair-psu failed with error -71 [ 746.090491][T11502] usb 5-1: USB disconnect, device number 20 [ 746.197940][ T30] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 746.391780][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 746.399276][T11691] tmpfs: Unknown parameter 'usrquotauencer' [ 746.443194][T11696] x_tables: duplicate underflow at hook 1 [ 746.458342][T11696] vlan2: entered allmulticast mode [ 746.463518][T11696] macsec0: entered allmulticast mode [ 746.492702][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.546134][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.631879][ T30] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 746.672024][ T30] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 746.701023][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.767898][ T5783] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 747.112084][ T30] usb 4-1: config 0 descriptor?? [ 747.405221][ T5783] usb 3-1: Using ep0 maxpacket: 32 [ 747.459047][ T5783] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 747.481863][T11707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1744'. [ 747.489787][ T5783] usb 3-1: config 0 has no interface number 0 [ 747.515187][ T5783] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 747.566122][ T5783] usb 3-1: config 0 interface 85 has no altsetting 0 [ 747.628988][ T5783] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 747.680623][ T5783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.738583][ T5783] usb 3-1: Product: syz [ 747.806975][ T30] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000B/input/input28 [ 747.820063][ T5783] usb 3-1: Manufacturer: syz [ 747.840584][ T5783] usb 3-1: SerialNumber: syz [ 747.871736][ T5783] usb 3-1: config 0 descriptor?? [ 748.174779][ T30] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 748.819974][ T30] usb 4-1: USB disconnect, device number 27 [ 749.443946][ T5783] appletouch 3-1:0.85: Failed to read mode from device. [ 749.451381][ T5783] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 749.901594][ T5783] usb 3-1: USB disconnect, device number 17 [ 750.348327][T11723] syz.5.1749 (11723) used greatest stack depth: 17136 bytes left [ 751.323061][T11738] tmpfs: Unknown parameter 'usrquotauencer' [ 752.064731][ T5763] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 752.760302][ T5763] usb 7-1: config 0 has an invalid interface number: 120 but max is 0 [ 752.784197][ T5763] usb 7-1: config 0 has no interface number 0 [ 752.809401][ T5763] usb 7-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 753.097130][ T5763] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x86 has invalid maxpacket 38303, setting to 64 [ 753.140180][ T5763] usb 7-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 753.158856][T11759] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 753.175403][ T5763] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.243849][ T5763] usb 7-1: config 0 descriptor?? [ 753.257421][T11743] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 753.648469][ T5763] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.120/input/input30 [ 753.741845][ T5763] usb 7-1: USB disconnect, device number 18 [ 753.742006][ C1] usbtouchscreen 7-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19 [ 753.837375][T11766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1762'. [ 756.725334][ T30] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 756.948044][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 757.272623][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.286358][ T30] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 757.324339][ T30] usb 5-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 757.353393][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.415276][ T30] usb 5-1: config 0 descriptor?? [ 758.270789][ T30] hid (null): usage index exceeded [ 758.314792][ T30] nintendo 0003:057E:201E.000C: ignoring exceeding usage max [ 758.361406][ T30] nintendo 0003:057E:201E.000C: usage index exceeded [ 758.409324][ T30] nintendo 0003:057E:201E.000C: item 0 4 2 0 parsing failed [ 758.447960][ T30] nintendo 0003:057E:201E.000C: HID parse failed [ 758.501900][ T30] nintendo 0003:057E:201E.000C: probe - fail = -22 [ 758.522435][ T30] nintendo 0003:057E:201E.000C: probe with driver nintendo failed with error -22 [ 758.744778][ T30] usb 5-1: USB disconnect, device number 21 [ 761.988237][T11810] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 766.064390][ T5783] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 766.076911][T11855] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 766.286306][T11862] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 766.559065][ T5783] usb 2-1: Using ep0 maxpacket: 8 [ 766.885371][ T30] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 767.078389][ T5783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.089885][ T5783] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 767.102985][ T5783] usb 2-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 767.112766][ T5783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.125375][ T5783] usb 2-1: config 0 descriptor?? [ 767.149475][ T30] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 767.190114][ T30] usb 4-1: config 0 has no interface number 0 [ 767.248522][ T30] usb 4-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 767.401965][T11872] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1795'. [ 767.411126][T11872] netlink: 'syz.5.1795': attribute type 2 has an invalid length. [ 767.681267][ T30] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x86 has invalid maxpacket 38303, setting to 64 [ 767.697877][ T30] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 767.707055][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.720684][ T30] usb 4-1: config 0 descriptor?? [ 767.726562][T11864] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 767.763935][ T30] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input31 [ 767.991246][ T30] usb 4-1: USB disconnect, device number 28 [ 768.121444][ T5783] hid (null): usage index exceeded [ 768.162800][ T5783] nintendo 0003:057E:201E.000D: ignoring exceeding usage max [ 768.356914][ T5783] nintendo 0003:057E:201E.000D: usage index exceeded [ 768.369263][ T5783] nintendo 0003:057E:201E.000D: item 0 4 2 0 parsing failed [ 768.379777][ T5783] nintendo 0003:057E:201E.000D: HID parse failed [ 769.069813][ T5783] nintendo 0003:057E:201E.000D: probe - fail = -22 [ 769.188577][ T5783] nintendo 0003:057E:201E.000D: probe with driver nintendo failed with error -22 [ 769.205791][ T5783] usb 2-1: USB disconnect, device number 28 [ 770.579825][T11896] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1804'. [ 771.492003][ T30] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 773.922031][ T5783] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 774.574391][ T5783] usb 5-1: Using ep0 maxpacket: 16 [ 775.107240][ T5783] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.122325][ T5783] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 775.182874][ T5783] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 775.192407][ T5783] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 775.201859][ T30] usb 6-1: unable to get BOS descriptor or descriptor too short [ 775.202377][ T5783] usb 5-1: Product: syz [ 775.218205][ T5783] usb 5-1: Manufacturer: syz [ 775.223144][ T5783] usb 5-1: SerialNumber: syz [ 775.252569][ T5783] usb 5-1: config 0 descriptor?? [ 775.275901][ T30] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 775.498292][ T30] usb 6-1: can't read configurations, error -71 [ 776.392846][ T5783] usb 5-1: USB disconnect, device number 22 [ 776.573236][T11931] random: crng reseeded on system resumption [ 776.770539][ T5763] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 776.970779][T11940] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 776.991827][T11940] cramfs: wrong magic [ 777.657436][ T5763] usb 4-1: Using ep0 maxpacket: 8 [ 777.686037][ T5763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.706135][ T30] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 777.736048][ T5763] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 777.839453][ T5763] usb 4-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 778.217619][ T5763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.243189][ T5763] usb 4-1: config 0 descriptor?? [ 778.252371][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 778.306764][ T30] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 778.829114][ T30] usb 6-1: can't read configurations, error -61 [ 778.866188][ T30] usb usb6-port1: attempt power cycle [ 778.978791][ T5763] hid (null): usage index exceeded [ 779.365086][ T5763] nintendo 0003:057E:201E.000E: ignoring exceeding usage max [ 779.388854][ T5763] nintendo 0003:057E:201E.000E: usage index exceeded [ 779.399219][ T5763] nintendo 0003:057E:201E.000E: item 0 4 2 0 parsing failed [ 779.416683][ T5763] nintendo 0003:057E:201E.000E: HID parse failed [ 779.431607][ T30] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 779.440579][ T5763] nintendo 0003:057E:201E.000E: probe - fail = -22 [ 779.468174][ T5763] nintendo 0003:057E:201E.000E: probe with driver nintendo failed with error -22 [ 779.513036][ T5763] usb 4-1: USB disconnect, device number 29 [ 779.553086][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 779.620211][ T30] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 782.040241][ T30] usb 6-1: can't read configurations, error -61 [ 782.520520][T11962] binder: BINDER_SET_CONTEXT_MGR already set [ 782.531089][T11962] binder: 11961:11962 ioctl 4018620d 200000004a80 returned -16 [ 785.555581][ T5763] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 785.856380][ T5763] usb 4-1: Using ep0 maxpacket: 16 [ 786.176211][ T5763] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.202644][ T5763] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 786.235715][ T5763] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 786.257271][ T5763] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 786.281539][ T5763] usb 4-1: Product: syz [ 786.658915][ T5763] usb 4-1: Manufacturer: syz [ 786.804522][ T5763] usb 4-1: SerialNumber: syz [ 786.813137][ T5763] usb 4-1: config 0 descriptor?? [ 787.162206][ T5812] usb 4-1: USB disconnect, device number 30 [ 788.302465][ T5763] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 788.455637][ T5783] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 788.485038][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 789.423562][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 790.712304][ T5763] usb 3-1: Using ep0 maxpacket: 8 [ 790.735671][ T5783] usb 2-1: Using ep0 maxpacket: 16 [ 790.935559][ T5783] usb 2-1: device descriptor read/all, error -71 [ 790.965689][ T5763] usb 3-1: device descriptor read/all, error -71 [ 791.132771][T12036] random: crng reseeded on system resumption [ 792.242188][T12051] random: crng reseeded on system resumption [ 793.024532][T12063] lo speed is unknown, defaulting to 1000 [ 793.031103][T12063] lo speed is unknown, defaulting to 1000 [ 793.053797][T12063] lo speed is unknown, defaulting to 1000 [ 793.073826][T12063] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 793.089157][T12063] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 793.106357][T12063] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 793.179115][T12063] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 793.262744][T12063] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 793.577087][T12063] lo speed is unknown, defaulting to 1000 [ 793.585191][T12063] lo speed is unknown, defaulting to 1000 [ 793.594437][T12063] lo speed is unknown, defaulting to 1000 [ 793.602977][T12063] lo speed is unknown, defaulting to 1000 [ 793.611398][T12063] lo speed is unknown, defaulting to 1000 [ 793.618962][T12063] lo speed is unknown, defaulting to 1000 [ 794.423854][ T5763] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 794.530743][ T5750] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 795.471184][ T5763] usb 2-1: Using ep0 maxpacket: 16 [ 795.571901][ T5750] usb 3-1: Using ep0 maxpacket: 8 [ 796.374475][ T5763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.385991][ T5763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.395896][ T5763] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 796.410577][ T5750] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.426420][ T5763] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 796.439347][ T5750] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 796.454505][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.466061][ T5750] usb 3-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 796.476238][ T5750] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.485312][ T5763] usb 2-1: config 0 descriptor?? [ 796.507048][ T5750] usb 3-1: config 0 descriptor?? [ 796.684633][ T30] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 797.236243][T12096] lo speed is unknown, defaulting to 1000 [ 800.039634][ T5763] usbhid 2-1:0.0: can't add hid device: -71 [ 800.048306][ T5750] usbhid 3-1:0.0: can't add hid device: -71 [ 800.083829][ T5763] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 800.092684][ T5750] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 800.131935][ T30] usb 5-1: device not accepting address 23, error -71 [ 800.155121][ T5750] usb 3-1: USB disconnect, device number 20 [ 800.169917][ T5763] usb 2-1: USB disconnect, device number 31 [ 801.614325][T11502] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 801.957576][T11502] usb 7-1: Using ep0 maxpacket: 32 [ 801.964791][T11502] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 801.974022][T11502] usb 7-1: config 0 has no interface number 0 [ 801.989040][T11502] usb 7-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 802.016474][T11502] usb 7-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 802.124679][T11502] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 802.832414][T11502] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.877922][T11502] usb 7-1: Product: syz [ 802.924373][T11502] usb 7-1: Manufacturer: syz [ 804.428540][T11502] usb 7-1: SerialNumber: syz [ 804.446033][T11502] usb 7-1: config 0 descriptor?? [ 804.553341][T11502] usb 7-1: can't set config #0, error -71 [ 804.594090][T11502] usb 7-1: USB disconnect, device number 19 [ 804.983897][T12149] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1885'. [ 805.522110][T12137] lo speed is unknown, defaulting to 1000 [ 806.082644][ T5763] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 806.290056][ T5763] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 806.325822][ T5763] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 806.367966][ T5763] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 806.443007][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.593150][ T5763] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 806.643215][ T5763] usb 2-1: invalid MIDI out EP 0 [ 806.751581][T12155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1888'. [ 810.387601][T12182] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1898'. [ 810.764105][T12191] random: crng reseeded on system resumption [ 812.013391][ T5783] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 812.104356][ T5763] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 812.297796][ T5763] usb 2-1: USB disconnect, device number 32 [ 812.323486][ T5783] usb 6-1: Using ep0 maxpacket: 32 [ 812.334968][ T5783] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.345373][ T5783] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 813.114118][ T5783] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 813.128075][ T5783] usb 6-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 813.139833][ T5783] usb 6-1: Product: syz [ 813.144114][ T5783] usb 6-1: Manufacturer: syz [ 813.149525][ T5783] usb 6-1: SerialNumber: syz [ 813.179180][ T5783] usb 6-1: config 0 descriptor?? [ 813.299660][T12209] binder: 12207:12209 ioctl 4018620d 0 returned -22 [ 813.330086][T12209] binder: 12207:12209 ioctl c0306201 0 returned -14 [ 813.542650][ T5812] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 813.613636][ T5763] usb 6-1: USB disconnect, device number 24 [ 813.757277][ T5812] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 813.767689][ T5812] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 813.779699][ T5812] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 813.796039][ T5812] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 813.814881][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.826568][ T5812] usb 3-1: Product: syz [ 813.831250][ T5812] usb 3-1: Manufacturer: syz [ 813.836038][ T5812] usb 3-1: SerialNumber: syz [ 813.868294][ T5812] usb 3-1: config 0 descriptor?? [ 813.889747][T12204] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 813.902611][T12204] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 813.918387][ T5812] usb 3-1: ucan: probing device on interface #0 [ 814.134647][ T5812] usb 3-1: ucan: could not read protocol version, ret=0 [ 814.271685][ T5812] usb 3-1: ucan: probe failed; try to update the device firmware [ 814.358747][ T5812] usb 3-1: USB disconnect, device number 21 [ 815.708491][T12216] lo speed is unknown, defaulting to 1000 [ 819.077213][T12242] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1914'. [ 819.875320][T12255] random: crng reseeded on system resumption [ 821.397354][T12263] binder: 12262:12263 ioctl 4018620d 0 returned -22 [ 821.422455][T12263] binder: 12262:12263 ioctl c0306201 0 returned -14 [ 821.679353][T12268] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1923'. [ 822.050744][T12279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1925'. [ 822.053663][T12284] fuse: Bad value for 'fd' [ 824.869124][T12313] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1939'. [ 825.090066][T12317] binder: 12315:12317 ioctl 4018620d 0 returned -22 [ 825.126220][T12317] binder: 12315:12317 ioctl c0306201 0 returned -14 [ 826.070348][T12318] random: crng reseeded on system resumption [ 828.966743][ T5783] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 829.159452][ T5783] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.170880][ T5783] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 829.215420][ T5783] usb 2-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 829.236948][ T5783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.271778][ T5783] usb 2-1: config 0 descriptor?? [ 829.335930][ T5783] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 831.215577][T12398] random: crng reseeded on system resumption [ 831.340966][T12401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1968'. [ 831.440859][ T5812] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 831.857122][ T5812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.890874][ T5812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.921605][ T5812] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 831.946857][T11502] usb 2-1: USB disconnect, device number 33 [ 831.966849][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.024419][ T5812] usb 6-1: config 0 descriptor?? [ 832.167174][ T30] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 832.303645][T12414] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1974'. [ 833.388714][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 833.431178][ T5812] usbhid 6-1:0.0: can't add hid device: -71 [ 833.453281][ T5812] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 833.883355][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.910419][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.942412][ T5812] usb 6-1: USB disconnect, device number 25 [ 833.973125][ T30] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 834.002599][ T30] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 834.086108][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.178308][ T30] usb 3-1: config 0 descriptor?? [ 834.331735][T12442] random: crng reseeded on system resumption [ 835.051796][ T30] microsoft 0003:045E:07DA.000F: ignoring exceeding usage max [ 835.104191][ T30] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 835.146475][ T30] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 835.177090][ T30] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 835.298036][T12451] random: crng reseeded on system resumption [ 835.756243][ T30] microsoft 0003:045E:07DA.000F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 835.798428][ T30] microsoft 0003:045E:07DA.000F: no inputs found [ 835.806404][ T30] microsoft 0003:045E:07DA.000F: could not initialize ff, continuing anyway [ 836.342761][ T30] usb 3-1: USB disconnect, device number 22 [ 836.514946][T12456] fido_id[12456]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 836.633756][ T5763] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 836.820854][ T5763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.833881][ T5763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.857050][ T5763] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 836.879710][ T5763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.993324][ T5763] usb 6-1: config 0 descriptor?? [ 837.271040][T12471] binder: 12470:12471 ioctl c0306201 200000000080 returned -14 [ 837.323614][T12471] binder: 12470:12471 ioctl c0306201 2000000003c0 returned -14 [ 838.589830][ T5763] usbhid 6-1:0.0: can't add hid device: -71 [ 838.687579][ T5763] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 838.781900][ T5763] usb 6-1: USB disconnect, device number 26 [ 839.604868][T12487] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2001'. [ 840.532883][T12495] random: crng reseeded on system resumption [ 841.548827][T12502] kAFS: No cell specified [ 841.949272][T12509] (syz.6.2005,12509,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 841.958621][T12509] (syz.6.2005,12509,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 843.074119][T12523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2013'. [ 843.304083][ T5763] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 843.527337][ T5763] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 843.578886][ T5763] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 843.640464][ T5763] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 843.752921][ T5783] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 843.760780][ T5763] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.777902][ T5763] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 843.810946][ T5763] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 843.861797][ T5763] usb 7-1: Product: syz [ 843.885535][ T5763] usb 7-1: Manufacturer: syz [ 843.936147][ T5783] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 843.948013][ T5763] cdc_wdm 7-1:1.0: skipping garbage [ 843.958893][ T5763] cdc_wdm 7-1:1.0: skipping garbage [ 843.977047][ T5783] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 843.994543][ T5763] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 844.001239][ T5783] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 844.010682][ T5763] cdc_wdm 7-1:1.0: Unknown control protocol [ 844.021747][ T5783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.035738][T12534] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 844.104736][ T5783] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 844.188363][ T5763] usb 7-1: USB disconnect, device number 20 [ 845.282397][ T5783] usb 4-1: USB disconnect, device number 31 [ 845.297751][T12552] netlink: 840 bytes leftover after parsing attributes in process `syz.1.2020'. [ 848.696522][ T30] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 848.755917][ T5783] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 848.969196][ T30] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 849.000232][ T5783] usb 7-1: Using ep0 maxpacket: 8 [ 849.062223][ T30] usb 4-1: config 0 has no interface number 0 [ 849.127965][ T5783] usb 7-1: unable to get BOS descriptor or descriptor too short [ 849.168299][ T5783] usb 7-1: config 8 has an invalid interface number: 42 but max is 0 [ 849.184294][ T5783] usb 7-1: config 8 has no interface number 0 [ 849.188732][ T30] usb 4-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 849.201991][ T5783] usb 7-1: config 8 interface 42 has no altsetting 0 [ 849.427336][ T30] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x86 has invalid maxpacket 38303, setting to 64 [ 849.439389][ T30] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 849.448884][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.173761][ T5783] usb 7-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=f6.fb [ 850.250615][ T5783] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.295758][ T30] usb 4-1: config 0 descriptor?? [ 850.307342][ T5783] usb 7-1: Product: syz [ 850.317448][T12574] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 850.329852][ T5783] usb 7-1: Manufacturer: syz [ 850.353609][ T5783] usb 7-1: SerialNumber: syz [ 850.357641][ T30] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input32 [ 850.611616][ T5763] usb 4-1: USB disconnect, device number 32 [ 852.189446][ T5783] empeg 7-1:8.42: empeg converter detected [ 852.209532][ T5783] usb 7-1: active config #8 != 1 ?? [ 852.274932][ T5783] usb 7-1: USB disconnect, device number 21 [ 854.023834][T12617] syzkaller1: entered promiscuous mode [ 854.061262][T12617] syzkaller1: entered allmulticast mode [ 854.152399][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 854.917414][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 856.851777][ T5763] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 857.035444][ T5763] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 857.698197][ T5763] usb 5-1: config 0 has no interface number 0 [ 857.704464][ T5763] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 857.961307][ T5763] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x86 has invalid maxpacket 38303, setting to 64 [ 857.987911][ T5763] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 858.016343][ T5763] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.063307][ T5763] usb 5-1: config 0 descriptor?? [ 858.093966][T12632] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 858.128394][ T5763] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input34 [ 858.407325][ C0] usbtouchscreen 5-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 858.443813][ T30] usb 5-1: USB disconnect, device number 25 [ 858.680509][T12663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2059'. [ 862.334098][ T5783] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 862.550959][ T5783] usb 5-1: Using ep0 maxpacket: 32 [ 862.590645][ T30] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 863.119350][ T5783] usb 5-1: device descriptor read/all, error -71 [ 863.125947][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 863.151462][ T30] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 863.178901][ T30] usb 4-1: config 0 has no interface number 0 [ 863.206488][ T30] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 863.255640][ T30] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 863.294716][ T30] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 863.309565][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.318472][ T30] usb 4-1: Product: syz [ 863.337202][ T30] usb 4-1: Manufacturer: syz [ 863.349860][ T30] usb 4-1: SerialNumber: syz [ 863.381745][ T30] usb 4-1: config 0 descriptor?? [ 863.405686][T12695] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 863.418693][T12695] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 863.639232][T11502] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 863.648111][ T5783] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 863.672782][T12695] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 863.761229][T12695] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 863.990549][T11502] usb 7-1: config 0 has an invalid interface number: 120 but max is 0 [ 863.997957][ T5783] usb 5-1: unable to get BOS descriptor or descriptor too short [ 864.020758][T11502] usb 7-1: config 0 has no interface number 0 [ 864.025536][ T5783] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 1951, setting to 1024 [ 864.027772][T11502] usb 7-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 864.042023][ T5783] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024 [ 864.052852][T11502] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x86 has invalid maxpacket 38303, setting to 64 [ 864.079262][ T5783] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 864.094606][ T5783] usb 5-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 864.266031][ T5812] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 864.284711][T11502] usb 7-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 864.300202][T11502] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.302632][ T5783] usb 5-1: config 1 interface 0 has no altsetting 0 [ 864.313441][T11502] usb 7-1: config 0 descriptor?? [ 864.945253][ T5783] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 864.954959][ T5783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.963562][ T5783] usb 5-1: Product: syz [ 864.967826][ T5783] usb 5-1: Manufacturer: syz [ 864.972441][ T5783] usb 5-1: SerialNumber: syz [ 865.119711][T12711] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 865.167227][ T5812] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 865.176015][ T5812] usb 6-1: config 0 has no interface number 0 [ 865.201097][ T5812] usb 6-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 865.268821][ T5812] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x86 has invalid maxpacket 38303, setting to 64 [ 865.290743][ T5812] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 865.303179][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.310259][T12712] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 865.312223][T11502] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.120/input/input36 [ 865.352182][T12712] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 865.362529][ T5812] usb 6-1: config 0 descriptor?? [ 865.373643][T12720] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 865.388237][T12728] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 865.415674][ T5812] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input37 [ 865.506915][ C0] usbtouchscreen 7-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 865.577893][T11502] usb 7-1: USB disconnect, device number 22 [ 865.609211][ T5783] cdc_ether 5-1:1.0: Descriptor too short [ 865.844363][ T5763] usb 6-1: USB disconnect, device number 27 [ 866.742476][ T5783] usb 5-1: USB disconnect, device number 27 [ 866.762246][T12734] usb usb9: usbfs: process 12734 (syz.6.2084) did not claim interface 0 before use [ 867.061713][ T30] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 867.097113][ T30] asix 4-1:0.34: probe with driver asix failed with error -71 [ 867.925213][ T30] usb 4-1: USB disconnect, device number 33 [ 868.083991][ T5783] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 868.519409][ T5783] usb 5-1: unable to get BOS descriptor or descriptor too short [ 868.693536][ T5750] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 868.727007][ T5783] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 868.768277][ T5783] usb 5-1: config 0 has no interface number 0 [ 868.790999][ T5783] usb 5-1: config 0 interface 214 has no altsetting 0 [ 868.818861][ T5783] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f8.15 [ 869.101815][ T5750] usb 7-1: Using ep0 maxpacket: 32 [ 869.124428][ T5783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.171424][ T5783] usb 5-1: Product: syz [ 869.381039][ T5783] usb 5-1: Manufacturer: syz [ 869.386698][ T5783] usb 5-1: SerialNumber: syz [ 869.398427][ T5783] usb 5-1: config 0 descriptor?? [ 869.406864][ T5750] usb 7-1: config 0 has an invalid interface number: 144 but max is 0 [ 869.418651][ T5750] usb 7-1: config 0 has no interface number 0 [ 869.424819][ T5750] usb 7-1: too many endpoints for config 0 interface 144 altsetting 33: 53, using maximum allowed: 30 [ 869.475986][ T5750] usb 7-1: config 0 interface 144 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 870.174585][ T5750] usb 7-1: config 0 interface 144 has no altsetting 0 [ 870.437709][ T5750] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 870.481966][ T5750] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.526691][ T5750] usb 7-1: Product: syz [ 870.547271][ T5750] usb 7-1: Manufacturer: syz [ 870.557790][ T5783] qmi_wwan 5-1:0.214: probe with driver qmi_wwan failed with error -22 [ 870.570786][ T5750] usb 7-1: SerialNumber: syz [ 870.602973][ T5750] usb 7-1: config 0 descriptor?? [ 870.835147][ T5783] usb 5-1: USB disconnect, device number 28 [ 871.736506][ T5750] airspy 7-1:0.144: usb_control_msg() failed -71 request 09 [ 871.760289][ T5750] airspy 7-1:0.144: Could not detect board [ 871.783415][ T5750] airspy 7-1:0.144: probe with driver airspy failed with error -71 [ 871.839531][ T5750] usb 7-1: USB disconnect, device number 23 [ 872.047360][ T5763] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 872.183442][T12785] usb usb9: usbfs: process 12785 (syz.1.2101) did not claim interface 0 before use [ 872.863460][ T5763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.044539][ T5763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.098927][ T5763] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 873.148629][ T5763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.204505][ T5763] usb 6-1: config 0 descriptor?? [ 875.534862][ T5763] usbhid 6-1:0.0: can't add hid device: -71 [ 875.552100][ T5763] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 875.563625][ T5763] usb 6-1: USB disconnect, device number 28 [ 875.677614][T12814] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 883.235647][ T30] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 883.441204][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.456003][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.467072][ T30] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 883.507742][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.559948][ T30] usb 5-1: config 0 descriptor?? [ 885.308325][ T30] usbhid 5-1:0.0: can't add hid device: -71 [ 885.314615][ T30] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 886.683904][ T30] usb 5-1: USB disconnect, device number 29 [ 888.479744][T12913] hfsplus: unable to find HFS+ superblock [ 889.922825][T12924] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 889.929449][T12924] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 890.214912][T12924] vhci_hcd vhci_hcd.0: Device attached [ 890.224387][ T30] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 890.298083][T12927] vhci_hcd: connection closed [ 890.299975][ T143] vhci_hcd vhci_hcd.2: stop threads [ 890.537744][ T143] vhci_hcd vhci_hcd.2: release socket [ 890.577039][ T143] vhci_hcd vhci_hcd.2: disconnect device [ 890.620671][T11502] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 890.681697][ T30] usb 2-1: unable to get BOS descriptor or descriptor too short [ 891.080358][ T30] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 891.179029][ T30] usb 2-1: can't read configurations, error -71 [ 892.789069][T12961] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2156'. [ 893.433819][ T5783] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 893.443321][ T5750] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 893.815142][T12969] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2161'. [ 894.798594][ T5750] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.820361][ T5783] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 894.837413][ T5750] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.853090][ T5783] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 894.881362][ T5750] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 894.896605][ T5783] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 894.916188][ T5750] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.629311][ T5783] usb 3-1: config 220 has no interface number 2 [ 895.637511][ T5783] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 895.650921][ T5783] usb 3-1: config 220 interface 0 has no altsetting 0 [ 895.659610][ T5750] usb 5-1: config 0 descriptor?? [ 895.664682][ T5783] usb 3-1: config 220 interface 76 has no altsetting 0 [ 895.675308][ T5783] usb 3-1: config 220 interface 1 has no altsetting 0 [ 895.790411][T12979] random: crng reseeded on system resumption [ 895.886920][ T5783] usb 3-1: string descriptor 0 read error: -71 [ 895.907211][ T5783] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 895.931285][ T5783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.940716][ T5750] usb 5-1: can't set config #0, error -71 [ 896.316371][ T5750] usb 5-1: USB disconnect, device number 30 [ 896.380680][ T5783] usb 3-1: can't set config #220, error -71 [ 896.422547][ T5783] usb 3-1: USB disconnect, device number 23 [ 896.513751][T12988] openvswitch: netlink: Key type 297 is out of range max 32 [ 896.658732][T12994] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 896.665316][T12994] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 896.998844][T12994] vhci_hcd vhci_hcd.0: Device attached [ 897.121817][T12995] vhci_hcd: connection closed [ 897.125234][ T5919] vhci_hcd vhci_hcd.1: stop threads [ 897.140343][ T5919] vhci_hcd vhci_hcd.1: release socket [ 897.148328][ T5919] vhci_hcd vhci_hcd.1: disconnect device [ 897.209314][ T5783] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 897.929071][ T5750] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 898.335099][ T30] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 898.347943][ T5750] usb 7-1: config 0 has an invalid interface number: 120 but max is 0 [ 898.385538][ T5750] usb 7-1: config 0 has no interface number 0 [ 898.434366][ T5750] usb 7-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 898.513875][ T5750] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x86 has invalid maxpacket 38303, setting to 64 [ 898.564539][ T5750] usb 7-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 898.589631][ T5750] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.612919][ T30] usb 3-1: device descriptor read/64, error -71 [ 898.624008][ T5750] usb 7-1: config 0 descriptor?? [ 898.657634][T13011] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 898.691095][ T5750] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.120/input/input40 [ 898.880072][T11502] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 898.887809][ T30] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 898.937239][ T5750] usb 7-1: USB disconnect, device number 24 [ 899.093720][ T30] usb 3-1: device descriptor read/64, error -71 [ 899.122687][T11502] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.168224][T11502] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.202700][T11502] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 899.258214][ T30] usb usb3-port1: attempt power cycle [ 899.277193][T11502] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.639880][T11502] usb 2-1: config 0 descriptor?? [ 899.927547][ T30] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 899.961324][ T30] usb 3-1: device descriptor read/8, error -71 [ 900.149640][T11502] usbhid 2-1:0.0: can't add hid device: -71 [ 900.230149][T11502] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 900.306858][ T30] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 900.340537][T13041] random: crng reseeded on system resumption [ 900.429520][T11502] usb 2-1: USB disconnect, device number 36 [ 900.891350][ T30] usb 3-1: device descriptor read/8, error -71 [ 901.028395][ T30] usb usb3-port1: unable to enumerate USB device [ 903.614385][ T5750] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 903.930214][ T5750] usb 7-1: config 0 has an invalid interface number: 120 but max is 0 [ 903.943317][ T5750] usb 7-1: config 0 has no interface number 0 [ 903.952870][ T5750] usb 7-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 903.970951][ T5750] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x86 has invalid maxpacket 38303, setting to 64 [ 903.985051][ T5750] usb 7-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 903.995987][ T5750] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.018554][ T5750] usb 7-1: config 0 descriptor?? [ 904.038816][T13067] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 904.057093][ T5750] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.120/input/input41 [ 904.277363][ T5750] usb 7-1: USB disconnect, device number 25 [ 904.385717][T13084] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2201'. [ 904.441550][T13084] netlink: 'syz.1.2201': attribute type 2 has an invalid length. [ 904.629186][ T30] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 904.779908][ T30] usb 3-1: device descriptor read/64, error -71 [ 904.894565][T13094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2207'. [ 905.077924][ T30] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 905.177587][T13103] random: crng reseeded on system resumption [ 905.335394][ T30] usb 3-1: device descriptor read/64, error -71 [ 905.662882][ T31] kauditd_printk_skb: 15 callbacks suppressed [ 905.662908][ T31] audit: type=1326 audit(1777151694.103:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13100 comm="syz.5.2210" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55a819cdd9 code=0x0 [ 905.708995][ T30] usb usb3-port1: attempt power cycle [ 906.521776][ T5750] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 906.558383][ T30] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 906.608054][ T30] usb 3-1: device descriptor read/8, error -71 [ 906.706102][ T5750] usb 6-1: config 0 has no interfaces? [ 906.720163][ T5750] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 906.746443][ T5750] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.873225][ T30] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 907.087715][ T30] usb 3-1: device descriptor read/8, error -71 [ 907.215611][ T30] usb usb3-port1: unable to enumerate USB device [ 908.019950][ T5750] usb 6-1: config 0 descriptor?? [ 908.108898][T13124] batman_adv: batadv0: Adding interface: dummy0 [ 908.115499][T13124] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.141356][T13124] batman_adv: batadv0: Interface activated: dummy0 [ 908.258744][ T5783] usb 6-1: USB disconnect, device number 29 [ 908.341699][T13119] batadv0: mtu less than device minimum [ 908.350226][T13119] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 908.363868][T13119] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 908.377971][T13119] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 908.389464][T13119] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 908.401050][T13119] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 908.414348][T13119] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 908.426079][T13119] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 908.437730][T13119] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 908.449368][T13119] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 908.786014][ T5763] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 908.957376][ T5763] usb 3-1: Using ep0 maxpacket: 16 [ 908.958431][T11502] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 908.965113][ T5763] usb 3-1: unable to get BOS descriptor or descriptor too short [ 908.982720][ T5763] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05 [ 908.992255][ T5763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.000363][ T5763] usb 3-1: Product: syz [ 909.005295][ T5763] usb 3-1: Manufacturer: syz [ 909.010201][ T5763] usb 3-1: SerialNumber: syz [ 909.128273][T11502] usb 4-1: Using ep0 maxpacket: 16 [ 909.155343][T11502] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 909.180006][T11502] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 909.220493][T11502] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 909.280697][T11502] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 909.336715][T11502] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 909.455561][T11502] usb 4-1: config 0 has no interface number 0 [ 909.527583][T11502] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 909.552395][T11502] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 909.563016][T11502] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 909.565009][ T5763] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 909.714951][T11502] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 909.732415][ T5763] gspca_vc032x: reg_w err -71 [ 909.780269][ T5763] gspca_vc032x: I2c Bus Busy Wait 00 [ 909.816311][T11502] usb 4-1: config 0 interface 125 has no altsetting 0 [ 909.820342][ T5763] gspca_vc032x: I2c Bus Busy Wait 00 [ 909.850990][T11502] usb 4-1: config 0 interface 125 has no altsetting 2 [ 909.856203][ T5763] gspca_vc032x: I2c Bus Busy Wait 00 [ 909.866997][ T5763] gspca_vc032x: I2c Bus Busy Wait 00 [ 909.876571][ T5763] gspca_vc032x: I2c Bus Busy Wait 00 [ 909.886905][ T5763] gspca_vc032x: I2c Bus Busy Wait 00 [ 909.900403][ T5763] gspca_vc032x: I2c Bus Busy Wait 00 [ 909.910905][ T5763] gspca_vc032x: I2c Bus Busy Wait 00 [ 909.922847][ T5763] gspca_vc032x: I2c Bus Busy Wait 00 [ 910.079352][T11502] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 910.103794][ T5763] gspca_vc032x: I2c Bus Busy Wait 00 [ 910.109855][ T5763] gspca_vc032x: I2c Bus Busy Wait 00 [ 910.136558][ T5763] gspca_vc032x: I2c Bus Busy Wait 00 [ 910.357421][ T5783] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 910.837516][T11502] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.845959][T11502] usb 4-1: Product: syz [ 910.850906][T11502] usb 4-1: Manufacturer: syz [ 910.852800][ T5763] gspca_vc032x: I2c Bus Busy Wait 00 [ 910.856034][T11502] usb 4-1: SerialNumber: syz [ 910.899513][ T5763] gspca_vc032x: I2c Bus Busy Wait 00 [ 910.909718][T11502] usb 4-1: config 0 descriptor?? [ 910.928073][ T5763] gspca_vc032x: I2c Bus Busy Wait 00 [ 910.944993][T11502] usb 4-1: selecting invalid altsetting 2 [ 910.957679][ T5763] gspca_vc032x: I2c Bus Busy Wait 00 [ 910.980738][ T5763] gspca_vc032x: I2c Bus Busy Wait 00 [ 910.997151][ T5763] gspca_vc032x: I2c Bus Busy Wait 00 [ 911.029693][ T5763] gspca_vc032x: I2c Bus Busy Wait 00 [ 911.035482][ T5783] usb 6-1: device descriptor read/64, error -71 [ 911.050634][ T5763] gspca_vc032x: Unknown sensor... [ 911.071600][ T5763] vc032x 3-1:12.0: probe with driver vc032x failed with error -22 [ 911.121899][ T5763] usb 3-1: USB disconnect, device number 32 [ 911.172870][ C1] usb 4-1: async_complete: urb error -71 [ 911.178675][ C1] usb 4-1: async_complete: urb error -71 [ 911.184393][ C1] usb 4-1: async_complete: urb error -71 [ 911.190186][ C1] usb 4-1: async_complete: urb error -71 [ 911.250085][T11502] get_1284_register: usb error -71 [ 911.278796][T11502] usb 4-1: USB disconnect, device number 34 [ 911.308055][ T5783] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 911.817328][ T5783] usb 6-1: device descriptor read/64, error -71 [ 911.949472][ T5783] usb usb6-port1: attempt power cycle [ 912.857460][ T5783] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 912.943957][ T5783] usb 6-1: device descriptor read/8, error -71 [ 913.645942][ T5763] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 913.712307][ T5783] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 914.209724][ T5783] usb 6-1: device not accepting address 33, error -71 [ 914.226483][ T5783] usb usb6-port1: unable to enumerate USB device [ 914.233159][ T5763] usb 3-1: config 0 has no interfaces? [ 914.240252][ T5763] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 914.259464][ T5763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.316691][ T5763] usb 3-1: config 0 descriptor?? [ 914.613961][T11502] usb 3-1: USB disconnect, device number 33 [ 917.619522][T13224] binder: 13223:13224 ioctl 4018620d 0 returned -22 [ 917.659026][T13224] binder: 13223:13224 ioctl c0306201 0 returned -14 [ 918.224181][T11502] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 918.382040][T11502] usb 2-1: device descriptor read/64, error -71 [ 919.483374][T11502] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 919.985994][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 920.056595][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 920.063335][ T5783] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 920.108812][T13246] random: crng reseeded on system resumption [ 920.148515][T11502] usb 2-1: device descriptor read/64, error -71 [ 920.327442][T11502] usb usb2-port1: attempt power cycle [ 920.532460][ T5783] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 920.546563][ T5783] usb 3-1: config 0 has no interfaces? [ 920.553388][ T5783] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 921.433930][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.475429][ T5783] usb 3-1: config 0 descriptor?? [ 921.673429][ T5763] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 921.857606][ T5763] usb 4-1: config 0 has no interfaces? [ 921.863560][ T5763] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 921.894379][ T5763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.332934][ T5763] usb 4-1: config 0 descriptor?? [ 922.590968][ T5763] usb 4-1: USB disconnect, device number 35 [ 923.360351][ T5783] usb 3-1: USB disconnect, device number 34 [ 923.532740][ T30] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 923.569410][T13275] binder: 13274:13275 ioctl 4018620d 0 returned -22 [ 923.609730][T13275] binder: 13274:13275 ioctl c0306201 0 returned -14 [ 923.874686][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 923.934456][ T30] usb 5-1: config 0 has an invalid interface number: 144 but max is 0 [ 923.963255][ T30] usb 5-1: config 0 has no interface number 0 [ 924.055133][T13283] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2274'. [ 924.674553][ T30] usb 5-1: too many endpoints for config 0 interface 144 altsetting 33: 53, using maximum allowed: 30 [ 924.706672][ T30] usb 5-1: config 0 interface 144 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 924.740265][ T30] usb 5-1: config 0 interface 144 has no altsetting 0 [ 924.792668][ T30] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 925.004376][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.801067][T11502] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 925.821735][ T30] usb 5-1: Product: syz [ 925.855362][ T30] usb 5-1: Manufacturer: syz [ 925.892296][ T30] usb 5-1: SerialNumber: syz [ 925.950694][ T30] usb 5-1: config 0 descriptor?? [ 926.008625][T13297] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 926.015262][T13297] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 926.015299][T11502] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 926.050874][ T30] usb 5-1: can't set config #0, error -71 [ 926.080013][ T30] usb 5-1: USB disconnect, device number 31 [ 926.093014][T13297] vhci_hcd vhci_hcd.0: Device attached [ 926.106187][T11502] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.150238][T11502] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.169438][T11502] usb 4-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 926.191851][T11502] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.249796][T11502] usb 4-1: config 0 descriptor?? [ 926.263432][T13298] vhci_hcd: connection closed [ 926.263979][ T5919] vhci_hcd vhci_hcd.2: stop threads [ 926.274774][ T5812] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 926.274971][ T5919] vhci_hcd vhci_hcd.2: release socket [ 926.290070][ T5919] vhci_hcd vhci_hcd.2: disconnect device [ 926.335621][ T5783] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 926.369244][T13306] random: crng reseeded on system resumption [ 926.867784][ T5812] usb 7-1: too many configurations: 112, using maximum allowed: 8 [ 926.889283][ T5812] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 926.897228][ T5812] usb 7-1: can't read configurations, error -61 [ 927.059565][ T5812] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 927.256771][ T5812] usb 7-1: too many configurations: 112, using maximum allowed: 8 [ 927.288591][T11502] usbhid 4-1:0.0: can't add hid device: -71 [ 927.309898][ T5812] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 927.320245][T11502] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 927.345483][ T5812] usb 7-1: can't read configurations, error -61 [ 927.355724][ T5812] usb usb7-port1: attempt power cycle [ 927.378573][T11502] usb 4-1: USB disconnect, device number 36 [ 927.906554][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 927.978148][ T5812] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 928.001341][ T5812] usb 7-1: too many configurations: 112, using maximum allowed: 8 [ 928.012992][ T5812] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 928.021360][ T5812] usb 7-1: can't read configurations, error -61 [ 928.101836][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 928.124254][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 928.139480][ T10] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 928.164436][ T10] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 928.172474][ T5812] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 928.182236][ T10] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 928.191922][ T5783] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 928.205358][ T5812] usb 7-1: too many configurations: 112, using maximum allowed: 8 [ 928.208296][ T10] usb 3-1: Product: syz [ 928.224144][ T10] usb 3-1: Manufacturer: syz [ 928.229008][ T10] usb 3-1: SerialNumber: syz [ 928.233558][ T5812] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 928.245452][ T5812] usb 7-1: can't read configurations, error -61 [ 928.253892][ T5812] usb usb7-port1: unable to enumerate USB device [ 928.375511][ T5783] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.395018][ T5783] usb 5-1: config 0 has no interfaces? [ 928.408701][ T5783] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 928.428793][ T5783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.464583][ T5783] usb 5-1: config 0 descriptor?? [ 928.723130][T13325] binder: 13322:13325 ioctl 4018620d 0 returned -22 [ 928.751820][T13325] binder: 13322:13325 ioctl c0306201 0 returned -14 [ 930.288948][T13340] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 930.295663][T13340] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 930.323781][T13340] vhci_hcd vhci_hcd.0: Device attached [ 930.813565][T13341] vhci_hcd: connection closed [ 930.814227][ T1169] vhci_hcd vhci_hcd.1: stop threads [ 930.829865][ T5763] usb 3-1: USB disconnect, device number 35 [ 930.834615][ T1169] vhci_hcd vhci_hcd.1: release socket [ 930.869594][ T1169] vhci_hcd vhci_hcd.1: disconnect device [ 930.874633][ T5783] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 930.991780][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 931.017528][ T5812] usb 5-1: USB disconnect, device number 32 [ 931.173298][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 931.277854][T13353] random: crng reseeded on system resumption [ 931.365896][ T10] usb 4-1: config 0 has an invalid interface number: 144 but max is 0 [ 931.391016][ T10] usb 4-1: config 0 has no interface number 0 [ 931.411506][ T10] usb 4-1: too many endpoints for config 0 interface 144 altsetting 33: 53, using maximum allowed: 30 [ 931.463580][ T10] usb 4-1: config 0 interface 144 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 931.781393][ T10] usb 4-1: config 0 interface 144 has no altsetting 0 [ 931.811692][ T10] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 931.835487][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.853221][ T10] usb 4-1: Product: syz [ 931.867651][ T10] usb 4-1: Manufacturer: syz [ 931.890781][ T10] usb 4-1: SerialNumber: syz [ 932.353005][ T10] usb 4-1: config 0 descriptor?? [ 932.767226][T13365] comedi comedi0: comedi_config --init_data is deprecated [ 932.883340][T13365] comedi comedi0: Minor 3 could not be opened [ 933.112683][ T10] airspy 4-1:0.144: usb_control_msg() failed -71 request 09 [ 933.120280][ T10] airspy 4-1:0.144: Could not detect board [ 933.126577][ T10] airspy 4-1:0.144: probe with driver airspy failed with error -71 [ 933.359934][ T10] usb 4-1: USB disconnect, device number 37 [ 934.651932][T11502] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 934.778805][T13391] o2cb: This node has not been configured. [ 934.786063][T13391] o2cb: Cluster check failed. Fix errors before retrying. [ 934.793848][T13391] (syz.3.2309,13391,1):user_dlm_register:674 ERROR: status = -22 [ 934.801796][T13391] (syz.3.2309,13391,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 935.366500][T11502] usb 3-1: too many configurations: 112, using maximum allowed: 8 [ 935.382930][T11502] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 935.533969][T11502] usb 3-1: can't read configurations, error -61 [ 935.712680][T13395] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 935.719268][T13395] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 935.742373][T11502] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 935.781663][T13395] vhci_hcd vhci_hcd.0: Device attached [ 935.920866][T11502] usb 3-1: too many configurations: 112, using maximum allowed: 8 [ 935.953076][T13397] vhci_hcd: connection closed [ 935.953718][ T143] vhci_hcd vhci_hcd.3: stop threads [ 935.967340][T11502] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 935.982601][ T143] vhci_hcd vhci_hcd.3: release socket [ 935.990387][T11502] usb 3-1: can't read configurations, error -61 [ 936.008459][ T143] vhci_hcd vhci_hcd.3: disconnect device [ 936.032723][T11502] usb usb3-port1: attempt power cycle [ 936.046110][ T5812] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 936.240859][ T30] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 936.262315][ T5812] usb 39-1: enqueue for inactive port 0 [ 936.366726][ T5812] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 936.366726][ T5783] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 936.404020][T13411] random: crng reseeded on system resumption [ 936.559299][T11502] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 936.591287][ T30] usb 6-1: Using ep0 maxpacket: 16 [ 936.878240][ T30] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 936.908996][ T30] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 937.024593][T11502] usb 3-1: too many configurations: 112, using maximum allowed: 8 [ 937.048575][T11502] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 937.063651][ T30] usb 6-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 937.084304][T11502] usb 3-1: can't read configurations, error -61 [ 937.097901][ T30] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 937.140099][ T30] usb 6-1: Product: syz [ 937.159396][ T30] usb 6-1: Manufacturer: syz [ 937.179242][ T30] usb 6-1: SerialNumber: syz [ 937.200226][ T30] usb 6-1: config 0 descriptor?? [ 937.253654][T11502] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 937.322971][T11502] usb 3-1: too many configurations: 112, using maximum allowed: 8 [ 937.364628][T11502] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 937.398924][T11502] usb 3-1: can't read configurations, error -61 [ 937.582204][T11502] usb usb3-port1: unable to enumerate USB device [ 937.600881][ T30] libceph: connect (1)[c::]:6789 error -101 [ 937.643792][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 937.678315][T11502] usb 6-1: USB disconnect, device number 34 [ 937.863047][T13426] net_ratelimit: 10 callbacks suppressed [ 937.863069][T13426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 938.198283][ T30] libceph: connect (1)[c::]:6789 error -101 [ 938.230428][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 938.916772][T13416] ceph: No mds server is up or the cluster is laggy [ 941.041854][T13453] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 941.048429][T13453] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 941.131225][T13453] vhci_hcd vhci_hcd.0: Device attached [ 941.320162][T13454] vhci_hcd: connection closed [ 941.321708][ T1169] vhci_hcd vhci_hcd.3: stop threads [ 941.373159][T13462] random: crng reseeded on system resumption [ 941.441141][ T1169] vhci_hcd vhci_hcd.3: release socket [ 941.447812][ T1169] vhci_hcd vhci_hcd.3: disconnect device [ 941.741897][ T5763] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 941.760133][ T5763] usb 39-1: enqueue for inactive port 0 [ 941.806195][ T5783] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 941.850438][ T5763] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 941.974770][ T5783] usb 3-1: too many configurations: 112, using maximum allowed: 8 [ 942.011363][ T5783] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 942.044135][ T5783] usb 3-1: can't read configurations, error -61 [ 942.204154][ T5783] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 943.403928][ T5783] usb 3-1: too many configurations: 112, using maximum allowed: 8 [ 944.104642][ T5783] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 944.112581][ T5783] usb 3-1: can't read configurations, error -61 [ 944.902355][T13476] lo speed is unknown, defaulting to 1000 [ 945.953338][ T5783] usb usb3-port1: attempt power cycle [ 947.238094][ T5783] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 947.252111][T13485] ceph: No mds server is up or the cluster is laggy [ 947.268010][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 947.289722][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 947.878829][ T5783] usb 3-1: device descriptor read/8, error -71 [ 948.750857][ T10] IPVS: starting estimator thread 0... [ 948.902939][T13512] IPVS: using max 36 ests per chain, 86400 per kthread [ 950.578150][T13525] random: crng reseeded on system resumption [ 952.150028][ T5763] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 952.255675][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 952.280113][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 952.333102][ T5763] usb 6-1: Using ep0 maxpacket: 8 [ 952.357105][ T5763] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 952.375948][ T5763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.421150][ T5763] pvrusb2: Hardware description: Terratec Grabster AV400 [ 952.436683][ T5763] pvrusb2: ********** [ 952.442155][ T5763] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 952.458767][ T5763] pvrusb2: Important functionality might not be entirely working. [ 952.475896][ T5763] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 952.500269][ T5763] pvrusb2: ********** [ 952.558395][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 952.631869][ T2358] pvrusb2: Invalid write control endpoint [ 952.884551][T13539] pvrusb2: Invalid write control endpoint [ 952.918829][ T2358] pvrusb2: Invalid write control endpoint [ 952.937097][ T5763] usb 6-1: USB disconnect, device number 35 [ 952.967576][ T2358] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 953.023088][ T2358] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 953.058369][ T2358] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 953.111777][ T2358] pvrusb2: Device being rendered inoperable [ 953.156496][ T2358] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 953.208151][ T2358] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 953.285774][ T2358] pvrusb2: Attached sub-driver cx25840 [ 953.556417][ T2358] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 953.586025][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 953.609986][ T2358] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 954.009590][T13543] ceph: No mds server is up or the cluster is laggy [ 954.425487][T13581] random: crng reseeded on system resumption [ 955.381813][T13589] usb usb9: usbfs: process 13589 (syz.2.2371) did not claim interface 0 before use [ 955.797830][T13598] comedi comedi0: comedi_config --init_data is deprecated [ 955.850986][T13598] comedi comedi0: Minor 3 could not be opened [ 955.858363][ T5812] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 956.310050][T13606] fuse: Bad value for 'fd' [ 956.331783][ T5812] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 956.352227][ T5812] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 956.391593][ T5812] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 956.409547][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.418464][ T5812] usb 2-1: Product: syz [ 956.425914][ T5812] usb 2-1: Manufacturer: syz [ 956.436807][ T5812] usb 2-1: SerialNumber: syz [ 956.503764][ T5812] usb 2-1: config 0 descriptor?? [ 956.758701][ T5812] usb 2-1: USB disconnect, device number 40 [ 956.776652][T13612] binder: 13611:13612 ioctl 4018620d 0 returned -22 [ 956.851850][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 957.286781][T11502] libceph: connect (1)[c::]:6789 error -101 [ 957.301680][T11502] libceph: mon0 (1)[c::]:6789 connect error [ 957.450233][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 957.459577][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 957.482422][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.516284][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 957.523652][ T10] pvrusb2: ********** [ 957.530105][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 957.541018][ T10] pvrusb2: Important functionality might not be entirely working. [ 957.549452][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 957.562482][ T10] pvrusb2: ********** [ 957.600189][ T5812] libceph: connect (1)[c::]:6789 error -101 [ 957.608374][ T5812] libceph: mon0 (1)[c::]:6789 connect error [ 957.690080][T13614] ceph: No mds server is up or the cluster is laggy [ 957.733310][ T2358] pvrusb2: Invalid write control endpoint [ 958.093947][T13608] pvrusb2: Invalid write control endpoint [ 958.164542][T13631] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2385'. [ 958.758238][ T2358] pvrusb2: Invalid write control endpoint [ 958.858845][ T5812] usb 3-1: USB disconnect, device number 44 [ 958.924115][ T2358] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 958.969569][ T2358] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 959.022484][ T2358] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 959.078827][ T2358] pvrusb2: Device being rendered inoperable [ 959.109811][ T2358] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 959.118998][ T2358] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 959.124380][ T2358] pvrusb2: Attached sub-driver cx25840 [ 959.124434][ T2358] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 959.124452][ T2358] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 959.486515][T13646] fuse: Bad value for 'fd' [ 959.512718][T11502] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 959.688661][T13651] comedi comedi0: comedi_config --init_data is deprecated [ 959.715173][T13651] comedi comedi0: Minor 3 could not be opened [ 960.082273][T11502] usb 4-1: Using ep0 maxpacket: 16 [ 960.141111][T11502] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 960.155920][T11502] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 960.176042][T11502] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 960.326192][T13658] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2395'. [ 960.335540][T13658] netlink: 'syz.1.2395': attribute type 2 has an invalid length. [ 960.957154][T11502] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 960.965702][T11502] usb 4-1: Product: syz [ 960.976423][T11502] usb 4-1: Manufacturer: syz [ 960.989906][T11502] usb 4-1: SerialNumber: syz [ 961.066532][T11502] usb 4-1: config 0 descriptor?? [ 961.243990][ T10] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 961.368770][ T5763] usb 4-1: USB disconnect, device number 38 [ 961.864258][T11502] libceph: connect (1)[c::]:6789 error -101 [ 961.870630][T11502] libceph: mon0 (1)[c::]:6789 connect error [ 961.902257][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 961.946579][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 961.972777][ T10] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 961.986679][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.001514][ T10] usb 6-1: Product: syz [ 962.005899][ T10] usb 6-1: Manufacturer: syz [ 962.013560][ T10] usb 6-1: SerialNumber: syz [ 962.026937][ T10] usb 6-1: config 0 descriptor?? [ 962.166440][T11502] libceph: connect (1)[c::]:6789 error -101 [ 962.182265][T11502] libceph: mon0 (1)[c::]:6789 connect error [ 962.240551][T13668] ceph: No mds server is up or the cluster is laggy [ 962.255145][ T5763] usb 6-1: USB disconnect, device number 36 [ 964.687499][T13688] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 964.694078][T13688] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 964.784727][T13688] vhci_hcd vhci_hcd.0: Device attached [ 964.883908][T13693] vhci_hcd: connection closed [ 964.890985][ T1156] vhci_hcd vhci_hcd.2: stop threads [ 964.913582][ T1156] vhci_hcd vhci_hcd.2: release socket [ 964.941795][ T1156] vhci_hcd vhci_hcd.2: disconnect device [ 965.005282][ T5763] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 965.007064][T11502] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 965.166527][ T5763] usb 7-1: Using ep0 maxpacket: 8 [ 965.377467][T13711] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 965.945905][ T5763] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 965.955373][ T5763] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.103674][ T5763] pvrusb2: Hardware description: Terratec Grabster AV400 [ 966.116765][ T5763] pvrusb2: ********** [ 966.122840][ T5763] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 966.130319][T13712] comedi comedi0: comedi_config --init_data is deprecated [ 966.148107][ T5763] pvrusb2: Important functionality might not be entirely working. [ 966.202665][T13712] comedi comedi0: Minor 3 could not be opened [ 966.557741][ T5763] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 966.603625][ T5763] pvrusb2: ********** [ 966.618507][ T2358] pvrusb2: Invalid write control endpoint [ 966.835999][T13698] pvrusb2: Invalid write control endpoint [ 966.869954][ T5763] usb 7-1: USB disconnect, device number 30 [ 967.744686][ T2358] pvrusb2: Invalid write control endpoint [ 967.816007][ T2358] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 967.830897][ T2358] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 967.843207][ T2358] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 967.915114][ T2358] pvrusb2: Device being rendered inoperable [ 967.950307][ T2358] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 967.982563][ T2358] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 968.035316][ T2358] pvrusb2: Attached sub-driver cx25840 [ 968.071728][ T2358] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 968.279367][ T2358] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 969.520592][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 970.271530][ T10] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 970.298705][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.326461][ T10] usb 5-1: Product: syz [ 970.349361][ T10] usb 5-1: Manufacturer: syz [ 970.370545][ T10] usb 5-1: SerialNumber: syz [ 970.404277][ T10] usb 5-1: config 0 descriptor?? [ 970.595893][T13750] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 970.602476][T13750] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 970.649858][T13750] vhci_hcd vhci_hcd.0: Device attached [ 970.671971][ T5783] usb 5-1: USB disconnect, device number 33 [ 970.705487][T13752] vhci_hcd: connection closed [ 970.705780][ T1156] vhci_hcd vhci_hcd.6: stop threads [ 970.766559][ T1156] vhci_hcd vhci_hcd.6: release socket [ 970.800390][ T1156] vhci_hcd vhci_hcd.6: disconnect device [ 970.882651][T10819] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 971.053701][T10819] usb 3-1: Using ep0 maxpacket: 16 [ 971.067586][T10819] usb 3-1: unable to get BOS descriptor or descriptor too short [ 971.087534][T10819] usb 3-1: config 243 has an invalid interface number: 59 but max is 0 [ 971.107147][T10819] usb 3-1: config 243 has no interface number 0 [ 971.127348][T10819] usb 3-1: config 243 interface 59 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 971.153585][T10819] usb 3-1: config 243 interface 59 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 971.165505][T10819] usb 3-1: config 243 interface 59 altsetting 12 has a duplicate endpoint with address 0x5, skipping [ 971.177595][T10819] usb 3-1: config 243 interface 59 has no altsetting 0 [ 971.198909][T10819] usb 3-1: New USB device found, idVendor=04bb, idProduct=093d, bcdDevice=be.3e [ 971.208909][T10819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.220646][T10819] usb 3-1: Product: syz [ 971.420536][T10819] usb 3-1: Manufacturer: syz [ 971.435489][T10819] usb 3-1: SerialNumber: syz [ 972.353664][T10819] usb 3-1: USB disconnect, device number 45 [ 974.840830][T13788] overlayfs: failed to resolve './file1': -2 [ 974.951031][T13792] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 977.448511][T13814] overlayfs: missing 'lowerdir' [ 980.075933][T13832] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 980.804233][T13842] overlayfs: failed to resolve './file1': -2 [ 981.064965][T13849] overlayfs: missing 'lowerdir' [ 981.141489][T10819] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 981.324864][T10819] usb 3-1: Using ep0 maxpacket: 32 [ 981.447779][T13857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2463'. [ 981.513040][T10819] usb 3-1: config 0 has an invalid interface number: 144 but max is 0 [ 981.531456][T10819] usb 3-1: config 0 has no interface number 0 [ 981.540645][T10819] usb 3-1: too many endpoints for config 0 interface 144 altsetting 33: 53, using maximum allowed: 30 [ 981.556570][T10819] usb 3-1: config 0 interface 144 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 982.354967][T10819] usb 3-1: config 0 interface 144 has no altsetting 0 [ 982.427073][T10819] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 982.480091][T10819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.516463][T10819] usb 3-1: Product: syz [ 982.538712][T10819] usb 3-1: Manufacturer: syz [ 983.589609][T10819] usb 3-1: SerialNumber: syz [ 983.643109][T10819] usb 3-1: config 0 descriptor?? [ 983.789647][T10819] usb 3-1: can't set config #0, error -71 [ 983.848858][T10819] usb 3-1: USB disconnect, device number 46 [ 984.204362][ T58] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 985.047590][ T58] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 985.106751][ T58] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 985.149694][ T58] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 985.363684][T10819] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 985.450518][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 985.855101][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 985.983515][T11502] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 985.992770][T10819] usb 6-1: Using ep0 maxpacket: 16 [ 986.001553][T10819] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.034389][T10819] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 986.064857][T10819] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 986.087631][T10819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.124377][T10819] usb 6-1: config 0 descriptor?? [ 986.197913][T11502] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.210591][T11502] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.222292][T11502] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.257853][T11502] usb 2-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 986.286470][T11502] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.307461][T13888] overlayfs: missing 'lowerdir' [ 986.328808][T11502] usb 2-1: config 0 descriptor?? [ 987.008780][ T5812] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 987.304797][T11502] usbhid 2-1:0.0: can't add hid device: -71 [ 987.324946][T11502] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 987.355754][T11502] usb 2-1: USB disconnect, device number 41 [ 987.495368][T13903] random: crng reseeded on system resumption [ 987.624036][ T5812] usb 4-1: unable to get BOS descriptor or descriptor too short [ 987.642070][ T5812] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 987.664035][ T5812] usb 4-1: config 0 has no interface number 0 [ 987.702635][ T5812] usb 4-1: config 0 interface 214 has no altsetting 0 [ 987.972724][ T5812] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=f8.15 [ 988.002797][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.031382][ T5812] usb 4-1: Product: syz [ 988.039830][ T5812] usb 4-1: Manufacturer: syz [ 988.054380][ T5812] usb 4-1: SerialNumber: syz [ 988.083121][ T5812] usb 4-1: config 0 descriptor?? [ 988.427763][ T5812] qmi_wwan 4-1:0.214: probe with driver qmi_wwan failed with error -22 [ 988.456018][ T5812] usb 4-1: USB disconnect, device number 39 [ 988.527979][T11502] usb 6-1: USB disconnect, device number 37 [ 990.835800][T13944] tmpfs: Unknown parameter 'usrquotauencer' [ 992.126659][ T5763] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 992.222751][T10819] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 992.308268][ T5763] usb 6-1: Using ep0 maxpacket: 16 [ 992.310650][ T5763] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.310690][ T5763] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 992.310725][ T5763] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 992.310781][ T5763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.313242][ T5763] usb 6-1: config 0 descriptor?? [ 992.316767][ T5763] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 992.401094][T10819] usb 4-1: Using ep0 maxpacket: 32 [ 992.434277][T10819] usb 4-1: config 0 has an invalid interface number: 144 but max is 0 [ 992.434312][T10819] usb 4-1: config 0 has no interface number 0 [ 992.434345][T10819] usb 4-1: too many endpoints for config 0 interface 144 altsetting 33: 53, using maximum allowed: 30 [ 992.434423][T10819] usb 4-1: config 0 interface 144 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 992.434459][T10819] usb 4-1: config 0 interface 144 has no altsetting 0 [ 992.451620][T10819] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 992.451650][T10819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.451671][T10819] usb 4-1: Product: syz [ 992.451693][T10819] usb 4-1: Manufacturer: syz [ 992.451715][T10819] usb 4-1: SerialNumber: syz [ 992.454468][T10819] usb 4-1: config 0 descriptor?? [ 992.770562][T10819] airspy 4-1:0.144: usb_control_msg() failed -71 request 09 [ 992.770588][T10819] airspy 4-1:0.144: Could not detect board [ 992.770671][T10819] airspy 4-1:0.144: probe with driver airspy failed with error -71 [ 992.774187][T10819] usb 4-1: USB disconnect, device number 40 [ 993.143579][T11502] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 993.316063][T11502] usb 3-1: config 0 has no interfaces? [ 993.316101][T11502] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 993.316123][T11502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.318689][T11502] usb 3-1: config 0 descriptor?? [ 993.360003][T13973] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2507'. [ 993.674938][T11502] usb 3-1: USB disconnect, device number 47 [ 995.275946][T10819] usb 6-1: USB disconnect, device number 38 [ 995.385447][T13993] tmpfs: Unknown parameter 'usrquotauencer' [ 995.764594][T13994] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2515'. [ 998.993492][T14045] tmpfs: Unknown parameter 'usrquotauencer' [ 1001.487537][ T30] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1001.662146][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.674988][ T30] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1001.686337][ T30] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1001.724343][ T30] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1001.743739][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.752606][ T30] usb 2-1: Product: syz [ 1001.757210][ T30] usb 2-1: Manufacturer: syz [ 1001.761942][ T30] usb 2-1: SerialNumber: syz [ 1001.785611][ T30] usb 2-1: config 0 descriptor?? [ 1001.793627][T14071] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1001.801303][T11502] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1001.810495][ T30] usb 2-1: ucan: probing device on interface #0 [ 1001.824773][ T30] usb 2-1: ucan: invalid EP count (1) [ 1001.830991][ T30] usb 2-1: ucan: probe failed; try to update the device firmware [ 1001.979083][T11502] usb 7-1: Using ep0 maxpacket: 32 [ 1001.986390][T11502] usb 7-1: config 0 has an invalid interface number: 202 but max is 1 [ 1001.995853][T11502] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.009397][T11502] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1002.045984][T11502] usb 7-1: config 0 has no interface number 0 [ 1002.071847][T11502] usb 7-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30 [ 1002.145286][T11502] usb 7-1: config 0 interface 202 altsetting 87 has 0 endpoint descriptors, different from the interface descriptor's value: 182 [ 1002.257516][ T5812] IPVS: starting estimator thread 0... [ 1002.282630][T11502] usb 7-1: config 0 interface 202 has no altsetting 0 [ 1002.429844][T11502] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 1002.466767][T14088] IPVS: using max 26 ests per chain, 62400 per kthread [ 1002.590554][T11502] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.724642][T11502] usb 7-1: Product: syz [ 1002.806636][T11502] usb 7-1: Manufacturer: syz [ 1002.905325][T11502] usb 7-1: SerialNumber: syz [ 1003.084353][T11502] usb 7-1: config 0 descriptor?? [ 1003.193449][T14095] tmpfs: Unknown parameter 'usrquotauencer' [ 1003.876397][T11502] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1004.512893][ T5763] usb 2-1: USB disconnect, device number 42 [ 1005.566363][ T9906] usb 7-1: Failed to submit usb control message: -110 [ 1005.633020][ T9906] usb 7-1: unable to send the bmi data to the device: -110 [ 1005.682537][ T9906] usb 7-1: unable to get target info from device [ 1005.712183][ T9906] usb 7-1: could not get target info (-110) [ 1005.747010][ T9906] usb 7-1: could not probe fw (-110) [ 1005.854328][ T5763] usb 7-1: USB disconnect, device number 31 [ 1006.319989][T14135] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.2561'. [ 1006.344561][T14135] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2561'. [ 1006.527698][ T5812] IPVS: starting estimator thread 0... [ 1006.734705][T14140] IPVS: using max 24 ests per chain, 57600 per kthread [ 1007.554457][T14147] tmpfs: Unknown parameter 'usrquotauencer' [ 1009.386186][T14157] random: crng reseeded on system resumption [ 1012.942702][ T5630] block nbd0: Receive control failed (result -32) [ 1012.956524][ T5630] block nbd0: Receive control failed (result -32) [ 1012.971314][T14193] random: crng reseeded on system resumption [ 1013.027389][T14170] nbd0: detected capacity change from 0 to 128 [ 1013.174721][ T5737] block nbd0: Dead connection, failed to find a fallback [ 1013.246109][ T5737] block nbd0: shutting down sockets [ 1013.281599][ T5737] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1013.430915][T14200] tmpfs: Unknown parameter 'usrquotauencer' [ 1013.882921][ T5737] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1014.275207][ T5737] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1014.310057][ T5737] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1014.387067][ T5737] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1014.523814][T14206] random: crng reseeded on system resumption [ 1015.255197][ T5737] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1015.299609][ T5737] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1015.358104][ T5737] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1015.403196][ T5737] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1015.876556][ T5737] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1016.375470][ T5737] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1016.412501][ T5737] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1016.460815][ T5737] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1016.503448][ T5737] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1016.540103][ T5737] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1016.583223][ T5737] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1016.622797][ T5737] ldm_validate_partition_table(): Disk read failed. [ 1016.665732][ T5737] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1016.725829][ T5737] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1016.756183][ T5737] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1016.806480][ T5737] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1016.841616][ T5737] Dev nbd0: unable to read RDB block 0 [ 1016.873903][ T5737] nbd0: unable to read partition table [ 1017.360950][ T5737] ldm_validate_partition_table(): Disk read failed. [ 1017.407588][ T5737] Dev nbd0: unable to read RDB block 0 [ 1017.853502][ T5737] nbd0: unable to read partition table [ 1017.896265][ T5737] [ 1017.898625][ T5737] ====================================================== [ 1017.905619][ T5737] WARNING: possible circular locking dependency detected [ 1017.912621][ T5737] syzkaller #0 Tainted: G L [ 1017.918629][ T5737] ------------------------------------------------------ [ 1017.925628][ T5737] udevd/5737 is trying to acquire lock: [ 1017.931327][ T5737] ffff888026d2c190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: __submit_bio+0x1c0/0x580 [ 1017.941361][ T5737] [ 1017.941361][ T5737] but task is already holding lock: [ 1017.948711][ T5737] ffff888026904300 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x991/0x1ef0 [ 1017.958978][ T5737] [ 1017.958978][ T5737] which lock already depends on the new lock. [ 1017.958978][ T5737] [ 1017.969362][ T5737] [ 1017.969362][ T5737] the existing dependency chain (in reverse order) is: [ 1017.978367][ T5737] [ 1017.978367][ T5737] -> #7 (mapping.invalidate_lock){++++}-{4:4}: [ 1017.986716][ T5737] down_read+0x47/0x2e0 [ 1017.991435][ T5737] filemap_fault+0x666/0x1300 [ 1017.996700][ T5737] __do_fault+0x138/0x2a0 [ 1018.001561][ T5737] do_pte_missing+0x2093/0x33f0 [ 1018.006953][ T5737] handle_mm_fault+0x1bd7/0x3170 [ 1018.012491][ T5737] __get_user_pages+0x1683/0x2720 [ 1018.018030][ T5737] populate_vma_page_range+0x2be/0x3c0 [ 1018.024106][ T5737] __mm_populate+0x25f/0x390 [ 1018.029236][ T5737] do_mlock+0x646/0x750 [ 1018.033898][ T5737] __x64_sys_mlock+0x60/0x70 [ 1018.038998][ T5737] do_syscall_64+0x15f/0xf80 [ 1018.044315][ T5737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.050724][ T5737] [ 1018.050724][ T5737] -> #6 (&mm->mmap_lock){++++}-{4:4}: [ 1018.058301][ T5737] __might_fault+0xcb/0x130 [ 1018.063338][ T5737] _copy_from_iter+0x100/0x1670 [ 1018.068702][ T5737] tcp_sendmsg_locked+0x2121/0x5360 [ 1018.074436][ T5737] tcp_sendmsg+0x2f/0x50 [ 1018.079194][ T5737] sock_write_iter+0x406/0x4f0 [ 1018.084476][ T5737] vfs_write+0x61d/0xb90 [ 1018.089236][ T5737] ksys_write+0x150/0x270 [ 1018.094086][ T5737] do_syscall_64+0x15f/0xf80 [ 1018.099201][ T5737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.105616][ T5737] [ 1018.105616][ T5737] -> #5 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1018.113276][ T5737] lock_sock_nested+0x41/0x100 [ 1018.118580][ T5737] inet_shutdown+0x6a/0x390 [ 1018.123619][ T5737] nbd_mark_nsock_dead+0x2e9/0x560 [ 1018.129270][ T5737] recv_work+0x1c2e/0x1d40 [ 1018.134218][ T5737] process_scheduled_works+0xb5d/0x1860 [ 1018.140285][ T5737] worker_thread+0xa53/0xfc0 [ 1018.145754][ T5737] kthread+0x388/0x470 [ 1018.150374][ T5737] ret_from_fork+0x514/0xb70 [ 1018.155486][ T5737] ret_from_fork_asm+0x1a/0x30 [ 1018.160897][ T5737] [ 1018.160897][ T5737] -> #4 (&nsock->tx_lock){+.+.}-{4:4}: [ 1018.168643][ T5737] __mutex_lock+0x1a3/0x1550 [ 1018.173766][ T5737] nbd_queue_rq+0x37b/0x1100 [ 1018.178876][ T5737] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1018.184977][ T5737] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1018.191834][ T5737] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1018.198376][ T5737] blk_mq_run_hw_queue+0x348/0x4f0 [ 1018.204051][ T5737] blk_mq_dispatch_list+0xd16/0xe10 [ 1018.209783][ T5737] blk_mq_flush_plug_list+0x48d/0x570 [ 1018.215693][ T5737] __blk_flush_plug+0x3ed/0x4d0 [ 1018.221073][ T5737] __submit_bio+0x28d/0x580 [ 1018.226097][ T5737] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1018.232248][ T5737] block_read_full_folio+0x7b7/0x830 [ 1018.238207][ T5737] filemap_read_folio+0x137/0x3b0 [ 1018.243782][ T5737] do_read_cache_folio+0x358/0x590 [ 1018.249620][ T5737] read_part_sector+0xb6/0x2b0 [ 1018.254904][ T5737] adfspart_check_ICS+0xb1/0x960 [ 1018.260362][ T5737] bdev_disk_changed+0x817/0x1770 [ 1018.265936][ T5737] blkdev_get_whole+0x380/0x510 [ 1018.271323][ T5737] bdev_open+0x31e/0xd30 [ 1018.276098][ T5737] blkdev_open+0x470/0x610 [ 1018.281039][ T5737] do_dentry_open+0x785/0x14e0 [ 1018.286324][ T5737] vfs_open+0x3b/0x340 [ 1018.290923][ T5737] path_openat+0x2e08/0x3860 [ 1018.296046][ T5737] do_file_open+0x23e/0x4a0 [ 1018.301190][ T5737] do_sys_openat2+0x113/0x200 [ 1018.306388][ T5737] __x64_sys_openat+0x138/0x170 [ 1018.311773][ T5737] do_syscall_64+0x15f/0xf80 [ 1018.316927][ T5737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.323334][ T5737] [ 1018.323334][ T5737] -> #3 (&cmd->lock){+.+.}-{4:4}: [ 1018.330556][ T5737] __mutex_lock+0x1a3/0x1550 [ 1018.335670][ T5737] nbd_queue_rq+0xc6/0x1100 [ 1018.340684][ T5737] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1018.346824][ T5737] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1018.353673][ T5737] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1018.360207][ T5737] blk_mq_run_hw_queue+0x348/0x4f0 [ 1018.365832][ T5737] blk_mq_dispatch_list+0xd16/0xe10 [ 1018.371662][ T5737] blk_mq_flush_plug_list+0x48d/0x570 [ 1018.377571][ T5737] __blk_flush_plug+0x3ed/0x4d0 [ 1018.382944][ T5737] __submit_bio+0x28d/0x580 [ 1018.387970][ T5737] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1018.394123][ T5737] block_read_full_folio+0x7b7/0x830 [ 1018.399923][ T5737] filemap_read_folio+0x137/0x3b0 [ 1018.405498][ T5737] do_read_cache_folio+0x358/0x590 [ 1018.411410][ T5737] read_part_sector+0xb6/0x2b0 [ 1018.417139][ T5737] adfspart_check_ICS+0xb1/0x960 [ 1018.422603][ T5737] bdev_disk_changed+0x817/0x1770 [ 1018.428144][ T5737] blkdev_get_whole+0x380/0x510 [ 1018.433577][ T5737] bdev_open+0x31e/0xd30 [ 1018.438392][ T5737] blkdev_open+0x470/0x610 [ 1018.443338][ T5737] do_dentry_open+0x785/0x14e0 [ 1018.448725][ T5737] vfs_open+0x3b/0x340 [ 1018.453303][ T5737] path_openat+0x2e08/0x3860 [ 1018.458410][ T5737] do_file_open+0x23e/0x4a0 [ 1018.463497][ T5737] do_sys_openat2+0x113/0x200 [ 1018.468708][ T5737] __x64_sys_openat+0x138/0x170 [ 1018.474071][ T5737] do_syscall_64+0x15f/0xf80 [ 1018.479173][ T5737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.485600][ T5737] [ 1018.485600][ T5737] -> #2 (set->srcu){.+.+}-{0:0}: [ 1018.492723][ T5737] __synchronize_srcu+0xca/0x300 [ 1018.498223][ T5737] elevator_switch+0x1e8/0x7a0 [ 1018.503544][ T5737] elevator_change+0x2cc/0x450 [ 1018.508822][ T5737] elevator_set_default+0x36c/0x430 [ 1018.514553][ T5737] blk_register_queue+0x3e9/0x4e0 [ 1018.520098][ T5737] __add_disk+0x677/0xd50 [ 1018.524936][ T5737] add_disk_fwnode+0xfb/0x480 [ 1018.530121][ T5737] nbd_dev_add+0x72c/0xb50 [ 1018.535040][ T5737] nbd_init+0x168/0x1f0 [ 1018.539901][ T5737] do_one_initcall+0x250/0x870 [ 1018.545193][ T5737] do_initcall_level+0x104/0x190 [ 1018.550668][ T5737] do_initcalls+0x59/0xa0 [ 1018.555512][ T5737] kernel_init_freeable+0x2a6/0x3e0 [ 1018.561307][ T5737] kernel_init+0x1d/0x1d0 [ 1018.566168][ T5737] ret_from_fork+0x514/0xb70 [ 1018.571274][ T5737] ret_from_fork_asm+0x1a/0x30 [ 1018.576570][ T5737] [ 1018.576570][ T5737] -> #1 (&q->elevator_lock){+.+.}-{4:4}: [ 1018.584385][ T5737] __mutex_lock+0x1a3/0x1550 [ 1018.589578][ T5737] elevator_change+0x1b3/0x450 [ 1018.594861][ T5737] elevator_set_none+0xb5/0x140 [ 1018.600252][ T5737] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1018.606618][ T5737] nbd_start_device+0x17f/0xb10 [ 1018.611986][ T5737] nbd_genl_connect+0x165b/0x1cf0 [ 1018.617533][ T5737] genl_family_rcv_msg_doit+0x22a/0x330 [ 1018.623602][ T5737] genl_rcv_msg+0x61c/0x7a0 [ 1018.628622][ T5737] netlink_rcv_skb+0x232/0x4b0 [ 1018.633893][ T5737] genl_rcv+0x28/0x40 [ 1018.638387][ T5737] netlink_unicast+0x75c/0x8e0 [ 1018.643663][ T5737] netlink_sendmsg+0x813/0xb40 [ 1018.649021][ T5737] ____sys_sendmsg+0x972/0x9f0 [ 1018.654305][ T5737] ___sys_sendmsg+0x2a5/0x360 [ 1018.659506][ T5737] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1018.664957][ T5737] do_syscall_64+0x15f/0xf80 [ 1018.670061][ T5737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.676466][ T5737] [ 1018.676466][ T5737] -> #0 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1018.685068][ T5737] __lock_acquire+0x15a5/0x2cf0 [ 1018.690427][ T5737] lock_acquire+0x106/0x350 [ 1018.695471][ T5737] blk_mq_submit_bio+0x6de/0x28e0 [ 1018.701011][ T5737] __submit_bio+0x1c0/0x580 [ 1018.706024][ T5737] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1018.712195][ T5737] block_read_full_folio+0x7b7/0x830 [ 1018.717984][ T5737] filemap_read_folio+0x137/0x3b0 [ 1018.723526][ T5737] filemap_get_pages+0x1744/0x1ef0 [ 1018.729147][ T5737] filemap_read+0x447/0x1230 [ 1018.734245][ T5737] blkdev_read_iter+0x30a/0x440 [ 1018.739628][ T5737] vfs_read+0x582/0xa70 [ 1018.744308][ T5737] ksys_read+0x150/0x270 [ 1018.749096][ T5737] do_syscall_64+0x15f/0xf80 [ 1018.754201][ T5737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.760612][ T5737] [ 1018.760612][ T5737] other info that might help us debug this: [ 1018.760612][ T5737] [ 1018.770830][ T5737] Chain exists of: [ 1018.770830][ T5737] &q->q_usage_counter(io)#49 --> &mm->mmap_lock --> mapping.invalidate_lock [ 1018.770830][ T5737] [ 1018.785525][ T5737] Possible unsafe locking scenario: [ 1018.785525][ T5737] [ 1018.792950][ T5737] CPU0 CPU1 [ 1018.798291][ T5737] ---- ---- [ 1018.803661][ T5737] rlock(mapping.invalidate_lock); [ 1018.808847][ T5737] lock(&mm->mmap_lock); [ 1018.815697][ T5737] lock(mapping.invalidate_lock); [ 1018.823318][ T5737] rlock(&q->q_usage_counter(io)#49); [ 1018.828874][ T5737] [ 1018.828874][ T5737] *** DEADLOCK *** [ 1018.828874][ T5737] [ 1018.836994][ T5737] 2 locks held by udevd/5737: [ 1018.841649][ T5737] #0: ffff888026904168 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_read_iter+0x2f8/0x440 [ 1018.852449][ T5737] #1: ffff888026904300 (mapping.invalidate_lock){++++}-{4:4}, at: filemap_get_pages+0x991/0x1ef0 [ 1018.863079][ T5737] [ 1018.863079][ T5737] stack backtrace: [ 1018.868946][ T5737] CPU: 0 UID: 0 PID: 5737 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 1018.868971][ T5737] Tainted: [L]=SOFTLOCKUP [ 1018.868978][ T5737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1018.868989][ T5737] Call Trace: [ 1018.868998][ T5737] [ 1018.869006][ T5737] dump_stack_lvl+0xe8/0x150 [ 1018.869029][ T5737] print_circular_bug+0x2e1/0x300 [ 1018.869056][ T5737] check_noncircular+0x12e/0x150 [ 1018.869084][ T5737] __lock_acquire+0x15a5/0x2cf0 [ 1018.869106][ T5737] ? mempool_alloc_noprof+0x1ce/0x300 [ 1018.869124][ T5737] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.869146][ T5737] ? stack_trace_save+0xa9/0x100 [ 1018.869174][ T5737] ? __pfx_stack_trace_save+0x10/0x10 [ 1018.869201][ T5737] ? mempool_alloc_noprof+0x1ce/0x300 [ 1018.869219][ T5737] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.869240][ T5737] ? stack_depot_save_flags+0x33/0x810 [ 1018.869264][ T5737] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.869287][ T5737] ? __submit_bio+0x1c0/0x580 [ 1018.869319][ T5737] lock_acquire+0x106/0x350 [ 1018.869337][ T5737] ? __submit_bio+0x1c0/0x580 [ 1018.869366][ T5737] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.869389][ T5737] ? blk_mq_submit_bio+0x3d1/0x28e0 [ 1018.869416][ T5737] ? __submit_bio+0x1c0/0x580 [ 1018.869443][ T5737] blk_mq_submit_bio+0x6de/0x28e0 [ 1018.869470][ T5737] ? __submit_bio+0x1c0/0x580 [ 1018.869498][ T5737] ? blk_mq_submit_bio+0x3d1/0x28e0 [ 1018.869527][ T5737] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 1018.869554][ T5737] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.869576][ T5737] ? __lock_acquire+0x6b5/0x2cf0 [ 1018.869601][ T5737] __submit_bio+0x1c0/0x580 [ 1018.869630][ T5737] ? __pfx___submit_bio+0x10/0x10 [ 1018.869660][ T5737] ? bio_associate_blkg+0x6d/0x230 [ 1018.869692][ T5737] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1018.869717][ T5737] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.869741][ T5737] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 1018.869769][ T5737] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.869797][ T5737] block_read_full_folio+0x7b7/0x830 [ 1018.869819][ T5737] ? __pfx_blkdev_get_block+0x10/0x10 [ 1018.869838][ T5737] filemap_read_folio+0x137/0x3b0 [ 1018.869865][ T5737] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1018.869893][ T5737] ? __pfx_filemap_read_folio+0x10/0x10 [ 1018.869921][ T5737] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.869942][ T5737] ? down_read+0x270/0x2e0 [ 1018.869964][ T5737] ? filemap_get_pages+0x987/0x1ef0 [ 1018.869990][ T5737] filemap_get_pages+0x1744/0x1ef0 [ 1018.870014][ T5737] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.870036][ T5737] ? mas_ascend+0x304/0x890 [ 1018.870071][ T5737] ? __pfx_filemap_get_pages+0x10/0x10 [ 1018.870101][ T5737] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.870124][ T5737] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.870149][ T5737] filemap_read+0x447/0x1230 [ 1018.870173][ T5737] ? aa_file_perm+0x192/0x15e0 [ 1018.870206][ T5737] ? __pfx_filemap_read+0x10/0x10 [ 1018.870244][ T5737] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.870265][ T5737] ? down_read+0x270/0x2e0 [ 1018.870286][ T5737] ? blkdev_read_iter+0x177/0x440 [ 1018.870304][ T5737] blkdev_read_iter+0x30a/0x440 [ 1018.870329][ T5737] vfs_read+0x582/0xa70 [ 1018.870358][ T5737] ? __pfx_vfs_read+0x10/0x10 [ 1018.870381][ T5737] ? vm_mmap_pgoff+0x373/0x4f0 [ 1018.870402][ T5737] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.870427][ T5737] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.870449][ T5737] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.870473][ T5737] ksys_read+0x150/0x270 [ 1018.870499][ T5737] ? __pfx_ksys_read+0x10/0x10 [ 1018.870524][ T5737] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1018.870548][ T5737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.870567][ T5737] do_syscall_64+0x15f/0xf80 [ 1018.870591][ T5737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.870609][ T5737] RIP: 0033:0x7f624add4407 [ 1018.870626][ T5737] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1018.870642][ T5737] RSP: 002b:00007ffe84af5d70 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 1018.870661][ T5737] RAX: ffffffffffffffda RBX: 00007f624ad48880 RCX: 00007f624add4407 [ 1018.870675][ T5737] RDX: 0000000000000200 RSI: 00007f624ad47000 RDI: 0000000000000009 [ 1018.870687][ T5737] RBP: 0000564acb17f050 R08: 0000000000000000 R09: 0000000000000000 [ 1018.870699][ T5737] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1018.870710][ T5737] R13: 0000000000000000 R14: 0000564acb18b338 R15: 00007f624afed39c [ 1018.870731][ T5737] [ 1019.394688][ T5737] blk_print_req_error: 22 callbacks suppressed [ 1019.394710][ T5737] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1019.412803][ T5737] buffer_io_error: 22 callbacks suppressed [ 1019.412823][ T5737] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1019.428504][ T5737] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1019.443445][ T5737] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1019.469844][ T5737] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1019.479443][ T5737] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1019.491788][ T5737] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1019.502151][ T5737] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1019.512628][ T5737] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1019.522157][ T5737] Buffer I/O error on dev nbd0, logical block 0, async page read