last executing test programs: 13m54.929931133s ago: executing program 0 (id=37): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc}) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, &(0x7f0000000540)={0x1, @sdr={0x36314d4e, 0x7}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000270600000ee60000bf2500000000000073350000000000006507000002001000070700004c0000001f75000000000000bf54000000000000070400004400f9f0ad32010000000000950000000000000005000000000000009500000000000000debfa255e44e4cc39f211fb04d7f202e6a53bd86bde99b679b4e6d24b8125690361eec3b181dcfd7c2fb2d1f8975b579a085bee32d414c1f3ab987a9de6385ae8021f4ca33b9b35fe817e98beb9cefe7f40fd6f0ea3affbdaaa897c70fb01d270a7b00d36fb5ab8fa92ac014a106e3e4decc68652503ca54fcef437d96c8a05d59ddcc8abf09cd77e93e940207b03189c5d4661e43df6f1f036c8d85a2ad7615a021f8cbe507ef94fb9f33315366e9ae080000001b532226b63b460d68808a67529637bf7f6731ad0cf1718bae3c8b9d2f89050cb496fe791381af6fab290900000000000000d640a5fde1f7d5eaa97cd25523fbd77300000000000000d67559b0c848aa3e7091f33e2dfc351e903ce85488fb25691249545bcf877011847df184bae6d3f5d0c016ec7d581d5b2fcb494d8c2df1929398ec5c3675ed16c27fff46a695eed7f50c531a612d5677b5e949ee4f16d10e41074702c4e89ee401ec2ec65f38f64189f1fa2cc0a42add3119025764759de2f093c26fe51d2f7635bb06bdf0b97d4a96cb0813e084232421c6026629fbf4c81954d11e154659b54fcf3468577295c700000000000000000000000000000000fe31e1e02dd54ac3c7af2b3d76a63b79ca6f9a20b26761254aee1352ad08118a58802cc8f107852b8f5382f0871255ce5c0b31e39637850330f520d03ed2aa076efa8401613537585d45bd27454beccdc32645cfe67921df3f2bbf88cacc83f82e916f0ee19ad20cdf5ce3b2ee147f78c1caf8b8024bac9809015b2210d7c2471dfd73f6eb"], &(0x7f0000000100)='GPL\x00'}, 0x48) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc0002, 0x0) write$rfkill(r4, &(0x7f00000014c0)={0x9, 0x3, 0x2}, 0x8) r5 = openat$incfs(0xffffffffffffffff, 0x0, 0x505001, 0x1a) sendmsg$nl_route(r5, 0x0, 0x4000864) getpid() socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 13m52.364701271s ago: executing program 0 (id=42): openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x44d01, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x1, 0x7800, 0x3, 0x400, {{0xb, 0x4, 0x2, 0x3, 0x2c, 0x68, 0x0, 0x3, 0x23, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0x29, 0x3, 0x8, [{@multicast1, 0x8000}, {@empty, 0x5}]}, @end]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=@mpls_delroute={0xf0, 0x19, 0x400, 0x70bd28, 0x25dfdbfc, {0x1c, 0x14, 0x80, 0x0, 0x0, 0x4, 0x0, 0x5, 0x200}, [@RTA_OIF={0x8}, @RTA_DST={0x8, 0x1, {0xb69, 0x0, 0x1}}, @RTA_NEWDST={0x84, 0x13, [{0x8}, {0x9, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0xc1d6, 0x0, 0x1}, {0x64}, {0x9, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x5}, {0x0, 0x0, 0x1}, {0x24}, {0x5, 0x0, 0x1}, {0x9}, {}, {0x8}, {0x5, 0x0, 0x1}, {0xfffff, 0x0, 0x1}, {0xffffb}, {0x9, 0x0, 0x1}, {0x1ff, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x6}, {0x65}, {0x0, 0x0, 0x1}, {0x1}, {0x3ff, 0x0, 0x1}, {0x3}, {0x8}, {0x40, 0x0, 0x1}, {0x5}]}, @RTA_MULTIPATH={0xc, 0x9, {0xb, 0x1a, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x7fff, 0x1c, 0x9}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_VIA={0x14, 0x12, {0x23, "f5c0e236586d3256d2df0f35c542"}}, @RTA_MULTIPATH={0xc, 0x9, {0xffff, 0x1a, 0x7f}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4008084}, 0x4004010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$session_to_parent(0x12) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xfff}, @IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x4c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x804) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2}, 0xa) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000400)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) 13m50.268228692s ago: executing program 0 (id=44): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0x2, 0x0, 0x0, 0x0, 0x6, 0xfffff520}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x200, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x4, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff}, {}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x80}, {0x80, 0x2}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0xfffffffc, 0x200}, {}, {0x0, 0x0, 0x0, 0x3}, {0x7}, {}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x9, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x4000, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x7, 0x80000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 13m48.145637613s ago: executing program 0 (id=46): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0x2, 0x0, 0x0, 0x0, 0x6, 0xfffff520}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x200, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x4, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff}, {}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x80}, {0x80, 0x2}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0xfffffffc, 0x200}, {}, {0x0, 0x0, 0x0, 0x3}, {0x7}, {}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x9, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 13m45.027729216s ago: executing program 0 (id=50): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000000040)={0x0, 0x0, "8f61a583713a593383deeef9eb43bec9"}) prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = getpid() r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/60, @ANYRES32=0x0, @ANYRES32=0x0], 0x120}}, 0x0) sched_setscheduler(r4, 0x2, 0x0) sched_setaffinity(r4, 0x0, 0x0) r7 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r7, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r7, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) 13m38.808517361s ago: executing program 0 (id=56): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x3, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d30826100000000080013", @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 13m21.656432333s ago: executing program 32 (id=56): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x3, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d30826100000000080013", @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 2m16.749753103s ago: executing program 2 (id=1299): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x30}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xe, 0x4, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000b40), &(0x7f0000000180)=@tcp}, 0x20) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000845, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) dup(r0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1) 2m13.618822017s ago: executing program 2 (id=1302): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xa3c}) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000940)=0x2321, 0x4) syz_io_uring_setup(0x9ee, &(0x7f0000000180)={0x0, 0x1000a5ec, 0x100, 0x3, 0xfffffffe}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) removexattr(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000380)={0x6, 0x8000, 0x1, 0xd, 0xfffffffe, 0xfdfffffa}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp6\x00') pread64(r2, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) getpid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b", 0x4, 0x850, 0x0, 0x0) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) chdir(&(0x7f0000000200)='./cgroup\x00') getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x320c840, &(0x7f0000000000), 0x41, 0x53d, &(0x7f0000000800)="$eJzs3e9rJGcdAPDvTLJ3yV3qpipSC9ZiK3dFb3NpbBtEtL7RVwW1vj9jshfC7WaPZFMvodgU/wBBBAVf+co3gn+AIH3hHyCFgr4RX4iKInq1oKB2ZGZn6XV/XNa7ze5d9vOByT7P7Mx8n2eGPDsz++wzAcysJyPixYiYi4hnIqJazk/L6VqeOe4s9/btVzfzKYkse/lvSSTlvO628vx8RFzsrBILEfG1L0d8M+mPu394dGOj0ajvlfmVdvPmyv7h0ZWd5sZ2fbu+u7a2+vz6C+vPrV/NSvdVz+Vu4idf+vwvPv2t31/7y+Vv58X63EeiEj31GKdO1SvFvujK99HeaQSbgrmyPpVpFwQAgJHk5/gfjIhPFOf/1ZgrzuZ6zE2jZAAAAMC4ZF9Yiv8ksZABAAAAZ1YaEUuRpLWyL8BSpOm58t7Ah+NC2mjttz91vXWwu5W/F7EclfT6TqN+tewrvByVJM+vln1su/lne/JrEfFoRHy/uljka5utxtaU730AAADArLjYc/3/TjUt0icb8DsBAAAA4MG1PDQDAAAAnBX3dMn/z/IXBOMvDgAAAHAKeq//jfcPAAAAZ8pXXnopn7Lu86+3Xjk8uNF65cpWff9GrXmwWdts7d2sbbda28WYfc2TttdotW5+JnYPbi1GRHtl//DoWrN1sNu+tvO+R2ADAAAAE/Tox9/4TRIRx59dLKYoxwEEZtk7/b/t+eOUigKcCl39YHYZxRtmV2XaBQCmLjnhfZ13AADg4Xfpo/3f/3ef/+/eAJxt+voAwOwZ8fv/7/7ptAsCTFxFD0CYWfPlPYAPdLLnhy039Pv/X40aKcsi3qzeOcf9RQAAmKylYkrSWnkdsBRpWqtFPBKRLkclub7TqF8trw9+Xa2cz/OrxZrJiX2GAQAAAAAAAAAAAAAAAAAAAAAAAICOLEsiAwAAAM60iPTPSTGaf8Sl6tNLvfcHziX/qkb34Z8/evkHtzba7b3VfP7fi2d5nYuI9g/L+c8OfXwYAAAAMG7J8dC3Otfp5evqREsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAx4+/arm91pknH/+sWIWB4Ufz4WiteFqETEhX8kMX/HeklEzI0h/vHrEfHYoPhJvJtlr0VZikHxF085/nKxawbHTyPi4hjiwyx7I29/Xhz0/5fGk8Xr4P+/+XK6X8Pbv7SM/FjRzg1qfx7p21pzYIzH3/rZSidV6Y//esTj84Pbn277mwyJ/1Tf1v6dZVl//G98/ehoWP2zH0dcGvj5k7wv1kq7eXNl//Doyk5zY7u+Xd9dW1t9fv2F9efWr65c32nUy78DY3zvYz9/d1j8vP4XBsT/3W877e/d6v/0sI32+O9bt25/qJPsOwB5/MtPDfz8XYgh8dPys++TZTp//1I3fdxJ3+mJn775xN3qvzVk/590/C+PWP9nvvqdP4y4KAAwAfuHRzc2Go363l0SCyMs8zAmfrnwQBTj/0xkr3WO3INSnntN5Ger783p1uq0gp6/p7WyieyN88X5/KhrnZvQYZpqswQAAJyC9076p10SAAAAAAAAAAAAAAAAAAAAmF0jjQe2GPc1nFhvzONuYhwD6AMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjMn/AgAA//+87ucU") 2m12.089881161s ago: executing program 2 (id=1304): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xa3c}) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000940)=0x2321, 0x4) syz_io_uring_setup(0x9ee, &(0x7f0000000180)={0x0, 0x1000a5ec, 0x100, 0x3, 0xfffffffe}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) removexattr(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000380)={0x6, 0x8000, 0x1, 0xd, 0xfffffffe, 0xfdfffffa}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp6\x00') pread64(r2, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) getpid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b", 0x4, 0x850, 0x0, 0x0) chdir(&(0x7f0000000200)='./cgroup\x00') getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x320c840, &(0x7f0000000000), 0x41, 0x53d, &(0x7f0000000800)="$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") 2m8.676845397s ago: executing program 2 (id=1309): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18008, &(0x7f0000003b40)=ANY=[], 0x7, 0x2f4, &(0x7f0000000880)="$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") bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring) syz_open_dev$usbmon(0x0, 0x0, 0x0) creat(&(0x7f0000000540)='./file0\x00', 0x0) rseq(0x0, 0x0, 0x0, 0x0) pipe(0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 2m6.29242064s ago: executing program 2 (id=1313): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x4, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r3 = dup(0xffffffffffffffff) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000010c0)={0xa56a, 0x40, 0x1, 0x7, 0x8, "0000000000000004"}) write$UHID_INPUT(r3, &(0x7f0000000040)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083860090890e0878f0f1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d3b5d0936cd3b78070daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5003a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd7072f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d27df2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2c1cde360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 2m0.801458625s ago: executing program 2 (id=1316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioperm(0x0, 0x5, 0x2) keyctl$session_to_parent(0x12) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x28, 0x6, &(0x7f0000001680)=""/51, &(0x7f0000000000)=0xfd80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) semop(0x0, &(0x7f0000000040)=[{0x3, 0x4, 0x1000}, {0x0, 0x100}, {0x1, 0x4}, {0x4, 0x200}], 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$rfkill(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x412c2400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m43.646610665s ago: executing program 33 (id=1316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioperm(0x0, 0x5, 0x2) keyctl$session_to_parent(0x12) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x28, 0x6, &(0x7f0000001680)=""/51, &(0x7f0000000000)=0xfd80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) semop(0x0, &(0x7f0000000040)=[{0x3, 0x4, 0x1000}, {0x0, 0x100}, {0x1, 0x4}, {0x4, 0x200}], 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) write$rfkill(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x412c2400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m4.298433962s ago: executing program 3 (id=1378): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x30}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xe, 0x4, 0x3}, 0x48) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000b40), &(0x7f0000000180)=@tcp=r6}, 0x20) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) 1m2.600159869s ago: executing program 3 (id=1379): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x30}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xe, 0x4, 0x3}, 0x48) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000b40), &(0x7f0000000180)=@tcp=r6}, 0x20) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000845, 0x0, 0x0) 59.961200963s ago: executing program 3 (id=1380): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18008, &(0x7f0000003b40)=ANY=[], 0x7, 0x2f4, &(0x7f0000000880)="$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") bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring) syz_open_dev$usbmon(0x0, 0x0, 0x0) creat(&(0x7f0000000540)='./file0\x00', 0x0) rseq(0x0, 0x0, 0x0, 0x0) pipe(0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 55.989842665s ago: executing program 3 (id=1385): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000000040)={0x0, 0x0, "8f61a583713a593383deeef9eb43bec9"}) prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = getpid() r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/60, @ANYRES32=0x0, @ANYRES32=0x0], 0x120}}, 0x0) sched_setscheduler(r4, 0x2, 0x0) sched_setaffinity(r4, 0x0, 0x0) r7 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r7, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r7, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x802, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) 48.505420771s ago: executing program 3 (id=1392): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x30}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xe, 0x4, 0x3}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000845, 0x0, 0x0) dup(r0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1) 46.831953267s ago: executing program 3 (id=1393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioperm(0x0, 0x5, 0x2) keyctl$session_to_parent(0x12) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x28, 0x6, &(0x7f0000001680)=""/51, &(0x7f0000000000)=0xfd80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) semop(0x0, &(0x7f0000000040)=[{0x3, 0x4, 0x1000}, {0x0, 0x100}, {0x1, 0x4}, {0x4, 0x200}], 0x4) write$rfkill(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x412c2400, 0x0, 0x0, 0x0, 0x0, 0x0) 31.10860562s ago: executing program 34 (id=1393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioperm(0x0, 0x5, 0x2) keyctl$session_to_parent(0x12) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x28, 0x6, &(0x7f0000001680)=""/51, &(0x7f0000000000)=0xfd80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) semop(0x0, &(0x7f0000000040)=[{0x3, 0x4, 0x1000}, {0x0, 0x100}, {0x1, 0x4}, {0x4, 0x200}], 0x4) write$rfkill(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x412c2400, 0x0, 0x0, 0x0, 0x0, 0x0) 16.240418064s ago: executing program 5 (id=1414): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xa3c}) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000940)=0x2321, 0x4) syz_io_uring_setup(0x9ee, &(0x7f0000000180)={0x0, 0x1000a5ec, 0x100, 0x3, 0xfffffffe}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) removexattr(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000380)={0x6, 0x8000, 0x1, 0xd, 0xfffffffe, 0xfdfffffa}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp6\x00') pread64(r2, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) getpid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b", 0x4, 0x850, 0x0, 0x0) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x320c840, &(0x7f0000000000), 0x41, 0x53d, &(0x7f0000000800)="$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") 14.112310387s ago: executing program 4 (id=1417): mkdir(&(0x7f0000000980)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x22c, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r4, 0x3, 0x1) getdents64(r4, 0x0, 0x31) 12.932487972s ago: executing program 4 (id=1419): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xa3c}) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000940)=0x2321, 0x4) syz_io_uring_setup(0x9ee, &(0x7f0000000180)={0x0, 0x1000a5ec, 0x100, 0x3, 0xfffffffe}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) removexattr(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000380)={0x6, 0x8000, 0x1, 0xd, 0xfffffffe, 0xfdfffffa}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp6\x00') pread64(r2, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b", 0x4, 0x850, 0x0, 0x0) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) chdir(&(0x7f0000000200)='./cgroup\x00') getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x320c840, &(0x7f0000000000), 0x41, 0x53d, &(0x7f0000000800)="$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") 12.152942855s ago: executing program 1 (id=1420): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xa3c}) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000940)=0x2321, 0x4) syz_io_uring_setup(0x9ee, &(0x7f0000000180)={0x0, 0x1000a5ec, 0x100, 0x3, 0xfffffffe}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) removexattr(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000380)={0x6, 0x8000, 0x1, 0xd, 0xfffffffe, 0xfdfffffa}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp6\x00') pread64(r2, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) getpid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b", 0x4, 0x850, 0x0, 0x0) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) chdir(&(0x7f0000000200)='./cgroup\x00') getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x320c840, &(0x7f0000000000), 0x41, 0x53d, &(0x7f0000000800)="$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") 11.999677978s ago: executing program 5 (id=1421): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18008, &(0x7f0000003b40)=ANY=[], 0x7, 0x2f4, &(0x7f0000000880)="$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") bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYBLOB], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring) syz_open_dev$usbmon(0x0, 0x0, 0x0) creat(&(0x7f0000000540)='./file0\x00', 0x0) rseq(0x0, 0x0, 0x0, 0x0) pipe(0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 11.413225946s ago: executing program 4 (id=1422): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) close(r4) 10.208020493s ago: executing program 1 (id=1423): mkdir(&(0x7f0000000980)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x22c, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x3, 0x1) getdents64(r3, 0x0, 0x31) 10.024418357s ago: executing program 4 (id=1424): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x30}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000b40), &(0x7f0000000180)=@tcp}, 0x20) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000845, 0x0, 0x0) dup(r0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1) 10.015990298s ago: executing program 5 (id=1425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TCSETSW2(r4, 0x5453, 0x0) 8.970404023s ago: executing program 1 (id=1426): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) socket$nl_audit(0x10, 0x3, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1da38000) r1 = syz_clone(0x286200, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsmount(0xffffffffffffffff, 0x0, 0x0) mlockall(0x7) r3 = socket(0x2a, 0x2, 0xfa) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20008010) 7.115870663s ago: executing program 5 (id=1427): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xa3c}) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000940)=0x2321, 0x4) syz_io_uring_setup(0x9ee, &(0x7f0000000180)={0x0, 0x1000a5ec, 0x100, 0x3, 0xfffffffe}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) removexattr(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp6\x00') pread64(r2, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) getpid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b", 0x4, 0x850, 0x0, 0x0) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) chdir(&(0x7f0000000200)='./cgroup\x00') getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x320c840, &(0x7f0000000000), 0x41, 0x53d, &(0x7f0000000800)="$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") 5.92076796s ago: executing program 4 (id=1428): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000b40), &(0x7f0000000180)=@tcp}, 0x20) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000845, 0x0, 0x0) dup(r0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1) 4.027967384s ago: executing program 4 (id=1429): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xa3c}) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000940)=0x2321, 0x4) syz_io_uring_setup(0x9ee, &(0x7f0000000180)={0x0, 0x1000a5ec, 0x100, 0x3, 0xfffffffe}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) removexattr(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000380)={0x6, 0x8000, 0x1, 0xd, 0xfffffffe, 0xfdfffffa}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp6\x00') pread64(r2, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) getpid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b", 0x4, 0x850, 0x0, 0x0) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) chdir(&(0x7f0000000200)='./cgroup\x00') getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x320c840, &(0x7f0000000000), 0x41, 0x53d, &(0x7f0000000800)="$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") 3.892446125s ago: executing program 5 (id=1430): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) socket$nl_audit(0x10, 0x3, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1da38000) r1 = syz_clone(0x286200, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsmount(0xffffffffffffffff, 0x0, 0x0) mlockall(0x7) r3 = socket(0x2a, 0x2, 0xfa) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20008010) 3.391793455s ago: executing program 1 (id=1431): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xa3c}) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000940)=0x2321, 0x4) syz_io_uring_setup(0x9ee, &(0x7f0000000180)={0x0, 0x1000a5ec, 0x100, 0x3, 0xfffffffe}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) removexattr(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000380)={0x6, 0x8000, 0x1, 0xd, 0xfffffffe, 0xfdfffffa}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp6\x00') pread64(r2, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b", 0x4, 0x850, 0x0, 0x0) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) chdir(&(0x7f0000000200)='./cgroup\x00') getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x320c840, &(0x7f0000000000), 0x41, 0x53d, &(0x7f0000000800)="$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") 2.200386232s ago: executing program 1 (id=1432): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x30}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xe, 0x4, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000b40), &(0x7f0000000180)=@tcp}, 0x20) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20000845, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) dup(r0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1) 218.701622ms ago: executing program 1 (id=1433): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x4, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) 0s ago: executing program 5 (id=1434): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) mount$9p_fd(0x0, 0x0, 0x0, 0x4, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r4 = dup(0xffffffffffffffff) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000010c0)={0xa56a, 0x40, 0x1, 0x7, 0x8, "0000000000000004"}) write$UHID_INPUT(r4, &(0x7f0000000040)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083860090890e0878f0f1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d3b5d0936cd3b78070daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5003a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd7072f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d27df2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2c1cde360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): 8480][ T9421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.729'. [ 491.280316][ T5882] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 491.471757][ T5882] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 491.584379][ T5882] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 491.593134][ T9434] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 491.604903][ T5882] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 491.633611][ T9434] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 491.633718][ T5882] usb 2-1: config 0 interface 0 has no altsetting 0 [ 491.682121][ T5882] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 491.701452][ T5882] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 491.730167][ T5882] usb 2-1: config 0 interface 0 has no altsetting 0 [ 491.758779][ T5882] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 491.770427][ T5882] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 491.800625][ T5882] usb 2-1: config 0 interface 0 has no altsetting 0 [ 491.831599][ T5882] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 491.869329][ T5882] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 491.951824][ T5882] usb 2-1: config 0 interface 0 has no altsetting 0 [ 491.973248][ T5882] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 491.992742][ T5882] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 492.048911][ T5882] usb 2-1: config 0 interface 0 has no altsetting 0 [ 492.091084][ T5882] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 492.110383][ T5882] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 492.134176][ T5882] usb 2-1: config 0 interface 0 has no altsetting 0 [ 492.152726][ T5882] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 492.162117][ T5882] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 492.193765][ T5882] usb 2-1: config 0 interface 0 has no altsetting 0 [ 492.211621][ T5882] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 492.222967][ T5882] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 492.284640][ T5882] usb 2-1: config 0 interface 0 has no altsetting 0 [ 492.326072][ T5882] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 492.364661][ T5882] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 492.425440][ T5882] usb 2-1: Product: syz [ 492.440293][ T5882] usb 2-1: Manufacturer: syz [ 492.466058][ T5882] usb 2-1: SerialNumber: syz [ 492.501756][ T5882] usb 2-1: config 0 descriptor?? [ 492.540678][ T5882] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 492.914914][ T5882] usb 2-1: USB disconnect, device number 17 [ 492.933137][ T5882] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 493.188856][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.734'. [ 494.303741][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.735'. [ 495.768960][ T9461] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 495.779771][ T9461] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 495.988311][ T9469] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 496.007518][ T9469] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 496.256958][ T9467] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 496.292375][ T9467] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 497.430350][ T5862] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 497.650291][ T5862] usb 3-1: Using ep0 maxpacket: 8 [ 497.685681][ T5862] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 497.707271][ T5862] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.738518][ T5862] usb 3-1: config 0 has no interfaces? [ 497.783071][ T5862] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 497.817082][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.847993][ T5862] usb 3-1: config 0 descriptor?? [ 498.050286][ T5882] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 498.253943][ T5882] usb 4-1: config 0 has an invalid interface number: 101 but max is 0 [ 498.269745][ T5882] usb 4-1: config 0 has no interface number 0 [ 498.303284][ T5882] usb 4-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 498.329522][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.358368][ T5882] usb 4-1: Product: syz [ 498.382491][ T5882] usb 4-1: Manufacturer: syz [ 498.399060][ T5882] usb 4-1: SerialNumber: syz [ 498.451738][ T5882] usb 4-1: config 0 descriptor?? [ 498.490806][ T5882] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 498.803044][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.746'. [ 499.501298][ T5882] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 499.508502][ T5882] gspca_pac7302: probe of 4-1:0.101 failed with error -110 [ 499.598407][ T27] usb 4-1: USB disconnect, device number 20 [ 501.120557][ T786] usb 3-1: USB disconnect, device number 13 [ 502.168891][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.175542][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.402116][ T9518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.754'. [ 506.012500][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.759'. [ 508.419096][ T9563] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 508.425704][ T9563] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 508.489528][ T9563] vhci_hcd vhci_hcd.0: Device attached [ 509.770344][ T5882] vhci_hcd: vhci_device speed not set [ 509.850383][ T5882] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 511.449312][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.767'. [ 516.981984][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.771'. [ 517.945030][ T9567] vhci_hcd: connection reset by peer [ 517.972324][ T7482] vhci_hcd: stop threads [ 518.010350][ T7482] vhci_hcd: release socket [ 518.036948][ T7482] vhci_hcd: disconnect device [ 518.100236][ T5882] vhci_hcd: vhci_device speed not set [ 519.503285][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.778'. [ 521.095031][ T9642] loop3: detected capacity change from 0 to 512 [ 521.154420][ T9642] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 521.234908][ T9642] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 40 vs 41 free clusters [ 521.318171][ T9642] Quota error (device loop3): write_blk: dquota write failed [ 521.349108][ T9642] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 521.389145][ T9642] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.779: Failed to acquire dquot type 0 [ 521.455753][ T9642] EXT4-fs (loop3): 1 truncate cleaned up [ 521.477569][ T9642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.516661][ T9642] ext4 filesystem being mounted at /syzcgroup/unified/syz3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.145450][ T9667] 9pnet_fd: Insufficient options for proto=fd [ 524.449914][ T9685] loop1: detected capacity change from 0 to 512 [ 524.654645][ T9685] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 40 vs 41 free clusters [ 524.679932][ T9685] Quota error (device loop1): write_blk: dquota write failed [ 524.749294][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.791'. [ 525.462546][ T9685] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 525.509895][ T9685] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.788: Failed to acquire dquot type 0 [ 527.255449][ T9685] EXT4-fs (loop1): 1 truncate cleaned up [ 528.269014][ T9685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.325570][ T9685] ext4 filesystem being mounted at /syzcgroup/unified/syz1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 529.098721][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'. [ 533.984205][ T9744] kvm: kvm [9742]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 536.000762][ T9762] loop2: detected capacity change from 0 to 512 [ 536.074780][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'. [ 536.297632][ T9762] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 40 vs 41 free clusters [ 536.371227][ T9776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.808'. [ 537.160955][ T9762] Quota error (device loop2): write_blk: dquota write failed [ 537.200143][ T9762] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 537.221386][ T9762] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.804: Failed to acquire dquot type 0 [ 537.836544][ T9782] loop4: detected capacity change from 0 to 512 [ 537.850475][ T9762] EXT4-fs (loop2): 1 truncate cleaned up [ 537.856914][ T9762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.914411][ T9762] ext4 filesystem being mounted at /syzcgroup/unified/syz2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 537.958516][ T9782] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 40 vs 41 free clusters [ 538.051748][ T9782] Quota error (device loop4): write_blk: dquota write failed [ 538.099969][ T9782] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 538.178933][ T9782] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.810: Failed to acquire dquot type 0 [ 538.272766][ T9782] EXT4-fs (loop4): 1 truncate cleaned up [ 538.298175][ T9782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.320955][ T9782] ext4 filesystem being mounted at /syzcgroup/unified/syz4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.515293][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'. [ 548.832154][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.819'. [ 563.570300][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.576698][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 577.024729][ T9932] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 586.624036][ T9958] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 586.789162][ T9961] netlink: 48 bytes leftover after parsing attributes in process `syz.2.852'. [ 592.151443][ T9977] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 593.871728][ T9983] netlink: 48 bytes leftover after parsing attributes in process `syz.2.857'. [ 594.404973][ T9987] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 596.129347][ T9991] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 596.300914][ T9996] netlink: 48 bytes leftover after parsing attributes in process `syz.2.860'. [ 596.887821][T10000] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 596.984552][T10002] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 597.117711][T10005] netlink: 48 bytes leftover after parsing attributes in process `syz.1.861'. [ 597.119412][T10006] netlink: 48 bytes leftover after parsing attributes in process `syz.3.862'. [ 597.198394][T10007] netlink: 48 bytes leftover after parsing attributes in process `syz.4.858'. [ 597.646204][T10009] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 599.695964][T10016] sysfs: cannot create duplicate filename '/devices/iommufd_mock2' [ 599.757189][T10016] CPU: 1 PID: 10016 Comm: syz.3.866 Not tainted 6.6.102-syzkaller #0 [ 599.765324][T10016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 599.775383][T10016] Call Trace: [ 599.778751][T10016] [ 599.781698][T10016] dump_stack_lvl+0x16c/0x230 [ 599.786402][T10016] ? show_regs_print_info+0x20/0x20 [ 599.791692][T10016] ? load_image+0x3b0/0x3b0 [ 599.796331][T10016] sysfs_create_dir_ns+0x256/0x280 [ 599.801557][T10016] ? sysfs_warn_dup+0xa0/0xa0 [ 599.806451][T10016] ? do_raw_spin_unlock+0x121/0x230 [ 599.811704][T10016] kobject_add_internal+0x6b8/0xc70 [ 599.816915][T10016] kobject_add+0x156/0x220 [ 599.821338][T10016] ? kobject_init+0x1e0/0x1e0 [ 599.826031][T10016] ? bus_get_dev_root+0x127/0x150 [ 599.831065][T10016] ? get_device_parent+0x387/0x390 [ 599.836175][T10016] ? dev_attr_store+0x90/0x90 [ 599.840856][T10016] device_add+0x408/0xc20 [ 599.845450][T10016] ? device_initialize+0x24b/0x440 [ 599.850573][T10016] iommufd_test+0x11de/0x29d0 [ 599.855282][T10016] ? iommufd_selftest_destroy+0xf0/0xf0 [ 599.860869][T10016] ? __lock_acquire+0x7c80/0x7c80 [ 599.865899][T10016] ? __lock_acquire+0x7c80/0x7c80 [ 599.870924][T10016] ? __might_fault+0xaa/0x120 [ 599.875600][T10016] ? __might_fault+0xaa/0x120 [ 599.880275][T10016] iommufd_fops_ioctl+0x42f/0x4e0 [ 599.885317][T10016] ? iommufd_ctx_put+0x40/0x40 [ 599.890092][T10016] ? __fget_files+0x28/0x4d0 [ 599.894688][T10016] ? bpf_lsm_file_ioctl+0x9/0x10 [ 599.899619][T10016] ? security_file_ioctl+0x80/0xa0 [ 599.904731][T10016] ? iommufd_ctx_put+0x40/0x40 [ 599.909509][T10016] __se_sys_ioctl+0xfd/0x170 [ 599.914101][T10016] do_syscall_64+0x55/0xb0 [ 599.918622][T10016] ? clear_bhb_loop+0x40/0x90 [ 599.923302][T10016] ? clear_bhb_loop+0x40/0x90 [ 599.928001][T10016] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 599.934005][T10016] RIP: 0033:0x7f2e00b8ebe9 [ 599.938432][T10016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.958069][T10016] RSP: 002b:00007f2e01ac7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 599.966586][T10016] RAX: ffffffffffffffda RBX: 00007f2e00db5fa0 RCX: 00007f2e00b8ebe9 [ 599.974576][T10016] RDX: 0000200000000180 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 599.982853][T10016] RBP: 00007f2e00c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 599.991031][T10016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.999023][T10016] R13: 00007f2e00db6038 R14: 00007f2e00db5fa0 R15: 00007ffdad975278 [ 600.007011][T10016] [ 600.081261][T10016] kobject: kobject_add_internal failed for iommufd_mock2 with -EEXIST, don't try to register things with the same name in the same directory. [ 600.744538][T10027] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 600.965811][T10028] netlink: 48 bytes leftover after parsing attributes in process `syz.4.868'. [ 601.063950][T10030] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 601.201889][T10031] netlink: 48 bytes leftover after parsing attributes in process `syz.1.869'. [ 601.235268][T10016] netlink: 48 bytes leftover after parsing attributes in process `syz.3.866'. [ 602.202997][T10033] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 602.329737][T10035] sysfs: cannot create duplicate filename '/devices/iommufd_mock3' [ 602.368410][T10035] CPU: 1 PID: 10035 Comm: syz.3.871 Not tainted 6.6.102-syzkaller #0 [ 602.376821][T10035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 602.386898][T10035] Call Trace: [ 602.390184][T10035] [ 602.393116][T10035] dump_stack_lvl+0x16c/0x230 [ 602.397807][T10035] ? show_regs_print_info+0x20/0x20 [ 602.403046][T10035] ? load_image+0x3b0/0x3b0 [ 602.407705][T10035] sysfs_create_dir_ns+0x256/0x280 [ 602.412833][T10035] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 602.418947][T10035] ? sysfs_warn_dup+0xa0/0xa0 [ 602.423659][T10035] ? do_raw_spin_unlock+0x121/0x230 [ 602.428865][T10035] kobject_add_internal+0x6b8/0xc70 [ 602.434158][T10035] kobject_add+0x156/0x220 [ 602.438582][T10035] ? kobject_init+0x1e0/0x1e0 [ 602.443295][T10035] ? bus_get_dev_root+0x127/0x150 [ 602.448332][T10035] ? get_device_parent+0x387/0x390 [ 602.453542][T10035] ? dev_attr_store+0x90/0x90 [ 602.458224][T10035] device_add+0x408/0xc20 [ 602.462583][T10035] ? device_initialize+0x24b/0x440 [ 602.467715][T10035] iommufd_test+0x11de/0x29d0 [ 602.472771][T10035] ? iommufd_selftest_destroy+0xf0/0xf0 [ 602.478337][T10035] ? __lock_acquire+0x7c80/0x7c80 [ 602.483436][T10035] ? __lock_acquire+0x7c80/0x7c80 [ 602.488478][T10035] ? __might_fault+0xaa/0x120 [ 602.493270][T10035] ? __might_fault+0xaa/0x120 [ 602.497984][T10035] iommufd_fops_ioctl+0x42f/0x4e0 [ 602.503144][T10035] ? iommufd_ctx_put+0x40/0x40 [ 602.507931][T10035] ? __fget_files+0x28/0x4d0 [ 602.512629][T10035] ? bpf_lsm_file_ioctl+0x9/0x10 [ 602.517569][T10035] ? security_file_ioctl+0x80/0xa0 [ 602.522898][T10035] ? iommufd_ctx_put+0x40/0x40 [ 602.527815][T10035] __se_sys_ioctl+0xfd/0x170 [ 602.532634][T10035] do_syscall_64+0x55/0xb0 [ 602.537351][T10035] ? clear_bhb_loop+0x40/0x90 [ 602.542182][T10035] ? clear_bhb_loop+0x40/0x90 [ 602.546915][T10035] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 602.552846][T10035] RIP: 0033:0x7f2e00b8ebe9 [ 602.557359][T10035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.577354][T10035] RSP: 002b:00007f2e01ac7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 602.581590][T10036] netlink: 48 bytes leftover after parsing attributes in process `syz.2.870'. [ 602.585801][T10035] RAX: ffffffffffffffda RBX: 00007f2e00db5fa0 RCX: 00007f2e00b8ebe9 [ 602.602711][T10035] RDX: 0000200000000180 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 602.610729][T10035] RBP: 00007f2e00c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 602.618765][T10035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.626872][T10035] R13: 00007f2e00db6038 R14: 00007f2e00db5fa0 R15: 00007ffdad975278 [ 602.634908][T10035] [ 602.917452][T10035] kobject: kobject_add_internal failed for iommufd_mock3 with -EEXIST, don't try to register things with the same name in the same directory. [ 603.774227][T10043] iommufd_mock iommufd_mock2: Adding to iommu group 0 [ 604.244479][T10048] netlink: 48 bytes leftover after parsing attributes in process `syz.1.873'. [ 610.828109][T10074] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 611.146965][T10077] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 611.168285][T10075] netlink: 48 bytes leftover after parsing attributes in process `syz.4.880'. [ 611.201709][T10079] iommufd_mock iommufd_mock3: Adding to iommu group 2 [ 611.328630][T10080] netlink: 48 bytes leftover after parsing attributes in process `syz.2.881'. [ 611.491680][T10081] netlink: 48 bytes leftover after parsing attributes in process `syz.3.882'. [ 612.988515][T10096] netlink: 168 bytes leftover after parsing attributes in process `syz.4.885'. [ 613.070516][T10098] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 616.581110][T10124] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 616.716628][T10126] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 616.761258][T10127] netlink: 48 bytes leftover after parsing attributes in process `syz.3.894'. [ 617.253539][T10131] netlink: 48 bytes leftover after parsing attributes in process `syz.1.893'. [ 619.491184][T10147] input: syz0 as /devices/virtual/input/input6 [ 621.067959][T10164] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 621.250228][ T5862] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 621.276722][T10165] netlink: 48 bytes leftover after parsing attributes in process `syz.1.903'. [ 621.440594][ T5862] usb 3-1: Using ep0 maxpacket: 8 [ 621.450691][ T5862] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 621.463644][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.502756][ T5862] pvrusb2: Hardware description: Terratec Grabster AV400 [ 621.509821][ T5862] pvrusb2: ********** [ 621.549425][ T5862] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 621.570368][ T5862] pvrusb2: Important functionality might not be entirely working. [ 621.589832][ T5862] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 621.625111][ T5862] pvrusb2: ********** [ 621.699005][T10168] netlink: 48 bytes leftover after parsing attributes in process `syz.4.904'. [ 621.710431][ T2317] pvrusb2: Invalid write control endpoint [ 621.916688][ T2317] pvrusb2: Invalid write control endpoint [ 621.935576][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 621.977857][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 622.028224][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 622.079363][ T2317] pvrusb2: Device being rendered inoperable [ 622.106719][T10162] pvrusb2: Attempted to execute control transfer when device not ok [ 622.117998][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 622.131670][ T785] usb 3-1: USB disconnect, device number 14 [ 622.136384][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 622.151655][ T2317] pvrusb2: Attached sub-driver cx25840 [ 622.162558][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 622.176810][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 623.174769][T10175] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 623.240539][T10177] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 623.312963][T10175] netlink: 48 bytes leftover after parsing attributes in process `syz.2.906'. [ 623.391909][T10179] netlink: 48 bytes leftover after parsing attributes in process `syz.1.907'. [ 624.723800][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.730948][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.040221][ T786] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 630.360112][ T786] usb 4-1: Using ep0 maxpacket: 8 [ 630.382425][ T786] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 630.392225][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.432176][ T786] pvrusb2: Hardware description: Terratec Grabster AV400 [ 630.450865][ T786] pvrusb2: ********** [ 630.455015][ T786] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 630.510280][ T786] pvrusb2: Important functionality might not be entirely working. [ 630.549620][ T786] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 630.568261][ T786] pvrusb2: ********** [ 630.647330][ T2317] pvrusb2: Invalid write control endpoint [ 630.891518][ T2317] pvrusb2: Invalid write control endpoint [ 630.920394][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 630.965352][ T9] usb 4-1: USB disconnect, device number 21 [ 630.980147][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 630.995707][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 631.036362][ T2317] pvrusb2: Device being rendered inoperable [ 631.050256][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 631.067583][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 631.105506][ T2317] pvrusb2: Attached sub-driver cx25840 [ 631.130583][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 631.160084][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 631.530210][ T5862] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 631.720656][ T5862] usb 5-1: Using ep0 maxpacket: 8 [ 631.763798][ T5862] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 631.789770][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.850635][ T5862] pvrusb2: Hardware description: Terratec Grabster AV400 [ 631.879057][ T5862] pvrusb2: ********** [ 631.883928][ T5862] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 631.894993][ T5862] pvrusb2: Important functionality might not be entirely working. [ 631.904815][ T5862] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 631.916644][ T5862] pvrusb2: ********** [ 632.030382][ T5882] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 632.064599][ T2317] pvrusb2: Invalid write control endpoint [ 632.230187][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 632.281579][ T5882] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 632.318588][ T9] usb 5-1: USB disconnect, device number 12 [ 632.333832][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.352017][ T2317] pvrusb2: Invalid write control endpoint [ 632.372411][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 632.398656][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 632.401598][ T5882] pvrusb2: Hardware description: Terratec Grabster AV400 [ 632.411704][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 632.426572][ T2317] pvrusb2: Device being rendered inoperable [ 632.432951][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 632.440474][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 632.470448][ T2317] pvrusb2: Attached sub-driver cx25840 [ 632.486371][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 632.490181][ T5882] pvrusb2: ********** [ 632.510492][ T5882] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 632.544285][ T5882] pvrusb2: Important functionality might not be entirely working. [ 632.559741][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 632.624938][ T5882] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 632.654492][ T5882] pvrusb2: ********** [ 632.663515][ T2317] pvrusb2: Invalid write control endpoint [ 632.772727][ T2317] pvrusb2: Invalid write control endpoint [ 632.790874][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 632.805995][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 632.813887][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 632.875768][ T2317] pvrusb2: Device being rendered inoperable [ 632.920268][T10266] pvrusb2: Attempted to execute control transfer when device not ok [ 632.934852][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 632.942420][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 632.972435][ T2317] pvrusb2: Attached sub-driver cx25840 [ 632.978457][ T5882] usb 4-1: USB disconnect, device number 22 [ 633.004970][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 633.019351][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 633.420376][ T5862] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 633.635182][ T5862] usb 5-1: Using ep0 maxpacket: 8 [ 633.645479][ T5862] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 633.672530][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.708908][ T5862] pvrusb2: Hardware description: Terratec Grabster AV400 [ 633.716404][ T5862] pvrusb2: ********** [ 633.720537][ T5862] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 633.730805][ T5862] pvrusb2: Important functionality might not be entirely working. [ 633.739405][ T5862] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 633.752806][ T5862] pvrusb2: ********** [ 633.810273][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 633.919791][ T2317] pvrusb2: Invalid write control endpoint [ 634.040401][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 634.062672][ T2317] pvrusb2: Invalid write control endpoint [ 634.070719][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 634.093843][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 634.103368][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.124843][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 634.135760][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 634.168082][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 634.178682][ T9] pvrusb2: ********** [ 634.189918][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 634.220365][ T2317] pvrusb2: Device being rendered inoperable [ 634.226569][ T9] pvrusb2: Important functionality might not be entirely working. [ 634.243754][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 634.276142][ T9] pvrusb2: ********** [ 634.292762][ T5882] usb 5-1: USB disconnect, device number 13 [ 634.310208][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 634.317380][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 634.348115][ T2317] pvrusb2: Attached sub-driver cx25840 [ 634.368721][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 634.379050][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 634.415130][ T2317] pvrusb2: Invalid write control endpoint [ 634.539553][ T2317] pvrusb2: Invalid write control endpoint [ 634.552209][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 634.613970][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 634.628358][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 634.651164][ T2317] pvrusb2: Device being rendered inoperable [ 634.667983][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 634.675401][T10284] pvrusb2: Attempted to execute control transfer when device not ok [ 634.718376][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 634.729641][ T9] usb 2-1: USB disconnect, device number 18 [ 634.770794][ T2317] pvrusb2: Attached sub-driver cx25840 [ 634.776319][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 634.800223][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 636.470712][ T5862] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 636.720442][ T5862] usb 3-1: Using ep0 maxpacket: 8 [ 636.727197][ T5862] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 636.741411][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.778416][ T5862] pvrusb2: Hardware description: Terratec Grabster AV400 [ 636.800556][ T5862] pvrusb2: ********** [ 636.804794][ T5862] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 636.878088][ T5862] pvrusb2: Important functionality might not be entirely working. [ 636.918238][ T5862] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 636.950986][ T5862] pvrusb2: ********** [ 636.984523][ T2317] pvrusb2: Invalid write control endpoint [ 637.156631][ T2317] pvrusb2: Invalid write control endpoint [ 637.220119][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 637.308128][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 637.402793][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 637.453854][ T2317] pvrusb2: Device being rendered inoperable [ 637.509785][T10311] pvrusb2: Attempted to execute control transfer when device not ok [ 637.562360][ T9] usb 3-1: USB disconnect, device number 15 [ 637.581333][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 637.616862][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 637.645025][ T2317] pvrusb2: Attached sub-driver cx25840 [ 637.657358][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 637.690803][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 640.810671][T10243] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 641.094705][T10243] usb 5-1: Using ep0 maxpacket: 8 [ 641.114623][T10243] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 641.130327][T10243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.178857][T10243] pvrusb2: Hardware description: Terratec Grabster AV400 [ 641.207864][T10243] pvrusb2: ********** [ 641.228361][T10243] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 641.266431][T10243] pvrusb2: Important functionality might not be entirely working. [ 641.295437][T10243] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 641.325327][T10243] pvrusb2: ********** [ 641.402509][ T2317] pvrusb2: Invalid write control endpoint [ 641.605268][ T2317] pvrusb2: Invalid write control endpoint [ 641.630482][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 641.687155][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 641.732672][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 641.762444][ T2317] pvrusb2: Device being rendered inoperable [ 641.771449][T10356] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 641.785817][T10243] usb 5-1: USB disconnect, device number 14 [ 641.794873][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 641.848907][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 641.874712][ T2317] pvrusb2: Attached sub-driver cx25840 [ 641.909749][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 641.980437][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 642.228167][ T9639] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 642.480227][ T9639] usb 2-1: Using ep0 maxpacket: 8 [ 642.487932][ T9639] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 642.500346][ T9639] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.539645][ T9639] pvrusb2: Hardware description: Terratec Grabster AV400 [ 642.580199][ T9639] pvrusb2: ********** [ 642.616191][ T9639] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 642.628074][ T9639] pvrusb2: Important functionality might not be entirely working. [ 642.637013][ T9639] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 642.656996][ T9639] pvrusb2: ********** [ 642.705466][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 642.813699][ T2317] pvrusb2: Invalid write control endpoint [ 642.976916][ T2317] pvrusb2: Invalid write control endpoint [ 642.993071][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 643.022463][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 643.030386][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 643.038671][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.079791][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 643.086300][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 643.117646][ T9] pvrusb2: ********** [ 643.126959][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 643.132258][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 643.169788][ T2317] pvrusb2: Device being rendered inoperable [ 643.176262][ T9] pvrusb2: Important functionality might not be entirely working. [ 643.176280][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 643.176291][ T9] pvrusb2: ********** [ 643.343952][T10368] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 643.490333][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 643.497504][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 643.507703][ T5882] usb 2-1: USB disconnect, device number 19 [ 643.553823][ T2317] pvrusb2: Attached sub-driver cx25840 [ 643.559454][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 643.589808][T10372] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 643.626549][ T5842] usb 5-1: USB disconnect, device number 15 [ 643.640540][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 643.640802][ T5842] pvrusb2: Device being rendered inoperable [ 644.480283][ T5882] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 644.620231][T10243] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 644.706294][ T5882] usb 2-1: Using ep0 maxpacket: 8 [ 644.736903][ T5882] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 644.754046][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.794997][ T5882] pvrusb2: Hardware description: Terratec Grabster AV400 [ 644.810189][T10243] usb 5-1: Using ep0 maxpacket: 8 [ 644.816807][ T5882] pvrusb2: ********** [ 644.822337][ T5882] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 644.837935][T10243] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 644.848824][ T5882] pvrusb2: Important functionality might not be entirely working. [ 644.855087][T10243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.865098][ T5882] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 644.865116][ T5882] pvrusb2: ********** [ 644.896694][T10243] pvrusb2: Hardware description: Terratec Grabster AV400 [ 644.908107][T10243] pvrusb2: ********** [ 644.912533][T10243] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 644.934416][T10243] pvrusb2: Important functionality might not be entirely working. [ 644.942922][T10243] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 644.955327][T10243] pvrusb2: ********** [ 645.018095][ T2317] pvrusb2: Invalid write control endpoint [ 645.239630][ T2317] pvrusb2: Invalid write control endpoint [ 645.260127][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 645.280088][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 645.295654][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 645.305958][ T2317] pvrusb2: Device being rendered inoperable [ 645.318209][T10385] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 645.328847][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 645.341580][ T9639] usb 2-1: USB disconnect, device number 20 [ 645.357830][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 645.379561][ T2317] pvrusb2: Attached sub-driver cx25840 [ 645.406926][T10389] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 645.407620][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 645.449074][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 645.449186][T10243] usb 5-1: USB disconnect, device number 16 [ 645.467895][ T2317] pvrusb2: Invalid write control endpoint [ 645.539718][ T2317] pvrusb2: Invalid write control endpoint [ 645.553236][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 645.595763][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 645.613174][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 645.670435][ T2317] pvrusb2: Device being rendered inoperable [ 645.676510][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 645.684349][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 645.702544][ T2317] pvrusb2: Attached sub-driver cx25840 [ 645.710678][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 645.739264][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 646.450248][T10243] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 646.683920][T10243] usb 2-1: Using ep0 maxpacket: 8 [ 646.711374][T10243] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 646.725321][T10243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.782721][T10243] pvrusb2: Hardware description: Terratec Grabster AV400 [ 646.800312][T10243] pvrusb2: ********** [ 646.805293][T10243] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 646.838418][T10243] pvrusb2: Important functionality might not be entirely working. [ 646.862106][T10243] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 646.939364][T10243] pvrusb2: ********** [ 647.006467][ T2317] pvrusb2: Invalid write control endpoint [ 647.118102][ T2317] pvrusb2: Invalid write control endpoint [ 647.154528][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 647.288822][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 647.318241][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 647.329277][ T2317] pvrusb2: Device being rendered inoperable [ 647.339311][T10403] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 647.359292][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 647.374448][ T9639] usb 2-1: USB disconnect, device number 21 [ 647.388395][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 647.411111][ T2317] pvrusb2: Attached sub-driver cx25840 [ 647.428432][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 647.472962][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 647.990417][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 648.180134][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 648.191761][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 648.201066][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.225977][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 648.260128][ T9] pvrusb2: ********** [ 648.270761][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 648.305064][ T9] pvrusb2: Important functionality might not be entirely working. [ 648.340189][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 648.372340][ T9] pvrusb2: ********** [ 648.428756][ T2317] pvrusb2: Invalid write control endpoint [ 648.607096][ T2317] pvrusb2: Invalid write control endpoint [ 648.640344][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 648.681296][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 648.717526][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 648.758377][ T2317] pvrusb2: Device being rendered inoperable [ 648.780144][T10421] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 648.813662][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 648.824976][ T5862] usb 3-1: USB disconnect, device number 16 [ 648.858963][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 648.878544][ T2317] pvrusb2: Attached sub-driver cx25840 [ 648.900707][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 648.921040][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 649.070321][ T9639] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 649.270168][ T9639] usb 4-1: Using ep0 maxpacket: 8 [ 649.277401][ T9639] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 649.288102][ T9639] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.336418][ T9639] pvrusb2: Hardware description: Terratec Grabster AV400 [ 649.369383][ T9639] pvrusb2: ********** [ 649.392555][ T9639] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 649.430934][ T9639] pvrusb2: Important functionality might not be entirely working. [ 649.438871][ T9639] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 649.501146][ T9639] pvrusb2: ********** [ 649.566187][ T2317] pvrusb2: Invalid write control endpoint [ 649.759152][ T2317] pvrusb2: Invalid write control endpoint [ 649.800299][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 649.850167][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 649.857749][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 649.899215][ T2317] pvrusb2: Device being rendered inoperable [ 649.920601][T10431] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 649.950343][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 649.968674][ T786] usb 4-1: USB disconnect, device number 23 [ 649.977940][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 650.019573][ T2317] pvrusb2: Attached sub-driver cx25840 [ 650.048390][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 650.063539][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 651.056284][ T5882] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 651.140132][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 651.285569][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 651.295090][ T5882] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 651.304379][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.359765][ T5882] pvrusb2: Hardware description: Terratec Grabster AV400 [ 651.380058][ T5882] pvrusb2: ********** [ 651.384276][ T5882] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 651.386547][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 651.415535][ T5882] pvrusb2: Important functionality might not be entirely working. [ 651.443748][ T5882] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 651.456613][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 651.476367][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.496503][ T5882] pvrusb2: ********** [ 651.501310][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 651.518651][ T9] pvrusb2: ********** [ 651.550326][ T2317] pvrusb2: Invalid write control endpoint [ 651.561885][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 651.599709][ T9] pvrusb2: Important functionality might not be entirely working. [ 651.657383][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 651.679020][ T9] pvrusb2: ********** [ 651.784463][ T2317] pvrusb2: Invalid write control endpoint [ 651.807925][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 651.833614][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 651.846052][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 651.859599][ T2317] pvrusb2: Device being rendered inoperable [ 651.876612][T10451] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 651.899762][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 651.922344][ T5862] usb 4-1: USB disconnect, device number 24 [ 651.940172][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 651.969227][T10453] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 651.990651][ T9] usb 2-1: USB disconnect, device number 22 [ 651.997309][ T9] pvrusb2: Device being rendered inoperable [ 652.018460][ T2317] pvrusb2: Attached sub-driver cx25840 [ 652.038058][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 652.064178][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 652.631007][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 653.080329][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 653.100728][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 653.150232][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.221514][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 653.267121][ T9] pvrusb2: ********** [ 653.271916][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 653.308992][ T9] pvrusb2: Important functionality might not be entirely working. [ 653.333822][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 653.348344][ T9] pvrusb2: ********** [ 653.433667][ T2317] pvrusb2: Invalid write control endpoint [ 653.539558][ T2317] pvrusb2: Invalid write control endpoint [ 653.600435][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 653.658211][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 653.677609][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 653.695111][ T2317] pvrusb2: Device being rendered inoperable [ 653.702820][T10463] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 653.713551][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 653.723627][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 653.736162][ T786] usb 5-1: USB disconnect, device number 17 [ 653.744698][ T2317] pvrusb2: Attached sub-driver cx25840 [ 653.750628][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 653.766943][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 653.820198][ T5862] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 654.010156][ T5862] usb 3-1: Using ep0 maxpacket: 8 [ 654.023141][ T5862] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 654.057918][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.071883][ T5862] pvrusb2: Hardware description: Terratec Grabster AV400 [ 654.100259][ T5862] pvrusb2: ********** [ 654.110644][ T5862] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 654.159076][ T5862] pvrusb2: Important functionality might not be entirely working. [ 654.171143][ T5862] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 654.182828][ T5862] pvrusb2: ********** [ 654.288810][ T2317] pvrusb2: Invalid write control endpoint [ 654.298910][ T5862] usb 3-1: USB disconnect, device number 17 [ 654.484840][ T2317] pvrusb2: Invalid write control endpoint [ 654.510754][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 654.530331][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 654.557838][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 654.587026][ T2317] pvrusb2: Device being rendered inoperable [ 654.621915][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 654.770259][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 654.788766][ T2317] pvrusb2: Attached sub-driver cx25840 [ 654.798995][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 654.809578][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 656.140280][ T786] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 656.350165][ T786] usb 3-1: Using ep0 maxpacket: 8 [ 656.364921][ T786] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 656.388504][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.448453][ T786] pvrusb2: Hardware description: Terratec Grabster AV400 [ 656.483779][ T786] pvrusb2: ********** [ 656.487977][ T786] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 656.505141][ T786] pvrusb2: Important functionality might not be entirely working. [ 656.528961][ T786] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 656.540891][ T786] pvrusb2: ********** [ 656.660124][ T2317] pvrusb2: Invalid write control endpoint [ 656.881358][ T2317] pvrusb2: Invalid write control endpoint [ 656.956654][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 656.972262][ T5862] usb 3-1: USB disconnect, device number 18 [ 656.979867][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 657.022226][ T27] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 657.025485][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 657.061472][ T2317] pvrusb2: Device being rendered inoperable [ 657.067757][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 657.088042][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 657.110778][ T2317] pvrusb2: Attached sub-driver cx25840 [ 657.125364][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 657.151169][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 657.216802][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 657.244714][ T27] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 657.260533][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.298487][ T27] pvrusb2: Hardware description: Terratec Grabster AV400 [ 657.319098][ T27] pvrusb2: ********** [ 657.323913][ T27] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 657.336194][ T27] pvrusb2: Important functionality might not be entirely working. [ 657.344938][ T27] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 657.370206][ T27] pvrusb2: ********** [ 657.537656][ T2317] pvrusb2: Invalid write control endpoint [ 657.642884][ T2317] pvrusb2: Invalid write control endpoint [ 657.648652][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 657.725573][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 657.760648][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 657.806367][ T2317] pvrusb2: Device being rendered inoperable [ 657.817803][ T786] usb 2-1: USB disconnect, device number 23 [ 657.833376][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 657.851695][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 657.869371][ T2317] pvrusb2: Attached sub-driver cx25840 [ 657.905918][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 657.940224][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 658.230108][ T27] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 658.447435][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 658.708802][ T27] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 658.782580][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.864703][ T27] pvrusb2: Hardware description: Terratec Grabster AV400 [ 659.005685][ T27] pvrusb2: ********** [ 659.009846][ T27] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 659.031895][ T27] pvrusb2: Important functionality might not be entirely working. [ 659.045854][ T27] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 659.103395][ T27] pvrusb2: ********** [ 659.119886][ T27] usb 4-1: USB disconnect, device number 25 [ 659.128827][ T2317] pvrusb2: Invalid write control endpoint [ 659.302325][ T2317] pvrusb2: Invalid write control endpoint [ 659.322713][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 659.385245][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 659.402516][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 659.425492][ T2317] pvrusb2: Device being rendered inoperable [ 659.443447][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 659.460324][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 659.485455][ T2317] pvrusb2: Attached sub-driver cx25840 [ 659.500184][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 659.550239][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 663.992699][T10592] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 664.188141][T10594] netlink: 48 bytes leftover after parsing attributes in process `syz.3.998'. [ 674.859206][T10743] binder: 10740:10743 ioctl c0306201 0 returned -14 [ 679.228305][ T28] audit: type=1326 audit(1756120353.700:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10778 comm="syz.3.1039" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e00b8ebe9 code=0x0 [ 679.364612][T10782] vivid-002: disconnect [ 679.470701][T10778] vivid-002: reconnect [ 681.037168][ T28] audit: type=1326 audit(1756120355.510:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10813 comm="syz.1.1046" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe96b8ebe9 code=0x0 [ 681.282212][T10814] vivid-003: disconnect [ 681.306430][T10813] vivid-003: reconnect [ 684.646840][T10863] binder_alloc: 10862: binder_alloc_buf, no vma [ 684.659161][T10863] binder: 10862:10863 ioctl c0306201 200000000240 returned -11 [ 684.695163][ T28] audit: type=1326 audit(1756120359.170:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.3.1053" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e00b8ebe9 code=0x0 [ 684.821285][T10852] vivid-002: disconnect [ 684.829264][T10851] vivid-002: reconnect [ 685.518945][ T28] audit: type=1326 audit(1756120359.980:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10866 comm="syz.3.1057" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e00b8ebe9 code=0x0 [ 685.708607][T10871] vivid-002: disconnect [ 685.780703][T10866] vivid-002: reconnect [ 686.174780][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.181504][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.820682][T10883] binder_alloc: 10882: binder_alloc_buf, no vma [ 687.111547][T10890] fuse: Bad value for 'fd' [ 687.167347][T10893] tipc: Enabling of bearer rejected, failed to enable media [ 687.580477][ T786] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 687.771490][ T786] usb 3-1: Using ep0 maxpacket: 8 [ 687.781609][ T786] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 687.791076][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.824104][ T786] pvrusb2: Hardware description: Terratec Grabster AV400 [ 687.835794][ T786] pvrusb2: ********** [ 687.839905][ T786] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 687.850588][ T5862] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 687.851170][ T786] pvrusb2: Important functionality might not be entirely working. [ 687.866772][ T786] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 687.878382][ T786] pvrusb2: ********** [ 688.009246][T10243] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 688.050155][ T5862] usb 4-1: Using ep0 maxpacket: 8 [ 688.052327][ T2317] pvrusb2: Invalid write control endpoint [ 688.075691][ T5862] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 688.113305][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.143249][ T5862] pvrusb2: Hardware description: Terratec Grabster AV400 [ 688.144618][ T2317] pvrusb2: Invalid write control endpoint [ 688.167227][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 688.169864][ T5862] pvrusb2: ********** [ 688.182281][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 688.182385][ T5862] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 688.194964][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 688.200860][ T5862] pvrusb2: Important functionality might not be entirely working. [ 688.218635][ T5862] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 688.220366][T10243] usb 2-1: Using ep0 maxpacket: 8 [ 688.231605][ T2317] pvrusb2: Device being rendered inoperable [ 688.241714][ T5862] pvrusb2: ********** [ 688.246302][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 688.252159][T10243] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 688.254145][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 688.270039][T10243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.279019][ T2317] pvrusb2: Attached sub-driver cx25840 [ 688.285207][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 688.300134][ T27] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 688.301412][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 688.321227][T10243] pvrusb2: Hardware description: Terratec Grabster AV400 [ 688.337868][T10243] pvrusb2: ********** [ 688.342277][T10243] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 688.361459][T10243] pvrusb2: Important functionality might not be entirely working. [ 688.369599][T10243] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 688.389506][T10243] pvrusb2: ********** [ 688.394928][ T2317] pvrusb2: Invalid write control endpoint [ 688.447398][ T9639] usb 3-1: USB disconnect, device number 19 [ 688.505272][ T2317] pvrusb2: Invalid write control endpoint [ 688.514295][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 688.520664][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 688.536481][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 688.537934][ T27] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 688.546685][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 688.554386][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.575612][ T2317] pvrusb2: Device being rendered inoperable [ 688.584937][ T2317] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 688.597749][ T27] pvrusb2: Hardware description: Terratec Grabster AV400 [ 688.607510][ T2317] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 688.620524][ T27] pvrusb2: ********** [ 688.625198][ T27] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 688.636734][ T2317] pvrusb2: Attached sub-driver cx25840 [ 688.642675][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 688.653511][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 688.660053][ T27] pvrusb2: Important functionality might not be entirely working. [ 688.663443][ T2317] pvrusb2: Invalid write control endpoint [ 688.679332][ T27] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 688.696625][T10906] pvrusb2: Invalid write control endpoint [ 688.704820][T10243] usb 4-1: USB disconnect, device number 26 [ 688.718051][ T27] pvrusb2: ********** [ 688.774129][ T2317] pvrusb2: Invalid write control endpoint [ 688.779920][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 688.798914][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 688.824498][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 688.839968][ T2317] pvrusb2: Device being rendered inoperable [ 688.852656][ T786] usb 2-1: USB disconnect, device number 24 [ 688.852671][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 688.852722][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 688.877186][ T2317] pvrusb2: Attached sub-driver cx25840 [ 688.886257][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 688.896530][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 688.906006][ T2317] pvrusb2: Invalid write control endpoint [ 688.991639][ T2317] pvrusb2: Invalid write control endpoint [ 689.018077][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 689.041155][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 689.048769][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 689.072168][ T2317] pvrusb2: Device being rendered inoperable [ 689.078224][ T2317] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 689.092584][ T2317] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 689.103127][ T2317] pvrusb2: Attached sub-driver cx25840 [ 689.108738][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 689.140228][T10243] usb 5-1: USB disconnect, device number 18 [ 689.141449][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 690.004458][ T27] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 690.232813][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 690.272760][ T27] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 690.313064][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.321426][ T9639] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 690.344151][ T27] pvrusb2: Hardware description: Terratec Grabster AV400 [ 690.358940][ T27] pvrusb2: ********** [ 690.365368][ T27] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 690.388391][ T27] pvrusb2: Important functionality might not be entirely working. [ 690.399538][ T27] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 690.420083][ T27] pvrusb2: ********** [ 690.510152][ T9639] usb 2-1: Using ep0 maxpacket: 8 [ 690.517690][ T9639] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 690.529459][ T9639] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.551291][ T9639] pvrusb2: Hardware description: Terratec Grabster AV400 [ 690.558433][ T9639] pvrusb2: ********** [ 690.574200][ T2317] pvrusb2: Invalid write control endpoint [ 690.584347][ T9639] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 690.604778][ T9639] pvrusb2: Important functionality might not be entirely working. [ 690.625080][ T9639] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 690.647014][ T9639] pvrusb2: ********** [ 690.672583][T10243] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 690.698890][ T2317] pvrusb2: Invalid write control endpoint [ 690.707778][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 690.717618][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 690.725284][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 690.735489][ T2317] pvrusb2: Device being rendered inoperable [ 690.741642][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 690.748844][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 690.763187][ T2317] pvrusb2: Attached sub-driver cx25840 [ 690.770636][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 690.807543][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 690.828468][ T2317] pvrusb2: Invalid write control endpoint [ 690.837807][ T27] usb 4-1: USB disconnect, device number 27 [ 690.870376][T10243] usb 5-1: Using ep0 maxpacket: 8 [ 690.916791][T10243] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 690.940799][T10243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.961608][ T2317] pvrusb2: Invalid write control endpoint [ 690.983462][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 690.992421][T10243] pvrusb2: Hardware description: Terratec Grabster AV400 [ 691.007945][T10243] pvrusb2: ********** [ 691.012543][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 691.012650][T10243] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 691.030499][T10243] pvrusb2: Important functionality might not be entirely working. [ 691.038343][T10243] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 691.050757][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 691.065098][ T2317] pvrusb2: Device being rendered inoperable [ 691.071289][T10243] pvrusb2: ********** [ 691.073009][ T5882] usb 2-1: USB disconnect, device number 25 [ 691.075772][ T2317] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 691.094815][ T2317] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 691.106363][ T2317] pvrusb2: Attached sub-driver cx25840 [ 691.112244][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 691.132930][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 691.213608][ T2317] pvrusb2: Invalid write control endpoint [ 691.349762][ T2317] pvrusb2: Invalid write control endpoint [ 691.375443][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 691.400055][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 691.430190][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 691.491852][ T2317] pvrusb2: Device being rendered inoperable [ 691.510064][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 691.540181][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 691.559089][ T2317] pvrusb2: Attached sub-driver cx25840 [ 691.572015][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 691.590318][T10243] usb 5-1: USB disconnect, device number 19 [ 691.607634][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 691.960151][T10944] vlan2: entered allmulticast mode [ 693.190541][T10243] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 693.285627][T10977] vlan2: entered allmulticast mode [ 693.390563][T10243] usb 5-1: Using ep0 maxpacket: 8 [ 693.403395][T10243] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 693.426777][T10243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.457773][T10243] pvrusb2: Hardware description: Terratec Grabster AV400 [ 693.467981][T10243] pvrusb2: ********** [ 693.476243][T10243] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 693.488035][T10243] pvrusb2: Important functionality might not be entirely working. [ 693.496585][T10243] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 693.508590][T10243] pvrusb2: ********** [ 693.690998][ T2317] pvrusb2: Invalid write control endpoint [ 693.707468][T10243] usb 5-1: USB disconnect, device number 20 [ 693.818445][ T2317] pvrusb2: Invalid write control endpoint [ 693.836308][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 693.849032][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 693.868656][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 693.885311][ T2317] pvrusb2: Device being rendered inoperable [ 693.891606][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 693.898791][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 693.913792][ T2317] pvrusb2: Attached sub-driver cx25840 [ 693.932595][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 693.952894][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 694.532952][T10988] vlan2: entered allmulticast mode [ 694.920287][ T27] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 695.118115][ T27] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 695.169528][ T27] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 695.234762][ T27] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 695.281932][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.356984][T10994] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 695.391425][ T27] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 695.547422][T11004] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 695.562764][T11004] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 696.216411][T11011] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 696.227357][T11011] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 696.880556][ T9639] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 697.085345][ T9639] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 697.113290][ T9639] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 697.126619][ T9639] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 697.136712][ T9639] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.166245][T11015] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 697.202024][ T9639] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 698.603974][ T9] usb 3-1: USB disconnect, device number 20 [ 699.251009][T10243] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 699.372248][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 699.450270][T10243] usb 2-1: Using ep0 maxpacket: 8 [ 699.461574][T10243] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 699.482026][T10243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.513839][T10243] pvrusb2: Hardware description: Terratec Grabster AV400 [ 699.540353][T10243] pvrusb2: ********** [ 699.544755][T10243] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 699.555439][T10243] pvrusb2: Important functionality might not be entirely working. [ 699.564203][T10243] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 699.578239][T10243] pvrusb2: ********** [ 699.607582][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 699.629052][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 699.639951][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 699.655684][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.684677][T11027] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 699.735485][ T9] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 699.756793][ T2317] pvrusb2: Invalid write control endpoint [ 699.768028][T10243] usb 2-1: USB disconnect, device number 26 [ 699.928851][T11022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'. [ 700.013466][T11022] geneve0: entered promiscuous mode [ 700.039746][ T2317] pvrusb2: Invalid write control endpoint [ 700.049711][T11022] geneve0: entered allmulticast mode [ 700.067453][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 700.090489][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 700.102348][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 700.113327][ T2317] pvrusb2: Device being rendered inoperable [ 700.119527][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 700.134329][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 700.157069][ T2317] pvrusb2: Attached sub-driver cx25840 [ 700.171986][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 700.192466][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 700.867915][ T9] usb 4-1: USB disconnect, device number 28 [ 701.253220][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1103'. [ 701.306322][T11042] bond0: entered promiscuous mode [ 701.321873][T11042] bond_slave_0: entered promiscuous mode [ 701.346683][T11042] bond_slave_1: entered promiscuous mode [ 701.370868][T11042] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 701.395411][T11042] bond0: left promiscuous mode [ 701.427614][T11042] bond_slave_0: left promiscuous mode [ 701.450478][T11042] bond_slave_1: left promiscuous mode [ 701.616435][T11043] vlan2: entered allmulticast mode [ 701.629600][T11043] veth1: entered allmulticast mode [ 701.997995][T11033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1100'. [ 702.049379][T11033] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1100'. [ 702.088391][T10243] usb 3-1: USB disconnect, device number 21 [ 702.158292][T11033] geneve0: entered promiscuous mode [ 702.219170][T11033] geneve0: entered allmulticast mode [ 702.355770][T11058] vlan2: entered allmulticast mode [ 703.552943][T11066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1107'. [ 703.616140][T11066] bond0: entered promiscuous mode [ 703.634135][T11066] bond_slave_0: entered promiscuous mode [ 703.663136][T11066] bond_slave_1: entered promiscuous mode [ 703.702365][T11066] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 703.732807][T11066] bond0: left promiscuous mode [ 703.738656][T11066] bond_slave_0: left promiscuous mode [ 703.752923][T11066] bond_slave_1: left promiscuous mode [ 704.397343][T11074] vlan2: entered allmulticast mode [ 704.530451][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1108'. [ 704.583671][T11068] geneve0: entered promiscuous mode [ 704.626948][T11068] geneve0: entered allmulticast mode [ 706.844938][T11099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1114'. [ 706.949344][T11099] bond0: entered promiscuous mode [ 706.965947][T11099] bond_slave_0: entered promiscuous mode [ 706.977593][T11099] bond_slave_1: entered promiscuous mode [ 706.997962][T11099] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 707.017327][T11099] bond0: left promiscuous mode [ 707.031113][T11099] bond_slave_0: left promiscuous mode [ 707.052828][T11099] bond_slave_1: left promiscuous mode [ 707.111838][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1113'. [ 707.123484][T11095] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1113'. [ 707.721707][T11106] vlan2: entered allmulticast mode [ 708.100157][ T5842] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 708.306782][ T5842] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 708.362518][ T5842] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 708.389332][ T5842] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 708.428655][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.468477][T11111] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 708.508219][ T5842] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 709.020296][ T27] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 709.180261][ T28] audit: type=1326 audit(1756120383.650:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.2.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68338ebe9 code=0x7ffc0000 [ 709.310438][ T28] audit: type=1326 audit(1756120383.740:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.2.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68338ebe9 code=0x7ffc0000 [ 709.347608][ T27] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 709.365149][ T28] audit: type=1326 audit(1756120383.740:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.2.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7ff68338ebe9 code=0x7ffc0000 [ 709.389621][ T28] audit: type=1326 audit(1756120383.740:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.2.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68338ebe9 code=0x7ffc0000 [ 709.418005][ T28] audit: type=1326 audit(1756120383.810:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.2.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68338ebe9 code=0x7ffc0000 [ 709.470147][ T27] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 709.509484][ T27] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 709.702214][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.772454][T11122] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 709.822381][ T27] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 710.890117][ T27] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 711.132275][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.242973][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.359418][ T27] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 711.428929][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.618545][ T27] usb 2-1: config 0 descriptor?? [ 712.046357][ T27] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 712.077490][ T27] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 712.142249][ T27] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 712.163097][ T27] cm6533_jd 0003:0D8C:0022.0002: No inputs registered, leaving [ 712.236418][ T27] cm6533_jd 0003:0D8C:0022.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 712.303827][ T5862] usb 3-1: USB disconnect, device number 22 [ 712.376457][ T27] usb 2-1: USB disconnect, device number 27 [ 712.623823][T11136] fido_id[11136]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 713.173787][ T9] usb 4-1: USB disconnect, device number 29 [ 713.180248][ T5862] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 713.451175][ T5862] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 713.506919][ T5862] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 713.559423][ T5862] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 713.598851][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.631173][T11159] netlink: 'syz.3.1125': attribute type 6 has an invalid length. [ 713.810318][T11144] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 713.827278][ T5862] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 715.401190][T11166] netlink: 'syz.3.1126': attribute type 6 has an invalid length. [ 716.239351][ T9] usb 5-1: USB disconnect, device number 21 [ 716.611979][T11174] netlink: 'syz.3.1127': attribute type 6 has an invalid length. [ 716.820097][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 717.033042][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.060149][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.073126][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 717.099346][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.132828][ T9] usb 5-1: config 0 descriptor?? [ 717.574056][ T9] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 717.590258][ T9] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 717.639653][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0003/input/input7 [ 717.693580][ T9] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 717.736839][T11185] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 717.755909][T11185] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 717.814200][ T27] usb 5-1: USB disconnect, device number 22 [ 717.938221][T11193] fido_id[11193]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 719.102079][T11203] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 719.197154][T11203] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 719.540205][T10243] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 719.825720][T10243] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 719.859457][T10243] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 719.887099][T10243] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 719.940099][T10243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.996105][T11212] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 720.031142][T10243] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 720.555640][T11212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.564724][T11212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.055003][T10243] usb 2-1: USB disconnect, device number 28 [ 723.599338][T11243] kvm: pic: non byte write [ 724.496665][T11256] netlink: 'syz.2.1145': attribute type 6 has an invalid length. [ 724.840132][ T27] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 725.040283][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 725.052903][ T27] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 725.066366][ T27] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 725.099493][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 725.110203][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 725.130111][ T27] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 725.143390][ T27] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 725.152736][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.419392][ T27] usb 4-1: GET_CAPABILITIES returned 0 [ 725.428831][ T27] usbtmc 4-1:16.0: can't read capabilities [ 725.700814][ T9] usb 4-1: USB disconnect, device number 30 [ 725.796409][T11267] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 725.810320][T11267] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 725.989581][T11271] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 726.018978][T11271] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 726.180021][ C1] hrtimer: interrupt took 57962 ns [ 726.981617][T11279] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 727.038526][T11279] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 728.006012][T11299] fuse: Bad value for 'fd' [ 730.165848][T11316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1162'. [ 733.501025][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1172'. [ 738.338371][T11418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1183'. [ 739.354433][T11416] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 739.386465][T11416] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 739.590247][ T5862] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 739.661715][T11425] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 739.680279][T11425] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 739.828224][ T5862] usb 3-1: Using ep0 maxpacket: 8 [ 739.854267][ T5862] usb 3-1: config 0 has no interfaces? [ 739.862146][ T5862] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 739.876769][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.887915][ T5862] usb 3-1: config 0 descriptor?? [ 740.579012][T11433] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 740.589801][T11433] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 740.983924][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1189'. [ 741.906085][ T5842] usb 3-1: USB disconnect, device number 23 [ 742.657708][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1190'. [ 742.720983][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 743.142629][T11454] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 743.188220][T11454] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 743.691660][T10243] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 744.200403][T10243] usb 3-1: Using ep0 maxpacket: 8 [ 744.247602][T10243] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 744.270216][T10243] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.325484][T10243] usb 3-1: config 0 has no interfaces? [ 744.360096][T10243] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 744.373548][T10243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.434200][T10243] usb 3-1: config 0 descriptor?? [ 746.118829][ T785] usb 3-1: USB disconnect, device number 24 [ 747.579150][T11493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1200'. [ 747.721019][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.193412][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.970078][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1201'. [ 756.320225][ T5842] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 756.589612][ T5842] usb 4-1: Using ep0 maxpacket: 8 [ 756.592302][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1217'. [ 761.535530][T11580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1220'. [ 762.333825][ T5842] usb 4-1: device descriptor read/all, error -71 [ 770.204569][T11625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'. [ 770.838280][T11618] kvm: kvm [11617]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xaf4c [ 770.862299][T11618] kvm: kvm [11617]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xb070 [ 770.879122][T11618] kvm: kvm [11617]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xb991 [ 771.053662][T11618] kvm: kvm [11617]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xdfe0 [ 783.184717][T11741] fuse: Bad value for 'fd' [ 783.573221][T11745] 9pnet_fd: Insufficient options for proto=fd [ 796.732112][T11822] kvm: kvm [11821]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 796.752833][T11822] kvm: kvm [11821]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 796.770371][T11822] kvm: kvm [11821]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 804.333192][T11865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1283'. [ 809.530884][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.537256][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 824.400128][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 824.407173][ C1] EXT4-fs (loop3): initial error at time 1756120195: ext4_mb_generate_buddy:1220 [ 824.416368][ C1] EXT4-fs (loop3): last error at time 1756120195: ext4_acquire_dquot:6938 [ 829.520104][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 829.526597][ C0] EXT4-fs (loop1): initial error at time 1756120199: ext4_mb_generate_buddy:1220 [ 829.535920][ C0] EXT4-fs (loop1): last error at time 1756120201: ext4_acquire_dquot:6938 [ 838.286762][T12004] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 839.769961][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 839.776457][ C1] EXT4-fs (loop4): initial error at time 1756120212: ext4_mb_generate_buddy:1220 [ 839.785622][ C1] EXT4-fs (loop4): last error at time 1756120212: ext4_acquire_dquot:6938 [ 839.794168][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 839.800599][ C1] EXT4-fs (loop2): initial error at time 1756120210: ext4_mb_generate_buddy:1220 [ 839.809716][ C1] EXT4-fs (loop2): last error at time 1756120211: ext4_acquire_dquot:6938 [ 845.372515][T12039] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 848.960094][T12049] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 852.192948][T12027] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.039904][T12060] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 853.061349][T12060] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 853.071340][T12060] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 853.100612][T12060] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 853.118421][T12060] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 853.126170][T12060] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 853.583070][T12062] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 853.644294][T12064] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 853.785287][T12068] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1328'. [ 853.829238][T12069] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1330'. [ 854.266208][T12058] chnl_net:caif_netlink_parms(): no params data found [ 854.731269][ T7465] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.116269][T12083] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 855.200251][ T5796] Bluetooth: hci1: command tx timeout [ 855.238451][ T7465] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.182861][T12085] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1333'. [ 856.205185][ T7465] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.247368][T12058] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.256777][T12058] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.288695][T12058] bridge_slave_0: entered allmulticast mode [ 856.315348][T12058] bridge_slave_0: entered promiscuous mode [ 856.423141][ T7465] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.536775][T12058] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.559815][T12058] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.569305][T12058] bridge_slave_1: entered allmulticast mode [ 856.588160][T12058] bridge_slave_1: entered promiscuous mode [ 856.714467][T12058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.726444][T12098] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1336'. [ 856.822991][T12058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.002535][T12058] team0: Port device team_slave_0 added [ 857.038014][ T7465] tipc: Left network mode [ 857.124646][T12058] team0: Port device team_slave_1 added [ 857.281136][ T5796] Bluetooth: hci1: command tx timeout [ 858.730734][T12058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.752666][T12058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 858.853894][T12058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.046133][T12105] kvm: kvm [12104]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 859.069349][T12058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.091046][T12058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.141403][T12058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.362444][ T5796] Bluetooth: hci1: command tx timeout [ 859.749594][T12115] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 860.145181][T12058] hsr_slave_0: entered promiscuous mode [ 860.162650][T12058] hsr_slave_1: entered promiscuous mode [ 860.186497][T12058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 860.205102][T12058] Cannot create hsr debugfs directory [ 861.144333][ T7465] hsr_slave_0: left promiscuous mode [ 861.167429][ T7465] hsr_slave_1: left promiscuous mode [ 861.192972][ T7465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 861.212648][ T7465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.237880][ T7465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 861.260662][ T7465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.311356][ T7465] bridge_slave_1: left allmulticast mode [ 861.317164][ T7465] bridge_slave_1: left promiscuous mode [ 861.368480][ T7465] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.440191][ T5796] Bluetooth: hci1: command tx timeout [ 861.508495][ T7465] bridge_slave_0: left allmulticast mode [ 861.528561][ T7465] bridge_slave_0: left promiscuous mode [ 861.541234][ T7465] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.568008][ T7465] veth1_macvtap: left promiscuous mode [ 861.574643][ T7465] veth0_macvtap: left promiscuous mode [ 861.664662][ T7465] veth1_vlan: left promiscuous mode [ 861.807054][ T7465] veth0_vlan: left promiscuous mode [ 862.738009][T12146] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 862.798246][ T7465] bond3 (unregistering): Released all slaves [ 862.947695][ T7465] bond2 (unregistering): Released all slaves [ 862.956531][T12147] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1341'. [ 862.973565][ T7465] bond1 (unregistering): Released all slaves [ 864.228907][ T7465] team0 (unregistering): Port device team_slave_1 removed [ 864.327566][ T7465] team0 (unregistering): Port device team_slave_0 removed [ 864.470440][ T7465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 864.638864][ T7465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 865.272757][ T7465] team0 (unregistering): Port device dummy0 removed [ 865.457515][T12156] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 865.608959][T12157] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1343'. [ 865.804145][T12159] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 865.999574][T12160] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1344'. [ 866.481711][ T7465] bond0 (unregistering): Released all slaves [ 869.498566][T12058] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 869.725126][T12058] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 869.837182][T12058] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 869.865528][T12058] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 870.477929][T12058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.494796][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.501559][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.627749][T12058] 8021q: adding VLAN 0 to HW filter on device team0 [ 870.731568][ T7480] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.738766][ T7480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.860938][ T7480] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.868155][ T7480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.007792][T12233] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 873.107689][T12234] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1356'. [ 873.506180][T12058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.294477][T12269] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 878.521788][T12276] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1360'. [ 878.624719][T12058] veth0_vlan: entered promiscuous mode [ 878.651017][T12281] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 878.683295][T12058] veth1_vlan: entered promiscuous mode [ 878.756131][T12058] veth0_macvtap: entered promiscuous mode [ 878.794391][T12058] veth1_macvtap: entered promiscuous mode [ 878.851220][T12285] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1362'. [ 878.911656][T12058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.959304][T12058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.984792][T12058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.005713][T12058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.057037][T12058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.100093][T12058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.198075][T12058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 879.248245][T12058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.274034][T12058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.289123][T12058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.303981][T12058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.334969][T12058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.368539][T12058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.435570][T12058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 880.391596][T12058] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.400796][T12058] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.409705][T12058] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.420233][T12058] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.587459][T12293] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 880.685438][ T3459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 880.704288][ T3459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.747243][ T3459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 880.763233][ T3459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.874656][T12294] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1365'. [ 884.043648][T12322] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 884.294947][T12323] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1367'. [ 886.023226][T12340] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 886.822765][T12351] sysfs: cannot create duplicate filename '/devices/iommufd_mock2' [ 886.831701][T12351] CPU: 0 PID: 12351 Comm: syz.5.1372 Not tainted 6.6.102-syzkaller #0 [ 886.839911][T12351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 886.850455][T12351] Call Trace: [ 886.853757][T12351] [ 886.856861][T12351] dump_stack_lvl+0x16c/0x230 [ 886.861561][T12351] ? show_regs_print_info+0x20/0x20 [ 886.866759][T12351] ? load_image+0x3b0/0x3b0 [ 886.871391][T12351] sysfs_create_dir_ns+0x256/0x280 [ 886.876529][T12351] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 886.882611][T12351] ? sysfs_warn_dup+0xa0/0xa0 [ 886.887303][T12351] ? do_raw_spin_unlock+0x121/0x230 [ 886.892617][T12351] kobject_add_internal+0x6b8/0xc70 [ 886.897866][T12351] kobject_add+0x156/0x220 [ 886.902398][T12351] ? kobject_init+0x1e0/0x1e0 [ 886.907106][T12351] ? bus_get_dev_root+0x127/0x150 [ 886.912127][T12351] ? get_device_parent+0x387/0x390 [ 886.917240][T12351] ? dev_attr_store+0x90/0x90 [ 886.922036][T12351] device_add+0x408/0xc20 [ 886.926735][T12351] ? device_initialize+0x24b/0x440 [ 886.931849][T12351] iommufd_test+0x11de/0x29d0 [ 886.936530][T12351] ? iommufd_selftest_destroy+0xf0/0xf0 [ 886.942101][T12351] ? __lock_acquire+0x7c80/0x7c80 [ 886.947145][T12351] ? __lock_acquire+0x7c80/0x7c80 [ 886.952230][T12351] ? __might_fault+0xaa/0x120 [ 886.956967][T12351] ? __might_fault+0xaa/0x120 [ 886.961709][T12351] iommufd_fops_ioctl+0x42f/0x4e0 [ 886.966798][T12351] ? iommufd_ctx_put+0x40/0x40 [ 886.971609][T12351] ? __fget_files+0x28/0x4d0 [ 886.976235][T12351] ? bpf_lsm_file_ioctl+0x9/0x10 [ 886.981182][T12351] ? security_file_ioctl+0x80/0xa0 [ 886.986491][T12351] ? iommufd_ctx_put+0x40/0x40 [ 886.991273][T12351] __se_sys_ioctl+0xfd/0x170 [ 886.995883][T12351] do_syscall_64+0x55/0xb0 [ 887.000400][T12351] ? clear_bhb_loop+0x40/0x90 [ 887.005096][T12351] ? clear_bhb_loop+0x40/0x90 [ 887.009783][T12351] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 887.015692][T12351] RIP: 0033:0x7f971198ebe9 [ 887.020192][T12351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 887.039812][T12351] RSP: 002b:00007f97127d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 887.048238][T12351] RAX: ffffffffffffffda RBX: 00007f9711bb5fa0 RCX: 00007f971198ebe9 [ 887.056409][T12351] RDX: 0000200000000180 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 887.064387][T12351] RBP: 00007f9711a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 887.072637][T12351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 887.080622][T12351] R13: 00007f9711bb6038 R14: 00007f9711bb5fa0 R15: 00007fff28d42898 [ 887.088617][T12351] [ 887.117363][T12351] kobject: kobject_add_internal failed for iommufd_mock2 with -EEXIST, don't try to register things with the same name in the same directory. [ 887.575184][T12359] sysfs: cannot create duplicate filename '/devices/iommufd_mock2' [ 887.615973][T12359] CPU: 1 PID: 12359 Comm: syz.4.1373 Not tainted 6.6.102-syzkaller #0 [ 887.624191][T12359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 887.634247][T12359] Call Trace: [ 887.637529][T12359] [ 887.640484][T12359] dump_stack_lvl+0x16c/0x230 [ 887.645164][T12359] ? show_regs_print_info+0x20/0x20 [ 887.650370][T12359] ? load_image+0x3b0/0x3b0 [ 887.654893][T12359] sysfs_create_dir_ns+0x256/0x280 [ 887.660032][T12359] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 887.666112][T12359] ? sysfs_warn_dup+0xa0/0xa0 [ 887.670794][T12359] ? do_raw_spin_unlock+0x121/0x230 [ 887.676009][T12359] kobject_add_internal+0x6b8/0xc70 [ 887.681221][T12359] kobject_add+0x156/0x220 [ 887.685666][T12359] ? kobject_init+0x1e0/0x1e0 [ 887.690367][T12359] ? bus_get_dev_root+0x127/0x150 [ 887.695437][T12359] ? get_device_parent+0x387/0x390 [ 887.700665][T12359] ? dev_attr_store+0x90/0x90 [ 887.705342][T12359] device_add+0x408/0xc20 [ 887.709669][T12359] ? device_initialize+0x24b/0x440 [ 887.714967][T12359] iommufd_test+0x11de/0x29d0 [ 887.719654][T12359] ? iommufd_selftest_destroy+0xf0/0xf0 [ 887.725199][T12359] ? __lock_acquire+0x7c80/0x7c80 [ 887.730221][T12359] ? __lock_acquire+0x7c80/0x7c80 [ 887.735246][T12359] ? __might_fault+0xaa/0x120 [ 887.739931][T12359] ? __might_fault+0xaa/0x120 [ 887.744641][T12359] iommufd_fops_ioctl+0x42f/0x4e0 [ 887.749762][T12359] ? iommufd_ctx_put+0x40/0x40 [ 887.754526][T12359] ? __fget_files+0x28/0x4d0 [ 887.759121][T12359] ? bpf_lsm_file_ioctl+0x9/0x10 [ 887.764055][T12359] ? security_file_ioctl+0x80/0xa0 [ 887.769163][T12359] ? iommufd_ctx_put+0x40/0x40 [ 887.773943][T12359] __se_sys_ioctl+0xfd/0x170 [ 887.778624][T12359] do_syscall_64+0x55/0xb0 [ 887.783086][T12359] ? clear_bhb_loop+0x40/0x90 [ 887.787776][T12359] ? clear_bhb_loop+0x40/0x90 [ 887.792456][T12359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 887.798387][T12359] RIP: 0033:0x7f50fd78ebe9 [ 887.802891][T12359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 887.822868][T12359] RSP: 002b:00007f50fe577038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 887.831382][T12359] RAX: ffffffffffffffda RBX: 00007f50fd9b5fa0 RCX: 00007f50fd78ebe9 [ 887.839355][T12359] RDX: 0000200000000180 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 887.847334][T12359] RBP: 00007f50fd811e19 R08: 0000000000000000 R09: 0000000000000000 [ 887.855325][T12359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 887.863492][T12359] R13: 00007f50fd9b6038 R14: 00007f50fd9b5fa0 R15: 00007ffe78d1ede8 [ 887.871497][T12359] [ 887.930052][T12351] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1372'. [ 887.991034][T12359] kobject: kobject_add_internal failed for iommufd_mock2 with -EEXIST, don't try to register things with the same name in the same directory. [ 888.324237][T12361] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1373'. [ 888.946323][T12373] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1374'. [ 889.768533][T12386] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 889.871574][T12387] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 889.969462][T12390] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1375'. [ 890.044538][T12392] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1376'. [ 897.725057][T12440] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 897.853824][T12442] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1382'. [ 898.362635][T12448] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 899.736763][T12461] sysfs: cannot create duplicate filename '/devices/iommufd_mock2' [ 899.755106][T12461] CPU: 1 PID: 12461 Comm: syz.3.1385 Not tainted 6.6.102-syzkaller #0 [ 899.763304][T12461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 899.773447][T12461] Call Trace: [ 899.776721][T12461] [ 899.779742][T12461] dump_stack_lvl+0x16c/0x230 [ 899.784432][T12461] ? show_regs_print_info+0x20/0x20 [ 899.789637][T12461] ? load_image+0x3b0/0x3b0 [ 899.794150][T12461] sysfs_create_dir_ns+0x256/0x280 [ 899.799367][T12461] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 899.805449][T12461] ? sysfs_warn_dup+0xa0/0xa0 [ 899.810150][T12461] ? do_raw_spin_unlock+0x121/0x230 [ 899.815371][T12461] kobject_add_internal+0x6b8/0xc70 [ 899.820711][T12461] kobject_add+0x156/0x220 [ 899.825133][T12461] ? kobject_init+0x1e0/0x1e0 [ 899.829835][T12461] ? bus_get_dev_root+0x127/0x150 [ 899.834879][T12461] ? get_device_parent+0x387/0x390 [ 899.840009][T12461] ? dev_attr_store+0x90/0x90 [ 899.844804][T12461] device_add+0x408/0xc20 [ 899.849137][T12461] ? device_initialize+0x24b/0x440 [ 899.854356][T12461] iommufd_test+0x11de/0x29d0 [ 899.859052][T12461] ? iommufd_selftest_destroy+0xf0/0xf0 [ 899.864595][T12461] ? __lock_acquire+0x7c80/0x7c80 [ 899.869622][T12461] ? __lock_acquire+0x7c80/0x7c80 [ 899.874659][T12461] ? __might_fault+0xaa/0x120 [ 899.879374][T12461] ? __might_fault+0xaa/0x120 [ 899.884073][T12461] iommufd_fops_ioctl+0x42f/0x4e0 [ 899.889108][T12461] ? iommufd_ctx_put+0x40/0x40 [ 899.893872][T12461] ? __fget_files+0x28/0x4d0 [ 899.898477][T12461] ? bpf_lsm_file_ioctl+0x9/0x10 [ 899.903408][T12461] ? security_file_ioctl+0x80/0xa0 [ 899.908529][T12461] ? iommufd_ctx_put+0x40/0x40 [ 899.913288][T12461] __se_sys_ioctl+0xfd/0x170 [ 899.917874][T12461] do_syscall_64+0x55/0xb0 [ 899.922299][T12461] ? clear_bhb_loop+0x40/0x90 [ 899.926992][T12461] ? clear_bhb_loop+0x40/0x90 [ 899.931687][T12461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 899.937596][T12461] RIP: 0033:0x7f2e00b8ebe9 [ 899.942023][T12461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 899.961730][T12461] RSP: 002b:00007f2e01ac7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 899.970143][T12461] RAX: ffffffffffffffda RBX: 00007f2e00db5fa0 RCX: 00007f2e00b8ebe9 [ 899.978128][T12461] RDX: 0000200000000180 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 899.986108][T12461] RBP: 00007f2e00c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 899.994089][T12461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 900.002100][T12461] R13: 00007f2e00db6038 R14: 00007f2e00db5fa0 R15: 00007ffdad975278 [ 900.010080][T12461] [ 900.103905][T12461] kobject: kobject_add_internal failed for iommufd_mock2 with -EEXIST, don't try to register things with the same name in the same directory. [ 900.474805][T12466] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1385'. [ 902.204399][T12485] loop5: detected capacity change from 0 to 128 [ 906.452354][T12502] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 906.823833][T12507] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1390'. [ 914.654370][T12553] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 920.421738][T12585] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 926.170068][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.418311][T12607] kvm: kvm [12605]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 926.531961][T12607] kvm: kvm [12605]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 926.550490][T12607] kvm: kvm [12605]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 927.325139][T12060] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 927.337378][T12060] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 927.346165][T12060] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 927.480154][T12060] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 927.493490][T12060] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 927.503090][T12060] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 930.860069][T12060] Bluetooth: hci4: command tx timeout [ 931.935479][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.947528][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.001853][ T7482] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.224749][ T7482] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.682989][T12656] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 932.890314][T12060] Bluetooth: hci4: command tx timeout [ 934.802524][ T7482] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.960122][T12060] Bluetooth: hci4: command tx timeout [ 935.111680][ T7482] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.166883][T12625] chnl_net:caif_netlink_parms(): no params data found [ 937.040501][T12060] Bluetooth: hci4: command tx timeout [ 937.321699][T12625] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.339851][T12625] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.347329][T12625] bridge_slave_0: entered allmulticast mode [ 937.397559][T12625] bridge_slave_0: entered promiscuous mode [ 937.533428][T12625] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.557549][T12625] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.588998][T12625] bridge_slave_1: entered allmulticast mode [ 937.601835][T12625] bridge_slave_1: entered promiscuous mode [ 939.365729][T12625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.612877][T12625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.890761][ T7482] tipc: Left network mode [ 939.935634][T12625] team0: Port device team_slave_0 added [ 940.254379][T12699] kvm: kvm [12698]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 940.284176][T12625] team0: Port device team_slave_1 added [ 940.305970][T12699] kvm: kvm [12698]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 940.360135][T12699] kvm: kvm [12698]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 940.899560][T12625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.942182][T12625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.059606][T12625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.220741][T12625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.245110][T12625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.290469][T12625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.595280][T12625] hsr_slave_0: entered promiscuous mode [ 941.612293][T12625] hsr_slave_1: entered promiscuous mode [ 941.619113][T12625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 941.636000][T12625] Cannot create hsr debugfs directory [ 942.580960][T12725] loop5: detected capacity change from 0 to 512 [ 942.637558][T12725] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 40 vs 41 free clusters [ 942.652595][T12725] Quota error (device loop5): write_blk: dquota write failed [ 942.660179][T12725] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 942.670184][T12725] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1414: Failed to acquire dquot type 0 [ 942.713897][T12725] EXT4-fs (loop5): 1 truncate cleaned up [ 942.721089][T12725] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 942.735086][T12725] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 943.491129][T12058] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.313489][T12746] loop5: detected capacity change from 0 to 128 [ 946.910009][T12625] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 947.871512][T12625] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 948.023628][T12625] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 948.602325][ T7482] hsr_slave_0: left promiscuous mode [ 948.753811][ T7482] hsr_slave_1: left promiscuous mode [ 948.759855][ T7482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 948.767450][ T7482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 948.796491][ T7482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 949.043104][ T7482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 949.258568][ T7482] bridge_slave_1: left allmulticast mode [ 949.311180][ T7482] bridge_slave_1: left promiscuous mode [ 949.369403][ T7482] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.450702][ T7482] bridge_slave_0: left allmulticast mode [ 949.456521][ T7482] bridge_slave_0: left promiscuous mode [ 949.462933][ T7482] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.707982][T12783] loop5: detected capacity change from 0 to 512 [ 949.737331][ T7482] veth1_macvtap: left promiscuous mode [ 949.743412][ T7482] veth0_macvtap: left promiscuous mode [ 949.749111][ T7482] veth1_vlan: left promiscuous mode [ 949.797364][ T7482] veth0_vlan: left promiscuous mode [ 949.820471][T12783] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 40 vs 41 free clusters [ 949.834801][T12783] Quota error (device loop5): write_blk: dquota write failed [ 949.842721][T12783] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 949.852767][T12783] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1427: Failed to acquire dquot type 0 [ 949.875219][T12783] EXT4-fs (loop5): 1 truncate cleaned up [ 949.882174][T12783] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 949.894758][T12783] ext4 filesystem being mounted at /syzcgroup/unified/syz5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 952.241693][ T7482] bond2 (unregistering): Released all slaves [ 952.568482][ T7482] bond1 (unregistering): Released all slaves [ 957.136667][ T1073] ------------[ cut here ]------------ [ 957.142664][ T1073] WARNING: CPU: 0 PID: 1073 at io_uring/io_uring.c:3213 io_ring_exit_work+0x39e/0x7e0 [ 957.152415][ T1073] Modules linked in: [ 957.156318][ T1073] CPU: 0 PID: 1073 Comm: kworker/u4:5 Not tainted 6.6.102-syzkaller #0 [ 957.164688][ T1073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 957.174784][ T1073] Workqueue: iou_exit io_ring_exit_work [ 957.180371][ T1073] RIP: 0010:io_ring_exit_work+0x39e/0x7e0 [ 957.186092][ T1073] Code: e8 27 a4 20 f7 48 89 df 48 c7 c6 10 da 64 8a 4c 8b 24 24 4c 89 e2 b9 01 00 00 00 e8 ec 79 b5 f9 e9 64 ff ff ff e8 02 a4 20 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb a6 89 d9 80 e1 07 80 c1 03 [ 957.205756][ T1073] RSP: 0018:ffffc90004307a40 EFLAGS: 00010293 [ 957.211893][ T1073] RAX: ffffffff8a64e71e RBX: 000000010000ffd9 RCX: ffff888023348000 [ 957.220446][ T1073] RDX: 0000000000000000 RSI: ffffffffffffffc6 RDI: 0000000000000000 [ 957.228644][ T1073] RBP: ffffc90004307bb0 R08: ffffc900043079c7 R09: 1ffff92000860f38 [ 957.236756][ T1073] R10: dffffc0000000000 R11: fffff52000860f39 R12: 000000010000ff9f [ 957.244862][ T1073] R13: ffff88805962e288 R14: ffff88805962e510 R15: dffffc0000000000 [ 957.252910][ T1073] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 957.261890][ T1073] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 957.268479][ T1073] CR2: 000000110c370c78 CR3: 0000000024b9b000 CR4: 00000000003506f0 [ 957.276645][ T1073] Call Trace: [ 957.280120][ T1073] [ 957.283097][ T1073] ? io_ring_ctx_wait_and_kill+0x2a0/0x2a0 [ 957.289144][ T1073] ? _raw_spin_unlock_irq+0x23/0x50 [ 957.294468][ T1073] ? process_scheduled_works+0x957/0x15b0 [ 957.300362][ T1073] ? process_scheduled_works+0x957/0x15b0 [ 957.306220][ T1073] process_scheduled_works+0xa45/0x15b0 [ 957.312038][ T1073] ? assign_work+0x400/0x400 [ 957.316680][ T1073] ? assign_work+0x39e/0x400 [ 957.322315][ T1073] worker_thread+0xa55/0xfc0 [ 957.327003][ T1073] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 957.333176][ T1073] ? _raw_spin_unlock+0x40/0x40 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 957.338077][ T1073] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 957.344084][ T1073] kthread+0x2fa/0x390 [ 957.348188][ T1073] ? pr_cont_work+0x560/0x560 [ 957.353059][ T1073] ? kthread_blkcg+0xd0/0xd0 [ 957.357678][ T1073] ret_from_fork+0x48/0x80 [ 957.362165][ T1073] ? kthread_blkcg+0xd0/0xd0 [ 957.366878][ T1073] ret_from_fork_asm+0x11/0x20 [ 957.371792][ T1073] [ 957.374834][ T1073] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 957.382109][ T1073] CPU: 0 PID: 1073 Comm: kworker/u4:5 Not tainted 6.6.102-syzkaller #0 [ 957.390343][ T1073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 957.400411][ T1073] Workqueue: iou_exit io_ring_exit_work [ 957.405975][ T1073] Call Trace: [ 957.409266][ T1073] [ 957.412208][ T1073] dump_stack_lvl+0x16c/0x230 [ 957.416911][ T1073] ? show_regs_print_info+0x20/0x20 [ 957.422160][ T1073] ? load_image+0x3b0/0x3b0 [ 957.426693][ T1073] panic+0x2c0/0x710 [ 957.430716][ T1073] ? bpf_jit_dump+0xd0/0xd0 [ 957.435275][ T1073] ? ret_from_fork_asm+0x11/0x20 [ 957.440255][ T1073] __warn+0x2e0/0x470 [ 957.444297][ T1073] ? io_ring_exit_work+0x39e/0x7e0 [ 957.449458][ T1073] ? io_ring_exit_work+0x39e/0x7e0 [ 957.454790][ T1073] report_bug+0x2be/0x4f0 [ 957.459137][ T1073] ? io_ring_exit_work+0x39e/0x7e0 [ 957.464266][ T1073] ? io_ring_exit_work+0x39e/0x7e0 [ 957.469429][ T1073] ? io_ring_exit_work+0x3a0/0x7e0 [ 957.474575][ T1073] handle_bug+0xcf/0x120 [ 957.478839][ T1073] exc_invalid_op+0x1a/0x50 [ 957.483348][ T1073] asm_exc_invalid_op+0x1a/0x20 [ 957.488208][ T1073] RIP: 0010:io_ring_exit_work+0x39e/0x7e0 [ 957.493932][ T1073] Code: e8 27 a4 20 f7 48 89 df 48 c7 c6 10 da 64 8a 4c 8b 24 24 4c 89 e2 b9 01 00 00 00 e8 ec 79 b5 f9 e9 64 ff ff ff e8 02 a4 20 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb a6 89 d9 80 e1 07 80 c1 03 [ 957.513553][ T1073] RSP: 0018:ffffc90004307a40 EFLAGS: 00010293 [ 957.519619][ T1073] RAX: ffffffff8a64e71e RBX: 000000010000ffd9 RCX: ffff888023348000 [ 957.527590][ T1073] RDX: 0000000000000000 RSI: ffffffffffffffc6 RDI: 0000000000000000 [ 957.535571][ T1073] RBP: ffffc90004307bb0 R08: ffffc900043079c7 R09: 1ffff92000860f38 [ 957.543540][ T1073] R10: dffffc0000000000 R11: fffff52000860f39 R12: 000000010000ff9f [ 957.551507][ T1073] R13: ffff88805962e288 R14: ffff88805962e510 R15: dffffc0000000000 [ 957.559483][ T1073] ? io_ring_exit_work+0x39e/0x7e0 [ 957.564606][ T1073] ? io_ring_ctx_wait_and_kill+0x2a0/0x2a0 [ 957.570421][ T1073] ? _raw_spin_unlock_irq+0x23/0x50 [ 957.575625][ T1073] ? process_scheduled_works+0x957/0x15b0 [ 957.581344][ T1073] ? process_scheduled_works+0x957/0x15b0 [ 957.587064][ T1073] process_scheduled_works+0xa45/0x15b0 [ 957.592633][ T1073] ? assign_work+0x400/0x400 [ 957.597222][ T1073] ? assign_work+0x39e/0x400 [ 957.601826][ T1073] worker_thread+0xa55/0xfc0 [ 957.606412][ T1073] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 957.612332][ T1073] ? _raw_spin_unlock+0x40/0x40 [ 957.617192][ T1073] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 957.623115][ T1073] kthread+0x2fa/0x390 [ 957.627201][ T1073] ? pr_cont_work+0x560/0x560 [ 957.631889][ T1073] ? kthread_blkcg+0xd0/0xd0 [ 957.636478][ T1073] ret_from_fork+0x48/0x80 [ 957.640902][ T1073] ? kthread_blkcg+0xd0/0xd0 [ 957.645484][ T1073] ret_from_fork_asm+0x11/0x20 [ 957.650521][ T1073] [ 957.653969][ T1073] Kernel Offset: disabled [ 957.658361][ T1073] Rebooting in 86400 seconds..