last executing test programs: 5m18.078187428s ago: executing program 2 (id=625): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m17.056326531s ago: executing program 2 (id=627): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x1, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000000), 0x0) writev(r1, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getpid() openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r3, 0x3) accept4(r3, 0x0, 0x0, 0x0) 5m15.55560775s ago: executing program 2 (id=632): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000ff7000/0x8000)=nil, 0x8000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x672, 0x200) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006800)={0x2020}, 0x2020) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) 5m12.150430482s ago: executing program 2 (id=634): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './cgroup\x00'}) 5m3.356599917s ago: executing program 2 (id=651): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x2400c815) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8001) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xdaf}}, './file0\x00'}) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) shmdt(0x0) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200000) 4m56.376717688s ago: executing program 2 (id=661): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './cgroup\x00'}) 4m39.674882684s ago: executing program 32 (id=661): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './cgroup\x00'}) 2m48.571532212s ago: executing program 1 (id=888): ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x108) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, r4, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x28) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m39.830888079s ago: executing program 1 (id=901): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 2m33.984162735s ago: executing program 1 (id=907): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x2400c815) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8001) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xdaf}}, './file0\x00'}) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) shmdt(0x0) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200000) 2m31.261166186s ago: executing program 1 (id=910): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 2m29.29156613s ago: executing program 1 (id=914): r0 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r7, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x3, 0x0, 0x20}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x20883, 0x0) 2m28.079610714s ago: executing program 1 (id=916): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) timer_create(0x1, &(0x7f0000000e00)={0x0, 0xb, 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES8=r4, @ANYRES64=r3, @ANYRES64=r6, @ANYRES16, @ANYRES8=r5, @ANYRES64=r7, @ANYRESDEC=r4, @ANYRES8=r1, @ANYBLOB="034731482e6bbaf33ceec0e42b1ec20a2f8975482c", @ANYRES16=r5], 0x50) openat$snapshot(0xffffffffffffff9c, &(0x7f00000035c0), 0x168003, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 2m12.931719446s ago: executing program 33 (id=916): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) timer_create(0x1, &(0x7f0000000e00)={0x0, 0xb, 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES8=r4, @ANYRES64=r3, @ANYRES64=r6, @ANYRES16, @ANYRES8=r5, @ANYRES64=r7, @ANYRESDEC=r4, @ANYRES8=r1, @ANYBLOB="034731482e6bbaf33ceec0e42b1ec20a2f8975482c", @ANYRES16=r5], 0x50) openat$snapshot(0xffffffffffffff9c, &(0x7f00000035c0), 0x168003, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 19.885726435s ago: executing program 5 (id=1108): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004ea", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_disconnect(r0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x404, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0xffffffff80000100, 0x6, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x800) 19.842893823s ago: executing program 4 (id=1109): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x6, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7d, 0x0, &(0x7f0000000080)) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) socket$kcm(0xa, 0x5, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e0) 19.452023032s ago: executing program 3 (id=1110): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'sit0\x00', 0x0}) r6 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000140)) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x21, r5}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) getsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000001b80), &(0x7f0000001bc0)=0x4) 17.8606206s ago: executing program 3 (id=1111): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2400c815) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x8001) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xdaf}}, './file0\x00'}) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) shmdt(0x0) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) 17.048442331s ago: executing program 5 (id=1112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x0) futex(0x0, 0xd, 0x1, &(0x7f0000000880)={0x77359400}, 0x0, 0x2) 15.983868832s ago: executing program 6 (id=1113): r0 = socket$inet6(0xa, 0x3, 0x5) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x4000) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0x100000001) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000180)=0x5) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000200)={[0xf000, 0x0, 0xf000, 0xeeef0000], 0x6, 0x4, 0x1000}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r4, 0x5, 0x3, 0x0, 0x1, [0x0], [0x4, 0x7, 0x7b], [0x7, 0x80000002, 0x2, 0x7], [0x0, 0x0, 0x1, 0xfff]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) close_range(r1, 0xffffffffffffffff, 0x0) 15.900421198s ago: executing program 0 (id=1114): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x3, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdir(0x0, 0x0) 14.782099241s ago: executing program 6 (id=1115): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.690029228s ago: executing program 0 (id=1116): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) 14.616238644s ago: executing program 4 (id=1117): r0 = socket$inet6(0xa, 0x3, 0x5) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x4000) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000180)=0x5) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000200)={[0xf000, 0x0, 0xf000, 0xeeef0000], 0x6, 0x4, 0x1000}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r4, 0x5, 0x3, 0x0, 0x1, [0x0], [0x4, 0x7, 0x7b], [0x7, 0x80000002, 0x2, 0x7], [0x0, 0x0, 0x1, 0xfff]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) close_range(r1, 0xffffffffffffffff, 0x0) 14.101268838s ago: executing program 6 (id=1118): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001400)=[{{&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000300)="2db84f3f3857c154324c12f5d253e98b44fa7f573bbf34544c028ae57b35f357a7b79eff615e183ee1d0180be62cb2804d6aa933ed182602c382230bf1c59a8306610713be71348078386cac9e5bd989dbeabf755ed344c64619c447b200b6bdee0d83e24268005c9f4aa7", 0x6b}, {&(0x7f0000000380)="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", 0xef9}], 0x3, 0x0, 0x50}}], 0x1, 0x4000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000001440)=""/100) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, 0x0, 0x0) close(r3) 13.596286813s ago: executing program 4 (id=1119): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x6, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7d, 0x0, &(0x7f0000000080)) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r2, 0x3b8b, 0x0) socket$kcm(0xa, 0x5, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e0) 12.422013713s ago: executing program 0 (id=1120): ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={0x5e38b282e414372c, @default, @bpq0, 0x4, 'syz0\x00', @bcast, 0x5, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) socket$inet(0x2, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, &(0x7f0000000140)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001", @ANYRES32], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 10.838304203s ago: executing program 6 (id=1121): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) timer_create(0x1, &(0x7f0000000e00)={0x0, 0xb, 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r7, &(0x7f0000000000)="14000000140005b7ffccca38b900f000010860eb", 0x14) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES8=r4, @ANYRES64=r3, @ANYRES64=r6, @ANYRES16, @ANYRES8=r5, @ANYRES64=r8, @ANYRESDEC=r4, @ANYRES8=r1, @ANYBLOB="034731482e6bbaf33ceec0e42b1ec20a2f8975482c", @ANYRES16=r5], 0x50) openat$snapshot(0xffffffffffffff9c, &(0x7f00000035c0), 0x168003, 0x0) 10.745511449s ago: executing program 5 (id=1122): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="78d8f92dbf64605cdd118f48e23e98c60b7983beb3470e13d6338b8e1a1ea1772acf", 0x22}, {&(0x7f0000000080)="e14375812493b65c2cad3ff10481890666d248ff8de5efc72ff8a889f410bf2d1cfe7fbcc29d8f00562ade8a67c72c62c75b7ad335433396c4a0426291511a71a555255111756d1efcc23af35c5bf5d07a514f298928a735c26be2e53e0fff4ee7b3ffbff554b6077cf87d9e11f3c32b9af89abef7d65ea80e787a55018b2e45db7a5fec803c7c0da148d37e95e8be15f7fd1cffeb7a897f1896b96b286b56a52c34ebc1631b116f88bc7dc2c97a577284031c913339227f53553945bf818031e4200d5328d1e92a16869713ffdef988acbff08f5e20032d42677fac", 0xdc}, {&(0x7f0000000180)="ae352ad209582c3ace556142a1327be3b135502feb930bde", 0x18}, {&(0x7f0000000200)="5ee18776dff5442ac20ae821cab7d227f6dfe3ed2d342b5a0da2be4451ad98ecefa0c55a2e4d16079634b4e22fd0afb785becaa7f11ac89dfd09ce9fb78deb1b1817dc56969feb31bf105aad559cf4874dfdf97d18bb7604a817da44c90e1ed930f33efee3984ad2f52e8e3237d76bf98d38795b39", 0x75}, {&(0x7f0000000540)="95d13135e218eabf70ac850a7e6dd6a25f634b76def4fef822c10a47fbfaa5bde00365452f79ba250e3bfd3df858a8e92d9e3535168dbf6cac790e4d1fa9ef65299355d0c75799e75c90fec701ad8f89c3b115d17beb8e6e67", 0x59}], 0x5, 0x0, 0x0, 0x80}, 0x4004080) 10.737394701s ago: executing program 3 (id=1123): ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(r0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a}) 9.208077805s ago: executing program 3 (id=1124): getpid() socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000000) r0 = socket(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000300)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004340)=""/102376, 0x18fe8) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0xfeffffff, r0, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) 8.682050958s ago: executing program 5 (id=1125): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r1, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000300)='dn\f\x03\xba\x7f\x98\xffqry*G;\xc7,\xcf\x7f\x81\x9c\xdeE:cb2e\x18,\x16\x17^\xfe\xc6,\tq\x88\x861{(6\x00\x95\x88\x1c|\xd9!\xc2|\xbc<~\x02\x99\xc2\xaf\x99{\x1e\x96`k\x7f\xe1\x9b\x8b\xa9.\f\x14z\x8a\xd9e\xd3H9K\x0eF\xff\xdb%\xfd\x1d\x84\xce\x12\x9dz\x18fF\x1f\'U\xbb|\xeb2\xda\xac\x91\xeb\xd9\x9a\x11\x12\xc3\xec\xbb_\xe8\x16\xe9\xb5\x00\xa6\x98\xbbY_\xcb\xac\xae\xb6\xa9\x87\"$MQ#\xbb\xe3\x1b\xf0\x9b\xef\x01\x10\xb4\xa2\xd0wf\xf8+n\x17]\x03E\x83\xc3Y\x88\xbe\x9a\t]\xca\xf9:w7\nY\xa3\x8as\x9f\xd2W_{\xed\xcf-\xff\xd7d,\xd1\x1fU\xc3\x0f\x9c\xda\b#\xb2]\xb7\xe5\x97\xf2 \xb3\xc7r~!\xa4\xabs:\xffU\tj`\xca[\x8a\x8f\t*\xf1\xdeD\xb8p\xf4\xf0\xa7\x9c\xbd?)\xd2\f\x8d\xb26\v%\xb8\xc2\xacp\xe6x7\xd6\x17\xa4$I\xc4\xfcwIHQ\xe0\xa3<=\x94\x91\xd5b\x01bT\x06\xa7\x16\xd3\xd3\xcb\\\x15\xdc\xd34\r\xa8\x11\xc42h\x1fA|\xe1\x80\xe6]\xca\x87\x93\xab\xe4\xcd\xebe\xe0\xb2Y\x16\x12\\\xe2\xa2\xd2\xdd\xfd\tGu\xbasA\x9c\xc7\x14@\xec\xe1sB\x88\xaeZ9\xc1\xfb\x1bH\xc0\x16\xc2#\xc5:\x87\xf3Z2z;W/\xcc9\xd1\xe4V\xb1') add_key$keyring(0x0, 0x0, 0x0, 0x0, r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd0002800800"], 0xe4}}, 0x20050840) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) request_key(0x0, 0x0, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) 7.002971802s ago: executing program 5 (id=1126): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) getsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, 0x0) 6.174822256s ago: executing program 4 (id=1127): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001400)=[{{&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000300)="2db84f3f3857c154324c12f5d253e98b44fa7f573bbf34544c028ae57b35f357a7b79eff615e183ee1d0180be62cb2804d6aa933ed182602c382230bf1c59a8306610713be71348078386cac9e5bd989dbeabf755ed344c64619c447b200b6bdee0d83e24268005c9f4aa7", 0x6b}, {&(0x7f0000000380)="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", 0xef9}], 0x3, 0x0, 0x50}}], 0x1, 0x4000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000001440)=""/100) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, 0x0, 0x0) close(r3) 4.482259805s ago: executing program 4 (id=1128): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.31015753s ago: executing program 3 (id=1129): ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000080)={0x6, 0x7, 0x3}) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0x7, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f0000000180)=""/110, &(0x7f00000002c0)=0x6e) 4.260271163s ago: executing program 0 (id=1130): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f0000002580)={0x1e0, 0x0, r2, [{0x1400000000000007, 0x1000000, 0x1b7, 0x0, '\x7f\xb4\xe4\xa3\xe8$I\x88\x8c\n}\xac\xa9\x0e\x92\x04\xbc\xd4\xba\xdb\xc6\xf9K\x0eS\x00\xbdu\xb9;\xcd\xeb\x1aL\xec?\x7f\\N\xe1E\x89\xc9f\xd1\x8ax\xf3\x81\x04KJ\v\xe9\x19H+\xdf\xe3\xdb\xa42Lh\xb8\xe4nL\xfe1\xd5`\x86Cc\xdd\xf2n\x0e\xa7\xf5\x86\x03\xee\xec8\xad\x06\xa8\xd70\xba\xa9\xae(\xc0\x063\xd5\xb6i\xeb\xae\xe2>f\xa1\xc7\xe8_\xd9\xae,\x8d\xb0\x01\xf0<\xd6_e\xa4F\x10\xc0\xc6\x10=\x17\x16\x1a\xd9\x8b\xafq\x1e_\xee \xbb\x92\x9f\x89\n\x1b\xaf\xa2DDi\xe4\x9begcv\xa1\xe4E\x8fs\x8e\xc6[.\x98\x0f;\xc3H5\xfb\x0e\xe8\xb2<>\r\xeb\x9b\f\xf6\x15\xf2\xc0&L\xec;\xca\xc0\xa3\xb6\x84\xc7h\x9c\x9d\xfdUY-o3\xce\x00\x003\x90\xdc\x9f\x95,\xb2\xa5\r\xcc\x98\xf5\x00\x00\x00\x00\x00\x00\x00\x00J\xf4\xa9\xd02S\fZ\xfb\xfc !e\x0e/\xeb\xc5\xfa\xe3\xf5\x9e\x91\xadJ\xbd+-n\xb4\xb8a4\xbc\xdf\x1d\xd8\xc1D\xff|G$\xf6\r\xf3\xad5O~\xa9q\t\xb4\x83\n\x06f\xf0\xb3\xa6\x04\xa7\xec\xfdz\xf3\xdaX\xc1SA\xe4x\xa1\xd9j\xaa\xbdT\xbe\xc7\x94\xa8\xe5w\x97\x11\b\f\xfc\xe6\x9ax\x11\x03R\x81\xc9\x90\x1fQ\xf7\xae(h\xd2\x8fj\tp\xf8VdY0\xa8\xc6|M?2J\x03\xff\xfaI\x9av\xf6^\x01R\xce@\xb4\xe5\b\x00!To\xdb}\xdd\x9d&|L+U\xb2\x10\xaeo\xe6\xf5\xcf\xb2\xb1\x10\x84\xd0\"\x96\xa8FstV\xb5:\xd7\x8cE\x95\x0e\fgJ\xba\xee\x17\x8b\xc2\xc1<@c\xc1\a\x17\b\x94\xb2\x06\xfb\x8e4\x0f\xcaT\xe1M\x98\x06M|\xa9\xb7\x9a\x82\xf4'}]}, 0x1e0) 4.125670843s ago: executing program 6 (id=1131): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) name_to_handle_at(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x6, 0x100, 0xc, 0x6d71d0c1}, {0x33e, 0xb86, 0x800, 0x80}}}, &(0x7f0000000240), 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f005, 0x2}) 2.848466129s ago: executing program 3 (id=1132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x0) futex(0x0, 0xd, 0x1, &(0x7f0000000880)={0x77359400}, 0x0, 0x2) 2.707304406s ago: executing program 0 (id=1133): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001400)=[{{&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000300)="2db84f3f3857c154324c12f5d253e98b44fa7f573bbf34544c028ae57b35f357a7b79eff615e183ee1d0180be62cb2804d6aa933ed182602c382230bf1c59a8306610713be71348078386cac9e5bd989dbeabf755ed344c64619c447b200b6bdee0d83e24268005c9f4aa7", 0x6b}, {&(0x7f0000000380)="2624d2d7574c4871cb3274f1b4d1cba3c40b5a50ba94944c4728484df1fff9279c4a376ddaf8340fa68f14a0bce171cd866bf5ea13def12a58637a7ed14eaaf3a634399ad77340547d8e02d248867851380b855ae5067b246e83a215dd843139dcb91798489217bc8a425a85d96ab04b3301ef73d22887c845913f9fd84352e60927aa9ef50408d7ff5258bcaa82836f7dd93a00cc6317d74246d56fc8edf925ba5576932f8aa8d5685f83bc59855362f606667dc1b8f758cd7c021e0062d4027562f0accbfc2d17cd6137a711632a15c9fa6c5c3507533f0b7651cc13ca08cf211e6d24e7281ee2e72285f5326fe857d3279336759b82dbeaf0fdb3964d86bfbee90e677fab17e3f5a5cf84573c65a386542ddbaf4b9e3779fb6f39670b80ec879b7d93e04c22246754bb77407f408c2e6631bed102fa7360e294c6b2ae8dc51e593ac54ddf376fea1c4fd79dd1ef2dc749c3748072c9f41ae8507f9841a7a36b359a064dc6addda9e65212c651488a2fb6b620061cbdc731e28fa59569a2056d31403a09bf5bc29326a9861e1c37f714a4c4654324182394f2e482d1c46a23d5bf17aa66c9f0e2f563aac370ec662a6add374a304d5efb73bfa487cecbf836bf5d97873279c0976fc6cf942b24af9d96619ce07b034b1e0f1d5bf0276405b3c49193a20da017b1c518410993bc6b503a4ed7bc632080df36196e98eb04c3d1e31821138eb15bb73036f387991183791766a0ad66e0093022d775e7903d691723d3bfd60e9d63c5393c7d934559d11a708efd85a69ebd57a4e08d2723dfda19150951f13430d63e39a6fc590e65af44820c67bda78f4737cb8a66f75beabf155199201bc0c9e395278fd9055163e56cafc685559ae212f506f1344412c079e5d4662390193b2c635646824b8607372871621c5319fae9b4250da47ad4c910dd2c4d3f9bd9837995b196c52d094915a32e5a1afcb1e2ee5e6597798847a12643e481767fdd470ae83ece457ef27f162c38afd06ab0b9410528af66a7d77e0bb8c4410091e584db4a7068da0672abd3828dff925f0625785af79a870af78de226a5b0e106470bf6e93ebad6c81d3e66bad74a95e3cb850928343255f3ea6d13f8dc07126baa94f8d691597e864bba5232128f2ff4de62dc6e3b8a09915d4e28f239ddb2e5adc581a4792ad5bf970b37ae40a940c68cb70bc02e365992a695256e2d9074e668bf723cdd9b0ebd34c18d456a7e75d0665f005d9097c94110d2506c082c5965a2bd067a4ac16875c3524ca84b0625f59213af8c45eb0d35f914cc5582ab2869335069d4d075e4414cc3f6d727efc1bf0ea278937d02165d6eb1ed81d8c96068c35fc09745b7a93fda8f2c55f99aa27c9c9a0f3ccacd74dae89484845e78eada290b7bd42bd23685c40f751f5c89a743b6fda76f3d55ebabcbddcea942a4aaf929f6076dbda25df8f75eb74d03dcfb1154a50769a8e341a494167526186fd1c75c8b1c79ef03c68018990baa5a79e88e6ff5b208f4ed49a6eb506d17c4a6323d95f513a1877d949d4ec99e6341119916052ea4b7bee8c2c0c45bdc1ac662bccf77e76e3bf721bef2a4290e3cd4cd3edbc672f0951452839efa9dd9b1192954846dca2539990e2a0f9ae2edc0fb05b100046015ab5ad7e98c549e6b62b19cf75a256851e83342441c9aa9584e62e968d0f87a87355e366c402c0cd94771480a8289f1389f23570868c0531d9c485e1ffb4ad554c6897afbbcff537501bc1c2abbb8c8fd66834d18fae11fbdf5e77acc03d513bfa1e2d04d0a4fd4eda26c9b2480c72f9259060282f5f5e180fd035ca15cdc17546d04362aa49a1da19cce7a5cd9595f8d4538ed613323ab43add5e8d981819e91452956ab9efe2352d0eb5a0bce124a402370cef4bc51bed3fb16570638630d4f0a3b0e888c2a31ef44142217e021fb17e37294b1e0ff2b15b4645c4588548110a26e4c15a860b722eb44e739e870bf4981ee92d9ce594dd0eb41491e32e64a3860c4a3a0885dc3d4279dadeb5fc585058fd62f9780978b4dac0bf26384113028801f8dd4ebb1bf1786dfd6d0d1906bb764d06df4a101b95143c5e71871e2894fc936ec98183a11c025c9a1c3c1b851509f88f2efbf0e4cfbc007e211bdce675443519082120fae7540a10fe4ff533fe78f17c71199cd45ac14912e5b32233fc3105c1c5ff0a6e26358c664c464bb9daf9a24ae750434c6739a3671f7f973689b5812acc84ac8a82fa126bfc3028dfd72bc175fdb6fae7443af59929ec1cbb9b97e785c7ac0992067159fc0502f2f6b7b0cad98067feae27ef32110346c862965c0c6b33945f674512d233624a21371faffa534cc2e426b627c652c75a9de22c73d6f3838c41ec66495927387b428faecbfde5840ee52fc27153837c3f08d6a3dc47799f05bdc73a6140ec7c2da6b7f6c20a2de807814c0fbeb541db197448000cbb7540bee3eda6a6b6d1a6b863b07c3e8d761fb33fb28d1bb2b7aa2c821cdfdaa76717e445d79aead5dff3c37262050878596ad1dbb67fcd72a0ae0dc7ada7446c684073da5a68d1d5d9cb1e4245cdee66764852044c37fabb6e6600f3a10633814206a7558a9c730b7612cafc171ce1ea52ba6aa69859d171cf3c398154d9e558c64692a449b16af4b7e1365f05e13bf80fb516fa11a1e6b72411c2d4784d87f42d73da09d8c7e4d6d7ee98dcb146f9dae28e75cf039222716fdb8a540a5b6235551d3cb52943b4dd770fa88f31f46380c63f58a83f2c27bec98aceac1770527ce66e46a1f41413b384f18e5eca54daf592979f086f2280b70544f165c7b22da6cb887e03037ac40d38e0621568d01ef5d9022643c0fc6abb48b4d51d17468878b77ea59f6d04f6f6916d9684d275cd4da0ef215cfaa25b99fc1834d674fa170155a815fddd2eedbaefadc7048323f45b3ba2509f7f7ea5205760d936e732515d3ff7cc03104e8484d7aa718618aafeb2b03df78c1536acf13c91ffb1716b520af283db658dfc63f2700f316d7fdddb51c9efe3770f0b0a8dea6b037a4b46f6fdce0ecf7520472e5d037a5d8caf71efd2eb8dc71661127b5be64775df6676c81497672b00420db49e7daff45a2b362ce8231c08140954395e07531c641ac9dbf9486238fabeb07623c3dc7dc553d83b2c0d5e6cf4d9d35624b6cbc9e0f52651463926e7065d8204b4194f66388567bc80f39e7ca4c92b3116c4837e5441dcb71279655412ba0a4581f3b3f754cbd3446e0cc663c551ee587a62d0767d28aebd46dcb6ace8976be3481619cefcdd46f444e95d3961fd9be42f9609120f049fdf799bfa963e46262576d70fd489a315cfc77ce3278e803c014c3ef42c9e65f35265da9483df27000c8ce4f00451c679e3ab75d46f81d54b7f04907dd6df14c43a33a24dca3defd0e0d448f8bd593839ad6d3610130bbd1b029cb3047e0e92d2f331d992e341a2e42df17ea1438cec58612adf021dc36a237f73caa7215934008ee32ec5c041d57458f13f4db2125546c1ebae6f5c5a9c9577aa3596a0f602ebcc689fe75845ccceaa3e134fa88b27ef0133d4bef5faa87003648f93937093f7ad019e305395e87e08b8167d02a048b56d7d51d21d833ee1c90f0cc2601ed51e502adc537857e97591ed7bf13f30c203a44fee7bbf1c0b1812f88d178f86befafdbfdd67504cdcb1992d00082e8aef2385b88bc24e573aa0e17e3bbc2cebd02b9e874612729483873292a9d5890f043330f354fbf17e8182aa089529d6894bdd8b39538bc23cb0c3066ea2577259f3091f65e5f2ed49ac85013835122fa49b8996dd650223335a41afda47249a86a99195b37fd12f08884fd55a836e62b4e83e5363aeaa679bcfce15ef72fc04a1370f6258d3023ccf5cdff2335c42b80d694c449ffa7de47ca1bae27b1493234067f2beb7f666fdc958381a9085891f0ef1f00398aaffbf47f85d1e711483fdcea6b0dfd02d96545cfa21dc101b22e12d7a24bea5ef9acccc43b5058cdb8a87c3e7103a6d794948423b3f9a48b945d224672359dd66c5720cae0fcc3c37f35014ee6b7be15e4a0c29781dd86da07e5c705796360f2ddfd4f8617032d5223310e8cf14899b4da9e7d472ebf1a5631042b1adb18a0da9f1d488ea74cac0225416a3d0302274869cfdcfd8a4e2ac67c46676e9d282bb507c31236fd20be83809abd2ca6b5103c09c80a37f5b8ddede73c3007a0c077047f3a0460884ccba4a97b0293ecbe9c9381e3c4ce73ec2b65d49db1965613314a6ad402ca03da43b3c199bf04706b97ab01d799197a457958f8291b6236b24984ad9b890bd76398931c9160b57531ad2aab8c3197b77d0d92835ed21df35a40e95ede829d143130b6dcd4546744c105d153be55951bb5f3b137c808aafb388da44d18f1500e56dad9851c10a1368672e8c6cc01a8ca1745bcfdb63e40c9b7d0a21a1dff4a780c5eedab32ea525b51387d13b6313da2a7f3fa79241e5f71f4f65eeb601c14a14c97d96a25114b551f16889591def90fd6d57e7b1dad59ecdffffdbe6d9ca8161c1e2a4964f45aa7f8b0e7d9ed36bd45140379454e57bfe58e2a7264331042aa1fe27a45772c733baff5c6c497221c8b29d51d421110c06ba054d550a4afd0fed9d751ddfa3de2274d7290793e6fca1a165e95d6bbe3779dde41e7cd340d3d3377e9eca1a194b57c91e946979d230e082c0bce7948e0e49bac6c97d124482e7915743d53ce72421419e8710d2ad4509c3867f4e25caae82c8dc0acaf9b88714342673ce36cce87d6e7b7f3132aad74d1b75f336b750b2fa1701022e4ba4c8779b1288efcd9a1aa4ec6b9aa0760eca1673a0d111cbe098d9d46af3229df7a6c8efb74aca2f563906217cc8af37083cf0e46d72b378d6b8381f2f683dfb65bbef6d29a55b37c6c9311abf4e39d80041e859cf72610106a6ebd07ea8ee429734dc0726726aa53db49087e430510e27b3e02c576137f7092088bdc8a95e40c25c969372bfb5fad4e13c292e8bda42ca13a1e28a054974469da0a520379548c756cebd89ade3093e7892cae1b4aafd76c02f51064d028d1a93475f39669819cfeac5ad4d1b44a7cdccda33840ed7b95f3bb1ba47b49db0464c856456352450ff5d72be0eb288ea1601b53c338c28448b503b6bd9b6066ffce053a1f6c648f9d3585d76a4a7bc4cb2b81604e9bbcae165103048644aceccef694048eaf188989fd01d397f0eae670264d4fa31703f07e74952281adac74ab9f5fc8f0bc1aa2e4c09126e91f5c47472ea20af3dbbd4fe15e25d63c8f980bf2bc354be14d0f019cca7c2ae48aa358fb63c6bff685fd44156716f5b46ce04bc9b34c3dffdd2f652cf61c8b9a9ee03890bce727a2642026c20635a03eb5a6190c073bf3c190a6", 0xef9}], 0x3, 0x0, 0x50}}], 0x1, 0x4000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000001440)=""/100) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socket$inet(0x2, 0x800, 0xffffffff) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) close(r3) 2.632927603s ago: executing program 5 (id=1134): ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(r0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a}) 568.171975ms ago: executing program 4 (id=1135): socket$inet6_udplite(0xa, 0x2, 0x88) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() sysfs$2(0x2, 0x19, &(0x7f0000000080)=""/101) 10.575761ms ago: executing program 0 (id=1136): syz_emit_ethernet(0xbe, &(0x7f00000009c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b000000000001190780000030000000000000017c1009c90780100000001000000717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d40838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c72097b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd388537719eecd7b1f5591c287cd8bdc5cb100705e0032bb769f2581b5b6ae81bd7be2d9257ce5076e1d1717ad"], 0x0) unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYRES16], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200008010000000000000040000008500000027000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x0) getpid() sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x114}, {0x0}], 0x2}, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={0x0, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x2, &(0x7f0000000440)=@raw=[@generic={0x3, 0x4, 0x4, 0xe, 0xa34d}], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff4c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 0s ago: executing program 6 (id=1137): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x6, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7d, 0x0, &(0x7f0000000080)) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r4, 0x40044620, 0x0) socket$kcm(0xa, 0x5, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e0) kernel console output (not intermixed with test programs): 47906][ T991] usb 5-1: USB disconnect, device number 8 [ 290.430141][ T6921] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 290.454317][ T6898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.643281][ T5855] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 290.876868][ T5855] usb 4-1: Using ep0 maxpacket: 16 [ 291.069940][ T991] IPVS: starting estimator thread 0... [ 291.164031][ T5855] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 291.164080][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 291.329384][ T5855] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 291.329666][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.329987][ T5855] usb 4-1: Product: syz [ 291.330139][ T5855] usb 4-1: Manufacturer: syz [ 291.330436][ T5855] usb 4-1: SerialNumber: syz [ 291.339349][ T6929] IPVS: using max 8 ests per chain, 19200 per kthread [ 291.475713][ T5855] usb 4-1: config 0 descriptor?? [ 291.505279][ T5855] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 291.505318][ T5855] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 292.606397][ T5855] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 292.607319][ T5855] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 293.016811][ T5855] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 293.016837][ T5855] em28xx 4-1:0.0: No AC97 audio processor [ 293.050345][ T5855] usb 4-1: USB disconnect, device number 7 [ 293.065939][ T5855] em28xx 4-1:0.0: Disconnecting em28xx [ 293.072500][ T5855] em28xx 4-1:0.0: Freeing device [ 293.286568][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.453220][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 294.498460][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.498491][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 294.498543][ T10] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 294.498557][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.501888][ T10] usb 5-1: config 0 descriptor?? [ 294.772868][ T10] Bluetooth: Can't get state to change to load ram patch err [ 294.772881][ T10] Bluetooth: Loading patch file failed [ 294.772905][ T10] ath3k 5-1:0.0: probe with driver ath3k failed with error -32 [ 294.804001][ T10] usb 5-1: USB disconnect, device number 9 [ 295.134233][ T6969] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 296.963983][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.186981][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.941895][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.490306][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.628116][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.725285][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.783362][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.915258][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.151223][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.327848][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.383342][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 301.533162][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.743351][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.816141][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.908241][ T10] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 301.908273][ T10] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 301.908333][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 301.908381][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 301.908406][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.982480][ T10] usb 1-1: config 0 descriptor?? [ 302.001120][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 302.553970][ T7009] random: crng reseeded on system resumption [ 303.581864][ T7017] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.373763][ T5889] usb 1-1: USB disconnect, device number 5 [ 306.677767][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.754754][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.171828][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.920064][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.193459][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.369415][ T7061] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 311.808920][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.870832][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.948780][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.379834][ T7082] netlink: 'syz.3.321': attribute type 16 has an invalid length. [ 313.379851][ T7082] netlink: 'syz.3.321': attribute type 17 has an invalid length. [ 313.380799][ T7082] netlink: 20 bytes leftover after parsing attributes in process `syz.3.321'. [ 314.492281][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.708980][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.890436][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.251016][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.540756][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.586219][ T37] audit: type=1800 audit(1762374456.423:3): pid=7113 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.330" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 317.798567][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.223262][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.421202][ T7121] ufs: You didn't specify the type of your ufs filesystem [ 318.421202][ T7121] [ 318.421202][ T7121] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 318.421202][ T7121] [ 318.421202][ T7121] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 318.421430][ T7121] ufs: ufstype=old is supported read-only [ 318.473232][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.619553][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.193324][ T7144] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 322.618014][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.619570][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.486236][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.941118][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.033352][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 328.200494][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.200530][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 328.200544][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.233984][ T10] usb 5-1: config 0 descriptor?? [ 334.344407][ T10] usbhid 5-1:0.0: can't add hid device: -32 [ 334.406177][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 335.133329][ T5888] usb 5-1: USB disconnect, device number 10 [ 335.172206][ T7202] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 336.620325][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.083278][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 337.243311][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 337.505368][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.539830][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.675144][ T7226] vxfs: WRONG superblock magic 00000000 at 1 [ 337.682081][ T7226] vxfs: WRONG superblock magic 00000000 at 8 [ 337.682136][ T7226] vxfs: can't find superblock. [ 337.720182][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.561329][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.583797][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.940439][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.372628][ T31] usb 3-1: unable to read config index 0 descriptor/all [ 342.372762][ T31] usb 3-1: can't read configurations, error -71 [ 344.415353][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.523315][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.551746][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.366'. [ 344.574705][ T7241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.366'. [ 344.627488][ T7238] kernel read not supported for file /ns Er7kjLZQ%#-ҫe' (pid: 7238 comm: syz.2.365) [ 344.718312][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.855223][ T37] audit: type=1800 audit(1762374483.463:4): pid=7238 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.365" name=6E73BF12E10BC845E0807291376B6A9C4CCE5A99F85125232DD3D213E8DCE1FDDEEFF2A7D2AB97C26527FC108503 dev="mqueue" ino=12217 res=0 errno=0 [ 345.043183][ C0] vkms_vblank_simulate: vblank timer overrun [ 345.637800][ C0] vkms_vblank_simulate: vblank timer overrun [ 345.655894][ T7256] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 345.983347][ T5888] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 346.136011][ T5888] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 346.136154][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.170950][ T5888] usb 5-1: config 0 descriptor?? [ 346.659456][ T5888] ath6kl: Failed to submit usb control message: -71 [ 346.659486][ T5888] ath6kl: unable to send the bmi data to the device: -71 [ 346.659493][ T5888] ath6kl: Unable to send get target info: -71 [ 346.662229][ T5888] ath6kl: Failed to init ath6kl core: -71 [ 346.693940][ T5888] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 346.730991][ T5888] usb 5-1: USB disconnect, device number 11 [ 346.792338][ C0] vkms_vblank_simulate: vblank timer overrun [ 347.027745][ C0] vkms_vblank_simulate: vblank timer overrun [ 347.527653][ C0] vkms_vblank_simulate: vblank timer overrun [ 347.941833][ C0] vkms_vblank_simulate: vblank timer overrun [ 348.121389][ C0] vkms_vblank_simulate: vblank timer overrun [ 348.416992][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.200598][ T7290] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 351.674173][ T5855] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 351.823292][ T5855] usb 4-1: Using ep0 maxpacket: 16 [ 351.826397][ T5855] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 351.826433][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 351.830664][ T5855] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 351.830694][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.830716][ T5855] usb 4-1: Product: syz [ 351.830732][ T5855] usb 4-1: Manufacturer: syz [ 351.830748][ T5855] usb 4-1: SerialNumber: syz [ 352.017276][ T5855] usb 4-1: config 0 descriptor?? [ 352.020779][ T5855] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 352.020804][ T5855] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 353.131699][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.940549][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.267353][ T5855] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 354.269121][ T5855] em28xx 4-1:0.0: Config register raw data: 0x00 [ 354.485005][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.533399][ T7298] random: crng reseeded on system resumption [ 355.005171][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.387600][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.255597][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.461278][ T5889] usb 4-1: USB disconnect, device number 8 [ 356.462695][ T5889] em28xx 4-1:0.0: Disconnecting em28xx [ 356.474211][ T5889] em28xx 4-1:0.0: Freeing device [ 356.941123][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.232128][ T37] audit: type=1800 audit(1762374497.053:5): pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.393" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 358.763337][ T5889] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 359.400965][ T5889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.401008][ T5889] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 359.401022][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.457133][ T5889] usb 5-1: config 0 descriptor?? [ 359.488602][ T5889] pwc: Askey VC010 type 2 USB webcam detected. [ 359.704159][ T5855] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 359.898575][ T5889] pwc: recv_control_msg error -32 req 02 val 2b00 [ 359.910889][ T5889] pwc: recv_control_msg error -32 req 02 val 2700 [ 359.912578][ T5889] pwc: recv_control_msg error -32 req 02 val 2c00 [ 359.930229][ T5889] pwc: recv_control_msg error -32 req 04 val 1000 [ 359.932983][ T5855] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 359.933140][ T5855] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 359.933201][ T5855] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 359.933243][ T5855] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 359.933266][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.994302][ T5889] pwc: recv_control_msg error -32 req 04 val 1300 [ 359.995244][ T5889] pwc: recv_control_msg error -32 req 04 val 1400 [ 359.997143][ T5889] pwc: recv_control_msg error -32 req 02 val 2000 [ 359.998028][ T5889] pwc: recv_control_msg error -32 req 02 val 2100 [ 359.998812][ T5889] pwc: recv_control_msg error -32 req 04 val 1500 [ 359.999593][ T5889] pwc: recv_control_msg error -32 req 02 val 2500 [ 360.000356][ T5889] pwc: recv_control_msg error -32 req 02 val 2400 [ 360.001319][ T5889] pwc: recv_control_msg error -32 req 02 val 2600 [ 360.002134][ T5889] pwc: recv_control_msg error -32 req 02 val 2900 [ 360.063179][ T5889] pwc: recv_control_msg error -71 req 02 val 2800 [ 360.065082][ T5889] pwc: recv_control_msg error -71 req 04 val 1100 [ 360.066782][ T5889] pwc: recv_control_msg error -71 req 04 val 1200 [ 360.115583][ T5889] pwc: Registered as video103. [ 360.141539][ T5855] usb 2-1: config 0 descriptor?? [ 360.153411][ T5889] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 360.202226][ T5855] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 360.941915][ T5889] usb 5-1: USB disconnect, device number 12 [ 362.678031][ T5888] usb 2-1: USB disconnect, device number 7 [ 363.155319][ T7361] blktrace: Concurrent blktraces are not allowed on loop1 [ 364.803231][ T5889] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 365.123180][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 365.126113][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 365.126149][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 365.129690][ T5889] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 365.129721][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.129742][ T5889] usb 5-1: Product: syz [ 365.129758][ T5889] usb 5-1: Manufacturer: syz [ 365.129773][ T5889] usb 5-1: SerialNumber: syz [ 366.358234][ T5889] usb 5-1: config 0 descriptor?? [ 366.371584][ T5889] usb 5-1: can't set config #0, error -71 [ 366.390438][ T5889] usb 5-1: USB disconnect, device number 13 [ 366.717415][ T7388] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 368.303569][ T7397] netlink: 'syz.2.411': attribute type 13 has an invalid length. [ 372.755583][ T7423] random: crng reseeded on system resumption [ 373.303161][ T5889] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 373.456147][ T5889] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 373.456180][ T5889] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 373.456201][ T5889] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 373.456260][ T5889] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 373.456288][ T5889] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 373.459217][ T5889] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 373.459244][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 373.459265][ T5889] usb 1-1: Product: syz [ 373.459280][ T5889] usb 1-1: Manufacturer: syz [ 373.563179][ T5889] cdc_wdm 1-1:1.0: skipping garbage [ 373.563201][ T5889] cdc_wdm 1-1:1.0: skipping garbage [ 373.572446][ T5889] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 373.572470][ T5889] cdc_wdm 1-1:1.0: Unknown control protocol [ 373.593169][ T5888] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 373.757069][ T5888] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 373.757101][ T5888] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 373.757122][ T5888] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 373.757179][ T5888] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 373.757208][ T5888] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 373.819252][ T5888] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 373.819285][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 373.819306][ T5888] usb 3-1: Product: syz [ 373.819322][ T5888] usb 3-1: Manufacturer: syz [ 374.034923][ C1] vkms_vblank_simulate: vblank timer overrun [ 374.044066][ T5888] cdc_wdm 3-1:1.0: skipping garbage [ 374.044095][ T5888] cdc_wdm 3-1:1.0: skipping garbage [ 374.082571][ T5888] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 374.082597][ T5888] cdc_wdm 3-1:1.0: Unknown control protocol [ 374.154652][ T5889] usb 1-1: USB disconnect, device number 6 [ 374.241799][ T1230] usb 3-1: USB disconnect, device number 6 [ 375.013184][ T5855] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 375.650803][ T5855] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 375.650836][ T5855] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 375.650892][ T5855] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 375.650938][ T5855] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 375.650962][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.699429][ T5855] usb 4-1: config 0 descriptor?? [ 375.965695][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.017650][ T5855] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 376.317118][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.112561][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.473528][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.540233][ T1230] usb 4-1: USB disconnect, device number 9 [ 378.227739][ C1] vkms_vblank_simulate: vblank timer overrun [ 378.313809][ C1] vkms_vblank_simulate: vblank timer overrun [ 378.681656][ T7471] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.758628][ C1] vkms_vblank_simulate: vblank timer overrun [ 381.716483][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.903175][ T991] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 382.071677][ T991] usb 4-1: Using ep0 maxpacket: 16 [ 382.076418][ T991] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 382.076452][ T991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 382.082214][ T991] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 382.082242][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.082261][ T991] usb 4-1: Product: syz [ 382.082274][ T991] usb 4-1: Manufacturer: syz [ 382.082288][ T991] usb 4-1: SerialNumber: syz [ 382.089839][ T991] usb 4-1: config 0 descriptor?? [ 382.120281][ T991] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 382.120316][ T991] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 382.445417][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.493389][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.661146][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.996182][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.089273][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.219989][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.263641][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.323149][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.542698][ T991] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 383.543729][ T991] em28xx 4-1:0.0: Config register raw data: 0x00 [ 383.892346][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.027925][ T7504] vxfs: WRONG superblock magic 00000000 at 1 [ 384.030829][ T7504] vxfs: WRONG superblock magic 00000000 at 8 [ 384.030875][ T7504] vxfs: can't find superblock. [ 384.404687][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.406013][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.024145][ C0] vkms_vblank_simulate: vblank timer overrun [ 385.070503][ C0] vkms_vblank_simulate: vblank timer overrun [ 385.643432][ T1230] usb 4-1: USB disconnect, device number 10 [ 385.646631][ T1230] em28xx 4-1:0.0: Disconnecting em28xx [ 385.719562][ T1230] em28xx 4-1:0.0: Freeing device [ 387.298727][ T7522] netlink: 48 bytes leftover after parsing attributes in process `syz.1.447'. [ 387.298967][ T7522] netlink: 48 bytes leftover after parsing attributes in process `syz.1.447'. [ 387.553351][ T991] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 387.705803][ T991] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.705833][ T991] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 387.705893][ T991] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 387.705919][ T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.922864][ T991] usb 1-1: config 0 descriptor?? [ 388.033812][ C0] vkms_vblank_simulate: vblank timer overrun [ 388.269490][ C0] vkms_vblank_simulate: vblank timer overrun [ 388.418008][ T991] Bluetooth: Can't get state to change to load ram patch err [ 388.418029][ T991] Bluetooth: Loading patch file failed [ 388.418068][ T991] ath3k 1-1:0.0: probe with driver ath3k failed with error -121 [ 388.573826][ T5888] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 388.800860][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 388.947037][ T1230] usb 1-1: USB disconnect, device number 7 [ 389.111455][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 389.111484][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 389.148503][ T5888] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 389.148523][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.148532][ T5888] usb 5-1: Product: syz [ 389.148539][ T5888] usb 5-1: Manufacturer: syz [ 389.148546][ T5888] usb 5-1: SerialNumber: syz [ 389.213144][ T5888] usb 5-1: config 0 descriptor?? [ 389.222367][ T5888] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 389.222404][ T5888] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 389.513224][ T991] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 389.669581][ T991] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.669650][ T991] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 389.669675][ T991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.725287][ T991] usb 4-1: config 0 descriptor?? [ 389.732158][ T991] pwc: Askey VC010 type 2 USB webcam detected. [ 389.831622][ T5888] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 389.832542][ T5888] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 390.277044][ T991] pwc: recv_control_msg error -32 req 02 val 2b00 [ 390.278063][ T991] pwc: recv_control_msg error -32 req 02 val 2700 [ 390.278843][ T991] pwc: recv_control_msg error -32 req 02 val 2c00 [ 390.280453][ T991] pwc: recv_control_msg error -32 req 04 val 1000 [ 390.281413][ T991] pwc: recv_control_msg error -32 req 04 val 1300 [ 390.282341][ T991] pwc: recv_control_msg error -32 req 04 val 1400 [ 390.284142][ T991] pwc: recv_control_msg error -32 req 02 val 2000 [ 390.285089][ T991] pwc: recv_control_msg error -32 req 02 val 2100 [ 390.286068][ T991] pwc: recv_control_msg error -32 req 04 val 1500 [ 390.286989][ T991] pwc: recv_control_msg error -32 req 02 val 2500 [ 390.287894][ T991] pwc: recv_control_msg error -32 req 02 val 2400 [ 390.288825][ T991] pwc: recv_control_msg error -32 req 02 val 2600 [ 390.383217][ T5855] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 390.492204][ T991] pwc: recv_control_msg error -71 req 02 val 2800 [ 390.493545][ T991] pwc: recv_control_msg error -71 req 04 val 1100 [ 390.511265][ T991] pwc: recv_control_msg error -71 req 04 val 1200 [ 390.544705][ T5855] usb 1-1: Using ep0 maxpacket: 16 [ 390.563423][ T5855] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 390.563456][ T5855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 390.643349][ T5855] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 390.643383][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.643405][ T5855] usb 1-1: Product: syz [ 390.643420][ T5855] usb 1-1: Manufacturer: syz [ 390.643435][ T5855] usb 1-1: SerialNumber: syz [ 390.709365][ T991] pwc: Registered as video103. [ 390.873436][ T991] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 390.933395][ T5855] usb 1-1: config 0 descriptor?? [ 390.943299][ T5888] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 390.943691][ T5888] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 390.943970][ T5888] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 390.944236][ T5888] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 390.944526][ T5888] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 390.944843][ T5888] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 390.948457][ T5888] usb 5-1: USB disconnect, device number 14 [ 391.105141][ T5855] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 391.105178][ T5855] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 391.258220][ T991] usb 4-1: USB disconnect, device number 11 [ 391.596665][ T5855] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 391.597328][ T5855] em28xx 1-1:0.0: Config register raw data: 0x00 [ 393.073320][ T5855] usb 1-1: USB disconnect, device number 8 [ 393.075918][ T5855] em28xx 1-1:0.0: Disconnecting em28xx [ 393.097019][ T5855] em28xx 1-1:0.0: Freeing device [ 393.334464][ T7558] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 394.701669][ T5808] Bluetooth: hci4: command 0x0406 tx timeout [ 395.253166][ T5855] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 395.899864][ T5855] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 395.899897][ T5855] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 395.899917][ T5855] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 395.899976][ T5855] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 395.900002][ T5855] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 395.902069][ T5855] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 395.902093][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 395.902109][ T5855] usb 3-1: Product: syz [ 395.902120][ T5855] usb 3-1: Manufacturer: syz [ 396.058117][ T5855] cdc_wdm 3-1:1.0: skipping garbage [ 396.064430][ T5855] cdc_wdm 3-1:1.0: skipping garbage [ 396.077278][ T5855] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 396.077301][ T5855] cdc_wdm 3-1:1.0: Unknown control protocol [ 396.243343][ T991] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 396.251843][ T7584] binder: 7582:7584 ioctl c0306201 0 returned -14 [ 396.402138][ T991] usb 4-1: device descriptor read/64, error -71 [ 396.569824][ T5855] usb 3-1: USB disconnect, device number 7 [ 396.643450][ T991] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 396.773525][ T991] usb 4-1: device descriptor read/64, error -71 [ 396.886025][ T991] usb usb4-port1: attempt power cycle [ 397.403384][ T991] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 397.428981][ T991] usb 4-1: device descriptor read/8, error -71 [ 397.673466][ T991] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 397.697277][ T991] usb 4-1: device descriptor read/8, error -71 [ 397.807911][ T991] usb usb4-port1: unable to enumerate USB device [ 398.991159][ T7599] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 399.819417][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.034360][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.337893][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.481094][ C1] vkms_vblank_simulate: vblank timer overrun [ 402.478535][ C1] vkms_vblank_simulate: vblank timer overrun [ 402.953307][ T1230] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 403.113204][ T1230] usb 4-1: Using ep0 maxpacket: 16 [ 403.199350][ T1230] usb 4-1: config index 0 descriptor too short (expected 62738, got 42) [ 403.199373][ T1230] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 403.199385][ T1230] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.199396][ T1230] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 403.247304][ T1230] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 403.247331][ T1230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.247343][ T1230] usb 4-1: Product: syz [ 403.247352][ T1230] usb 4-1: Manufacturer: syz [ 403.247360][ T1230] usb 4-1: SerialNumber: syz [ 403.324732][ T1230] usb 4-1: config 0 descriptor?? [ 403.834384][ T1230] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 404.105765][ T1230] usb 4-1: USB disconnect, device number 16 [ 404.173279][ T991] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 404.345241][ T991] usb 3-1: device descriptor read/64, error -71 [ 404.583201][ T991] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 404.713174][ T991] usb 3-1: device descriptor read/64, error -71 [ 404.823547][ T991] usb usb3-port1: attempt power cycle [ 404.891219][ T7641] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 405.163207][ T991] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 405.194397][ T991] usb 3-1: device descriptor read/8, error -71 [ 405.449880][ C1] vkms_vblank_simulate: vblank timer overrun [ 405.651078][ C1] vkms_vblank_simulate: vblank timer overrun [ 406.252595][ C1] vkms_vblank_simulate: vblank timer overrun [ 406.442040][ T991] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 406.734996][ T991] usb 3-1: device descriptor read/8, error -71 [ 406.962439][ C1] vkms_vblank_simulate: vblank timer overrun [ 406.974011][ T991] usb usb3-port1: unable to enumerate USB device [ 408.066425][ C1] vkms_vblank_simulate: vblank timer overrun [ 409.623637][ C0] vkms_vblank_simulate: vblank timer overrun [ 409.665284][ C0] vkms_vblank_simulate: vblank timer overrun [ 409.696613][ C0] vkms_vblank_simulate: vblank timer overrun [ 409.967316][ C0] vkms_vblank_simulate: vblank timer overrun [ 410.020737][ C0] vkms_vblank_simulate: vblank timer overrun [ 410.395766][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.069349][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.494719][ T7679] random: crng reseeded on system resumption [ 412.403146][ T991] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 412.575378][ T991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.575410][ T991] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 412.575424][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.580745][ T991] usb 5-1: config 0 descriptor?? [ 413.136089][ T991] logitech-djreceiver 0003:046D:C71F.0002: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.4-1/input0 [ 413.312586][ T991] usb 5-1: USB disconnect, device number 15 [ 413.972953][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.147225][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.002523][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.078187][ T7694] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 415.161571][ T7684] fido_id[7684]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 416.138325][ T5888] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 416.473671][ T5888] usb 4-1: device descriptor read/64, error -71 [ 416.723222][ T5888] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 416.853195][ T5888] usb 4-1: device descriptor read/64, error -71 [ 416.963857][ T5888] usb usb4-port1: attempt power cycle [ 417.303152][ T5888] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 417.324183][ T5888] usb 4-1: device descriptor read/8, error -71 [ 417.413122][ T1230] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 417.563184][ T5888] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 417.584460][ T5888] usb 4-1: device descriptor read/8, error -71 [ 417.592226][ T1230] usb 5-1: Using ep0 maxpacket: 16 [ 417.608494][ T1230] usb 5-1: config index 0 descriptor too short (expected 62738, got 42) [ 417.608526][ T1230] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 417.608547][ T1230] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.608566][ T1230] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 417.658804][ T1230] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 417.658836][ T1230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.658850][ T1230] usb 5-1: Product: syz [ 417.658859][ T1230] usb 5-1: Manufacturer: syz [ 417.658868][ T1230] usb 5-1: SerialNumber: syz [ 417.694096][ T5888] usb usb4-port1: unable to enumerate USB device [ 417.715170][ T1230] usb 5-1: config 0 descriptor?? [ 420.223620][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.012231][ T1230] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 421.150915][ T991] usb 5-1: USB disconnect, device number 16 [ 421.583173][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.356249][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.364834][ T7738] netlink: 28 bytes leftover after parsing attributes in process `syz.4.509'. [ 422.383566][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.314311][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.343226][ T991] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 428.031099][ C1] vkms_vblank_simulate: vblank timer overrun [ 428.303297][ T991] usb 2-1: Using ep0 maxpacket: 16 [ 428.306682][ T991] usb 2-1: config index 0 descriptor too short (expected 62738, got 42) [ 428.306711][ T991] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 428.306732][ T991] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.306752][ T991] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 428.326979][ T991] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 428.327012][ T991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.327032][ T991] usb 2-1: Product: syz [ 428.327046][ T991] usb 2-1: Manufacturer: syz [ 428.327060][ T991] usb 2-1: SerialNumber: syz [ 428.412670][ T991] usb 2-1: config 0 descriptor?? [ 428.543141][ T5855] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 428.673301][ T5855] usb 5-1: device descriptor read/64, error -71 [ 428.680337][ C1] vkms_vblank_simulate: vblank timer overrun [ 428.817826][ T991] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 429.003358][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.383931][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.867318][ T991] usb 2-1: USB disconnect, device number 8 [ 429.881805][ C1] vkms_vblank_simulate: vblank timer overrun [ 430.943431][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.112579][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.143634][ T5855] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 431.283196][ T5855] usb 5-1: device descriptor read/64, error -71 [ 431.407756][ T5855] usb usb5-port1: attempt power cycle [ 431.639821][ C1] vkms_vblank_simulate: vblank timer overrun [ 435.633155][ T5855] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 435.785375][ T5855] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 435.785397][ T5855] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 435.785429][ T5855] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 435.785455][ T5855] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 435.785469][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.788903][ T5855] usb 5-1: config 0 descriptor?? [ 435.835035][ T5855] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 437.193215][ T5855] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 437.371095][ T5855] usb 3-1: Using ep0 maxpacket: 16 [ 437.380545][ T5855] usb 3-1: config index 0 descriptor too short (expected 62738, got 42) [ 437.380571][ T5855] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 437.380587][ T5855] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.380602][ T5855] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 437.404045][ T5855] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 437.404076][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.404095][ T5855] usb 3-1: Product: syz [ 437.404109][ T5855] usb 3-1: Manufacturer: syz [ 437.404122][ T5855] usb 3-1: SerialNumber: syz [ 437.454908][ T5855] usb 3-1: config 0 descriptor?? [ 437.473354][ T1230] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 437.772073][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.777605][ T1230] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 437.777637][ T1230] usb 2-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 437.777657][ T1230] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 437.777715][ T1230] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 437.781373][ T1230] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 437.781403][ T1230] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 437.781423][ T1230] usb 2-1: Product: syz [ 437.781439][ T1230] usb 2-1: Manufacturer: syz [ 437.867654][ T1230] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 437.948500][ T5855] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 438.024564][ T5855] usb 3-1: USB disconnect, device number 12 [ 438.250147][ T1230] usb 2-1: USB disconnect, device number 9 [ 438.408112][ T991] usb 5-1: USB disconnect, device number 20 [ 438.488962][ T7827] random: crng reseeded on system resumption [ 438.953681][ T7830] fuse: Bad value for 'fd' [ 440.132477][ C1] vkms_vblank_simulate: vblank timer overrun [ 440.178179][ T7839] netlink: 32 bytes leftover after parsing attributes in process `syz.4.541'. [ 440.420672][ C1] vkms_vblank_simulate: vblank timer overrun [ 441.179123][ T7848] netlink: 28 bytes leftover after parsing attributes in process `syz.4.542'. [ 443.292036][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.494586][ T7862] netlink: 16 bytes leftover after parsing attributes in process `syz.1.549'. [ 443.502816][ T7862] netlink: 'syz.1.549': attribute type 13 has an invalid length. [ 444.092559][ T7872] netlink: 32 bytes leftover after parsing attributes in process `syz.3.552'. [ 444.213300][ T991] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 444.448598][ T7873] random: crng reseeded on system resumption [ 445.349480][ T991] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 445.349516][ T991] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 445.349583][ T991] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 445.349631][ T991] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 445.349656][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.406719][ T991] usb 5-1: config 0 descriptor?? [ 445.459150][ T991] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 446.083753][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.083961][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.119702][ C1] vkms_vblank_simulate: vblank timer overrun [ 446.842446][ C1] vkms_vblank_simulate: vblank timer overrun [ 448.337047][ C1] vkms_vblank_simulate: vblank timer overrun [ 448.487528][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.671870][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.816691][ T991] usb 5-1: USB disconnect, device number 21 [ 451.057220][ T7916] netlink: 32 bytes leftover after parsing attributes in process `syz.0.563'. [ 451.687597][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.076637][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.231763][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.375233][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.473844][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.036910][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.707009][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.739135][ T7944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.568'. [ 454.758334][ C1] vkms_vblank_simulate: vblank timer overrun [ 455.035830][ C1] vkms_vblank_simulate: vblank timer overrun [ 457.903182][ T1230] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 458.095889][ T1230] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.095954][ T1230] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 458.095979][ T1230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.158443][ T1230] usb 4-1: config 0 descriptor?? [ 458.186565][ T1230] pwc: Askey VC010 type 2 USB webcam detected. [ 458.852157][ T1230] pwc: recv_control_msg error -32 req 02 val 2b00 [ 458.862062][ T1230] pwc: recv_control_msg error -32 req 02 val 2700 [ 458.874857][ T1230] pwc: recv_control_msg error -32 req 02 val 2c00 [ 458.875938][ T1230] pwc: recv_control_msg error -32 req 04 val 1000 [ 458.876832][ T1230] pwc: recv_control_msg error -32 req 04 val 1300 [ 458.880455][ T1230] pwc: recv_control_msg error -32 req 04 val 1400 [ 458.910181][ T1230] pwc: recv_control_msg error -32 req 02 val 2000 [ 458.911342][ T1230] pwc: recv_control_msg error -32 req 02 val 2100 [ 458.933105][ T1230] pwc: recv_control_msg error -32 req 04 val 1500 [ 458.939369][ T1230] pwc: recv_control_msg error -32 req 02 val 2500 [ 458.956211][ T1230] pwc: recv_control_msg error -32 req 02 val 2400 [ 458.958894][ T1230] pwc: recv_control_msg error -32 req 02 val 2600 [ 459.403663][ T1230] pwc: recv_control_msg error -71 req 02 val 2800 [ 459.404513][ T1230] pwc: recv_control_msg error -71 req 04 val 1100 [ 459.405074][ T1230] pwc: recv_control_msg error -71 req 04 val 1200 [ 459.447648][ T1230] pwc: Registered as video103. [ 459.532451][ C1] vkms_vblank_simulate: vblank timer overrun [ 460.351821][ C1] vkms_vblank_simulate: vblank timer overrun [ 460.684153][ T1230] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 460.739220][ T1230] usb 4-1: USB disconnect, device number 21 [ 460.934123][ T991] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 461.085119][ T991] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.085152][ T991] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 461.085163][ T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.088240][ T991] usb 1-1: config 0 descriptor?? [ 461.106093][ T991] pwc: Askey VC010 type 2 USB webcam detected. [ 461.495369][ T991] pwc: recv_control_msg error -32 req 02 val 2b00 [ 461.495980][ T991] pwc: recv_control_msg error -32 req 02 val 2700 [ 461.496498][ T991] pwc: recv_control_msg error -32 req 02 val 2c00 [ 461.497080][ T991] pwc: recv_control_msg error -32 req 04 val 1000 [ 461.497620][ T991] pwc: recv_control_msg error -32 req 04 val 1300 [ 461.498177][ T991] pwc: recv_control_msg error -32 req 04 val 1400 [ 461.498698][ T991] pwc: recv_control_msg error -32 req 02 val 2000 [ 461.499241][ T991] pwc: recv_control_msg error -32 req 02 val 2100 [ 461.499752][ T991] pwc: recv_control_msg error -32 req 04 val 1500 [ 461.500334][ T991] pwc: recv_control_msg error -32 req 02 val 2500 [ 461.500847][ T991] pwc: recv_control_msg error -32 req 02 val 2400 [ 461.702395][ T991] pwc: recv_control_msg error -71 req 02 val 2900 [ 461.721170][ T991] pwc: recv_control_msg error -71 req 02 val 2800 [ 461.721987][ T991] pwc: recv_control_msg error -71 req 04 val 1100 [ 461.722512][ T991] pwc: recv_control_msg error -71 req 04 val 1200 [ 461.729579][ T991] pwc: Registered as video103. [ 461.748294][ T991] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 461.952415][ C1] vkms_vblank_simulate: vblank timer overrun [ 463.354064][ C1] vkms_vblank_simulate: vblank timer overrun [ 463.364019][ T991] usb 1-1: USB disconnect, device number 9 [ 463.661077][ T7993] netlink: 28 bytes leftover after parsing attributes in process `syz.4.581'. [ 464.550997][ T8001] netlink: 16 bytes leftover after parsing attributes in process `syz.0.584'. [ 464.693327][ T7999] netlink: 'syz.0.584': attribute type 13 has an invalid length. [ 465.320757][ C0] vkms_vblank_simulate: vblank timer overrun [ 465.371421][ C0] vkms_vblank_simulate: vblank timer overrun [ 466.322031][ C0] vkms_vblank_simulate: vblank timer overrun [ 466.750242][ C0] vkms_vblank_simulate: vblank timer overrun [ 468.193031][ C0] vkms_vblank_simulate: vblank timer overrun [ 468.293181][ C0] vkms_vblank_simulate: vblank timer overrun [ 468.346926][ C0] vkms_vblank_simulate: vblank timer overrun [ 468.417005][ C0] vkms_vblank_simulate: vblank timer overrun [ 468.496899][ C0] vkms_vblank_simulate: vblank timer overrun [ 469.153544][ C0] vkms_vblank_simulate: vblank timer overrun [ 469.268618][ T8035] netlink: 28 bytes leftover after parsing attributes in process `syz.3.594'. [ 470.044501][ C0] vkms_vblank_simulate: vblank timer overrun [ 471.503154][ T991] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 471.643206][ T991] usb 3-1: device descriptor read/64, error -71 [ 471.970314][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.023628][ T991] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 472.323290][ C0] vkms_vblank_simulate: vblank timer overrun [ 473.026298][ T991] usb 3-1: device descriptor read/64, error -71 [ 473.030347][ C0] vkms_vblank_simulate: vblank timer overrun [ 473.084593][ C0] vkms_vblank_simulate: vblank timer overrun [ 473.165864][ T991] usb usb3-port1: attempt power cycle [ 473.260238][ C0] vkms_vblank_simulate: vblank timer overrun [ 473.523075][ C0] vkms_vblank_simulate: vblank timer overrun [ 473.615518][ C0] vkms_vblank_simulate: vblank timer overrun [ 473.743190][ C0] vkms_vblank_simulate: vblank timer overrun [ 473.763099][ C0] vkms_vblank_simulate: vblank timer overrun [ 473.826875][ C0] vkms_vblank_simulate: vblank timer overrun [ 473.913294][ T991] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 473.933960][ T991] usb 3-1: device descriptor read/8, error -71 [ 474.103213][ T5855] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 474.204668][ T991] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 474.426118][ C0] vkms_vblank_simulate: vblank timer overrun [ 474.479075][ T5855] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 474.479109][ T5855] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 474.479232][ T5855] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 474.479280][ T5855] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 474.479386][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.494830][ T5855] usb 4-1: config 0 descriptor?? [ 474.656987][ C0] vkms_vblank_simulate: vblank timer overrun [ 474.999915][ C0] vkms_vblank_simulate: vblank timer overrun [ 475.381431][ T991] usb 3-1: device descriptor read/8, error -71 [ 475.474073][ T5855] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 475.487417][ T991] usb usb3-port1: unable to enumerate USB device [ 475.745357][ C0] vkms_vblank_simulate: vblank timer overrun [ 475.869351][ C0] vkms_vblank_simulate: vblank timer overrun [ 478.204358][ C0] vkms_vblank_simulate: vblank timer overrun [ 478.320778][ C0] vkms_vblank_simulate: vblank timer overrun [ 478.530318][ C0] vkms_vblank_simulate: vblank timer overrun [ 478.671590][ C0] vkms_vblank_simulate: vblank timer overrun [ 478.831110][ T991] usb 4-1: USB disconnect, device number 22 [ 481.154860][ C0] vkms_vblank_simulate: vblank timer overrun [ 481.831544][ C0] vkms_vblank_simulate: vblank timer overrun [ 481.926343][ T8103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.614'. [ 482.310713][ C0] vkms_vblank_simulate: vblank timer overrun [ 482.683914][ C0] vkms_vblank_simulate: vblank timer overrun [ 483.643105][ T991] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 484.189684][ T991] usb 3-1: device descriptor read/64, error -71 [ 484.643148][ T991] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 484.774996][ T991] usb 3-1: device descriptor read/64, error -71 [ 485.154094][ T991] usb usb3-port1: attempt power cycle [ 485.463335][ T5855] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 485.616474][ T5855] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 485.616508][ T5855] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 485.616568][ T5855] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 485.616611][ T5855] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 485.616635][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.679161][ T5855] usb 4-1: config 0 descriptor?? [ 485.887129][ C1] vkms_vblank_simulate: vblank timer overrun [ 485.914415][ T5855] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 486.724109][ C1] vkms_vblank_simulate: vblank timer overrun [ 486.854162][ T5888] usb 4-1: USB disconnect, device number 23 [ 489.743223][ T5888] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 489.893231][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 489.898424][ T5888] usb 1-1: config index 0 descriptor too short (expected 62738, got 42) [ 489.898457][ T5888] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 489.898478][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.898498][ T5888] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 489.969204][ T5888] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 489.969240][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.969261][ T5888] usb 1-1: Product: syz [ 489.969274][ T5888] usb 1-1: Manufacturer: syz [ 489.969289][ T5888] usb 1-1: SerialNumber: syz [ 492.564943][ T5888] usb 1-1: config 0 descriptor?? [ 492.703810][ T5888] usb 1-1: can't set config #0, error -71 [ 492.711804][ T5888] usb 1-1: USB disconnect, device number 10 [ 492.733256][ T991] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 492.883132][ T991] usb 2-1: device descriptor read/64, error -71 [ 493.133162][ T991] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 493.263170][ T991] usb 2-1: device descriptor read/64, error -71 [ 493.403977][ T991] usb usb2-port1: attempt power cycle [ 493.763221][ T991] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 494.230412][ T991] usb 2-1: device descriptor read/8, error -71 [ 494.463222][ T991] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 494.493367][ T991] usb 2-1: device descriptor read/8, error -71 [ 494.655687][ T991] usb usb2-port1: unable to enumerate USB device [ 495.033044][ T991] IPVS: starting estimator thread 0... [ 495.153303][ T8179] IPVS: using max 12 ests per chain, 28800 per kthread [ 501.833821][ T1230] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 502.745634][ T1230] usb 5-1: device descriptor read/64, error -71 [ 503.053291][ T1230] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 503.225087][ T1230] usb 5-1: device descriptor read/64, error -71 [ 503.334052][ T1230] usb usb5-port1: attempt power cycle [ 504.735461][ T1230] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 504.781280][ T1230] usb 5-1: device descriptor read/8, error -71 [ 506.049541][ T8243] vivid-000: disconnect [ 506.494128][ T8242] vivid-000: reconnect [ 507.723276][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.723362][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.056408][ T8260] random: crng reseeded on system resumption [ 512.842291][ T991] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 513.053128][ T991] usb 2-1: device descriptor read/64, error -71 [ 514.534499][ T991] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 521.569128][ T8325] overlayfs: missing 'workdir' [ 521.630595][ T8328] fuse: Unknown parameter 'user_i00000000000000000000' [ 522.184342][ T8336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.681'. [ 524.095597][ C0] vkms_vblank_simulate: vblank timer overrun [ 525.097422][ C0] vkms_vblank_simulate: vblank timer overrun [ 525.178219][ C0] vkms_vblank_simulate: vblank timer overrun [ 526.037249][ C0] vkms_vblank_simulate: vblank timer overrun [ 526.893517][ T8351] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 526.893533][ T8351] CUSE: unknown device info "3ܟ,̘" [ 526.893540][ T8351] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 526.893540][ T8351] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 526.893550][ T8351] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 526.893557][ T8351] CUSE: DEVNAME unspecified [ 526.963134][ T991] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 527.123104][ T5888] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 527.134850][ T991] usb 2-1: Using ep0 maxpacket: 16 [ 527.139129][ T991] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.165938][ T991] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 527.165960][ T991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.165972][ T991] usb 2-1: Product: syz [ 527.165981][ T991] usb 2-1: Manufacturer: syz [ 527.165990][ T991] usb 2-1: SerialNumber: syz [ 527.219857][ T991] usb 2-1: config 0 descriptor?? [ 527.277987][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.278051][ T5888] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 527.278074][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.352091][ T5888] usb 5-1: config 0 descriptor?? [ 527.380809][ T5888] pwc: Askey VC010 type 2 USB webcam detected. [ 527.591192][ T8368] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 527.612304][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 527.623927][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 527.630510][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 527.631238][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 527.787997][ T5888] pwc: recv_control_msg error -32 req 02 val 2b00 [ 527.788857][ T5888] pwc: recv_control_msg error -32 req 02 val 2700 [ 527.791767][ T5888] pwc: recv_control_msg error -32 req 02 val 2c00 [ 527.792492][ T5888] pwc: recv_control_msg error -32 req 04 val 1000 [ 527.813155][ T5888] pwc: recv_control_msg error -32 req 04 val 1300 [ 527.827302][ T5888] pwc: recv_control_msg error -32 req 04 val 1400 [ 527.829217][ T5888] pwc: recv_control_msg error -32 req 02 val 2000 [ 527.831603][ T5888] pwc: recv_control_msg error -32 req 02 val 2100 [ 527.853142][ T5888] pwc: recv_control_msg error -32 req 04 val 1500 [ 527.862223][ T5888] pwc: recv_control_msg error -32 req 02 val 2500 [ 527.871741][ T5888] pwc: recv_control_msg error -32 req 02 val 2400 [ 528.078604][ T5888] pwc: recv_control_msg error -71 req 02 val 2900 [ 528.079195][ T5888] pwc: recv_control_msg error -71 req 02 val 2800 [ 528.101488][ T5888] pwc: recv_control_msg error -71 req 04 val 1100 [ 528.115215][ T5888] pwc: recv_control_msg error -71 req 04 val 1200 [ 528.130137][ T5888] pwc: Registered as video103. [ 528.165219][ T5888] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 528.297382][ T5888] usb 5-1: USB disconnect, device number 26 [ 529.007617][ T8384] fuse: Unknown parameter 'user_i00000000000000000000' [ 529.696194][ T5855] usb 2-1: USB disconnect, device number 16 [ 529.713193][ T61] Bluetooth: hci5: command tx timeout [ 529.788755][ T8391] netlink: 28 bytes leftover after parsing attributes in process `syz.0.695'. [ 530.893924][ T8366] chnl_net:caif_netlink_parms(): no params data found [ 531.811513][ T61] Bluetooth: hci5: command tx timeout [ 532.321948][ C0] vkms_vblank_simulate: vblank timer overrun [ 532.455663][ C0] vkms_vblank_simulate: vblank timer overrun [ 533.244728][ C0] vkms_vblank_simulate: vblank timer overrun [ 533.646274][ C0] vkms_vblank_simulate: vblank timer overrun [ 533.873097][ T61] Bluetooth: hci5: command tx timeout [ 534.170560][ C0] vkms_vblank_simulate: vblank timer overrun [ 535.083333][ C0] vkms_vblank_simulate: vblank timer overrun [ 535.110118][ C0] vkms_vblank_simulate: vblank timer overrun [ 535.366037][ T8440] fuse: Unknown parameter 'user_id00000000000000000000' [ 535.963184][ T61] Bluetooth: hci5: command tx timeout [ 536.175787][ T8366] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.176716][ T8366] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.176993][ T8366] bridge_slave_0: entered allmulticast mode [ 536.190308][ T8366] bridge_slave_0: entered promiscuous mode [ 536.241057][ T8366] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.241329][ T8366] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.241597][ T8366] bridge_slave_1: entered allmulticast mode [ 536.312456][ T8366] bridge_slave_1: entered promiscuous mode [ 536.443598][ C0] vkms_vblank_simulate: vblank timer overrun [ 536.523643][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.563148][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.888171][ C0] vkms_vblank_simulate: vblank timer overrun [ 538.224371][ T8366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.250772][ T8366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.343141][ T5888] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 542.581078][ T5888] usb 5-1: device descriptor read/all, error -71 [ 543.445686][ T8366] team0: Port device team_slave_0 added [ 543.589948][ T8366] team0: Port device team_slave_1 added [ 546.099545][ T8366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.099567][ T8366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.099595][ T8366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.463546][ T8485] fuse: Unknown parameter 'user_id00000000000000000000' [ 547.424417][ T8366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.424431][ T8366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.424448][ T8366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.951099][ T72] bridge_slave_1: left allmulticast mode [ 547.951204][ T72] bridge_slave_1: left promiscuous mode [ 547.954459][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.093175][ T991] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 548.396730][ T72] bridge_slave_0: left allmulticast mode [ 548.397560][ T72] bridge_slave_0: left promiscuous mode [ 548.397751][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.410317][ T991] usb 4-1: Using ep0 maxpacket: 16 [ 548.446907][ T991] usb 4-1: config index 0 descriptor too short (expected 62738, got 42) [ 548.446949][ T991] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.446970][ T991] usb 4-1: config 0 has no interfaces? [ 548.511739][ T991] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 548.511769][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.511787][ T991] usb 4-1: Product: syz [ 548.511799][ T991] usb 4-1: Manufacturer: syz [ 548.511811][ T991] usb 4-1: SerialNumber: syz [ 548.548331][ T991] usb 4-1: config 0 descriptor?? [ 548.770090][ T991] usb 4-1: USB disconnect, device number 24 [ 549.473186][ T8492] Bluetooth: hci5: command 0x0405 tx timeout [ 549.647640][ C1] vkms_vblank_simulate: vblank timer overrun [ 549.957587][ C1] vkms_vblank_simulate: vblank timer overrun [ 550.466581][ C1] vkms_vblank_simulate: vblank timer overrun [ 551.235965][ T8522] netlink: 28 bytes leftover after parsing attributes in process `syz.0.731'. [ 551.435948][ C1] vkms_vblank_simulate: vblank timer overrun [ 552.150478][ C1] vkms_vblank_simulate: vblank timer overrun [ 552.313693][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.343995][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.364114][ T72] bond0 (unregistering): Released all slaves [ 552.379449][ T8527] fuse: Unknown parameter 'user_id00000000000000000000' [ 552.788184][ T8366] hsr_slave_0: entered promiscuous mode [ 552.789737][ T8366] hsr_slave_1: entered promiscuous mode [ 552.790937][ T8366] debugfs: 'hsr0' already exists in 'hsr' [ 552.790965][ T8366] Cannot create hsr debugfs directory [ 555.240877][ C0] vkms_vblank_simulate: vblank timer overrun [ 555.463142][ T5888] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 555.674868][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 555.677119][ T5888] usb 1-1: config index 0 descriptor too short (expected 62738, got 42) [ 555.677151][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.677172][ T5888] usb 1-1: config 0 has no interfaces? [ 555.727123][ T5888] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 555.727158][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.727180][ T5888] usb 1-1: Product: syz [ 555.727195][ T5888] usb 1-1: Manufacturer: syz [ 555.727212][ T5888] usb 1-1: SerialNumber: syz [ 555.856713][ T5888] usb 1-1: config 0 descriptor?? [ 556.083459][ T5888] usb 1-1: USB disconnect, device number 11 [ 556.583241][ T72] hsr_slave_0: left promiscuous mode [ 556.700330][ T72] hsr_slave_1: left promiscuous mode [ 556.704261][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.758068][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.172700][ C0] vkms_vblank_simulate: vblank timer overrun [ 557.982054][ C0] vkms_vblank_simulate: vblank timer overrun [ 558.499725][ C0] vkms_vblank_simulate: vblank timer overrun [ 559.722260][ T8581] fuse: Bad value for 'fd' [ 561.120852][ C0] vkms_vblank_simulate: vblank timer overrun [ 561.416609][ C0] vkms_vblank_simulate: vblank timer overrun [ 561.842984][ C0] vkms_vblank_simulate: vblank timer overrun [ 562.079888][ C0] vkms_vblank_simulate: vblank timer overrun [ 562.236713][ C0] vkms_vblank_simulate: vblank timer overrun [ 563.317726][ C0] vkms_vblank_simulate: vblank timer overrun [ 563.408171][ C0] vkms_vblank_simulate: vblank timer overrun [ 563.449149][ C0] vkms_vblank_simulate: vblank timer overrun [ 563.451894][ T8599] blktrace: Concurrent blktraces are not allowed on loop1 [ 564.751584][ C0] vkms_vblank_simulate: vblank timer overrun [ 564.776352][ T5889] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 564.797316][ C0] vkms_vblank_simulate: vblank timer overrun [ 564.867128][ C0] vkms_vblank_simulate: vblank timer overrun [ 565.273745][ T72] team0 (unregistering): Port device team_slave_1 removed [ 565.368717][ C0] vkms_vblank_simulate: vblank timer overrun [ 565.413217][ T5889] usb 2-1: device descriptor read/64, error -71 [ 565.473687][ T72] team0 (unregistering): Port device team_slave_0 removed [ 565.663576][ T5889] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 565.682234][ C0] vkms_vblank_simulate: vblank timer overrun [ 565.834178][ C0] vkms_vblank_simulate: vblank timer overrun [ 565.843140][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 565.845430][ T5889] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.845495][ T5889] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 565.845524][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 565.845553][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 565.845576][ T5889] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 565.848520][ T5889] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 565.848553][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 565.848574][ T5889] usb 2-1: Product: syz [ 565.848590][ T5889] usb 2-1: Manufacturer: syz [ 565.848606][ T5889] usb 2-1: SerialNumber: syz [ 565.851892][ T5889] usb 2-1: config 0 descriptor?? [ 566.066296][ T5889] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 566.066316][ T5889] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 566.267396][ T5889] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 566.267416][ T5889] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 566.267429][ T5889] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 566.484626][ T5889] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 567.109008][ T5889] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 567.109441][ T5889] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 567.124446][ T5889] usb 2-1: USB disconnect, device number 18 [ 568.194591][ T8615] fuse: Bad value for 'fd' [ 568.363464][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.363568][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.458354][ T8622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.757'. [ 568.708951][ C0] vkms_vblank_simulate: vblank timer overrun [ 569.107309][ T8366] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 569.218396][ T8366] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 569.452459][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.474898][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.653939][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.986719][ C0] vkms_vblank_simulate: vblank timer overrun [ 571.009444][ T8366] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 571.801186][ C0] vkms_vblank_simulate: vblank timer overrun [ 571.838126][ T8366] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 573.056749][ C0] vkms_vblank_simulate: vblank timer overrun [ 573.146360][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.316926][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.510539][ T8366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.650744][ T8366] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.667444][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.672599][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.733657][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.733751][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.843084][ T5888] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 574.998310][ T5888] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 574.998332][ T5888] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 574.998365][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 574.998392][ T5888] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 574.998407][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.009010][ T5888] usb 5-1: config 0 descriptor?? [ 575.163526][ T5888] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 575.246823][ T991] usb 5-1: USB disconnect, device number 29 [ 575.917193][ T8691] fuse: Bad value for 'fd' [ 576.322073][ C0] vkms_vblank_simulate: vblank timer overrun [ 576.378417][ C0] vkms_vblank_simulate: vblank timer overrun [ 576.550656][ C0] vkms_vblank_simulate: vblank timer overrun [ 577.435084][ C0] vkms_vblank_simulate: vblank timer overrun [ 577.896494][ T8366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.206522][ T8366] veth0_vlan: entered promiscuous mode [ 581.238476][ T8366] veth1_vlan: entered promiscuous mode [ 581.529544][ T8756] fuse: Unknown parameter '0x0000000000000008' [ 581.542783][ T8366] veth0_macvtap: entered promiscuous mode [ 581.603001][ T8366] veth1_macvtap: entered promiscuous mode [ 581.886428][ T8366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.969362][ T8366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.998035][ T72] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.998561][ T72] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.998588][ T72] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.998611][ T72] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.508958][ T3507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.508983][ T3507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.563202][ T5889] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 582.669164][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.669190][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.726566][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 582.747766][ T5889] usb 4-1: config index 0 descriptor too short (expected 62738, got 42) [ 582.747799][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.747820][ T5889] usb 4-1: config 0 has no interfaces? [ 582.897416][ T5888] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 582.912079][ T5889] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 582.912114][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.912137][ T5889] usb 4-1: Product: syz [ 582.912152][ T5889] usb 4-1: Manufacturer: syz [ 582.912167][ T5889] usb 4-1: SerialNumber: syz [ 582.973234][ T5889] usb 4-1: config 0 descriptor?? [ 583.073372][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 583.086049][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.086109][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 583.086134][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 583.086159][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 583.086180][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 583.120860][ T5888] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 583.120900][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 583.120920][ T5888] usb 5-1: Product: syz [ 583.120934][ T5888] usb 5-1: Manufacturer: syz [ 583.120948][ T5888] usb 5-1: SerialNumber: syz [ 583.186705][ T5888] usb 5-1: config 0 descriptor?? [ 583.289628][ T8766] usb 4-1: USB disconnect, device number 25 [ 583.505888][ T5888] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 583.505919][ T5888] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 583.738893][ T5888] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 583.738917][ T5888] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 583.738935][ T5888] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 583.956580][ T5888] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 584.697413][ T5888] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 584.697861][ T5888] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 584.707186][ T5888] usb 5-1: USB disconnect, device number 30 [ 584.760557][ T8794] netlink: 28 bytes leftover after parsing attributes in process `syz.3.787'. [ 585.264860][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.347511][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.221240][ C1] vkms_vblank_simulate: vblank timer overrun [ 588.478608][ T8813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.793'. [ 588.649505][ T8706] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 588.654103][ C0] vkms_vblank_simulate: vblank timer overrun [ 588.764937][ C0] vkms_vblank_simulate: vblank timer overrun [ 589.147320][ T8706] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.147436][ T8706] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 589.147463][ T8706] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.161675][ C0] vkms_vblank_simulate: vblank timer overrun [ 590.151758][ C0] vkms_vblank_simulate: vblank timer overrun [ 590.186089][ T8706] usb 6-1: config 0 descriptor?? [ 590.322285][ C0] vkms_vblank_simulate: vblank timer overrun [ 590.701766][ T8706] usb 6-1: can't set config #0, error -71 [ 590.733780][ T8706] usb 6-1: USB disconnect, device number 2 [ 590.845465][ T8822] fuse: Unknown parameter '0x0000000000000008' [ 591.503049][ T8766] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 591.655937][ T8766] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 591.655973][ T8766] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.665616][ T8766] usb 4-1: config 0 descriptor?? [ 591.783479][ T8835] netlink: 'syz.5.797': attribute type 11 has an invalid length. [ 591.783504][ T8835] netlink: 'syz.5.797': attribute type 11 has an invalid length. [ 591.783520][ T8835] netlink: 224 bytes leftover after parsing attributes in process `syz.5.797'. [ 592.141662][ T8766] ath6kl: Failed to submit usb control message: -71 [ 592.141699][ T8766] ath6kl: unable to send the bmi data to the device: -71 [ 592.141708][ T8766] ath6kl: Unable to send get target info: -71 [ 592.168582][ T8766] ath6kl: Failed to init ath6kl core: -71 [ 592.169292][ T8766] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 592.243620][ T8766] usb 4-1: USB disconnect, device number 26 [ 592.552701][ C0] vkms_vblank_simulate: vblank timer overrun [ 592.833834][ C0] vkms_vblank_simulate: vblank timer overrun [ 592.885124][ C0] vkms_vblank_simulate: vblank timer overrun [ 593.290308][ T8823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 594.036722][ T8852] netlink: 28 bytes leftover after parsing attributes in process `syz.5.803'. [ 595.103200][ C0] vkms_vblank_simulate: vblank timer overrun [ 595.292901][ T8867] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 595.293045][ T8867] CUSE: unknown device info "3ܟ,̘" [ 595.293165][ T8867] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 595.293165][ T8867] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 595.293207][ T8867] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 595.293248][ T8867] CUSE: DEVNAME unspecified [ 595.406885][ C0] vkms_vblank_simulate: vblank timer overrun [ 595.438973][ C0] vkms_vblank_simulate: vblank timer overrun [ 595.660929][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.329736][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.764991][ T8766] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 596.803405][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.913413][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.055839][ T8766] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 597.055873][ T8766] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.068459][ T8766] usb 6-1: config 0 descriptor?? [ 597.332361][ T8877] fuse: Unknown parameter '0x0000000000000008' [ 597.411278][ T8766] ath6kl: Failed to submit usb control message: -71 [ 597.411341][ T8766] ath6kl: unable to send the bmi data to the device: -71 [ 597.411358][ T8766] ath6kl: Unable to send get target info: -71 [ 597.412352][ T8766] ath6kl: Failed to init ath6kl core: -71 [ 597.419233][ T8766] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 597.432682][ C0] vkms_vblank_simulate: vblank timer overrun [ 597.502662][ T8766] usb 6-1: USB disconnect, device number 3 [ 598.634446][ C0] vkms_vblank_simulate: vblank timer overrun [ 599.646920][ C0] vkms_vblank_simulate: vblank timer overrun [ 599.767900][ C0] vkms_vblank_simulate: vblank timer overrun [ 599.813830][ T8902] netlink: 'syz.4.815': attribute type 11 has an invalid length. [ 599.813857][ T8902] netlink: 'syz.4.815': attribute type 11 has an invalid length. [ 599.813872][ T8902] netlink: 224 bytes leftover after parsing attributes in process `syz.4.815'. [ 599.814716][ T8901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 601.178132][ C0] vkms_vblank_simulate: vblank timer overrun [ 602.271184][ C0] vkms_vblank_simulate: vblank timer overrun [ 602.375734][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.521046][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.851226][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.889971][ T8930] fuse: Unknown parameter '0x0000000000000008' [ 604.066204][ T8919] random: crng reseeded on system resumption [ 604.185057][ T991] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 604.370182][ T991] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.370224][ T991] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 604.370238][ T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.376183][ T991] usb 2-1: config 0 descriptor?? [ 604.390767][ T991] pwc: Askey VC010 type 2 USB webcam detected. [ 604.736678][ C0] vkms_vblank_simulate: vblank timer overrun [ 605.776831][ T991] pwc: recv_control_msg error -32 req 02 val 2b00 [ 605.780653][ T991] pwc: recv_control_msg error -32 req 02 val 2700 [ 605.796842][ T991] pwc: recv_control_msg error -32 req 02 val 2c00 [ 605.797880][ T991] pwc: recv_control_msg error -32 req 04 val 1000 [ 605.817695][ T991] pwc: recv_control_msg error -32 req 04 val 1300 [ 605.820735][ T991] pwc: recv_control_msg error -32 req 04 val 1400 [ 605.822725][ T991] pwc: recv_control_msg error -32 req 02 val 2000 [ 605.827315][ T991] pwc: recv_control_msg error -32 req 02 val 2100 [ 605.828261][ T991] pwc: recv_control_msg error -32 req 04 val 1500 [ 605.829139][ T991] pwc: recv_control_msg error -32 req 02 val 2500 [ 605.830360][ T991] pwc: recv_control_msg error -32 req 02 val 2400 [ 606.032095][ T991] pwc: recv_control_msg error -71 req 02 val 2900 [ 606.032492][ T991] pwc: recv_control_msg error -71 req 02 val 2800 [ 606.032892][ T991] pwc: recv_control_msg error -71 req 04 val 1100 [ 606.033437][ T991] pwc: recv_control_msg error -71 req 04 val 1200 [ 606.053965][ T991] pwc: Registered as video103. [ 606.057397][ T991] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 606.106968][ T991] usb 2-1: USB disconnect, device number 19 [ 606.297043][ T8953] netlink: 'syz.0.828': attribute type 11 has an invalid length. [ 606.297070][ T8953] netlink: 244 bytes leftover after parsing attributes in process `syz.0.828'. [ 606.297795][ T8952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.671627][ T8961] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 609.574170][ T8983] fuse: Unknown parameter '0x0000000000000008' [ 613.203071][ T5889] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 613.354888][ T5889] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 613.354905][ T5889] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 613.354915][ T5889] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 613.354947][ T5889] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 613.354963][ T5889] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 613.356498][ T5889] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 613.356515][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 613.356528][ T5889] usb 2-1: Product: syz [ 613.356536][ T5889] usb 2-1: Manufacturer: syz [ 613.442000][ T5889] cdc_wdm 2-1:1.0: skipping garbage [ 613.442015][ T5889] cdc_wdm 2-1:1.0: skipping garbage [ 613.442081][ T5889] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 613.761419][ T5889] usb 2-1: USB disconnect, device number 20 [ 615.773036][ T5855] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 616.116523][ T9024] fuse: Unknown parameter 'user_i00000000000000000000' [ 616.159783][ T5855] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.159851][ T5855] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 616.159877][ T5855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.235147][ T5855] usb 1-1: config 0 descriptor?? [ 616.242185][ T5855] pwc: Askey VC010 type 2 USB webcam detected. [ 617.415087][ T5855] pwc: recv_control_msg error -32 req 02 val 2b00 [ 617.416144][ T5855] pwc: recv_control_msg error -32 req 02 val 2700 [ 617.420384][ T5855] pwc: recv_control_msg error -32 req 02 val 2c00 [ 617.443020][ T5855] pwc: recv_control_msg error -32 req 04 val 1000 [ 617.443958][ T5855] pwc: recv_control_msg error -32 req 04 val 1300 [ 617.451060][ T5855] pwc: recv_control_msg error -32 req 04 val 1400 [ 617.451994][ T5855] pwc: recv_control_msg error -32 req 02 val 2000 [ 617.479043][ T5855] pwc: recv_control_msg error -32 req 02 val 2100 [ 617.479857][ T5855] pwc: recv_control_msg error -32 req 04 val 1500 [ 617.481238][ T5855] pwc: recv_control_msg error -32 req 02 val 2500 [ 617.484678][ T5855] pwc: recv_control_msg error -32 req 02 val 2400 [ 617.964805][ T5855] pwc: recv_control_msg error -71 req 02 val 2900 [ 617.965390][ T5855] pwc: recv_control_msg error -71 req 02 val 2800 [ 617.966183][ T5855] pwc: recv_control_msg error -71 req 04 val 1100 [ 617.966710][ T5855] pwc: recv_control_msg error -71 req 04 val 1200 [ 618.001183][ T5855] pwc: Registered as video103. [ 618.005260][ T9039] fuse: Unknown parameter '0x0000000000000007' [ 618.142547][ T9048] netlink: 28 bytes leftover after parsing attributes in process `syz.4.846'. [ 618.369046][ T5855] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 618.523646][ T5855] usb 1-1: USB disconnect, device number 12 [ 618.826667][ T9053] gretap0: entered promiscuous mode [ 626.989123][ T9114] fuse: Unknown parameter 'fd0x0000000000000008' [ 627.243507][ T5891] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 627.413205][ T5891] usb 5-1: Using ep0 maxpacket: 8 [ 627.452397][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.452442][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 627.452459][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 627.452483][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 627.452496][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 628.185578][ T5891] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 628.185615][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 628.185638][ T5891] usb 5-1: Product: syz [ 628.185654][ T5891] usb 5-1: Manufacturer: syz [ 628.185670][ T5891] usb 5-1: SerialNumber: syz [ 628.205445][ T5891] usb 5-1: config 0 descriptor?? [ 628.455477][ T5891] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 628.455496][ T5891] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 628.667672][ T5891] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 628.667701][ T5891] radio-si470x 5-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 628.668038][ T5891] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 628.680811][ T5891] usb 5-1: USB disconnect, device number 31 [ 628.960289][ T5889] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 628.961535][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 629.183273][ T5889] usb 4-1: device descriptor read/64, error -32 [ 629.433148][ T5889] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 629.453557][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 630.153433][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.153468][ T5889] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 630.153482][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.185810][ T5889] usb 4-1: config 0 descriptor?? [ 630.215951][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.216039][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.239692][ T10] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 630.239720][ T10] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 630.239790][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 630.239838][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 630.239858][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.251056][ T10] usb 6-1: config 0 descriptor?? [ 630.279420][ T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 630.724596][ T5889] usbhid 4-1:0.0: can't add hid device: -71 [ 630.724711][ T5889] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 630.730585][ T5889] usb 4-1: USB disconnect, device number 28 [ 632.525572][ T9147] random: crng reseeded on system resumption [ 632.669400][ T9149] netlink: 28 bytes leftover after parsing attributes in process `syz.3.878'. [ 633.492465][ T5891] usb 6-1: USB disconnect, device number 4 [ 633.549419][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.879'. [ 634.263715][ T9160] fuse: Unknown parameter 'user_i00000000000000000000' [ 635.262682][ T9167] fuse: Unknown parameter 'fd0x0000000000000008' [ 636.301797][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.5.886'. [ 640.640774][ T9208] random: crng reseeded on system resumption [ 643.884283][ T9220] fuse: Unknown parameter 'fd0x0000000000000008' [ 646.601749][ T9225] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.602179][ T9225] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.057182][ T5891] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 649.333021][ T5891] usb 2-1: Using ep0 maxpacket: 16 [ 649.336043][ T5891] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 649.336079][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 649.647785][ T5891] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 649.647821][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.647844][ T5891] usb 2-1: Product: syz [ 649.647860][ T5891] usb 2-1: Manufacturer: syz [ 649.647875][ T5891] usb 2-1: SerialNumber: syz [ 649.924867][ T5891] usb 2-1: config 0 descriptor?? [ 650.931203][ T5891] usb 2-1: can't set config #0, error -71 [ 650.948695][ T5891] usb 2-1: USB disconnect, device number 21 [ 651.261596][ T9225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.275646][ T9225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.143065][ T8706] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 652.753153][ T8706] usb 4-1: Using ep0 maxpacket: 8 [ 652.764988][ T8706] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.765052][ T8706] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 652.765078][ T8706] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 652.765100][ T8706] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 652.765113][ T8706] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 652.767704][ T8706] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 652.767732][ T8706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 652.767753][ T8706] usb 4-1: Product: syz [ 652.767763][ T8706] usb 4-1: Manufacturer: syz [ 652.767771][ T8706] usb 4-1: SerialNumber: syz [ 652.804954][ T8706] usb 4-1: config 0 descriptor?? [ 652.846778][ T9274] random: crng reseeded on system resumption [ 652.994762][ T61] Bluetooth: hci5: command 0x0405 tx timeout [ 653.075405][ T8706] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 653.075424][ T8706] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 653.214123][ T8706] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 653.214147][ T8706] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 653.214341][ T8706] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 653.220723][ T8706] usb 4-1: USB disconnect, device number 29 [ 653.811275][ T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.822536][ T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.822593][ T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.822632][ T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.034003][ C1] vkms_vblank_simulate: vblank timer overrun [ 654.867848][ C1] vkms_vblank_simulate: vblank timer overrun [ 655.130539][ C1] vkms_vblank_simulate: vblank timer overrun [ 656.126068][ C1] vkms_vblank_simulate: vblank timer overrun [ 656.727605][ C1] vkms_vblank_simulate: vblank timer overrun [ 656.793082][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 657.080450][ C1] vkms_vblank_simulate: vblank timer overrun [ 657.082700][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 657.096653][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.096697][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 657.096714][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 657.096730][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 657.096743][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 657.101652][ T10] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 657.101674][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 657.101686][ T10] usb 6-1: Product: syz [ 657.101695][ T10] usb 6-1: Manufacturer: syz [ 657.101704][ T10] usb 6-1: SerialNumber: syz [ 657.236346][ T9300] random: crng reseeded on system resumption [ 657.281221][ T10] usb 6-1: config 0 descriptor?? [ 657.520728][ T5855] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 657.592255][ T10] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 657.592271][ T10] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 657.771753][ T5855] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 657.791891][ T10] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 657.791913][ T10] radio-si470x 6-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 657.792102][ T10] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 657.793680][ T5855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.954767][ T5855] usb 1-1: config 0 descriptor?? [ 657.955908][ T10] usb 6-1: USB disconnect, device number 5 [ 659.201375][ T5855] ath6kl: Failed to submit usb control message: -71 [ 659.201406][ T5855] ath6kl: unable to send the bmi data to the device: -71 [ 659.201414][ T5855] ath6kl: Unable to send get target info: -71 [ 659.202071][ T5855] ath6kl: Failed to init ath6kl core: -71 [ 659.202445][ T5855] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 659.273495][ T5855] usb 1-1: USB disconnect, device number 13 [ 659.880552][ C1] vkms_vblank_simulate: vblank timer overrun [ 660.737819][ T9317] binder_alloc: 9315: binder_alloc_buf, no vma [ 661.182776][ C1] vkms_vblank_simulate: vblank timer overrun [ 661.596204][ C1] vkms_vblank_simulate: vblank timer overrun [ 662.288979][ C1] vkms_vblank_simulate: vblank timer overrun [ 662.853358][ T1230] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 664.162453][ C1] vkms_vblank_simulate: vblank timer overrun [ 664.208903][ C1] vkms_vblank_simulate: vblank timer overrun [ 664.714881][ C1] vkms_vblank_simulate: vblank timer overrun [ 665.279828][ T1230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.280120][ T1230] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 665.280187][ T1230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.366926][ T1230] usb 5-1: config 0 descriptor?? [ 667.353113][ T1230] usb 5-1: can't set config #0, error -71 [ 667.803857][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.139697][ T1230] usb 5-1: USB disconnect, device number 32 [ 672.388492][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.726736][ C1] vkms_vblank_simulate: vblank timer overrun [ 673.208234][ C1] vkms_vblank_simulate: vblank timer overrun [ 673.623037][ T5855] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 673.935431][ T5855] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 673.935454][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.966543][ T5855] usb 4-1: config 0 descriptor?? [ 674.363220][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 674.387270][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 674.389837][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 674.391111][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 674.393590][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 674.630346][ T5855] ath6kl: Failed to submit usb control message: -71 [ 674.630426][ T5855] ath6kl: unable to send the bmi data to the device: -71 [ 674.630441][ T5855] ath6kl: Unable to send get target info: -71 [ 674.662410][ T5855] ath6kl: Failed to init ath6kl core: -71 [ 674.669002][ T5855] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 674.718391][ T5855] usb 4-1: USB disconnect, device number 30 [ 675.082111][ C1] vkms_vblank_simulate: vblank timer overrun [ 675.942178][ C1] vkms_vblank_simulate: vblank timer overrun [ 676.818679][ C1] vkms_vblank_simulate: vblank timer overrun [ 676.831092][ T61] Bluetooth: hci2: command tx timeout [ 677.127062][ C1] vkms_vblank_simulate: vblank timer overrun [ 677.808835][ T9424] blktrace: Concurrent blktraces are not allowed on loop9 [ 678.149525][ C1] vkms_vblank_simulate: vblank timer overrun [ 678.517495][ C1] vkms_vblank_simulate: vblank timer overrun [ 678.690682][ C1] vkms_vblank_simulate: vblank timer overrun [ 678.842849][ T61] Bluetooth: hci2: command tx timeout [ 680.380776][ T9431] Can't find ip_set type hash:net,por [ 680.913570][ T61] Bluetooth: hci2: command tx timeout [ 683.072274][ T61] Bluetooth: hci2: command tx timeout [ 687.593089][ T5888] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 687.848011][ C0] vkms_vblank_simulate: vblank timer overrun [ 687.867585][ T5888] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 687.867614][ T5888] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 687.867647][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 687.867675][ T5888] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 687.867689][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.871219][ T5888] usb 4-1: config 0 descriptor?? [ 687.885040][ T5888] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 688.115225][ T5889] usb 4-1: USB disconnect, device number 31 [ 688.149552][ T9401] chnl_net:caif_netlink_parms(): no params data found [ 688.406151][ T9463] random: crng reseeded on system resumption [ 690.043182][ T5855] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 690.234072][ T5855] usb 4-1: Using ep0 maxpacket: 8 [ 690.252591][ T5855] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.252648][ T5855] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 690.252664][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 690.252680][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 690.252694][ T5855] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 690.255944][ T5855] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 690.255963][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 690.255975][ T5855] usb 4-1: Product: syz [ 690.255984][ T5855] usb 4-1: Manufacturer: syz [ 690.255992][ T5855] usb 4-1: SerialNumber: syz [ 690.260655][ T5855] usb 4-1: config 0 descriptor?? [ 690.725986][ T5855] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 690.726008][ T5855] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 690.910823][ T5855] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 690.910839][ T5855] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 690.910988][ T5855] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 691.033530][ T5855] usb 4-1: USB disconnect, device number 32 [ 691.367974][ C0] vkms_vblank_simulate: vblank timer overrun [ 691.372545][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.372638][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.197213][ C0] vkms_vblank_simulate: vblank timer overrun [ 692.980339][ T9401] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.980501][ T9401] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.980789][ T9401] bridge_slave_0: entered allmulticast mode [ 693.009630][ T9401] bridge_slave_0: entered promiscuous mode [ 693.270499][ T9401] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.286021][ T9401] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.344358][ T9401] bridge_slave_1: entered allmulticast mode [ 693.488041][ T9401] bridge_slave_1: entered promiscuous mode [ 695.755242][ T9506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 696.050445][ T9401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.100263][ T9401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.276345][ T13] bridge_slave_1: left allmulticast mode [ 696.276378][ T13] bridge_slave_1: left promiscuous mode [ 696.276648][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.349076][ T9519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.968'. [ 696.375016][ T13] bridge_slave_0: left allmulticast mode [ 696.375048][ T13] bridge_slave_0: left promiscuous mode [ 696.377779][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.883915][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.439373][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 707.564743][ T9593] random: crng reseeded on system resumption [ 707.575776][ T13] bond0 (unregistering): Released all slaves [ 709.357575][ T9401] team0: Port device team_slave_0 added [ 709.379570][ T9401] team0: Port device team_slave_1 added [ 710.394440][ T9607] random: crng reseeded on system resumption [ 711.304160][ C0] vkms_vblank_simulate: vblank timer overrun [ 712.136149][ C0] vkms_vblank_simulate: vblank timer overrun [ 712.491593][ C0] vkms_vblank_simulate: vblank timer overrun [ 712.527997][ T9401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.528016][ T9401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.528047][ T9401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.584210][ T9401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 712.584228][ T9401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.584257][ T9401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.659777][ C0] vkms_vblank_simulate: vblank timer overrun [ 714.592771][ C0] vkms_vblank_simulate: vblank timer overrun [ 714.902347][ C0] vkms_vblank_simulate: vblank timer overrun [ 715.087454][ T9636] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1000'. [ 715.093965][ C0] vkms_vblank_simulate: vblank timer overrun [ 715.349306][ C0] vkms_vblank_simulate: vblank timer overrun [ 715.561568][ C0] vkms_vblank_simulate: vblank timer overrun [ 716.221612][ T9401] hsr_slave_0: entered promiscuous mode [ 716.230383][ T9401] hsr_slave_1: entered promiscuous mode [ 716.232563][ T9401] debugfs: 'hsr0' already exists in 'hsr' [ 716.232595][ T9401] Cannot create hsr debugfs directory [ 717.412124][ C0] vkms_vblank_simulate: vblank timer overrun [ 717.494782][ C0] vkms_vblank_simulate: vblank timer overrun [ 717.503158][ T9642] random: crng reseeded on system resumption [ 717.712997][ C0] vkms_vblank_simulate: vblank timer overrun [ 717.753780][ C0] vkms_vblank_simulate: vblank timer overrun [ 717.798956][ C0] vkms_vblank_simulate: vblank timer overrun [ 717.965947][ C0] vkms_vblank_simulate: vblank timer overrun [ 718.922989][ T13] hsr_slave_0: left promiscuous mode [ 719.016943][ T13] hsr_slave_1: left promiscuous mode [ 719.017724][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.064247][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.275042][ C0] vkms_vblank_simulate: vblank timer overrun [ 719.617998][ C0] vkms_vblank_simulate: vblank timer overrun [ 719.826106][ T9659] random: crng reseeded on system resumption [ 720.473926][ C0] vkms_vblank_simulate: vblank timer overrun [ 720.684722][ C0] vkms_vblank_simulate: vblank timer overrun [ 720.989346][ C0] vkms_vblank_simulate: vblank timer overrun [ 721.610183][ C0] vkms_vblank_simulate: vblank timer overrun [ 721.726921][ C0] vkms_vblank_simulate: vblank timer overrun [ 726.027548][ C0] vkms_vblank_simulate: vblank timer overrun [ 726.115106][ C0] vkms_vblank_simulate: vblank timer overrun [ 726.355670][ C0] vkms_vblank_simulate: vblank timer overrun [ 726.462541][ C0] vkms_vblank_simulate: vblank timer overrun [ 726.633672][ C0] vkms_vblank_simulate: vblank timer overrun [ 727.182894][ C0] vkms_vblank_simulate: vblank timer overrun [ 728.165353][ C0] vkms_vblank_simulate: vblank timer overrun [ 728.548052][ C0] vkms_vblank_simulate: vblank timer overrun [ 728.642627][ C0] vkms_vblank_simulate: vblank timer overrun [ 728.841137][ C0] vkms_vblank_simulate: vblank timer overrun [ 728.946971][ C0] vkms_vblank_simulate: vblank timer overrun [ 729.636822][ C0] vkms_vblank_simulate: vblank timer overrun [ 729.913476][ T13] team0 (unregistering): Port device team_slave_1 removed [ 729.941556][ C0] vkms_vblank_simulate: vblank timer overrun [ 730.058811][ C0] vkms_vblank_simulate: vblank timer overrun [ 730.188501][ T13] team0 (unregistering): Port device team_slave_0 removed [ 730.219331][ C0] vkms_vblank_simulate: vblank timer overrun [ 730.425523][ C0] vkms_vblank_simulate: vblank timer overrun [ 732.159672][ T9745] random: crng reseeded on system resumption [ 733.191040][ T8492] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 733.225524][ T8492] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 733.226594][ T8492] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 733.227368][ T8492] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 733.227912][ T8492] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 735.375695][ T8492] Bluetooth: hci1: command tx timeout [ 736.059496][ C1] vkms_vblank_simulate: vblank timer overrun [ 736.731429][ C1] vkms_vblank_simulate: vblank timer overrun [ 736.845300][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 737.059868][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 737.065915][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 737.065953][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 737.069865][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 737.069894][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.069914][ T10] usb 1-1: Product: syz [ 737.069928][ T10] usb 1-1: Manufacturer: syz [ 737.069941][ T10] usb 1-1: SerialNumber: syz [ 737.089061][ T10] usb 1-1: config 0 descriptor?? [ 737.116099][ T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 737.116139][ T10] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 737.404983][ T8492] Bluetooth: hci1: command tx timeout [ 737.694633][ C1] vkms_vblank_simulate: vblank timer overrun [ 737.798754][ T10] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 737.799765][ T10] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 738.480958][ T10] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 738.480984][ T10] em28xx 1-1:0.0: No AC97 audio processor [ 738.695952][ C1] vkms_vblank_simulate: vblank timer overrun [ 738.925348][ T9790] netlink: 'syz.3.1033': attribute type 11 has an invalid length. [ 738.925433][ T9790] netlink: 'syz.3.1033': attribute type 11 has an invalid length. [ 738.925452][ T9790] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1033'. [ 738.997742][ C1] vkms_vblank_simulate: vblank timer overrun [ 739.065812][ T9748] chnl_net:caif_netlink_parms(): no params data found [ 739.472970][ T8492] Bluetooth: hci1: command tx timeout [ 739.877445][ T10] usb 1-1: USB disconnect, device number 14 [ 739.878867][ T10] em28xx 1-1:0.0: Disconnecting em28xx [ 739.880058][ T10] em28xx 1-1:0.0: Freeing device [ 741.294731][ T9790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 741.553458][ T8492] Bluetooth: hci1: command tx timeout [ 741.762663][ T13] IPVS: stop unused estimator thread 0... [ 743.194875][ T9748] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.195036][ T9748] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.195309][ T9748] bridge_slave_0: entered allmulticast mode [ 743.229219][ T9748] bridge_slave_0: entered promiscuous mode [ 743.240838][ T9748] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.241072][ T9748] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.241348][ T9748] bridge_slave_1: entered allmulticast mode [ 743.302528][ T9748] bridge_slave_1: entered promiscuous mode [ 743.730932][ T9748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.758306][ T9748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.894817][ T9846] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 744.144909][ T13] bridge_slave_1: left allmulticast mode [ 744.144932][ T13] bridge_slave_1: left promiscuous mode [ 744.145141][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.243414][ T13] bridge_slave_0: left allmulticast mode [ 744.243434][ T13] bridge_slave_0: left promiscuous mode [ 744.243615][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.313086][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 744.507060][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.507125][ T10] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 744.507148][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.522797][ T10] usb 6-1: config 0 descriptor?? [ 744.554977][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 744.905226][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.195390][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 745.196279][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 745.199723][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 745.202550][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 745.232616][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 745.234368][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 746.043753][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 746.045135][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 746.047518][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 746.076560][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 746.077195][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 746.082466][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 746.099243][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 746.392728][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 746.394498][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 746.394814][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 746.397738][ T10] pwc: Registered as video103. [ 746.404322][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input12 [ 746.440464][ T10] usb 6-1: USB disconnect, device number 6 [ 746.446678][ T13] bond0 (unregistering): Released all slaves [ 746.699689][ T9748] team0: Port device team_slave_0 added [ 747.039762][ T9748] team0: Port device team_slave_1 added [ 747.724238][ T9748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.724272][ T9748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.724304][ T9748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.824185][ T13] hsr_slave_0: left promiscuous mode [ 747.896929][ T13] hsr_slave_1: left promiscuous mode [ 747.897677][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.006867][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 749.221685][ T5889] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 749.353029][ T5889] usb 1-1: device descriptor read/64, error -71 [ 749.592572][ T13] team0 (unregistering): Port device team_slave_1 removed [ 749.600749][ T5889] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 749.723353][ T5889] usb 1-1: device descriptor read/64, error -71 [ 749.838756][ T5889] usb usb1-port1: attempt power cycle [ 750.144043][ T13] team0 (unregistering): Port device team_slave_0 removed [ 750.303164][ T5889] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 750.325130][ T5889] usb 1-1: device descriptor read/8, error -71 [ 750.502675][ T9903] binder_alloc: 9899: binder_alloc_buf, no vma [ 751.933167][ T5889] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 752.203149][ T5889] usb 1-1: device descriptor read/8, error -71 [ 752.313340][ T5889] usb usb1-port1: unable to enumerate USB device [ 753.566842][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.567555][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 755.458836][ T9931] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1063'. [ 756.105202][ T9748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.105222][ T9748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.105255][ T9748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.031965][ T9748] hsr_slave_0: entered promiscuous mode [ 758.049908][ T9748] hsr_slave_1: entered promiscuous mode [ 759.883049][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 760.014126][ T10] usb 6-1: device descriptor read/64, error -71 [ 760.047600][ T9957] binder_alloc: 9956: binder_alloc_buf, no vma [ 760.253082][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 760.383029][ T10] usb 6-1: device descriptor read/64, error -71 [ 760.493682][ T10] usb usb6-port1: attempt power cycle [ 760.846814][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 760.875685][ T10] usb 6-1: device descriptor read/8, error -71 [ 760.975153][ T9977] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1075'. [ 761.113846][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 761.133665][ T10] usb 6-1: device descriptor read/8, error -71 [ 761.188424][ T9979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 761.243297][ T10] usb usb6-port1: unable to enumerate USB device [ 761.308701][ T9748] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 761.346259][ T9748] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 761.430924][ T9748] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 761.649952][ T9748] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 765.622068][ T9748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.700858][ T9748] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.736157][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.740977][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.794029][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.794211][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.867864][T10018] netlink: 'syz.5.1080': attribute type 11 has an invalid length. [ 766.867883][T10018] netlink: 'syz.5.1080': attribute type 11 has an invalid length. [ 766.867892][T10018] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1080'. [ 769.767416][T10009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.095228][ T9748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.643024][ T1230] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 770.773133][ T1230] usb 5-1: device descriptor read/64, error -71 [ 771.013031][ T1230] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 772.481078][ T1230] usb 5-1: device descriptor read/64, error -71 [ 772.603337][ T1230] usb usb5-port1: attempt power cycle [ 773.363044][ T1230] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 773.384132][ T1230] usb 5-1: device descriptor read/8, error -71 [ 773.633074][ T1230] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 774.062433][ T9748] veth0_vlan: entered promiscuous mode [ 774.088585][ T1230] usb 5-1: device descriptor read/8, error -71 [ 774.193494][ T1230] usb usb5-port1: unable to enumerate USB device [ 774.234859][ T9748] veth1_vlan: entered promiscuous mode [ 774.938409][ C1] vkms_vblank_simulate: vblank timer overrun [ 775.179027][T10087] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1095'. [ 775.305195][ C1] vkms_vblank_simulate: vblank timer overrun [ 775.453907][ T9748] veth0_macvtap: entered promiscuous mode [ 775.637413][ C1] vkms_vblank_simulate: vblank timer overrun [ 775.663255][ T9748] veth1_macvtap: entered promiscuous mode [ 775.734519][ T9748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 775.759398][ T9748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 775.804550][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.835100][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.835838][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.846094][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.543188][T10107] blktrace: Concurrent blktraces are not allowed on loop1 [ 776.663163][ C1] vkms_vblank_simulate: vblank timer overrun [ 776.779116][ C1] vkms_vblank_simulate: vblank timer overrun [ 776.991563][T10111] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1099'. [ 777.230865][ C1] vkms_vblank_simulate: vblank timer overrun [ 777.955797][ C1] vkms_vblank_simulate: vblank timer overrun [ 778.427796][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.427822][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.123032][ T6059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.123066][ T6059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.927319][T10156] random: crng reseeded on system resumption [ 785.693286][ T5891] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 785.903605][ T5891] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 785.903935][ T5891] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 785.904009][ T5891] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 785.904938][ T5891] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 786.693029][ T5891] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 786.693272][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 786.693295][ T5891] usb 6-1: Product: syz [ 786.693306][ T5891] usb 6-1: Manufacturer: syz [ 786.721951][ T5891] cdc_wdm 6-1:1.0: skipping garbage [ 786.722003][ T5891] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 786.997871][ T5891] usb 6-1: USB disconnect, device number 11 [ 792.363656][ C0] vkms_vblank_simulate: vblank timer overrun [ 792.632336][ C0] vkms_vblank_simulate: vblank timer overrun [ 793.257577][ C0] vkms_vblank_simulate: vblank timer overrun [ 793.728221][ C0] vkms_vblank_simulate: vblank timer overrun [ 793.966922][T10221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 794.596319][ T5891] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 795.604755][ T5891] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 795.604779][ T5891] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 795.604819][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 795.604847][ T5891] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 795.604861][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.625268][ T5891] usb 1-1: config 0 descriptor?? [ 795.694973][T10237] random: crng reseeded on system resumption [ 795.892018][ T5891] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 800.475183][ T1230] usb 1-1: USB disconnect, device number 19 [ 802.010010][T10284] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 802.010026][T10284] CUSE: unknown device info "3ܟ,̘" [ 802.010034][T10284] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 802.010034][T10284] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 802.010045][T10284] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 802.010052][T10284] CUSE: DEVNAME unspecified [ 805.685152][T10317] iommufd_mock iommufd_mock0: Adding to iom[ 805.685152][T10317] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 805.933161][T10317] ------------[ cut here ]------------ [ 805.933179][T10317] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 805.933885][T10317] WARNING: CPU: 0 PID: 10317 at drivers/gpu/drm/drm_vblank.c:1308 drm_wait_one_vblank+0x571/0x5b0 [ 805.933924][T10317] Modules linked in: [ 805.933947][T10317] CPU: 0 UID: 0 PID: 10317 Comm: syz.6.1137 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 805.933973][T10317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 805.933989][T10317] RIP: 0010:drm_wait_one_vblank+0x571/0x5b0 [ 805.934012][T10317] Code: ff df 80 3c 08 00 74 08 4c 89 e7 e8 d9 5c fb fc 4d 8b 2c 24 48 c7 c7 20 4b 51 8b 4c 89 fe 4c 89 ea 44 89 f1 e8 30 ea 5d fc 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 a7 fc ff ff 44 89 f9 [ 805.934033][T10317] RSP: 0018:ffffc9000b85fac0 EFLAGS: 00010246 [ 805.934054][T10317] RAX: 9c2622ffa8d37b00 RBX: 1ffff110047fa401 RCX: 0000000000080000 [ 805.934072][T10317] RDX: ffffc900130a6000 RSI: 000000000000063c RDI: 000000000000063d [ 805.934088][T10317] RBP: ffffc9000b85fbc0 R08: 0000000000000000 R09: 0000000000000000 [ 805.934113][T10317] R10: dffffc0000000000 R11: ffffed101710487b R12: ffff888142b76000 [ 805.934131][T10317] R13: ffffffff8b54fb60 R14: 0000000000000000 R15: ffffffff8b569880 [ 805.934147][T10317] FS: 00007faed94fe6c0(0000) GS:ffff888126df9000(0000) knlGS:0000000000000000 [ 805.934167][T10317] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 805.934183][T10317] CR2: 00007faed90daf98 CR3: 000000005c0d0000 CR4: 00000000003526f0 [ 805.934205][T10317] Call Trace: [ 805.934214][T10317] [ 805.934229][T10317] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 805.934254][T10317] ? __pfx_autoremove_wake_function+0x10/0x10 [ 805.934289][T10317] ? rt_spin_unlock+0x161/0x200 [ 805.934320][T10317] ? drm_vblank_get+0x148/0x260 [ 805.934356][T10317] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 805.934380][T10317] drm_fb_helper_ioctl+0x116/0x140 [ 805.934407][T10317] do_fb_ioctl+0x45c/0x750 [ 805.934439][T10317] ? __pfx_do_fb_ioctl+0x10/0x10 [ 805.934472][T10317] ? smack_log+0xef/0x3f0 [ 805.934524][T10317] ? smk_tskacc+0x2fc/0x370 [ 805.934568][T10317] ? __pfx_smack_file_ioctl+0x10/0x10 [ 805.934616][T10317] ? __fget_files+0x3a6/0x420 [ 805.934648][T10317] ? __fget_files+0x2a/0x420 [ 805.934685][T10317] ? bpf_lsm_file_ioctl+0x9/0x20 [ 805.934707][T10317] ? __pfx_fb_ioctl+0x10/0x10 [ 805.934732][T10317] __se_sys_ioctl+0xff/0x170 [ 805.934761][T10317] do_syscall_64+0xfa/0xfa0 [ 805.934790][T10317] ? lockdep_hardirqs_on+0x9c/0x150 [ 805.934822][T10317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.934846][T10317] ? clear_bhb_loop+0x60/0xb0 [ 805.934876][T10317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.934899][T10317] RIP: 0033:0x7faedbb1f6c9 [ 805.934919][T10317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 805.934939][T10317] RSP: 002b:00007faed94fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 805.934963][T10317] RAX: ffffffffffffffda RBX: 00007faedbd76360 RCX: 00007faedbb1f6c9 [ 805.934980][T10317] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000003 [ 805.934995][T10317] RBP: 00007faedbba1f91 R08: 0000000000000000 R09: 0000000000000000 [ 805.935010][T10317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 805.935025][T10317] R13: 00007faedbd763f8 R14: 00007faedbd76360 R15: 00007fff00b46218 [ 805.935066][T10317] [ 805.935079][T10317] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 805.935095][T10317] CPU: 0 UID: 0 PID: 10317 Comm: syz.6.1137 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 805.935120][T10317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 805.935133][T10317] Call Trace: [ 805.935144][T10317] [ 805.935153][T10317] dump_stack_lvl+0x99/0x250 [ 805.935189][T10317] ? __asan_memcpy+0x40/0x70 [ 805.935217][T10317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 805.935252][T10317] ? __pfx__printk+0x10/0x10 [ 805.935297][T10317] vpanic+0x237/0x6d0 [ 805.935319][T10317] ? __pfx_vpanic+0x10/0x10 [ 805.935355][T10317] panic+0xb9/0xc0 [ 805.935376][T10317] ? __pfx_panic+0x10/0x10 [ 805.935417][T10317] __warn+0x31b/0x4b0 [ 805.935437][T10317] ? drm_wait_one_vblank+0x571/0x5b0 [ 805.935471][T10317] ? drm_wait_one_vblank+0x571/0x5b0 [ 805.935493][T10317] report_bug+0x2be/0x4f0 [ 805.935522][T10317] ? drm_wait_one_vblank+0x571/0x5b0 [ 805.935544][T10317] ? drm_wait_one_vblank+0x571/0x5b0 [ 805.935566][T10317] ? drm_wait_one_vblank+0x573/0x5b0 [ 805.935588][T10317] handle_bug+0x84/0x160 [ 805.935624][T10317] exc_invalid_op+0x1a/0x50 [ 805.935659][T10317] asm_exc_invalid_op+0x1a/0x20 [ 805.935681][T10317] RIP: 0010:drm_wait_one_vblank+0x571/0x5b0 [ 805.935704][T10317] Code: ff df 80 3c 08 00 74 08 4c 89 e7 e8 d9 5c fb fc 4d 8b 2c 24 48 c7 c7 20 4b 51 8b 4c 89 fe 4c 89 ea 44 89 f1 e8 30 ea 5d fc 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 a7 fc ff ff 44 89 f9 [ 805.935722][T10317] RSP: 0018:ffffc9000b85fac0 EFLAGS: 00010246 [ 805.935741][T10317] RAX: 9c2622ffa8d37b00 RBX: 1ffff110047fa401 RCX: 0000000000080000 [ 805.935757][T10317] RDX: ffffc900130a6000 RSI: 000000000000063c RDI: 000000000000063d [ 805.935772][T10317] RBP: ffffc9000b85fbc0 R08: 0000000000000000 R09: 0000000000000000 [ 805.935787][T10317] R10: dffffc0000000000 R11: ffffed101710487b R12: ffff888142b76000 [ 805.935804][T10317] R13: ffffffff8b54fb60 R14: 0000000000000000 R15: ffffffff8b569880 [ 805.935846][T10317] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 805.935869][T10317] ? __pfx_autoremove_wake_function+0x10/0x10 [ 805.935905][T10317] ? rt_spin_unlock+0x161/0x200 [ 805.935933][T10317] ? drm_vblank_get+0x148/0x260 [ 805.935969][T10317] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 805.935993][T10317] drm_fb_helper_ioctl+0x116/0x140 [ 805.936019][T10317] do_fb_ioctl+0x45c/0x750 [ 805.936049][T10317] ? __pfx_do_fb_ioctl+0x10/0x10 [ 805.936074][T10317] ? smack_log+0xef/0x3f0 [ 805.936124][T10317] ? smk_tskacc+0x2fc/0x370 [ 805.936167][T10317] ? __pfx_smack_file_ioctl+0x10/0x10 [ 805.936215][T10317] ? __fget_files+0x3a6/0x420 [ 805.936246][T10317] ? __fget_files+0x2a/0x420 [ 805.936282][T10317] ? bpf_lsm_file_ioctl+0x9/0x20 [ 805.936305][T10317] ? __pfx_fb_ioctl+0x10/0x10 [ 805.936341][T10317] __se_sys_ioctl+0xff/0x170 [ 805.936371][T10317] do_syscall_64+0xfa/0xfa0 [ 805.936400][T10317] ? lockdep_hardirqs_on+0x9c/0x150 [ 805.936430][T10317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.936454][T10317] ? clear_bhb_loop+0x60/0xb0 [ 805.936490][T10317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.936512][T10317] RIP: 0033:0x7faedbb1f6c9 [ 805.936530][T10317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 805.936550][T10317] RSP: 002b:00007faed94fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 805.936572][T10317] RAX: ffffffffffffffda RBX: 00007faedbd76360 RCX: 00007faedbb1f6c9 [ 805.936589][T10317] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000003 [ 805.936604][T10317] RBP: 00007faedbba1f91 R08: 0000000000000000 R09: 0000000000000000 [ 805.936619][T10317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 805.936633][T10317] R13: 00007faedbd763f8 R14: 00007faedbd76360 R15: 00007fff00b46218 [ 805.936672][T10317] [ 805.937809][T10317] Kernel Offset: disabled