last executing test programs: 8m58.571042417s ago: executing program 3 (id=85): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) r7 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0xfff5, 0x0, 0x0}], 0x2}) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$sock_ax25_SIOCADDRT(r8, 0x890b, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={@null, @bcast, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @default]}) r9 = dup2(r8, r4) fallocate(r9, 0x10, 0x480000000, 0xe6e) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r9, 0x5761, &(0x7f0000000000)={0x1, 0x0, [{0xfffffffd, 0x1, 0xf34d, [0x3267, 0x8, 0x9, 0x4, 0x1, 0xa2e9, 0x8]}]}) 8m43.815410146s ago: executing program 3 (id=107): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='btrfs_space_reservation\x00', r5, 0x0, 0x9a}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fgetxattr(r4, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000007"], 0x14}}, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r3, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000100), 0x6) r9 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x12b001) ioctl$CEC_ADAP_S_LOG_ADDRS(r9, 0xc05c6104, &(0x7f0000000140)={"524ebce3", 0x3, 0x5, 0x81, 0x3, 0x16dc, "0d0767fcf850456f2290e729cf77f1", "2eb4fea5", "44b4dd9e", "ad2e21d3", ["d4150c57d062e240fbe214a9", "850f3d04d42a166156600360", "82621ecad17be13010ccc10d", "6631cbd8c92f5461e2ea90f9"]}) ioctl$CEC_TRANSMIT(r9, 0xc0386105, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x4, 0x6, 0xe30, 0x7ffe, "c2a0da871813beebb98f6cd3bde10363", 0x0, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfc}) 8m37.397618366s ago: executing program 3 (id=113): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) sched_setscheduler(0x0, 0x1, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x101403, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$nl_generic(0x10, 0x3, 0x10) getcwd(0x0, 0xfffffffffffffe7d) sendmsg$nl_generic(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x70bd2b, 0x25dfdbfa, {0x5}}, 0x14}}, 0x40800) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 8m32.027130773s ago: executing program 3 (id=121): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000001fc0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c2", 0x17) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003100)=@newtaction={0xacc, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0x914, 0x1, [@m_ipt={0x278, 0x17, 0x0, 0x0, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf1, 0x6, {0x0, 'raw\x00', 0xe, 0xb3, "01df771ed4aa468d466490bb6d3a762752b0276450737133d354ea68c13a92efe99064741e04d8a20e194e30a60295d386bccda0f3007979597e6d03b954a8f914ba7b899f16c20d6d72edd9b6f52db88f3ba2e308499f6252662a51fa4b12868b58f75e27ec9103b8068b9b811e21bd2aa37e31ee1bb8e60ecb8155c8e19ea1c7fdbb9aa819059c61aa86c434a7c8da18ab573d7585bec9c1d4494956d182e7b35a526fd48659ab60beb8f339651c715661a36a876cce3dd7a98863f318caef99752c65346980"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x3d, 0x6, {0xff3b, 'nat\x00', 0x6a, 0xfff, "ec6c358b1b02688c45d6891b8d39befc710e9c"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_HOOK={0x8}]}, {0x95, 0x6, "33c428b1016ea0e62b6c917780554ec63a01a7382016d430730d1158d5469fa35f73d351ec348637d292a8c8699738644c304a14a0ca2e2c1422d9493ae361a88a61e76022334cc9eff1d9b15acf815ab9bf490688724773d3775e92953306fa3923bf0b3eb78ed4c4e43760fb360a12727f0000004fe4c5639595b4ce1706ccb85c9b5872240c31834297cfb06b7eaaa1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x17c, 0x11, 0x0, 0x0, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xb5, 0x6, {0x7, 'mangle\x00', 0x4, 0x7, "852c07967e4bde8acbdebf709c7f67b435415e9fad5eed399218069c30b3db399d5bdbdffc09aa13d6aef79a3360cf4b7d5e8a92b817394560aba652eb4e4ec31470dd9b8becbf6cad6f3328aec2ac14541a30a5f89f2a6e60534a70c1deccc519f73984d6d2ae8b9fe17278f03e9f60e876c3b1fc1ef49873f24bd44137256bfd0a27e100d2162e3f7b17"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x5}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x65, 0x6, "195244b493b69a109e343c48236a318aa067ccccb2000506f4e63246fce6276de9355aae82ccf014b3a51009a53cc597e7eec180e252560262d28e1340152b8389fc3dcbd1c60cbef5aa738a80d9582b7bf553a33208654c9b7b642eb56b8a9716"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0x154, 0x17, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}]}, {0x89, 0x6, "828d51b8c024f3ba75276291fd744bf1d83ac94c40f59c2d7aabe5cffe85cb1235f3e723c7a0ca6f1a15a0e38afac0bc7115796816162cbc6d09aea501ff36a46772ec7a3aa4d7c60363ff8f0eeda2f3eb8c435fb1d254244779da6c44c5dc30ed21a60df465ec395bc4d898dc7104dc47d809383d1d5431371c66f76842e2571bf73ce597"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x114, 0x3, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x69, 0x6, {0x3, 'security\x00', 0x84, 0x8, "cf8102ab12c6b2198a413eaa65607ab7ca51ab206bef3fe70b20aa2e7aacfa341b2d9158773430366e3a48eb70679ab8b9759ebcd3b2636776df09c3eb7702"}}]}, {0x75, 0x6, "1d4af027bf39e92f2bc3b16061477612108c4de6dbb9dbc37f978e20a11849888f1cfa0d69961cc5b133c25b0a606d867918fd28cefd9936cea3c502ba83dbc878d09708660761105b2cb89c15f4eb2ff9ca07aba60aef01aab6097fa30bc52f5c31cbba441df32848abb9344a809a2a4c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x134, 0x11, 0x0, 0x0, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd4, 0x6, {0x2, 'mangle\x00', 0x1, 0x1, "26b28bee405c084d7d3004660f6902208128531e54ab5a1819783607be3e2e463fc401b2d641a72c11f6aea69efbc1dac1e8f34f762cbc8ee0231ffeebcb773de1e20df7f65c7029200a9570577fe540733523b10491dc5fda6c0091603360fb1b6019648c7b5ef50f8741b6670963cc5d8533f50c4a2cfbeda3e0ed5070ab41e44997bdda4c34c11413cb846041ef4060b9cb71e527a7dd8e4efb7877f6f37b7cd8648d2d22911f9fbf"}}]}, {0x35, 0x6, "e7ba22f1ebc93a7960461c2acdaf1da6af842571f14f3b0700806b225899f9ba581b6cc401693affa591693a24cad555ae"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ipt={0x64, 0x20, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x15, 0x6, "a0f801aae36e077609a01908bc70dd5a7c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0x11c, 0x20, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x55, 0x6, {0xfffa, 'nat\x00', 0x4, 0x8, "b112d50939750fa56623826275793a59f694cdc8bda79320bfe1d4c8997abe43daace6790afb2937cfb2e0"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x6062ae06}]}, {0x89, 0x6, "080f497fef56763eb14339e04d8880b35d4fcb1f3ccd5757021fa31ef38a7d4c8fca4f32d5757fdee1a2aceaaeb6abdad810154a059435c356867b27c8df5015f90bffb81405bdefffef46fede1a8038897bb9fd967f32f04f15a8596894786759dc20093ddbffb2158f5c0591205638b11d518d459f3137f1349ab013b3b5732e45d6b45f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x97dd299ab8dc81d}}}}]}, {0x44, 0x1, [@m_ipt={0x40, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x15, 0x6, "e2ebd2e0185a4d308803e9306ec5d2b0e6"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x160, 0x1, [@m_ipt={0xf8, 0x6, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xa9, 0x6, "f5fcf6c5d281ac07391f35700b5786a70ee288211391aef6ec3378d7dd4a7c7445b8d3046ec059dd382a214deedda165d8663d562a47b1afb15557c5ceab4960c0442cc36ea1e65aa9650e7ac2c900fbb08da34b73b6b699463a47761daa69afd529deea7f5c97d3f950af23793139f4c0c3cea503bb9a23d2f7677c9bf150e350defce66ec3eccbaabb1e8f7fe7c49b9e91ecca113edb7f81da88a113c1065219a1d6062e"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x64, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x3b, 0x6, "4b6275823d714c9413915317da89818cb9f96e8938cf5d91ef0ce403d55fc9bdc74a0a5b88653980ed0af5c857ee3a0361bfe072c3d9c7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xacc}}, 0x4008800) recvmmsg$unix(r6, &(0x7f0000000e00), 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) r7 = socket(0x40000000015, 0x5, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r8, 0x8918, 0x0) r9 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r9, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}}}, 0x24) bind$inet6(r7, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast1, 0xfffffffd}, 0x1c) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000440)=""/162, 0xa2}], 0x1) 8m28.77791679s ago: executing program 3 (id=124): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)={0x10}) chdir(&(0x7f0000000140)='./bus\x00') setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r2, 0x0, 0x0) connect$can_j1939(r2, 0x0, 0x0) sendmsg$can_j1939(r2, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x2, {0x0, 0xff}, 0xfe}, 0x18) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, &(0x7f0000000040)=0xb4a576444e33d728, 0x4) timer_create(0x0, 0x0, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x30) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0x7, 0xb}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000380)={r5, 0x5, 0x7, 0x1ff, 0x0, [], [0xfffffe76, 0x10, 0x7fffffff, 0x6], [0x2, 0xfffffff4, 0x6, 0x1], [0x7, 0x3, 0x6, 0x3]}) timer_settime(0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x1c91e0, 0x0) 8m27.41297427s ago: executing program 3 (id=126): setfsgid(0xee00) r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = gettid() sched_setscheduler(r2, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f00000004c0)=""/157, 0x9d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r6, 0x10001) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="796104000000000000007e00001b7010cbb6e72e75dbe73bdb4324de446be7bcaf7c1a894d2f9620d101e2b5ec841fe88b6ad4d05bdfc027292e3acb9eb6d14addb938a7690c075d462c823e1f34bed03dc0ed038874f30b49702e1ca0e618ef1c865e2ed6"], 0x14}}, 0x0) r7 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r7, 0xc0884123, &(0x7f0000000300)={0x1, "c4aaccd94696ecbf345d02bb2514af88d609d88f8aaffc86b6aec4f10946c9d80edb30af80a826c82a71c7ce780b51d7ee4075fe788e4327cfa84263342f538d", {0x7ff, 0x7}}) r8 = socket$nl_route(0x10, 0x3, 0x0) keyctl$set_timeout(0xf, 0x0, 0x1) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001d00010001000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="850b01000000000014000300766c616e3100000000000000000000000a000100aaaaaaaaaaaa0000"], 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r9 = syz_open_procfs(r0, &(0x7f0000000100)='stack\x00') pread64(r9, &(0x7f0000000280)=""/3, 0x3, 0xfffffffa) 8m12.242411619s ago: executing program 32 (id=126): setfsgid(0xee00) r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = gettid() sched_setscheduler(r2, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f00000004c0)=""/157, 0x9d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r6, 0x10001) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="796104000000000000007e00001b7010cbb6e72e75dbe73bdb4324de446be7bcaf7c1a894d2f9620d101e2b5ec841fe88b6ad4d05bdfc027292e3acb9eb6d14addb938a7690c075d462c823e1f34bed03dc0ed038874f30b49702e1ca0e618ef1c865e2ed6"], 0x14}}, 0x0) r7 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r7, 0xc0884123, &(0x7f0000000300)={0x1, "c4aaccd94696ecbf345d02bb2514af88d609d88f8aaffc86b6aec4f10946c9d80edb30af80a826c82a71c7ce780b51d7ee4075fe788e4327cfa84263342f538d", {0x7ff, 0x7}}) r8 = socket$nl_route(0x10, 0x3, 0x0) keyctl$set_timeout(0xf, 0x0, 0x1) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001d00010001000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="850b01000000000014000300766c616e3100000000000000000000000a000100aaaaaaaaaaaa0000"], 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r9 = syz_open_procfs(r0, &(0x7f0000000100)='stack\x00') pread64(r9, &(0x7f0000000280)=""/3, 0x3, 0xfffffffa) 9.230204118s ago: executing program 1 (id=1710): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021007c109050c04400006030f07059acbf5"], 0x0) syz_usb_control_io$printer(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) write$char_usb(r1, 0x0, 0x0) 7.404817017s ago: executing program 1 (id=1713): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000100)={0x1, 0x3, 0x6, 0x6, 0x1, 0xfffffffe, 0x3f0bbbc1, 0x9, 0x8, 0xb5a6, 0x200, 0x1, 0x35bc, 0x6}) 7.193838071s ago: executing program 2 (id=1716): r0 = gettid() r1 = epoll_create(0x20003fd) r2 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x2}) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r2, &(0x7f0000000080)={r1, r2}) 7.099339736s ago: executing program 2 (id=1717): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) poll(&(0x7f0000000240)=[{r1, 0x10}], 0x1, 0x1) 6.751726844s ago: executing program 0 (id=1720): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x76, 0x101341) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0x80045515, 0x0) 6.5557988s ago: executing program 0 (id=1722): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) syz_clone(0x82001000, 0x0, 0x0, &(0x7f0000001840), 0x0, 0x0) 5.651115433s ago: executing program 0 (id=1724): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab"], 0xfdef) 5.480903441s ago: executing program 0 (id=1726): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r6 = dup2(r5, r3) fallocate(r6, 0x10, 0x480000000, 0xe6e) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r6, 0x5761, &(0x7f0000000000)={0x1, 0x0, [{0xfffffffd, 0x1, 0xf34d, [0x3267, 0x8, 0x9, 0x4, 0x1, 0xa2e9, 0x8]}]}) 5.471411229s ago: executing program 1 (id=1727): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000009c0)={0x40, r1, 0x801, 0x70bd2e, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac0c}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "afc3904a7802e165bda3a0d0db"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0xba83542b86c80fd7}, 0x4) 5.311593256s ago: executing program 1 (id=1728): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000380)="10031400a13bb100b300000000000000000000bfd7ab593493f93edc7c4b346644a21beb74ba509986397ed2191074e9b783b240", 0x34, 0x5b3f714efd9f760b, &(0x7f0000000340)={0x11, 0x0, r2, 0x1, 0x3, 0x6, @random="1ac6d6f2eae2"}, 0x14) 5.282139797s ago: executing program 1 (id=1729): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) r7 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0xfff5, 0x0, 0x0}], 0x2}) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$sock_ax25_SIOCADDRT(r8, 0x890b, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={@null, @bcast, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @default]}) r9 = dup2(r8, r4) fallocate(r9, 0x10, 0x480000000, 0xe6e) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r9, 0x5761, &(0x7f0000000000)={0x1, 0x0, [{0xfffffffd, 0x1, 0xf34d, [0x3267, 0x8, 0x9, 0x4, 0x1, 0xa2e9, 0x8]}]}) 4.876014413s ago: executing program 2 (id=1730): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.122149264s ago: executing program 1 (id=1733): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000003c0)=""/180) 3.962206369s ago: executing program 2 (id=1734): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000000)="e6", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, 0x0, 0x0, 0x103, 0x0, 0x0) 3.828903271s ago: executing program 2 (id=1735): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mbind(&(0x7f0000daa000/0x4000)=nil, 0x4000, 0x2, 0x0, 0xa9d, 0x4) 3.783765439s ago: executing program 4 (id=1736): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='sessionid\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r1 = syz_io_uring_setup(0x2e3b, &(0x7f00000007c0)={0x0, 0x482b, 0x10000, 0x1}, &(0x7f0000000780)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)=""/9, 0x9}, {0x0}], 0x2}) io_uring_enter(r1, 0x567, 0xa1ff, 0x0, 0x0, 0x0) 3.110293772s ago: executing program 0 (id=1737): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0xff7ffff7) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r2, 0xffffffff, 0x2}) 3.108854553s ago: executing program 5 (id=1738): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x2000, 0x103) 3.107060802s ago: executing program 4 (id=1739): openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x2701, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0xfffffffe, "94c408213d36be01d7000000000000e1100ad985544600", 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 3.020425201s ago: executing program 4 (id=1740): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040)={0x2, 0xfc}, 0x2) 2.913571323s ago: executing program 5 (id=1741): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000001c0)={0x0, 0x5b81, 0xfffffffffffffffc, 0xffffffffffffff7f, 0x9, 0x2, 0x4, 0x2, 0xde}) 2.8016171s ago: executing program 0 (id=1742): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c36919790"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000001c0)={0x2, 0x100, 0xf7}) 2.793144543s ago: executing program 4 (id=1743): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) r7 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0xfff5, 0x0, 0x0}], 0x2}) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$sock_ax25_SIOCADDRT(r8, 0x890b, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={@null, @bcast, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @default]}) r9 = dup2(r8, r4) fallocate(r9, 0x10, 0x480000000, 0xe6e) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r9, 0x5761, &(0x7f0000000000)={0x1, 0x0, [{0xfffffffd, 0x1, 0xf34d, [0x3267, 0x8, 0x9, 0x4, 0x1, 0xa2e9, 0x8]}]}) 2.76981709s ago: executing program 2 (id=1744): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb763e", 0x10, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) 2.744927548s ago: executing program 5 (id=1745): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001800)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x8016, 0x68, 0x0, 0x60, 0x67, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "21f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da"}}, 0xfdef) 1.723376423s ago: executing program 5 (id=1746): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0xa3e, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0xfffffffffffffffa, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getxattr(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)=@known='security.apparmor\x00', &(0x7f0000000380)=""/126, 0x7e) syz_open_procfs(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) timer_create(0x2, 0x0, &(0x7f0000000000)=0x0) timer_settime(r3, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000080)=0x0) timer_delete(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000000), 0x20000010) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x4000000, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xebaea3d5279c9aee}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x4, 0x2, 0xffffffff}}]}, 0x38}}, 0x0) 1.666364883s ago: executing program 4 (id=1747): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004802800018007000100637400001c000280050003000100000008000140000000170800024000000013240001800a000100726564697200000014000280080001400000001708000340000000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa4}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.049375045s ago: executing program 4 (id=1748): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r6 = dup2(r5, r3) fallocate(r6, 0x10, 0x480000000, 0xe6e) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r6, 0x5761, &(0x7f0000000000)={0x1, 0x0, [{0xfffffffd, 0x1, 0xf34d, [0x3267, 0x8, 0x9, 0x4, 0x1, 0xa2e9, 0x8]}]}) 1.000465916s ago: executing program 5 (id=1749): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c"], 0x122}}, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], 0x0, 0x57eb}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40010) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="791298000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c650000000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e80100008000000000887a5ad103649afa17690884f800031e03a6d1bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0289e83ce50a57d69bfecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26d27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5d514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d26f2e0e26fc062f2785f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84046023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc916000c71f922fa2dfead7535999436a4aeb908781893479319b8b55e00d90ae6f09f06be2a0fc0bc17bef53331208112a0132350c0c5dd4607547079acc9471300dea6ae01742dccdae69f932cef80bca1bfcb57b9c852cf8358a580044772a80f20de36f707385380155be8907029d039a1d1447fc06b7020221e0d439f3f47edcf12f913dc8b6389a540340ae37804728ea65352e630c2e90424d58d72fdc1b28403e1dc7aad238b81df3b2d4166d656c6a9c73554bdf4f7312a4c0271e0eb45b4a596b7fa928ac3683f09fdaca46226c1df2c6c866cb4412d17d3d52c38cf0f7bd3b0eea2d4e06d061bb1b7c8c52f37f4036932d00028abd4527f5649bd60df638596fd639d7b16860033754ab13419429e5e39f290751ab6bd9392aef5519cd8c16e1f1cb1f225cc84a1a62497c1e436142fe28048a2b4d133905814a1808bc5b3e45eaa9eaebd946bee806968aeeb5a9eed87eba3d25d0b412a1b4cf2d419a58b09fc275c4395a0bd332eb538321465043e5967dd22459d0f52190a37f93ab823431a81fa6f54de61637fd473e19a6f567fead100e7d8cac149b66ebe9973af846146c62065a64854ed21e8b6f6fbe78474b753915a42efcb7da8ad18bacff8d69e0af1ca1f8174530a21820738412b100b54ee9b4a0dc22d5fe1cadecaea73fbfad087b19ce53177488d230539c5174f572a539d9d7c42698aa82bccf030ad393f25c10baa17e919f647d0e31877b7a6c1d8d86583f884a0c1da07b9b6dced06cdeb0094aa635a82f233b5993926b8970a0840ba116a7d20a40efb3bd03c4bdf380a2510a0a1ea69811ded68943c71218b42783b38959753978f222e1396b9b36dee2ce205122a000577cab29f48bff4f88c417e6bf5fb430d925596f29aca8677ca5a113aeaa5e0252ca17244d6c76e78ff1bbd81a71c4dfc72431d7f1126f8bdbf4056ee0f58a1bf83d53b1de07489541182dc4ee0f573c25b6c15dad930bc7a770b5a4f407d7a879db7185f15f80100000000000000739cc97db66ec6b925955d9a591808947fdd8d484ad27353230a449fdf87fc46c73b852fec931cfb6718acf3315bf5e577d00beb77c5514bc05d576a81345a03ad7aae74c5d2b77d45718348aed4fcbcd1441ff31b8f038824a989a9446a4a69367b228b3d174230b7320fc4d3c03368db573816dd0c04e65d6f8ce48283e76abdddbb965e0b2568e93c9cc5494a55421793f562c50c53f876cbde93c5cc7a3099c99d9775af010ba093f8a13b771782a3cfb24fbde6ef763e20c613164ab014d1906c4e098f1431b6b2886a155c4bac2911d7ee6a646f5913205ebd175e68975b93c330e4f9131788026b3b7cd5b6452c9e17452ac70000000000000000000000c71185f72436640fd4294fc3da230f9065095be47d7a848df12316c3c8b184fe110b061987fd79cf7d83443e69d08e2e839ae4fbe26ef7764f4870ef3bd0ec12eb45f60ca10dbfe329271f0bc93b28798e982e0dd32fc14bd4313c63b2dbb568f33fb45acad2dc7f438ea162c0709c0bbe1ea13e1e47399286e8143f400d7adf5f69e455706626814ee49274667f47769293451fd49885a152b8d2cf18febc7993f4a93893c6c7b7e46a230359ef2443e6bb9f50bb0faa5eaafd3ed6d551600c46b58a29fd7ccbbb0616f0be27302b683eccd742791d97f4a1daa0447f004426fd09b67d926f51525da63987bc73af35b28277879089b89fff6edab2fa1caf660a46a1a9f09e2d095b1c4be95c7c33dc81857f580e36c0a78d94dd879ee18de4a6475858d2ded2e3427ae007cc6f8e5e99aa146667f71ad83f3ddcf5db2dc396d7da499b65cd98125f20c284fc84d6a70be1de44b49c82022225292199c75cc26beab98dce4c331ed722f01d0d6314a72416814a565f4d90a5f8a255810f23541082f4b06f451e4724cd882f4d589600000000005854ca490d7df9cc293547c9a51aecc7a92f417f6a4d327737f1b198252358832dbe43507844a0cc112af4ce457c173fa64174ffd5ab9501eeb85508ebb60e169c0736c5960f2fe08735d6a7aa7c1f4a6433e77d3e547bbe6cf5b5d93a491ab4bba1ea7a1e6f37618b1d74cff3630d85a210092211be1ec12a30891eef590b19cdde055d626818c64e1c56b8918f33441a64b54946571b7bc70fb065d3bb1647f6f989ab8159e6d1cfa6c0ec7329d7d2263ca22144bf17d8692f03b592bd0f610096094da096233984e95b9a8216a6e60a104ae0bb5f77ac70b4390ea2cb6f6c40c928fae489f447240a25fd0a5bd9d5b6cd2a98f8804862922c11229c4e45c765e4d3348af3d3aadd5cc24b39437f1ea2df0000000000000000000000000022b90d93a267f3af4e02606f0ce6c2ffc404b575a09d6e625f3248689005eb4a9c8df3c67e6b2b759cab3a7bedf1b927cd8ba6d13b3e7d7279515e3d6d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="42000000030000000000000000000000000000000000000021"], 0x42) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000a00)={0x0, 0x0, 0xaaca, 0xffff, 0x0, "87d3514787b8c600004a903184033c6700"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x84) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x6, 0x1a, 0x0, 0x20000000) setsockopt$inet_tcp_int(r4, 0x6, 0x5, &(0x7f00000000c0)=0x3ff, 0x4) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2, 0xfffffffe}}}}}}, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0xdf, 0x0, 0x100000}) 0s ago: executing program 5 (id=1750): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_DO_IT(r0, 0xab03) kernel console output (not intermixed with test programs): 0 [ 503.487682][ T8550] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.288927][ T9053] xt_time: unknown flags 0xb4 [ 504.305391][ T7749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.356451][ T7749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.450954][ T7740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.486524][ T7740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.885351][ T9079] : entered promiscuous mode [ 506.726125][ T9089] random: crng reseeded on system resumption [ 507.152056][ T9097] netlink: 'syz.5.614': attribute type 10 has an invalid length. [ 507.225885][ T9097] team0: Device dummy0 is up. Set it down before adding it as a team port [ 510.077608][ T9150] xt_HMARK: spi-set and port-set can't be combined [ 510.098243][ T9151] netlink: 'syz.2.629': attribute type 10 has an invalid length. [ 510.682145][ T9162] [U] „ [ 511.610889][ T9168] syz.0.634 (9168) used greatest stack depth: 16456 bytes left [ 511.671519][ T9161] [U] „ [ 512.012523][ T9174] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.052605][ T9183] netlink: 'syz.0.638': attribute type 10 has an invalid length. [ 512.274223][ T9187] !: renamed from dummy0 (while UP) [ 513.355986][ T9188] [U] „ [ 513.388282][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 513.599813][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 513.619142][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 513.648302][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 513.675679][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 513.701916][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 513.740428][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 513.759268][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 513.783194][ T10] usb 3-1: Product: syz [ 513.792246][ T10] usb 3-1: Manufacturer: syz [ 513.823535][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 513.850675][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 513.962881][ T9214] [U] „ [ 513.971750][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 514.053807][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 514.243682][ T10] usb 3-1: USB disconnect, device number 7 [ 516.247195][ T9245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.656'. [ 516.257930][ T9245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.656'. [ 517.514735][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.658'. [ 519.790894][ T9262] [U] „ [ 522.155618][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 522.705789][ T9327] netlink: 'syz.1.682': attribute type 10 has an invalid length. [ 523.225966][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 523.256679][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 523.265016][ T24] usb 5-1: config 0 has no interface number 0 [ 523.417633][ T24] usb 5-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 523.434339][ T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x8F has an invalid bInterval 102, changing to 10 [ 523.449216][ T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 523.460878][ T24] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 523.470772][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.680769][ T24] usb 5-1: config 0 descriptor?? [ 523.864832][ T24] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 524.035951][ T24] usb 5-1: USB disconnect, device number 11 [ 524.210626][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.687'. [ 524.301500][ T9340] [U] „ [ 525.069171][ T9357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.695'. [ 525.087352][ T9357] vlan3: entered promiscuous mode [ 525.092599][ T9357] bridge0: entered promiscuous mode [ 526.725151][ T9393] fuse: Bad value for 'group_id' [ 526.730776][ T9393] fuse: Bad value for 'group_id' [ 527.396574][ T5845] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 527.657468][ T5845] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 527.759451][ T5845] usb 2-1: config 0 has no interface number 0 [ 527.780718][ T5845] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 527.821949][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.844776][ T5845] usb 2-1: config 0 descriptor?? [ 527.903568][ T5845] usb 2-1: selecting invalid altsetting 1 [ 527.928121][ T5845] dvb_ttusb_budget: ttusb_init_controller: error [ 527.942816][ T5845] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 528.186412][ T5845] DVB: Unable to find symbol cx22700_attach() [ 528.320778][ T5845] DVB: Unable to find symbol tda10046_attach() [ 528.340746][ T5845] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 528.359719][ T5845] usb 2-1: USB disconnect, device number 8 [ 529.206912][ T9446] [U] „ [ 530.564787][ T9457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.725'. [ 530.663049][ T9458] [U] „ [ 531.424128][ T9461] xt_hashlimit: max too large, truncated to 1048576 [ 531.811109][ T9474] netlink: 'syz.0.733': attribute type 12 has an invalid length. [ 533.362830][ T9495] [U] „ [ 534.134862][ T9499] ======================================================= [ 534.134862][ T9499] WARNING: The mand mount option has been deprecated and [ 534.134862][ T9499] and is ignored by this kernel. Remove the mand [ 534.134862][ T9499] option from the mount to silence this warning. [ 534.134862][ T9499] ======================================================= [ 534.169798][ C1] vkms_vblank_simulate: vblank timer overrun [ 534.219895][ T9502] netlink: 'syz.5.739': attribute type 3 has an invalid length. [ 534.227834][ T9502] netlink: 666 bytes leftover after parsing attributes in process `syz.5.739'. [ 534.244396][ T5993] kernel write not supported for file /media1 (pid: 5993 comm: kworker/1:6) [ 534.420036][ T9506] netlink: 'syz.0.742': attribute type 10 has an invalid length. [ 534.679815][ T30] audit: type=1400 audit(1755650875.955:42): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=9513 comm="syz.0.745" src=1 dest=20000 [ 534.866058][ T9519] "syz.1.746" (9519) uses obsolete ecb(arc4) skcipher [ 535.006342][ T9523] ip6erspan0: entered allmulticast mode [ 536.074772][ T9545] [U] „ [ 536.081244][ T9541] [U] „ [ 536.459044][ T9528] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 536.830691][ T9558] netlink: 'syz.2.756': attribute type 10 has an invalid length. [ 536.885941][ T5993] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 537.092493][ T5993] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.126084][ T5993] usb 6-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 537.313696][ T5993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.339048][ T5993] usb 6-1: config 0 descriptor?? [ 537.667081][ T9567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.786403][ T5993] itetech 0003:258A:6A88.0003: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.5-1/input0 [ 537.986843][ T9575] netlink: 'syz.4.760': attribute type 2 has an invalid length. [ 537.995784][ T5845] usb 6-1: USB disconnect, device number 2 [ 538.127839][ T9569] fido_id[9569]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 538.880616][ T9598] [U] „ [ 538.998573][ T9600] [U] „ [ 539.501537][ T5993] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 539.679050][ T5993] usb 5-1: Using ep0 maxpacket: 16 [ 539.742628][ T9623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.775'. [ 539.784419][ T5993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.887286][ T5993] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 539.961642][ T5993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.191188][ T5993] usb 5-1: config 0 descriptor?? [ 540.274628][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'. [ 540.753745][ T5993] kye 0003:0458:0087.0004: reserved main item tag 0xd [ 540.802028][ T5993] kye 0003:0458:0087.0004: unexpected long global item [ 540.909582][ T5993] kye 0003:0458:0087.0004: parse failed [ 540.954562][ T5993] kye 0003:0458:0087.0004: probe with driver kye failed with error -22 [ 541.058915][ T5993] usb 5-1: USB disconnect, device number 12 [ 541.385770][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 541.572435][ T9657] netlink: 'syz.5.785': attribute type 10 has an invalid length. [ 541.675909][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.691454][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.702324][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 541.962226][ T9657] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.991989][ T9657] bond0: (slave team0): Enslaving as an active interface with an up link [ 542.008998][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.164339][ T10] usb 3-1: config 0 descriptor?? [ 542.414971][ T9667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.789'. [ 543.094419][ T10] kye 0003:0458:5010.0005: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 543.191575][ T10] kye 0003:0458:5010.0005: item fetching failed at offset 5/7 [ 543.264002][ T10] kye 0003:0458:5010.0005: parse failed [ 543.297357][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.794'. [ 543.318943][ T10] kye 0003:0458:5010.0005: probe with driver kye failed with error -22 [ 543.421455][ T10] usb 3-1: USB disconnect, device number 8 [ 545.660545][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 546.195867][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 546.224225][ T10] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 546.235745][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.254112][ T10] usb 2-1: Product: syz [ 546.258833][ T5955] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 546.275837][ T10] usb 2-1: Manufacturer: syz [ 546.280642][ T10] usb 2-1: SerialNumber: syz [ 546.299001][ T10] usb 2-1: config 0 descriptor?? [ 546.337504][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 546.421112][ T9731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.451182][ T5955] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 546.493090][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.532125][ T5955] usb 5-1: Product: syz [ 546.547640][ T5955] usb 5-1: Manufacturer: syz [ 546.552323][ T5955] usb 5-1: SerialNumber: syz [ 546.584959][ T5955] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 546.658986][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 546.682744][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.5.817'. [ 546.734105][ T10] gspca_se401: Wrong descriptor type [ 547.064299][ T5955] usb 2-1: USB disconnect, device number 9 [ 547.187387][ T10] usb 5-1: USB disconnect, device number 13 [ 547.935398][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 547.943301][ T9] ath9k_htc: Failed to initialize the device [ 548.058854][ T10] usb 5-1: ath9k_htc: USB layer deinitialized [ 548.100305][ T9753] netlink: 4 bytes leftover after parsing attributes in process `syz.5.821'. [ 548.240946][ T9759] usb usb8: usbfs: process 9759 (syz.1.825) did not claim interface 0 before use [ 548.686037][ T5845] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 548.696414][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 548.883198][ T5845] usb 5-1: unable to get BOS descriptor or descriptor too short [ 548.938866][ T5845] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 549.024098][ T5845] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 549.068534][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.098226][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 549.109248][ T5845] usb 5-1: Product: syz [ 549.132176][ T5845] usb 5-1: Manufacturer: syz [ 549.159101][ T5845] usb 5-1: SerialNumber: syz [ 549.214571][ T9] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 549.241622][ T9] usb 2-1: config 0 has no interface number 0 [ 549.255568][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 549.285844][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 549.318193][ T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 549.337525][ T9] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 549.351310][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 549.373113][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.409551][ T9] usb 2-1: config 0 descriptor?? [ 549.436161][ T9] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 549.625732][ T5955] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 550.019734][ T9778] netlink: 4 bytes leftover after parsing attributes in process `syz.5.833'. [ 550.040324][ T24] usb 2-1: USB disconnect, device number 10 [ 550.055443][ T24] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 550.165653][ T5955] usb 3-1: Using ep0 maxpacket: 16 [ 550.178935][ T5955] usb 3-1: config 0 has an invalid interface number: 63 but max is 0 [ 550.191631][ T5955] usb 3-1: config 0 has no interface number 0 [ 550.198790][ T5955] usb 3-1: config 0 interface 63 altsetting 150 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.212601][ T5955] usb 3-1: config 0 interface 63 altsetting 150 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.223683][ T5955] usb 3-1: config 0 interface 63 altsetting 150 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 550.241991][ T5955] usb 3-1: config 0 interface 63 has no altsetting 0 [ 550.249964][ T5955] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 550.274084][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.278822][ T5845] usb 5-1: reset high-speed USB device number 14 using dummy_hcd [ 550.303084][ T9789] netlink: 4 bytes leftover after parsing attributes in process `syz.5.835'. [ 550.304435][ T5955] usb 3-1: config 0 descriptor?? [ 550.494936][ T5845] usb 5-1: device firmware changed [ 550.512078][ T5845] usb 5-1: USB disconnect, device number 14 [ 550.615591][ T5993] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 550.650005][ T5845] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 550.745074][ T5955] uclogic 0003:28BD:0909.0006: interface is invalid, ignoring [ 550.776023][ T5993] usb 6-1: Using ep0 maxpacket: 32 [ 550.783750][ T5993] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 550.793572][ T5993] usb 6-1: config 0 has no interface number 0 [ 550.802571][ T5993] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 550.812926][ T5993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.822053][ T5993] usb 6-1: Product: syz [ 550.826985][ T5993] usb 6-1: Manufacturer: syz [ 550.831780][ T5993] usb 6-1: SerialNumber: syz [ 550.836910][ T5845] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 550.850469][ T5993] usb 6-1: config 0 descriptor?? [ 550.862090][ T5845] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 550.871327][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.879488][ T5845] usb 5-1: Product: syz [ 550.883721][ T5845] usb 5-1: Manufacturer: syz [ 550.888578][ T5845] usb 5-1: SerialNumber: syz [ 550.953424][ T5955] usb 3-1: USB disconnect, device number 9 [ 550.975613][ T5913] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 551.061186][ T5993] radio-si470x 6-1:0.35: this is not a si470x device. [ 551.099561][ T5993] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 551.137206][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 551.151306][ T5913] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 551.161572][ T5913] usb 2-1: config 0 has no interface number 0 [ 551.170785][ T5913] usb 2-1: config 0 interface 1 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.184042][ T5913] usb 2-1: config 0 interface 1 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.198138][ T5913] usb 2-1: config 0 interface 1 has no altsetting 0 [ 551.205022][ T5913] usb 2-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 1.00 [ 551.221342][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.239879][ T5913] usb 2-1: config 0 descriptor?? [ 551.301343][ T5993] radio-raremono 6-1:0.35: raremono_cmd_main failed (-71) [ 551.323425][ T5993] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 551.340103][ T5993] usb 6-1: USB disconnect, device number 3 [ 551.356589][ T5993] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 551.657195][ T5913] chicony 0003:04F2:0418.0007: item fetching failed at offset 0/4 [ 551.673539][ T5913] chicony 0003:04F2:0418.0007: Chicony hid parse failed: -22 [ 551.681136][ T5913] chicony 0003:04F2:0418.0007: probe with driver chicony failed with error -22 [ 551.766314][ T5955] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 551.883719][ T5913] usb 2-1: USB disconnect, device number 11 [ 551.929189][ T5955] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 551.946442][ T5955] usb 3-1: config 0 has no interface number 0 [ 551.952834][ T5955] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 551.963385][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.975610][ T5955] usb 3-1: config 0 descriptor?? [ 551.999743][ T5955] usb 3-1: selecting invalid altsetting 1 [ 552.024332][ T5955] dvb_ttusb_budget: ttusb_init_controller: error [ 552.034519][ T5955] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 552.127424][ T5955] DVB: Unable to find symbol cx22700_attach() [ 552.172319][ T5955] DVB: Unable to find symbol tda10046_attach() [ 552.176992][ T5845] usb 5-1: reset high-speed USB device number 15 using dummy_hcd [ 552.190732][ T5955] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 552.191111][ T5845] usb 5-1: device reset changed ep0 maxpacket size! [ 552.222792][ T5955] usb 3-1: USB disconnect, device number 10 [ 552.239629][ T5845] usb 5-1: USB disconnect, device number 15 [ 552.345724][ T5993] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 552.385647][ T5845] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 552.523423][ T5993] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 552.531940][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.848'. [ 552.540677][ T5993] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 552.560326][ T5845] usb 5-1: Using ep0 maxpacket: 16 [ 552.587519][ T5993] usb 6-1: config 0 interface 0 has no altsetting 0 [ 552.596911][ T5993] usb 6-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 552.609451][ T5993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.640467][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.655687][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.672292][ T5845] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 552.693841][ T5993] usb 6-1: config 0 descriptor?? [ 552.726383][ T9815] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 552.771839][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.949503][ T5845] usb 5-1: config 0 descriptor?? [ 553.178784][ T5993] uclogic 0003:28BD:0074.0008: interface is invalid, ignoring [ 553.416552][ T5993] usb 6-1: USB disconnect, device number 4 [ 553.833486][ T5845] konepure 0003:1E7D:2DB4.0009: unknown main item tag 0x0 [ 553.982387][ T5845] konepure 0003:1E7D:2DB4.0009: unknown main item tag 0x0 [ 554.136022][ T5845] konepure 0003:1E7D:2DB4.0009: unknown main item tag 0x0 [ 554.143270][ T5845] konepure 0003:1E7D:2DB4.0009: unknown main item tag 0x0 [ 554.180422][ T5845] konepure 0003:1E7D:2DB4.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.4-1/input0 [ 554.236705][ T5845] usb 5-1: USB disconnect, device number 16 [ 554.324570][ T9832] fido_id[9832]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 554.895978][ T5993] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 555.095712][ T5993] usb 5-1: Using ep0 maxpacket: 32 [ 555.113831][ T5993] usb 5-1: config 0 has an invalid interface number: 247 but max is 0 [ 555.172435][ T5993] usb 5-1: config 0 has no interface number 0 [ 555.260645][ T5993] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 555.343564][ T5993] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 555.349391][ T9860] netlink: 'syz.0.864': attribute type 29 has an invalid length. [ 555.377709][ T5993] usb 5-1: Product: syz [ 555.382202][ T5993] usb 5-1: Manufacturer: syz [ 555.484408][ T9860] netlink: 'syz.0.864': attribute type 29 has an invalid length. [ 555.504689][ T5993] usb 5-1: config 0 descriptor?? [ 555.521535][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz.5.860'. [ 555.794297][ T9870] tipc: Started in network mode [ 555.803707][ T9870] tipc: Node identity , cluster identity 4711 [ 555.817003][ T9870] tipc: Failed to set node id, please configure manually [ 555.824823][ T9870] tipc: Enabling of bearer rejected, failed to enable media [ 555.945807][ T5955] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 556.095732][ T5955] usb 2-1: Using ep0 maxpacket: 32 [ 556.109761][ T5955] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 556.129318][ T5955] usb 2-1: config 0 has no interface number 0 [ 556.472419][ T9887] [U] „ [ 557.130736][ T5913] usb 5-1: USB disconnect, device number 17 [ 557.391925][ T5955] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 557.418217][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.426366][ T5955] usb 2-1: Product: syz [ 557.430576][ T5955] usb 2-1: Manufacturer: syz [ 557.608628][ T9895] netlink: 'syz.5.877': attribute type 10 has an invalid length. [ 557.632411][ T5955] usb 2-1: SerialNumber: syz [ 557.686450][ T5955] usb 2-1: config 0 descriptor?? [ 557.707947][ T5955] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 557.899048][ T5955] usb 2-1: selecting invalid altsetting 1 [ 558.042974][ T5955] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 558.061572][ T5955] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 558.082374][ T5955] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 558.090888][ T5955] usb 2-1: media controller created [ 558.316587][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.879'. [ 558.680627][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 558.830871][ T5955] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 558.891592][ T5955] zl10353_read_register: readreg error (reg=127, ret==-71) [ 558.965798][ T5955] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 559.147707][ T5955] usb 2-1: USB disconnect, device number 12 [ 559.202668][ T9920] netlink: 'syz.2.887': attribute type 13 has an invalid length. [ 559.477756][ T9920] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.565744][ T9932] fuse: Unknown parameter 'grou00000000000000000000' [ 559.599208][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 559.777727][ T9920] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 559.855772][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 559.909601][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.029942][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.161341][ T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 560.193075][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.244788][ T10] usb 6-1: config 0 descriptor?? [ 560.256736][ T5993] lo speed is unknown, defaulting to 1000 [ 560.679156][ T9946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.895'. [ 560.801391][ T10] koneplus 0003:1E7D:2D51.000A: item fetching failed at offset 1/5 [ 560.956496][ T10] koneplus 0003:1E7D:2D51.000A: parse failed [ 561.015759][ T10] koneplus 0003:1E7D:2D51.000A: probe with driver koneplus failed with error -22 [ 561.206747][ T10] usb 6-1: USB disconnect, device number 5 [ 562.064571][ T9961] SET target dimension over the limit! [ 562.732864][ T9970] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 562.899165][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.527227][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 563.787234][ T5955] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 563.986393][ T5993] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 564.185769][ T5993] usb 2-1: Using ep0 maxpacket: 32 [ 564.198743][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.286243][ T5955] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 564.286941][ T5993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.325285][ T5993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.333159][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.386483][ T5955] usb 3-1: config 0 descriptor?? [ 564.388207][ T5993] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 564.437063][ T5993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.478225][ T5993] usb 2-1: config 0 descriptor?? [ 564.912252][ T5993] savu 0003:1E7D:2D5A.000C: unknown main item tag 0x0 [ 564.921974][ T5993] savu 0003:1E7D:2D5A.000C: item fetching failed at offset 7/8 [ 564.930999][ T5993] savu 0003:1E7D:2D5A.000C: parse failed [ 564.936659][ T9] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 564.945078][ T5993] savu 0003:1E7D:2D5A.000C: probe with driver savu failed with error -22 [ 564.994843][T10002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.919'. [ 565.056011][ T5993] usb 3-1: USB disconnect, device number 11 [ 565.089778][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 565.098026][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 565.119653][ T5845] usb 2-1: USB disconnect, device number 13 [ 565.129616][ T9] usb 6-1: config 0 has no interface number 0 [ 565.138995][ T9] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 565.149854][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.170932][ T9] usb 6-1: config 0 descriptor?? [ 565.182927][ T9] usb 6-1: selecting invalid altsetting 1 [ 565.190256][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 565.198996][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 565.280117][ T10] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 565.292197][ T10] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 565.339825][ T10] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 565.350978][ T9] DVB: Unable to find symbol cx22700_attach() [ 565.365939][ T10] usb 5-1: config 220 has no interface number 2 [ 565.412370][ T10] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 565.426029][ T9] DVB: Unable to find symbol tda10046_attach() [ 565.433182][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 565.442216][ T10] usb 5-1: config 220 interface 0 has no altsetting 0 [ 565.459582][ T9] usb 6-1: USB disconnect, device number 6 [ 565.466359][ T10] usb 5-1: config 220 interface 76 has no altsetting 0 [ 565.483229][ T10] usb 5-1: config 220 interface 1 has no altsetting 0 [ 565.577978][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 565.590234][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.598701][ T10] usb 5-1: Product: syz [ 565.603015][ T10] usb 5-1: Manufacturer: syz [ 565.608180][ T10] usb 5-1: SerialNumber: syz [ 566.336697][ T10] usb 5-1: selecting invalid altsetting 0 [ 566.344654][ T10] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 566.410645][ T10] usb 5-1: No valid video chain found. [ 566.429262][ T10] usb 5-1: selecting invalid altsetting 0 [ 566.435238][ T10] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 566.457966][ T10] usb 5-1: USB disconnect, device number 18 [ 566.830356][ T5845] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 567.013924][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.046788][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.069837][ T5845] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 567.089581][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.124855][ T5845] usb 6-1: config 0 descriptor?? [ 567.213731][T10036] netlink: 87 bytes leftover after parsing attributes in process `syz.1.933'. [ 567.654818][ T6021] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 568.041799][ T5845] kone 0003:1E7D:2CED.000D: unknown main item tag 0x4 [ 568.082598][ T5845] kone 0003:1E7D:2CED.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.5-1/input0 [ 568.113678][ T5845] usb 6-1: USB disconnect, device number 7 [ 568.182005][T10058] fido_id[10058]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 568.207545][ T6021] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 568.227440][ T6021] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 568.242000][ T6021] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 568.313900][ T6021] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 568.324213][ T6021] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.374109][ T6021] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 568.396867][ T6021] usb 2-1: invalid MIDI out EP 0 [ 568.847433][ T6021] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 568.896891][ T6021] usb 2-1: USB disconnect, device number 14 [ 571.181424][T10093] netlink: 4 bytes leftover after parsing attributes in process `syz.5.958'. [ 572.187610][T10109] fuse: Unknown parameter 'group_i00000000000000000000' [ 573.033257][T10112] netlink: 16 bytes leftover after parsing attributes in process `syz.1.965'. [ 573.042607][T10112] netlink: 16 bytes leftover after parsing attributes in process `syz.1.965'. [ 573.375950][ T5993] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 573.557826][ T5993] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 573.575197][ T5993] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 573.594713][ T5993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 573.699533][ T5993] usb 6-1: SerialNumber: syz [ 574.007695][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.977'. [ 574.323634][T10154] Device name cannot be null; rc = [-22] [ 574.415555][ T6021] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 574.539756][ T5993] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 574.560727][ T5993] usb 6-1: USB disconnect, device number 8 [ 574.626178][ T6021] usb 3-1: Using ep0 maxpacket: 16 [ 574.636546][ T6021] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.665114][ T6021] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 574.680768][ T6021] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 574.696115][ T6021] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.704520][ T6021] usb 3-1: Product: syz [ 574.710781][ T6021] usb 3-1: Manufacturer: syz [ 574.716209][ T6021] usb 3-1: SerialNumber: syz [ 574.765859][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 574.925746][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 574.943145][ T24] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 574.952408][ T24] usb 5-1: config 0 has no interface number 0 [ 574.966731][ T24] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 574.978247][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.987128][ T24] usb 5-1: Product: syz [ 574.991589][ T24] usb 5-1: Manufacturer: syz [ 574.999700][ T24] usb 5-1: SerialNumber: syz [ 575.016498][ T24] usb 5-1: config 0 descriptor?? [ 575.028314][ T24] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 575.143369][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 575.152148][ T6021] usb 3-1: cannot find UAC_HEADER [ 575.217995][ T6021] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 575.276427][ T6021] usb 3-1: USB disconnect, device number 12 [ 575.294806][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 575.323044][ T7820] udevd[7820]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 575.353392][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 575.475763][ T5993] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 575.503663][T10158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.531667][T10158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.545309][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 575.647407][ T5993] usb 6-1: Using ep0 maxpacket: 32 [ 575.657273][ T5993] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 575.676295][ T5993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.721082][ T5993] usb 6-1: config 0 descriptor?? [ 575.746887][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 575.756339][ T6021] usb 5-1: USB disconnect, device number 19 [ 575.785870][ T6021] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 575.819856][ T6021] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 575.851643][ T6021] quatech2 5-1:0.51: device disconnected [ 575.951228][ T5993] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 576.016843][ T5993] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 576.047042][ T5993] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 576.054292][ T5993] usb 6-1: media controller created [ 576.909939][ T5993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 577.158424][ T5993] az6027: usb out operation failed. (-71) [ 577.181290][ T5993] az6027: usb out operation failed. (-71) [ 577.197255][ T5993] stb0899_attach: Driver disabled by Kconfig [ 577.233876][ T5993] az6027: no front-end attached [ 577.233876][ T5993] [ 577.268246][ T5993] az6027: usb out operation failed. (-71) [ 577.286672][ T5993] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 577.335823][ T5993] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input14 [ 577.414381][ T5993] dvb-usb: schedule remote query interval to 400 msecs. [ 577.524088][ T5993] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 577.593268][ T5993] usb 6-1: USB disconnect, device number 9 [ 577.645763][ T5955] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 577.775649][ T5993] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 577.821479][ T5955] usb 2-1: Using ep0 maxpacket: 8 [ 577.868746][ T5955] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 577.878200][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.936998][ T5955] pvrusb2: Hardware description: Terratec Grabster AV400 [ 577.975814][ T5955] pvrusb2: ********** [ 577.996041][ T5955] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 578.019691][T10210] lo speed is unknown, defaulting to 1000 [ 578.027117][ T5955] pvrusb2: Important functionality might not be entirely working. [ 578.040503][ T5955] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 578.057413][T10210] lo speed is unknown, defaulting to 1000 [ 578.070378][T10212] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 578.078784][T10212] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 578.086762][T10212] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 578.094706][T10212] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 578.102614][T10212] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 578.110616][T10212] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 578.118466][T10212] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 578.126298][T10212] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 578.134154][T10212] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 578.142013][T10212] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 578.158071][ T5955] pvrusb2: ********** [ 578.212214][ T2343] pvrusb2: Invalid write control endpoint [ 578.419891][ T6021] usb 2-1: USB disconnect, device number 15 [ 578.626155][ T2343] pvrusb2: Invalid write control endpoint [ 578.632097][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 578.668500][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 578.723969][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 578.752087][ T30] audit: type=1400 audit(1755650920.025:43): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=10221 comm="syz.5.1009" src=1 dest=20000 [ 578.766448][ T2343] pvrusb2: Device being rendered inoperable [ 578.785062][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 578.814675][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 578.865248][ T2343] pvrusb2: Attached sub-driver cx25840 [ 578.884519][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 578.932567][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 579.298747][T10227] fuse: Unknown parameter 'group_id00000000000000000000' [ 580.117378][T10232] netlink: 'syz.1.1012': attribute type 10 has an invalid length. [ 580.498802][ T6021] kernel write not supported for file /sg0 (pid: 6021 comm: kworker/1:7) [ 580.965278][T10251] xt_hashlimit: max too large, truncated to 1048576 [ 582.375813][ T6021] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 582.550185][ T6021] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 582.566160][ T6021] usb 3-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice=f0.ee [ 582.591700][ T6021] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.618441][ T6021] usb 3-1: config 0 descriptor?? [ 582.761142][T10274] block nbd5: not configured, cannot reconfigure [ 582.866229][ T6021] usb 3-1: USB disconnect, device number 13 [ 583.163249][T10285] netlink: 'syz.5.1035': attribute type 29 has an invalid length. [ 583.195972][T10285] netlink: 'syz.5.1035': attribute type 29 has an invalid length. [ 583.213604][T10285] netlink: 'syz.5.1035': attribute type 29 has an invalid length. [ 583.369227][T10289] program syz.5.1037 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 583.478862][ T6021] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 583.702974][ T6021] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.743634][ T6021] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 583.765105][ T6021] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 583.780430][ T6021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 583.791850][T10300] netlink: 'syz.2.1042': attribute type 12 has an invalid length. [ 583.802208][ T6021] usb 5-1: SerialNumber: syz [ 583.883653][T10301] netlink: 'syz.5.1041': attribute type 10 has an invalid length. [ 584.049258][ T6021] usb 5-1: 0:2 : does not exist [ 584.105189][ T6021] usb 5-1: USB disconnect, device number 20 [ 584.222807][ T7820] udevd[7820]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 584.665593][ T5955] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 584.745608][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 584.851848][ T5955] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 584.898342][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.955915][T10315] [U] „ [ 585.093003][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 585.125826][ T5955] usb 3-1: config 0 descriptor?? [ 585.162919][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.427275][ T9] usb 2-1: config 0 descriptor?? [ 585.491897][ T9] cp210x 2-1:0.0: cp210x converter detected [ 585.698787][ T5955] pantherlord 0003:0F30:0111.000E: item fetching failed at offset 0/4 [ 585.726290][ T5955] pantherlord 0003:0F30:0111.000E: parse failed [ 585.732694][ T5955] pantherlord 0003:0F30:0111.000E: probe with driver pantherlord failed with error -22 [ 585.905546][ T5955] usb 3-1: USB disconnect, device number 14 [ 585.916041][ T9] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 586.003008][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 586.170028][ T6021] usb 2-1: USB disconnect, device number 16 [ 586.302523][ T6021] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 587.205214][ T6021] cp210x 2-1:0.0: device disconnected [ 587.833085][T10339] fuse: Unknown parameter 'group_id00000000000000000000' [ 589.146569][T10361] netlink: 71 bytes leftover after parsing attributes in process `syz.5.1066'. [ 589.225767][ T6021] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 590.162239][ T6021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.181137][T10368] netlink: 'syz.1.1064': attribute type 10 has an invalid length. [ 590.201847][ T6021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.352267][T10371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1067'. [ 590.712336][ T6021] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 590.738343][ T6021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.758099][ T6021] usb 5-1: config 0 descriptor?? [ 591.267765][ T6021] steelseries 0003:1038:12B6.000F: unknown main item tag 0x0 [ 591.280406][ T6021] steelseries 0003:1038:12B6.000F: unknown main item tag 0x0 [ 591.288375][ T6021] steelseries 0003:1038:12B6.000F: unknown main item tag 0x0 [ 591.296048][ T6021] steelseries 0003:1038:12B6.000F: unknown main item tag 0x0 [ 591.303628][ T6021] steelseries 0003:1038:12B6.000F: unknown main item tag 0x0 [ 591.311682][ T6021] steelseries 0003:1038:12B6.000F: unknown main item tag 0x0 [ 591.320485][ T6021] steelseries 0003:1038:12B6.000F: unknown main item tag 0x0 [ 592.113315][ T6021] steelseries 0003:1038:12B6.000F: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.4-1/input0 [ 592.464035][ T5955] usb 5-1: USB disconnect, device number 21 [ 592.550635][T10400] loop2: detected capacity change from 0 to 7 [ 592.582177][T10400] Dev loop2: unable to read RDB block 7 [ 592.592728][T10400] loop2: unable to read partition table [ 592.613031][T10400] loop2: partition table beyond EOD, truncated [ 592.624109][T10400] loop_reread_partitions: partition scan of loop2 (ūčĸĢxü—ŸŅā– ) failed (rc=-5) [ 594.685706][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 594.847911][T10444] netlink: 'syz.2.1096': attribute type 10 has an invalid length. [ 594.856148][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 594.867527][ T9] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 594.879860][ T9] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 594.896827][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.913577][ T9] usb 5-1: Product: syz [ 594.931323][ T9] usb 5-1: Manufacturer: syz [ 594.936404][ T9] usb 5-1: SerialNumber: syz [ 594.946885][ T9] usb 5-1: config 0 descriptor?? [ 594.959602][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 594.968352][ T9] usb 5-1: setting power ON [ 594.975225][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 594.988521][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 594.999455][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 595.010847][ T9] usb 5-1: media controller created [ 595.043744][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 595.111041][ T9] usb 5-1: selecting invalid altsetting 6 [ 595.125666][ T9] usb 5-1: digital interface selection failed (-22) [ 595.137235][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 595.150686][ T9] usb 5-1: setting power OFF [ 595.161378][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 595.169377][ T5955] kernel read not supported for file /dsp (pid: 5955 comm: kworker/0:7) [ 595.194520][T10433] dvb-usb: bulk message failed: -22 (3/0) [ 595.203030][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 595.231652][T10433] dvb-usb: bulk message failed: -22 (5/0) [ 595.254005][T10433] dvb-usb: bulk message failed: -22 (3/0) [ 595.260471][ T9] (NULL device *): no alternate interface [ 595.384764][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 595.409163][ T9] usb 5-1: USB disconnect, device number 22 [ 596.811363][T10490] netlink: 'syz.5.1118': attribute type 2 has an invalid length. [ 596.837337][T10490] netlink: 51 bytes leftover after parsing attributes in process `syz.5.1118'. [ 596.860708][T10490] netlink: 'syz.5.1118': attribute type 2 has an invalid length. [ 596.899509][T10490] netlink: 51 bytes leftover after parsing attributes in process `syz.5.1118'. [ 596.964236][T10495] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1121'. [ 597.008591][T10495] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1121'. [ 597.225670][ T6021] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 597.472311][T10513] fuse: Bad value for 'user_id' [ 597.477334][T10513] fuse: Bad value for 'user_id' [ 598.197206][ T6021] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 598.205702][ T6021] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 598.221723][ T6021] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 598.233895][ T6021] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 598.245863][ T6021] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 598.279968][ T6021] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 598.301988][ T6021] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 598.328896][ T6021] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 598.349366][ T6021] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 598.373384][ T6021] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 598.397276][ T6021] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 598.419820][ T6021] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 598.451015][ T6021] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 598.470848][T10525] wireguard: wg0: Could not create IPv4 socket [ 598.478350][ T6021] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 598.505757][ T6021] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 598.535619][ T122] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 598.557412][ T6021] usb 2-1: string descriptor 0 read error: -22 [ 598.563959][ T6021] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 598.593568][ T6021] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.603954][T10531] tipc: Started in network mode [ 598.614416][T10531] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 598.630243][ T6021] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 598.641466][T10531] tipc: Enabled bearer , priority 10 [ 598.690649][ T122] usb 3-1: Using ep0 maxpacket: 32 [ 598.703570][ T122] usb 3-1: config 0 interface 0 has no altsetting 0 [ 598.730518][ T122] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 598.744569][ T122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.762780][ T122] usb 3-1: Product: syz [ 598.769867][ T122] usb 3-1: Manufacturer: syz [ 598.774613][ T122] usb 3-1: SerialNumber: syz [ 598.787893][ T122] usb 3-1: config 0 descriptor?? [ 598.801114][T10535] tap0: tun_chr_ioctl cmd 2147767506 [ 598.869794][ T6021] usb 2-1: USB disconnect, device number 17 [ 598.983687][T10541] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1141'. [ 599.240623][T10551] kvm: user requested TSC rate below hardware speed [ 599.248500][ T122] gs_usb 3-1:0.0: Configuring for 2 interfaces [ 599.467680][T10555] [U] „ [ 599.756641][ T6021] tipc: Node number set to 4269801488 [ 599.856821][ T122] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 599.986525][ T122] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 600.121304][ T122] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 600.155161][ T122] usb 3-1: USB disconnect, device number 15 [ 600.240653][T10566] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 600.495661][ T10] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 600.660052][T10581] fuse: Bad value for 'fd' [ 601.473397][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 601.490300][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 601.502174][ T10] usb 5-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 601.511488][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.522970][ T10] usb 5-1: config 0 descriptor?? [ 601.530027][T10567] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 601.577545][T10590] loop6: detected capacity change from 0 to 63 [ 601.589278][ T7820] buffer_io_error: 6 callbacks suppressed [ 601.589295][ T7820] Buffer I/O error on dev loop6, logical block 0, async page read [ 601.606506][ T7820] Buffer I/O error on dev loop6, logical block 0, async page read [ 601.614490][ T7820] Buffer I/O error on dev loop6, logical block 0, async page read [ 601.622561][ T7820] Buffer I/O error on dev loop6, logical block 0, async page read [ 601.630948][ T7820] Buffer I/O error on dev loop6, logical block 0, async page read [ 601.641722][ T7820] loop6: unable to read partition table [ 601.642769][T10591] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 601.649596][T10590] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 601.665660][ T5955] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 601.670139][T10590] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 601.683017][T10590] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 601.691928][T10591] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 601.704364][T10590] ldm_validate_partition_table(): Disk read failed. [ 601.705855][ T122] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 601.711788][T10590] Dev loop6: unable to read RDB block 0 [ 601.724852][T10590] loop6: unable to read partition table [ 601.731483][T10590] loop_reread_partitions: partition scan of loop6 (3Ÿ ž‚ŗ˜) failed (rc=-5) [ 601.830342][ T5955] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 601.840506][ T5955] usb 6-1: config 0 has no interface number 0 [ 601.849054][ T5955] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 601.860608][ T5955] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 601.873582][ T5955] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 602.076153][ T122] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 602.077414][ T5955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.089572][ T122] usb 3-1: can't read configurations, error -71 [ 602.220809][ T10] glorious 0003:22D4:1503.0010: item fetching failed at offset 5/7 [ 602.265121][ T5849] Bluetooth: hci3: command tx timeout [ 602.266173][ T10] glorious 0003:22D4:1503.0010: probe with driver glorious failed with error -22 [ 602.453507][ T5955] usb 6-1: config 0 descriptor?? [ 602.479596][T10586] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 602.505028][T10593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'. [ 602.545104][ T5955] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 602.555877][ T10] usb 5-1: USB disconnect, device number 23 [ 602.757216][ T6021] usb 6-1: USB disconnect, device number 10 [ 603.227001][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 603.301640][T10620] lo speed is unknown, defaulting to 1000 [ 603.328891][T10620] lo speed is unknown, defaulting to 1000 [ 603.376952][T10623] netlink: 'syz.2.1176': attribute type 2 has an invalid length. [ 603.387873][T10623] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1176'. [ 603.397476][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 603.411875][ T10] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 603.420451][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 603.451840][ T10] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 603.479675][ T10] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 603.508021][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 603.525834][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 603.541899][ T10] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 603.758569][ T10] usb 2-1: Product: syz [ 603.762895][ T10] usb 2-1: Manufacturer: syz [ 603.890799][T10631] fuse: Bad value for 'fd' [ 604.684235][ T10] usb 2-1: SerialNumber: syz [ 605.135633][ T10] usb 2-1: config 0 descriptor?? [ 605.193955][ T10] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 605.241542][ T10] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 605.490010][T10642] overlayfs: missing 'workdir' [ 605.973374][ T122] usb 2-1: USB disconnect, device number 18 [ 605.997554][ T122] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 607.595549][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 607.793133][T10684] fuse: Invalid rootmode [ 608.505797][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 608.516664][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 608.544574][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 608.578812][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 608.627856][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 608.665525][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 608.674679][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.949994][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 608.965410][ T10] usbtmc 6-1:16.0: can't read capabilities [ 610.216376][ T6021] usb 6-1: USB disconnect, device number 11 [ 610.362247][T10708] IPv6: Can't replace route, no match found [ 610.492290][T10710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1208'. [ 611.700472][T10718] netlink: 'syz.5.1211': attribute type 10 has an invalid length. [ 613.086063][T10744] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1223'. [ 613.475934][T10758] netlink: 'syz.2.1229': attribute type 10 has an invalid length. [ 614.133284][T10766] tun0: tun_chr_ioctl cmd 1074025678 [ 614.144668][T10766] tun0: group set to 0 [ 614.314543][ T5913] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0 [ 614.332572][ T5913] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0 [ 614.347916][ T5913] hid-generic 0003:0004:0000.0011: unknown main item tag 0x0 [ 614.360972][T10773] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1235'. [ 614.375264][ T5913] hid-generic 0003:0004:0000.0011: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 615.027175][T10774] fido_id[10774]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 616.006747][T10794] netlink: 'syz.2.1242': attribute type 10 has an invalid length. [ 616.618064][T10802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1246'. [ 618.540960][T10833] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 618.590230][ T5955] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 618.653567][T10835] netlink: 'syz.5.1259': attribute type 10 has an invalid length. [ 619.199248][ T5955] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 619.266804][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.781576][ T5955] usb 2-1: config 0 descriptor?? [ 620.713159][ T5955] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 620.755702][ T5955] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 620.796086][ T5955] asix 2-1:0.0: probe with driver asix failed with error -71 [ 620.851549][ T5955] usb 2-1: USB disconnect, device number 19 [ 621.989817][T10897] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1284'. [ 622.057496][T10901] fuse: Bad value for 'fd' [ 622.433746][T10903] vivid-000: disconnect [ 622.450124][T10906] netlink: 'syz.2.1287': attribute type 1 has an invalid length. [ 622.461784][T10902] vivid-000: reconnect [ 622.478102][T10906] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1287'. [ 623.612508][T10938] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1300'. [ 623.623209][T10938] netem: change failed [ 624.581932][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.842819][T10948] fuse: Invalid rootmode [ 625.305613][ T122] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 625.515594][ T122] usb 5-1: Using ep0 maxpacket: 8 [ 625.550832][ T122] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 625.627313][ T122] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.642425][T10964] netlink: 'syz.1.1307': attribute type 10 has an invalid length. [ 625.895367][ T122] pvrusb2: Hardware description: Terratec Grabster AV400 [ 625.957398][ T122] pvrusb2: ********** [ 625.981260][ T122] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 626.028365][ T122] pvrusb2: Important functionality might not be entirely working. [ 626.170311][ T122] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 626.182429][ T122] pvrusb2: ********** [ 626.190305][ T2343] pvrusb2: Invalid write control endpoint [ 626.992709][ T5913] usb 5-1: USB disconnect, device number 24 [ 627.015417][ T2343] pvrusb2: Invalid write control endpoint [ 627.021262][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 627.057013][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 627.078603][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 627.108119][ T2343] pvrusb2: Device being rendered inoperable [ 627.128375][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 627.135589][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 627.144041][ T2343] pvrusb2: Attached sub-driver cx25840 [ 627.173647][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 627.226262][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 628.666937][T10980] kexec: Could not allocate control_code_buffer [ 628.784938][T11004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1322'. [ 628.962855][T11010] netlink: 'syz.1.1324': attribute type 10 has an invalid length. [ 630.724904][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1329'. [ 630.990327][T11046] overlayfs: invalid origin (0000) [ 631.384252][T11054] netlink: 'syz.5.1341': attribute type 10 has an invalid length. [ 631.676545][T11050] netlink: 'syz.0.1340': attribute type 1 has an invalid length. [ 631.684683][T11050] nbd: error processing sock list [ 631.697221][T11050] block nbd0: shutting down sockets [ 632.867511][T11071] input: syz0 as /devices/virtual/input/input17 [ 633.105587][ T5955] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 633.308598][ T5955] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 633.329145][ T5955] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 633.353350][ T5955] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 633.373062][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.418801][T11070] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 633.469594][ T5955] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 633.510496][T11084] netlink: 'syz.1.1353': attribute type 1 has an invalid length. [ 633.713563][ T5955] usb 5-1: USB disconnect, device number 25 [ 633.835986][ T122] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 633.924620][T11099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1360'. [ 633.941743][T11096] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.955215][T11099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1360'. [ 634.008283][ T122] usb 6-1: config 0 has an invalid interface number: 229 but max is 0 [ 634.030614][ T122] usb 6-1: config 0 has no interface number 0 [ 634.040517][ T122] usb 6-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 634.060266][ T122] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.065670][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 634.083984][ T122] usb 6-1: config 0 descriptor?? [ 634.227103][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 634.234146][ T10] usb 2-1: config 3 has an invalid interface number: 45 but max is 0 [ 634.244857][ T10] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 634.263777][ T10] usb 2-1: config 3 has no interface number 0 [ 634.271468][ T10] usb 2-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 634.287544][ T5955] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 634.297138][ T10] usb 2-1: config 3 interface 45 has no altsetting 0 [ 634.302165][ T6021] usb 6-1: USB disconnect, device number 12 [ 634.310257][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 634.329366][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.340462][ T10] usb 2-1: Product: syz [ 634.348477][ T10] usb 2-1: Manufacturer: syz [ 634.353139][ T10] usb 2-1: SerialNumber: syz [ 634.450777][ T5955] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.462414][ T5955] usb 3-1: config 0 interface 0 has no altsetting 0 [ 634.470735][ T5955] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 634.482150][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.494417][ T5955] usb 3-1: config 0 descriptor?? [ 634.643015][ T10] usb 2-1: USB disconnect, device number 20 [ 634.693913][ T7820] udevd[7820]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 634.831880][T11116] fuse: Unknown parameter '00000000000000000000' [ 635.633650][ T5955] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.0012/input/input18 [ 635.769808][ T5955] sony 0003:054C:03D5.0012: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 635.836824][ T5955] usb 3-1: USB disconnect, device number 18 [ 635.997912][T11128] fido_id[11128]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 636.187548][T11138] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1376'. [ 636.198516][T11138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1376'. [ 636.525781][ T5955] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 636.597894][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 636.687252][ T5955] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 636.699242][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 636.710727][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 636.723839][ T5955] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 636.737034][ T5955] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 636.746248][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.756399][ T5955] usb 5-1: config 0 descriptor?? [ 636.765691][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 636.776753][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 636.784367][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 636.802323][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 636.822083][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 636.835227][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 636.845640][ T9] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 636.852139][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 636.863587][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 636.875037][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 636.889672][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 636.900932][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 636.914084][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 636.922018][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 636.933674][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 636.945591][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 636.956969][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 636.972752][ T24] usb 3-1: string descriptor 0 read error: -22 [ 636.979167][ T24] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 636.988593][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.007189][ T24] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 637.011477][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 637.028868][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 637.043380][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 637.055267][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.175760][ T5955] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 637.183387][ T5955] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 637.191183][ T5955] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 637.201219][ T5955] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 637.208775][ T5955] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 637.217042][ T5955] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 637.224664][ T5955] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 637.233062][ T5955] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 637.240616][ T5955] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 637.248172][ T5955] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 637.274643][ T9] usb 6-1: usb_control_msg returned -32 [ 637.280879][ T9] usbtmc 6-1:16.0: can't read capabilities [ 637.320577][ T10] usb 3-1: USB disconnect, device number 19 [ 637.344929][ T5955] plantronics 0003:047F:FFFF.0013: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 637.435756][ T5955] usb 5-1: USB disconnect, device number 26 [ 637.549057][T11160] fido_id[11160]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 638.543242][T11174] netlink: 'syz.2.1388': attribute type 10 has an invalid length. [ 638.653350][T11175] No memory to map [ 639.644745][ T5955] usb 6-1: USB disconnect, device number 13 [ 639.752202][T11195] fuse: Unknown parameter 'user00000000000000000000' [ 641.174228][T11216] netlink: 'syz.0.1402': attribute type 10 has an invalid length. [ 641.256060][ T122] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 641.541979][ T122] usb 3-1: Using ep0 maxpacket: 8 [ 641.599754][ T122] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.619691][ T122] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 641.633175][ T122] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.692004][T11218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1404'. [ 641.776557][ T122] usb 3-1: config 0 descriptor?? [ 641.794808][ T122] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 642.017012][T11229] netlink: 'syz.0.1409': attribute type 10 has an invalid length. [ 642.116098][ T6021] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 642.398557][ T6021] usb 6-1: Using ep0 maxpacket: 32 [ 642.798100][ T6021] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 642.876910][T11233] fuse: Unknown parameter 'user_i00000000000000000000' [ 643.501313][ T6021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.501481][ T122] gspca_vc032x: reg_w err -110 [ 643.514477][ T6021] usb 6-1: Product: syz [ 643.519902][ T6021] usb 6-1: Manufacturer: syz [ 643.524562][ T6021] usb 6-1: SerialNumber: syz [ 643.535866][ T122] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 643.557937][ T6021] usb 6-1: config 0 descriptor?? [ 644.058367][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1418'. [ 644.214813][ T6021] peak_usb 6-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 644.226167][ T6021] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 644.234202][ T6021] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 644.235819][T11260] netlink: 'syz.1.1420': attribute type 10 has an invalid length. [ 644.699492][ T6021] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -22 [ 644.756544][ T6021] usb 6-1: USB disconnect, device number 14 [ 644.964275][ T5955] usb 3-1: USB disconnect, device number 20 [ 645.294085][T11269] fuse: Unknown parameter 'user_i00000000000000000000' [ 646.055471][T11272] netlink: 'syz.5.1424': attribute type 10 has an invalid length. [ 646.891282][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 647.076036][ T6021] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 647.395204][T11284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1429'. [ 647.547720][ T6021] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 647.560993][ T6021] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 647.592166][ T6021] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 647.622896][ T6021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.872618][ T6021] usb 5-1: usb_control_msg returned -32 [ 647.885568][ T6021] usbtmc 5-1:16.0: can't read capabilities [ 648.238459][T11307] netlink: 'syz.1.1438': attribute type 10 has an invalid length. [ 648.560999][T11310] usbtmc 5-1:16.0: INDICATOR_PULSE returned 0 [ 648.652019][T11315] netlink: 'syz.2.1441': attribute type 2 has an invalid length. [ 648.762171][ T6021] usb 5-1: USB disconnect, device number 27 [ 649.075520][ T5955] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 649.391222][ T5955] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.407986][ T5955] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 649.419564][ T5955] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 649.431519][ T5955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.462001][ T5955] usb 6-1: config 0 descriptor?? [ 649.498247][ T5955] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 649.515633][ T5955] dvb-usb: bulk message failed: -22 (3/0) [ 649.544193][ T5955] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 649.563765][ T5955] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 649.585034][ T5955] usb 6-1: media controller created [ 649.597986][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 649.636898][ T5955] dvb-usb: bulk message failed: -22 (6/0) [ 649.654493][ T5955] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 649.677499][T11334] loop6: detected capacity change from 0 to 1 [ 649.687453][ T5955] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input19 [ 649.711363][T11334] Dev loop6: unable to read RDB block 1 [ 649.743001][T11334] loop6: unable to read partition table [ 649.807601][T11334] loop6: partition table beyond EOD, truncated [ 649.809140][ T5955] dvb-usb: schedule remote query interval to 150 msecs. [ 649.866948][T11334] loop_reread_partitions: partition scan of loop6 (ūčĸĢxü—ŸŅā– ) failed (rc=-5) [ 650.190066][ T5955] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 650.338669][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 650.344744][ T10] dvb-usb: error while querying for an remote control event. [ 650.545836][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 650.561768][ T10] dvb-usb: error while querying for an remote control event. [ 650.611382][ T10] usb 6-1: USB disconnect, device number 15 [ 650.674498][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 650.765809][ T5993] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 650.921951][T11357] lo speed is unknown, defaulting to 1000 [ 650.931570][T11357] lo speed is unknown, defaulting to 1000 [ 650.941493][ T5993] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 650.961372][ T5993] usb 3-1: config 1 has no interface number 0 [ 650.975605][ T5993] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.995692][ T5993] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 651.015284][ T5993] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x31, changing to 0x1 [ 651.034923][ T5993] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 651.062341][ T5993] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 651.075619][ T5993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.084048][ T5993] usb 3-1: Product: syz [ 651.095591][ T5993] usb 3-1: Manufacturer: syz [ 651.102304][ T5993] usb 3-1: SerialNumber: syz [ 652.283285][ T5993] cdc_ncm 3-1:1.1: bind() failure [ 652.373007][ T5993] usb 3-1: USB disconnect, device number 21 [ 652.580314][T11379] net_ratelimit: 44 callbacks suppressed [ 652.580337][T11379] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 652.598338][ T10] IPVS: starting estimator thread 0... [ 652.716168][T11384] IPVS: using max 39 ests per chain, 93600 per kthread [ 653.205761][ T5955] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 653.377212][ T5955] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 653.413863][ T5955] usb 6-1: config 0 has no interface number 0 [ 653.438752][ T5955] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 653.468494][ T5955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.481724][ T5955] usb 6-1: Product: syz [ 653.526208][T11401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1475'. [ 653.931482][ T5955] usb 6-1: Manufacturer: syz [ 653.939427][ T5955] usb 6-1: SerialNumber: syz [ 653.985400][ T5955] usb 6-1: config 0 descriptor?? [ 654.125553][ T6021] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 654.281651][ T5955] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 654.295745][ T6021] usb 3-1: Using ep0 maxpacket: 8 [ 654.303561][ T6021] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 654.303813][ T5955] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 654.321898][ T6021] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 654.330212][ T5955] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 654.342677][ T5955] usb 6-1: media controller created [ 654.354199][ T6021] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 654.378891][ T6021] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 654.395579][ T6021] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 654.430448][ T6021] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 654.440704][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 654.465471][ T6021] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.096936][ T6021] usb 3-1: GET_CAPABILITIES returned 0 [ 655.144378][ T6021] usbtmc 3-1:16.0: can't read capabilities [ 655.321617][ T979] usb 3-1: USB disconnect, device number 22 [ 655.424856][T11421] netlink: 'syz.1.1482': attribute type 4 has an invalid length. [ 655.434866][T11421] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1482'. [ 655.605744][T11425] [U] „ [ 655.617589][ T5955] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 655.632207][T11391] usb 6-1: dvb_usb_ec168: I2C read not implemented [ 656.156168][ T5955] usb 6-1: USB disconnect, device number 16 [ 657.287307][T11461] [U] „ [ 657.304030][ T6021] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 658.189214][T11471] [U] „ [ 658.858444][T11467] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1499'. [ 658.867712][ T6021] usb 3-1: Using ep0 maxpacket: 8 [ 658.885339][ T6021] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 658.914817][ T6021] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 658.956618][ T6021] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 658.980695][ T6021] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 659.016926][ T6021] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 659.056249][ T6021] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 659.076263][ T6021] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.245904][T11475] syz.4.1504 (11475): drop_caches: 2 [ 659.256433][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 659.322726][ T6021] usb 3-1: usb_control_msg returned -32 [ 659.340337][ T6021] usbtmc 3-1:16.0: can't read capabilities [ 659.422918][T11488] syzkaller1: entered promiscuous mode [ 659.429072][T11488] syzkaller1: entered allmulticast mode [ 659.452821][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 659.460945][ T10] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 659.472189][ T10] usb 2-1: config 0 has no interface number 0 [ 659.488460][ T10] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 659.511473][ T10] usb 2-1: config 0 interface 85 has no altsetting 0 [ 659.521695][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 659.531577][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.540218][ T10] usb 2-1: Product: syz [ 659.544761][ T10] usb 2-1: Manufacturer: syz [ 659.549733][ T10] usb 2-1: SerialNumber: syz [ 659.557890][ T10] usb 2-1: config 0 descriptor?? [ 659.964415][ T979] usb 3-1: USB disconnect, device number 23 [ 660.206820][T11505] [U] „ [ 660.234476][ T10] appletouch 2-1:0.85: Geyser mode initialized. [ 660.385336][ T10] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input20 [ 660.701727][ C0] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -1 [ 660.824290][ T10] usb 2-1: USB disconnect, device number 21 [ 660.830422][ C0] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 661.402350][T11512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1514'. [ 661.503934][ T10] appletouch 2-1:0.85: input: appletouch disconnected [ 661.893254][T11528] loop6: detected capacity change from 0 to 63 [ 661.919499][ T7820] buffer_io_error: 25 callbacks suppressed [ 661.919516][ T7820] Buffer I/O error on dev loop6, logical block 0, async page read [ 661.959429][T11528] Buffer I/O error on dev loop6, logical block 0, async page read [ 661.982812][ T7820] Buffer I/O error on dev loop6, logical block 0, async page read [ 662.012802][ T7820] Buffer I/O error on dev loop6, logical block 0, async page read [ 662.022437][ T7820] Buffer I/O error on dev loop6, logical block 0, async page read [ 662.031909][ T7820] Buffer I/O error on dev loop6, logical block 0, async page read [ 662.064061][T11528] Buffer I/O error on dev loop6, logical block 0, async page read [ 662.139000][T11534] fuse: Bad value for 'fd' [ 662.168068][ T10] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 662.295118][T11528] Buffer I/O error on dev loop6, logical block 0, async page read [ 662.442636][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 662.454069][T11528] Buffer I/O error on dev loop6, logical block 0, async page read [ 662.683483][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 662.717725][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 662.744824][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.775775][ T10] usb 2-1: Product: syz [ 662.800245][ T10] usb 2-1: Manufacturer: syz [ 662.804910][ T10] usb 2-1: SerialNumber: syz [ 663.296864][T11546] [U] „ [ 664.144005][ T10] usb 2-1: 0:2 : does not exist [ 664.211857][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 664.252410][T11549] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 664.361656][ T10] usb 2-1: USB disconnect, device number 22 [ 664.483071][ T7820] udevd[7820]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 664.483825][T11558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1533'. [ 664.745718][ T6021] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 664.901528][T11571] [U] „ [ 664.935643][ T6021] usb 6-1: Using ep0 maxpacket: 8 [ 664.997676][ T6021] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 665.097157][ T6021] usb 6-1: config 0 has no interface number 0 [ 665.171838][ T6021] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 665.298760][ T6021] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 665.514974][ T6021] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 665.555575][ T6021] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 665.774512][ T6021] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 666.236146][ T6021] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.261853][ T6021] usb 6-1: config 0 descriptor?? [ 666.281606][ T6021] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 666.365614][ T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 666.587360][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 666.678010][ T6021] usb 6-1: USB disconnect, device number 17 [ 666.678728][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 667.011317][ T6021] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 667.019748][ T10] usb 5-1: config 0 has no interface number 0 [ 667.045021][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 667.075530][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 667.105616][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 667.122712][ T10] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 667.178532][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 667.188555][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.201581][ T10] usb 5-1: config 0 descriptor?? [ 667.225910][ T10] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 667.490942][ T122] usb 5-1: USB disconnect, device number 28 [ 667.491081][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 667.660227][ T6021] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 667.912522][ T30] audit: type=1326 audit(1755651009.185:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11623 comm="syz.2.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879238ebe9 code=0x50000 [ 667.941448][ T30] audit: type=1326 audit(1755651009.185:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11623 comm="syz.2.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879238ebe9 code=0x50000 [ 667.958861][ T6021] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 667.966831][ T30] audit: type=1326 audit(1755651009.185:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11623 comm="syz.2.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879238ebe9 code=0x50000 [ 667.974700][ T6021] usb 2-1: config 0 has no interface number 0 [ 667.996679][ T30] audit: type=1326 audit(1755651009.185:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11623 comm="syz.2.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879238ebe9 code=0x50000 [ 668.002345][ T6021] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 668.028284][ T30] audit: type=1326 audit(1755651009.185:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11623 comm="syz.2.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879238ebe9 code=0x50000 [ 668.035397][ T6021] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 668.056141][ T6021] usb 2-1: config 0 interface 255 has no altsetting 0 [ 668.056178][ T6021] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 668.056201][ T6021] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.059076][ T6021] usb 2-1: config 0 descriptor?? [ 668.086840][ T30] audit: type=1326 audit(1755651009.185:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11623 comm="syz.2.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879238ebe9 code=0x50000 [ 668.086886][ T30] audit: type=1326 audit(1755651009.185:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11623 comm="syz.2.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879238ebe9 code=0x50000 [ 668.086938][ T30] audit: type=1326 audit(1755651009.185:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11623 comm="syz.2.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879238ebe9 code=0x50000 [ 668.086978][ T30] audit: type=1326 audit(1755651009.185:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11623 comm="syz.2.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879238ebe9 code=0x50000 [ 668.087018][ T30] audit: type=1326 audit(1755651009.185:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11623 comm="syz.2.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879238ebe9 code=0x50000 [ 668.166040][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.289015][ T6021] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 668.508391][ T979] usb 2-1: USB disconnect, device number 23 [ 668.775713][ T122] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 669.695531][ T122] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 669.871835][ T122] usb 6-1: Using ep0 maxpacket: 8 [ 669.884981][ T122] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 669.899848][ T122] usb 6-1: config 0 has no interface number 0 [ 669.908393][ T122] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 669.920932][ T122] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 669.924516][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 669.963700][ T122] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 669.979411][ T122] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 669.995108][ T122] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 670.027972][ T122] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.057949][ T122] usb 6-1: config 0 descriptor?? [ 670.074371][ T122] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 670.296989][ T122] usb 6-1: USB disconnect, device number 18 [ 670.297137][ C0] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 670.309407][ T122] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 671.352247][T11685] pim6reg: entered allmulticast mode [ 671.406351][T11686] pim6reg: left allmulticast mode [ 671.426008][ T122] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 671.585750][ T122] usb 3-1: Using ep0 maxpacket: 16 [ 671.600703][ T122] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 671.622365][ T122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.665973][ T122] usb 3-1: Product: syz [ 671.670244][ T122] usb 3-1: Manufacturer: syz [ 671.674878][ T122] usb 3-1: SerialNumber: syz [ 671.703836][ T122] usb 3-1: config 0 descriptor?? [ 671.778515][T11694] input: syz1 as /devices/virtual/input/input21 [ 671.896400][ T979] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 672.009836][T11699] syzkaller1: entered promiscuous mode [ 672.022169][T11699] syzkaller1: entered allmulticast mode [ 672.060550][ T979] usb 5-1: Using ep0 maxpacket: 8 [ 672.072687][ T979] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 672.082538][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.105661][ T979] usb 5-1: Product: syz [ 672.109859][ T979] usb 5-1: Manufacturer: syz [ 672.114472][ T979] usb 5-1: SerialNumber: syz [ 672.128261][ T122] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 672.143842][ T979] usb 5-1: config 0 descriptor?? [ 672.155933][ T122] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 672.190600][ T122] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 672.205305][ T122] usb 3-1: media controller created [ 672.287076][ T122] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 672.415122][ T979] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 672.836978][ T122] zl10353_read_register: readreg error (reg=127, ret==0) [ 672.845905][T11679] dtv5100: wlen = 0, aborting. [ 672.855228][ T122] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 672.903799][ T122] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 672.998915][ T122] usb 3-1: USB disconnect, device number 24 [ 673.072072][ T122] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 673.312639][ T979] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 673.333619][ T979] usb 5-1: USB disconnect, device number 29 [ 673.445539][ T5993] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 673.566999][T11710] netlink: 'syz.2.1589': attribute type 17 has an invalid length. [ 673.666229][ T5993] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 673.674818][ T5993] usb 6-1: config 0 has no interface number 0 [ 673.696086][ T5993] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 673.725577][ T5993] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 673.745558][ T5993] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 673.754726][ T5993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.776346][ T5993] usb 6-1: config 0 descriptor?? [ 673.782194][T11708] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 673.815972][ T5993] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 673.915946][T11717] loop6: detected capacity change from 0 to 524287999 [ 674.076164][ T5993] usb 6-1: USB disconnect, device number 19 [ 675.272619][ T5993] kernel write not supported for file /input/mouse0 (pid: 5993 comm: kworker/1:6) [ 675.566793][T11740] syzkaller1: entered promiscuous mode [ 675.604705][T11740] syzkaller1: entered allmulticast mode [ 675.865780][ T6021] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 676.108637][ T6021] usb 3-1: Using ep0 maxpacket: 8 [ 676.141941][ T6021] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 676.216081][T11763] [U] „ [ 676.850365][ T6021] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 676.866312][ T6021] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 676.876428][ T6021] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 676.886546][ T6021] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 676.899908][ T6021] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 676.909176][ T6021] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.504060][ T6021] usb 3-1: usb_control_msg returned -32 [ 677.513629][ T6021] usbtmc 3-1:16.0: can't read capabilities [ 677.567587][T11768] syzkaller1: entered promiscuous mode [ 677.573139][T11768] syzkaller1: entered allmulticast mode [ 677.641300][T11773] netlink: 'syz.4.1613': attribute type 4 has an invalid length. [ 677.854867][T11783] usbtmc 3-1:16.0: stb usb_control_msg returned -32 [ 677.863668][T11504] usb 3-1: USB disconnect, device number 25 [ 677.976527][ T979] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 678.237727][ T6021] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 678.245563][ T979] usb 5-1: Using ep0 maxpacket: 8 [ 678.252129][ T979] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 678.260464][ T979] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 678.270369][ T979] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 678.280265][ T979] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 678.354713][T11794] [U] „ [ 678.423450][ T6021] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 678.523149][ T6021] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 678.622812][ T6021] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.816890][ T6021] usb 2-1: config 0 descriptor?? [ 678.835483][ T979] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 678.849977][ T979] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 678.852338][T11790] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 678.859100][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.106496][ T979] usb 5-1: GET_CAPABILITIES returned 0 [ 679.112381][ T979] usbtmc 5-1:16.0: can't read capabilities [ 679.167469][ T5845] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 679.314530][ T5993] usb 5-1: USB disconnect, device number 30 [ 679.345627][ T5845] usb 3-1: Using ep0 maxpacket: 32 [ 679.379466][ T5845] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 679.400095][ T6021] elan 0003:04F3:0755.0014: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 679.415974][ T5845] usb 3-1: config 0 has no interface number 0 [ 679.441739][ T5845] usb 3-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 679.464884][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.474045][ T5845] usb 3-1: Product: syz [ 679.485520][ T5845] usb 3-1: Manufacturer: syz [ 679.490454][ T5845] usb 3-1: SerialNumber: syz [ 679.512346][ T5845] usb 3-1: config 0 descriptor?? [ 679.580770][ T979] usb 2-1: USB disconnect, device number 24 [ 679.611615][T11806] fido_id[11806]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 679.756648][ T5845] kaweth 3-1:0.235: Firmware present in device. [ 679.948094][ T5845] kaweth 3-1:0.235: Statistics collection: 0 [ 679.954303][ T5845] kaweth 3-1:0.235: Multicast filter limit: 0 [ 679.960661][ T5845] kaweth 3-1:0.235: MTU: 0 [ 679.965211][ T5845] kaweth 3-1:0.235: Read MAC address 00:00:00:00:00:00 [ 680.410451][T11823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1633'. [ 680.616533][ T5845] kaweth 3-1:0.235: Error setting receive filter [ 680.634049][ T5845] kaweth 3-1:0.235: probe with driver kaweth failed with error -5 [ 680.676856][ T7530] udevd[7530]: failed to send result of seq 17207 to main daemon: Connection refused [ 680.682416][ T5845] usb 3-1: USB disconnect, device number 26 [ 680.917134][T11832] fuse: Unknown parameter '0x0000000000000007' [ 680.931857][ T5993] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 681.038991][T11834] [U] „ [ 681.787798][ T5993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.823794][ T5993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.867297][ T5993] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 681.919048][ T5993] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 681.968632][ T5993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.017077][ T5993] usb 5-1: config 0 descriptor?? [ 682.099723][T11841] trusted_key: syz.5.1639 sent an empty control message without MSG_MORE. [ 682.453731][ T5993] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 682.530905][T11858] tipc: Started in network mode [ 682.536675][T11858] tipc: Node identity ac1414aa, cluster identity 4711 [ 682.547853][T11858] tipc: Enabled bearer , priority 10 [ 682.611082][ T979] IPVS: starting estimator thread 0... [ 682.685605][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 682.825525][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 682.899497][T11864] [U] „ [ 682.965523][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 683.105508][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 683.126435][T11866] [U] „ [ 683.225758][T11859] IPVS: using max 27 ests per chain, 64800 per kthread [ 683.245513][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 683.385503][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 683.525590][ T5845] usb 5-1: USB disconnect, device number 31 [ 683.525782][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 683.667266][ T979] tipc: Node number set to 2886997162 [ 683.805518][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 683.878327][ T5993] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 684.075716][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 684.331478][ T5993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 684.346902][ T5993] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 684.365514][ T5993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.396125][ T5993] usb 3-1: config 0 descriptor?? [ 684.401898][T11879] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 684.520078][T11831] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 684.864070][T11907] [U] „ [ 685.114965][T11909] [U] „ [ 685.399528][ T5993] elan 0003:04F3:0755.0016: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 685.477597][T11831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.494512][T11831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.506053][T11831] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 685.515702][ T5845] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 685.527557][T11831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.547745][T11831] usb 6-1: config 0 descriptor?? [ 685.601096][ T5993] usb 3-1: USB disconnect, device number 27 [ 685.629643][T11916] sg_read: process 1070 (syz.0.1666) changed security contexts after opening file descriptor, this is not allowed. [ 685.685525][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 685.705579][ T5845] usb 5-1: Using ep0 maxpacket: 32 [ 685.726470][ T5845] usb 5-1: config index 0 descriptor too short (expected 95, got 59) [ 685.734626][ T5845] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 685.751621][ T5845] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 685.762638][ T5845] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 685.783319][ T5845] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 685.793075][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.797697][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.802741][ T5845] usb 5-1: Product: syz [ 685.837063][ T5845] usb 5-1: Manufacturer: syz [ 685.841912][ T5845] usb 5-1: SerialNumber: syz [ 686.041171][T11831] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 686.237586][T11831] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 686.252031][T11831] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0017/input/input22 [ 686.268994][T11901] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 686.277669][T11831] cm6533_jd 0003:0D8C:0022.0017: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 686.301864][T11831] usb 6-1: USB disconnect, device number 20 [ 686.312040][ T5845] usb 5-1: 0:2 : does not exist [ 686.334715][ T5845] usb 5-1: USB disconnect, device number 32 [ 686.384457][T11927] loop2: detected capacity change from 0 to 7 [ 686.395711][T11927] Dev loop2: unable to read RDB block 7 [ 686.437048][T11927] loop2: AHDI p1 p2 [ 686.441437][T11927] loop2: partition table partially beyond EOD, truncated [ 686.468248][T11927] loop2: p1 start 1702258030 is beyond EOD, truncated [ 687.284951][T11938] [U] „ [ 687.293452][T11943] [U] „ [ 687.765515][ C0] net_ratelimit: 1 callbacks suppressed [ 687.765536][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 687.807010][T11951] netlink: 'syz.2.1680': attribute type 10 has an invalid length. [ 688.642374][T11965] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 688.805488][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 688.852549][T11972] [U] „ [ 689.834545][T11992] [U] „ [ 689.845532][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 689.920189][ T6021] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 690.270927][ T6021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.334103][ T6021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.357816][ T6021] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 690.377788][ T6021] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 690.391355][ T6021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.403420][ T6021] usb 5-1: config 0 descriptor?? [ 690.829276][ T6021] plantronics 0003:047F:FFFF.0018: reserved main item tag 0xd [ 690.873130][ T6021] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 690.885495][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 691.029416][T12006] [U] „ [ 691.632867][ T5845] usb 5-1: USB disconnect, device number 33 [ 691.925541][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 692.235564][ T5913] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 692.525521][ T5913] usb 3-1: Using ep0 maxpacket: 32 [ 692.532744][ T5913] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 692.532771][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.535320][ T5913] usb 3-1: config 0 descriptor?? [ 692.548798][ T5913] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 692.628810][T12027] [U] „ [ 692.965575][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 693.289835][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 693.448748][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 693.459882][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 693.469880][ T10] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 693.475538][ T5845] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 693.480159][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 693.497708][ T10] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 693.506858][ T10] usb 6-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 693.515035][ T10] usb 6-1: Product: syz [ 693.519371][ T10] usb 6-1: Manufacturer: syz [ 693.524010][ T10] usb 6-1: SerialNumber: syz [ 693.532165][ T10] usb 6-1: config 0 descriptor?? [ 693.545732][ T6021] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 693.635794][ T5845] usb 2-1: Using ep0 maxpacket: 8 [ 693.642744][ T5845] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 693.652406][ T5845] usb 2-1: config 0 has no interface number 0 [ 693.659615][ T5845] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 693.670628][ T5845] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 693.682619][ T5845] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 693.694074][ T5845] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 693.707280][ T6021] usb 5-1: Using ep0 maxpacket: 16 [ 693.718115][ T6021] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 693.727414][ T6021] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.736918][ T6021] usb 5-1: Product: syz [ 693.741545][ T5845] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 693.751949][ T6021] usb 5-1: Manufacturer: syz [ 693.758389][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.760487][ T5913] gspca_vc032x: reg_w err -71 [ 693.766461][ T6021] usb 5-1: SerialNumber: syz [ 693.770210][ T6021] usb 5-1: config 0 descriptor?? [ 693.772815][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 693.779112][ T5845] usb 2-1: Product: syz [ 693.781120][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 693.786324][ T5845] usb 2-1: Manufacturer: syz [ 693.791168][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 693.802134][ T5845] usb 2-1: SerialNumber: syz [ 693.806689][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 693.814276][ T5845] usb 2-1: config 0 descriptor?? [ 693.817089][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 693.832696][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 693.838575][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 693.844089][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 693.849882][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 693.855238][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 693.860889][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 693.866381][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 693.871956][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 693.878062][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 693.883523][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 693.888965][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 693.894330][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 693.899755][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 693.905116][ T5913] gspca_vc032x: Unknown sensor... [ 693.910357][ T5913] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 693.922099][ T5913] usb 3-1: USB disconnect, device number 28 [ 693.950056][ T10] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 694.005534][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 694.043000][ T5845] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 694.204717][ T6021] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 694.214999][ T6021] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 694.227620][ T6021] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 694.236481][ T6021] usb 5-1: media controller created [ 694.263817][ T6021] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 694.273857][ T5913] usb 2-1: USB disconnect, device number 25 [ 694.358879][ T10] gs_usb 6-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 694.372881][ T10] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -22 [ 694.589038][ T5913] usb 6-1: USB disconnect, device number 21 [ 694.835871][T12032] dtv5100: wlen = 0, aborting. [ 694.840755][ T6021] zl10353_read_register: readreg error (reg=127, ret==0) [ 694.875540][ T6021] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 694.883908][ T6021] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 694.907199][ T6021] usb 5-1: USB disconnect, device number 34 [ 694.940063][ T6021] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 695.164523][T12041] use of bytesused == 0 is deprecated and will be removed in the future, [ 695.173971][T12041] use the actual size instead. [ 695.285786][ T5913] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 695.457399][ T5913] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 695.468658][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.479879][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.491336][ T5913] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 695.505574][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 695.514094][ T5913] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 695.523884][ T5913] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 695.538160][ T5913] usb 2-1: Manufacturer: syz [ 695.545540][ T979] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 695.553631][ T5913] usb 2-1: config 0 descriptor?? [ 695.666257][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 695.678261][ T10] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 695.690468][ T10] usb 6-1: config 0 has no interface number 0 [ 695.697721][ T10] usb 6-1: config 0 interface 184 has no altsetting 0 [ 695.705744][ T979] usb 3-1: Using ep0 maxpacket: 32 [ 695.713782][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 695.727722][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.736091][ T979] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 695.744493][ T979] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 695.753775][ T10] usb 6-1: Product: syz [ 695.758290][ T10] usb 6-1: Manufacturer: syz [ 695.762997][ T10] usb 6-1: SerialNumber: syz [ 695.772245][ T979] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 695.794937][ T10] usb 6-1: config 0 descriptor?? [ 695.805543][ T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 695.818157][ T10] smsc75xx v1.0.0 [ 695.835808][ T979] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 695.849034][ T979] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 695.862721][ T979] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 695.896300][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.928353][ T979] usb 3-1: config 0 descriptor?? [ 695.944715][T12058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 696.041011][T12059] [U] „ [ 696.085662][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 696.233825][ T5913] appleir 0003:05AC:8243.0019: unknown main item tag 0x0 [ 696.484817][ T979] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 696.500410][ T5913] appleir 0003:05AC:8243.0019: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 696.534333][ T5913] usb 2-1: USB disconnect, device number 26 [ 696.699734][ T6021] usb 3-1: USB disconnect, device number 29 [ 696.723603][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 696.725681][ T6021] usblp1: removed [ 696.748437][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 696.960531][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 696.993800][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 697.013563][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 697.024873][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 697.038384][ T10] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 697.050031][ T10] usb 6-1: USB disconnect, device number 22 [ 697.125725][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 697.586795][T12080] fuse: Unknown parameter 'fd0x0000000000000007' [ 698.165493][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 698.684806][T12093] [U] „ [ 699.205497][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 699.375547][ T6021] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 699.530050][ T6021] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.542171][ T6021] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 699.576433][ T6021] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 699.604857][ T6021] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.659791][ T6021] usb 2-1: config 0 descriptor?? [ 699.668824][ T6021] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 699.675630][ T6021] dvb-usb: bulk message failed: -22 (3/0) [ 699.685842][ T6021] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 699.695545][ T6021] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 699.702730][ T6021] usb 2-1: media controller created [ 699.731194][ T6021] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 699.768360][ T6021] dvb-usb: bulk message failed: -22 (6/0) [ 699.781375][ T6021] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 699.794438][ T6021] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input25 [ 699.813673][ T6021] dvb-usb: schedule remote query interval to 150 msecs. [ 699.820989][ T6021] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 699.945499][T12116] syzkaller1: entered promiscuous mode [ 699.951312][T12116] syzkaller1: entered allmulticast mode [ 700.030836][T12117] fuse: Unknown parameter 'fd0x0000000000000007' [ 700.061324][ T10] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 700.245475][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 700.288764][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.343363][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 700.446006][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 700.540962][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 700.663707][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 700.683081][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 700.695513][ T10] usb 3-1: Manufacturer: syz [ 700.736528][ T10] usb 3-1: config 0 descriptor?? [ 700.748068][ T6021] dvb-usb: bulk message failed: -22 (1/0) [ 700.753848][ T6021] dvb-usb: error while querying for an remote control event. [ 700.927310][ T6021] dvb-usb: bulk message failed: -22 (1/0) [ 700.938819][T12122] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1746'. [ 700.947822][ T6021] dvb-usb: error while querying for an remote control event. [ 701.105738][ T6021] dvb-usb: bulk message failed: -22 (1/0) [ 701.146968][ T6021] dvb-usb: error while querying for an remote control event. [ 701.285483][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 701.378710][ T6021] dvb-usb: bulk message failed: -22 (1/0) [ 701.398649][ T6021] dvb-usb: error while querying for an remote control event. [ 701.431628][ T979] usb 2-1: USB disconnect, device number 27 [ 701.465486][ T10] rc_core: IR keymap rc-hauppauge not found [ 701.471433][ T10] Registered IR keymap rc-empty [ 701.483535][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 701.502493][ T979] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 701.529386][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 701.567367][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 701.602207][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input26 [ 701.685872][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 701.788974][T12134] [U] „ [ 702.086333][T12135] fuse: Bad value for 'group_id' [ 702.179797][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 702.272628][T12135] fuse: Bad value for 'group_id' [ 702.289557][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 702.325484][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 702.348314][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 702.396692][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 702.438923][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 702.485628][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 702.525707][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 702.565585][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 702.606237][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 702.606368][T12140] [ 702.615724][T12140] ====================================================== [ 702.622764][T12140] WARNING: possible circular locking dependency detected [ 702.629813][T12140] 6.16.0-syzkaller #0 Not tainted [ 702.634845][T12140] ------------------------------------------------------ [ 702.641872][T12140] syz.5.1750/12140 is trying to acquire lock: [ 702.647954][T12140] ffff8880258e3188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 702.658972][T12140] [ 702.658972][T12140] but task is already holding lock: [ 702.666345][T12140] ffff8880258e3230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 702.666492][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 702.675247][T12140] [ 702.675247][T12140] which lock already depends on the new lock. [ 702.675247][T12140] [ 702.692796][T12140] [ 702.692796][T12140] the existing dependency chain (in reverse order) is: [ 702.701822][T12140] [ 702.701822][T12140] -> #2 (&nbd->config_lock){+.+.}-{4:4}: [ 702.709664][T12140] lock_acquire+0x120/0x360 [ 702.714693][T12140] __mutex_lock+0x182/0xe80 [ 702.719751][T12140] refcount_dec_and_mutex_lock+0x30/0xa0 [ 702.725920][T12140] nbd_config_put+0x2c/0x790 [ 702.731042][T12140] nbd_release+0xfe/0x140 [ 702.735910][T12140] bdev_release+0x533/0x650 [ 702.740939][T12140] blkdev_release+0x15/0x20 [ 702.745976][T12140] __fput+0x449/0xa70 [ 702.750486][T12140] fput_close_sync+0x119/0x200 [ 702.755781][T12140] __x64_sys_close+0x7f/0x110 [ 702.760985][T12140] do_syscall_64+0xfa/0x3b0 [ 702.766034][T12140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.772457][T12140] [ 702.772457][T12140] -> #1 (&disk->open_mutex){+.+.}-{4:4}: [ 702.780286][T12140] lock_acquire+0x120/0x360 [ 702.785321][T12140] __mutex_lock+0x182/0xe80 [ 702.790353][T12140] __del_gendisk+0x129/0x9e0 [ 702.795473][T12140] del_gendisk+0xe8/0x160 [ 702.800338][T12140] loop_remove+0x42/0xc0 [ 702.805118][T12140] loop_control_ioctl+0x4ac/0x5a0 [ 702.810676][T12140] __se_sys_ioctl+0xfc/0x170 [ 702.815807][T12140] do_syscall_64+0xfa/0x3b0 [ 702.820847][T12140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.827275][T12140] [ 702.827275][T12140] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 702.835721][T12140] validate_chain+0xb9b/0x2140 [ 702.841023][T12140] __lock_acquire+0xab9/0xd20 [ 702.846230][T12140] lock_acquire+0x120/0x360 [ 702.851260][T12140] down_write+0x96/0x1f0 [ 702.856042][T12140] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 702.862312][T12140] nbd_start_device+0x16c/0xac0 [ 702.867704][T12140] nbd_ioctl+0x636/0xeb0 [ 702.872482][T12140] blkdev_ioctl+0x5a8/0x6d0 [ 702.877520][T12140] __se_sys_ioctl+0xfc/0x170 [ 702.882652][T12140] do_syscall_64+0xfa/0x3b0 [ 702.887696][T12140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.894122][T12140] [ 702.894122][T12140] other info that might help us debug this: [ 702.894122][T12140] [ 702.904445][T12140] Chain exists of: [ 702.904445][T12140] &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock [ 702.904445][T12140] [ 702.918639][T12140] Possible unsafe locking scenario: [ 702.918639][T12140] [ 702.926104][T12140] CPU0 CPU1 [ 702.931482][T12140] ---- ---- [ 702.936851][T12140] lock(&nbd->config_lock); [ 702.941459][T12140] lock(&disk->open_mutex); [ 702.948587][T12140] lock(&nbd->config_lock); [ 702.955804][T12140] lock(&set->update_nr_hwq_lock); [ 702.961013][T12140] [ 702.961013][T12140] *** DEADLOCK *** [ 702.961013][T12140] [ 702.969161][T12140] 1 lock held by syz.5.1750/12140: [ 702.974265][T12140] #0: ffff8880258e3230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 702.983588][T12140] [ 702.983588][T12140] stack backtrace: [ 702.989499][T12140] CPU: 1 UID: 0 PID: 12140 Comm: syz.5.1750 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 702.989518][T12140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 702.989532][T12140] Call Trace: [ 702.989541][T12140] [ 702.989549][T12140] dump_stack_lvl+0x189/0x250 [ 702.989581][T12140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 702.989597][T12140] ? __pfx__printk+0x10/0x10 [ 702.989617][T12140] ? print_lock_name+0xde/0x100 [ 702.989637][T12140] print_circular_bug+0x2ee/0x310 [ 702.989657][T12140] check_noncircular+0x134/0x160 [ 702.989677][T12140] validate_chain+0xb9b/0x2140 [ 702.989694][T12140] ? trace_sched_exit_tp+0x38/0x120 [ 702.989716][T12140] ? __schedule+0x16c8/0x4c90 [ 702.989737][T12140] __lock_acquire+0xab9/0xd20 [ 702.989753][T12140] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 702.989774][T12140] lock_acquire+0x120/0x360 [ 702.989787][T12140] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 702.989809][T12140] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 702.989836][T12140] down_write+0x96/0x1f0 [ 702.989854][T12140] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 702.989874][T12140] ? __pfx_down_write+0x10/0x10 [ 702.989891][T12140] ? rcu_is_watching+0x15/0xb0 [ 702.989908][T12140] ? __mutex_lock+0xa6d/0xe80 [ 702.989925][T12140] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 702.989947][T12140] ? nbd_ioctl+0x131/0xeb0 [ 702.989967][T12140] ? __pfx___mutex_lock+0x10/0x10 [ 702.989986][T12140] nbd_start_device+0x16c/0xac0 [ 702.990005][T12140] ? security_capable+0x7e/0x2e0 [ 702.990027][T12140] nbd_ioctl+0x636/0xeb0 [ 702.990055][T12140] ? __pfx_nbd_ioctl+0x10/0x10 [ 702.990073][T12140] ? __asan_memset+0x22/0x50 [ 702.990094][T12140] ? smack_file_ioctl+0x24a/0x340 [ 702.990108][T12140] ? __pfx_smack_file_ioctl+0x10/0x10 [ 702.990123][T12140] ? __pfx_nbd_ioctl+0x10/0x10 [ 702.990143][T12140] blkdev_ioctl+0x5a8/0x6d0 [ 702.990161][T12140] ? __pfx_blkdev_ioctl+0x10/0x10 [ 702.990177][T12140] ? __fget_files+0x2a/0x420 [ 702.990198][T12140] ? bpf_lsm_file_ioctl+0x9/0x20 [ 702.990216][T12140] ? __pfx_blkdev_ioctl+0x10/0x10 [ 702.990233][T12140] __se_sys_ioctl+0xfc/0x170 [ 702.990273][T12140] do_syscall_64+0xfa/0x3b0 [ 702.990292][T12140] ? lockdep_hardirqs_on+0x9c/0x150 [ 702.990310][T12140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.990327][T12140] ? clear_bhb_loop+0x60/0xb0 [ 702.990347][T12140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.990364][T12140] RIP: 0033:0x7f699558ebe9 [ 702.990384][T12140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.990401][T12140] RSP: 002b:00007f699639e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 702.990419][T12140] RAX: ffffffffffffffda RBX: 00007f69957b6090 RCX: 00007f699558ebe9 [ 702.990432][T12140] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 702.990443][T12140] RBP: 00007f6995611e19 R08: 0000000000000000 R09: 0000000000000000 [ 702.990454][T12140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 702.990464][T12140] R13: 00007f69957b6128 R14: 00007f69957b6090 R15: 00007fff4122c1d8 [ 702.990484][T12140] [ 702.990505][ C1] vkms_vblank_simulate: vblank timer overrun [ 702.992298][ T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 703.333342][ T5849] block nbd5: Receive control failed (result -32) [ 703.341713][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 703.349250][T12139] block nbd5: shutting down sockets [ 703.361083][ T10] usb 3-1: USB disconnect, device number 30 [ 703.367156][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 704.405494][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 706.485530][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 707.525555][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 708.565494][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 709.605498][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 710.645559][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 711.685528][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available