last executing test programs: 14m28.115696685s ago: executing program 32 (id=122): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14m3.030907863s ago: executing program 33 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) setrlimit(0xc, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffeffffffffff}, {0x0, 0x0, 0x40000000000000, 0x9}}, [@tmpl={0x44, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x4, 0x0, 0x1}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) tkill(r5, 0x2e) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r6, 0x560a, &(0x7f0000001040)={0x0, 0x1, 0x4, 0x20, 0x0, "0000e5ff0100"}) getpgid(r5) 13m47.20294979s ago: executing program 34 (id=215): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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") mknod$loop(0x0, 0x0, 0x1) sched_setscheduler(0x0, 0x2, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) lremovexattr(0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xa, 0xff, 0xa2, 0x0, 0x3, 0xff, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) 13m39.117658474s ago: executing program 35 (id=262): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$inet(0x2b, 0x801, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x5, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 13m36.34074956s ago: executing program 36 (id=270): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffe0, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x5f, 0x2, {0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040c5}, 0x24004800) 12m40.905476328s ago: executing program 37 (id=320): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x800, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x14, 0x3, 0x3, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x2404c804) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18"], 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000a0000000500000007000000c1000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001700"/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x3f, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000340), 0x0}, 0x20) 12m19.644387245s ago: executing program 38 (id=375): bpf$MAP_CREATE(0x0, 0x0, 0xb285f305e6b16ca5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141182) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800, 0x8, 0x2}, 0x1c) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r3}, 0x10) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffc7b1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x83, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) write$FUSE_OPEN(r4, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x20) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x1, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000180)) 6m46.935334007s ago: executing program 39 (id=965): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 6m45.61120345s ago: executing program 40 (id=969): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x25) fcntl$setsig(r0, 0xa, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x15) openat$dir(0xffffffffffffff9c, 0x0, 0x20400, 0x38) r2 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r2, 0x5452, &(0x7f0000001840)=0x5d4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYRESOCT], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) syz_io_uring_setup(0xa0, &(0x7f0000000400)={0x0, 0x305cc6, 0x400, 0x0, 0x20a}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x45, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x301, 0x4800, 0x1}) 6m40.287752461s ago: executing program 41 (id=971): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 6m15.752335442s ago: executing program 42 (id=1004): syz_emit_ethernet(0x7e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbff78bbbb86dd6a331800004811000000000000000000"], 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = open$dir(0x0, 0x10000, 0x40) mknodat$loop(r1, &(0x7f0000000000)='./file0\x00', 0x20, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00') read$FUSE(r4, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0xfffffffc, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000002280)={0x0, r3}, 0x8) syz_usb_connect(0x2, 0x36, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}}) umount2(&(0x7f0000000500)='./file0\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 4m54.281306585s ago: executing program 43 (id=1143): r0 = userfaultfd(0x80001) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000280)={0x48, 0x14, r2}) close_range(r0, 0xffffffffffffffff, 0x0) 4m52.52529164s ago: executing program 3 (id=1147): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000440)='FROZEN\x00', 0x7) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x378, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x2e0, 0x206, 0x240, 0x2e0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x1e8, 0x208, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) 4m51.571417585s ago: executing program 3 (id=1148): mkdirat(0xffffffffffffff9c, 0x0, 0x100) syz_usb_connect(0x2, 0x36, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x5028, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_GET_IO_FLUSHER(0x4) syz_clone(0x25000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 4m48.372097893s ago: executing program 3 (id=1149): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_init_net_socket$ax25(0x3, 0x2, 0xcc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000040)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='tlb_flush\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 4m47.026399924s ago: executing program 3 (id=1150): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x2151090, 0x0) 4m46.890370081s ago: executing program 3 (id=1151): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x58f, 0x9410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000640)={0x20, 0x12, 0x5, {0x5, 0x6, "00f4c8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4m46.480125707s ago: executing program 3 (id=1152): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) 4m46.084844026s ago: executing program 44 (id=1152): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) 4m23.727049909s ago: executing program 9 (id=1158): io_setup(0x6, &(0x7f0000001000)=0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0x4) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r4 = fanotify_init(0x200, 0x400) fanotify_mark(r4, 0x80, 0x8, 0xffffffffffffffff, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@local, @private0={0xfc, 0x0, '\x00', 0xfd}, @loopback, 0x200008, 0x5, 0x6, 0x680, 0x8000000000000001, 0x20c200a3}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f00000001c0)=ANY=[@ANYRES32]) io_getevents(r0, 0x3, 0x0, &(0x7f00000010c0), &(0x7f0000001140)={0x0, 0x989680}) 4m22.388671155s ago: executing program 9 (id=1159): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x58f, 0x9410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000640)={0x20, 0x12, 0x5, {0x5, 0x6, "00f4c8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4m20.771461382s ago: executing program 9 (id=1160): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x20000045) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3, 0x1}}) 4m19.65917529s ago: executing program 9 (id=1162): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x2151090, 0x0) 4m19.482085063s ago: executing program 9 (id=1163): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4e, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddf"}) r4 = syz_io_uring_setup(0x172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100, 0xfffffffe, 0x2a0}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4m19.067627854s ago: executing program 9 (id=1164): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c25"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_init_net_socket$ax25(0x3, 0x2, 0xcc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000040)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='tlb_flush\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 4m18.496629074s ago: executing program 45 (id=1164): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c25"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_init_net_socket$ax25(0x3, 0x2, 0xcc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000040)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='tlb_flush\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 3m18.991787123s ago: executing program 7 (id=1276): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x14d802, 0x0) r1 = dup(r0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000040)=0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3m18.538019301s ago: executing program 7 (id=1279): socket(0x23, 0x3, 0x1) r0 = socket(0x3, 0x3, 0x0) write(r0, &(0x7f0000000000)='$\x00\x00\x00', 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendto$phonet(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendto$inet(r2, 0x0, 0x0, 0x12, 0x0, 0x0) setxattr$incfs_id(&(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000440), 0x0, 0x0, 0x2) 3m16.98839951s ago: executing program 7 (id=1283): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 3m16.228999648s ago: executing program 7 (id=1286): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x2151090, 0x0) 3m14.940533945s ago: executing program 7 (id=1289): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@gettfilter={0x24, 0x2e, 0x200, 0x70bd27, 0x64c, {0x0, 0x0, 0x0, 0x0, {0xc, 0xffe0}, {0x2, 0xf}, {0xa, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f0000000000)='.\x00', 0x0, 0xba2832, 0x0) 3m12.953278565s ago: executing program 7 (id=1292): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3m11.070195512s ago: executing program 46 (id=1292): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3m6.191996882s ago: executing program 8 (id=1311): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0xfe, 0x2, 0x16, @dev={0xfe, 0x80, '\x00', 0xe}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x10, 0x9}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x5, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xc, 0x2}, {0x0, 0x2}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x2, 0x5}, {0xa}, {0x9}]}, @const={0x7, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x61, 0x5f, 0x30]}}, &(0x7f00000010c0)=""/4096, 0x69, 0x1000, 0x0, 0x6, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0xfe}, 0x2) 3m5.597597206s ago: executing program 8 (id=1314): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@generic="b5"]}, 0x18}}, 0x0) 3m4.68307885s ago: executing program 8 (id=1317): r0 = io_uring_setup(0x667, &(0x7f00000003c0)={0x0, 0xdd3, 0x0, 0x2, 0x14a}) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 3m3.528105392s ago: executing program 8 (id=1318): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x2151090, 0x0) 3m3.241826848s ago: executing program 8 (id=1319): socket$kcm(0x1e, 0x1, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c00000033000b12c25aa9cb8c2194f90124fc60100c034006000000", 0x1c}], 0x1}, 0x0) 3m1.287947456s ago: executing program 8 (id=1326): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'ovf\x00', 0x28, 0x5, 0x72}, 0x2c) openat$mice(0xffffffffffffff9c, 0x0, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000048040)=""/102392, 0x18ff8) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x80, 0x0) write$proc_mixer(r2, 0x0, 0x9f) write$char_usb(0xffffffffffffffff, &(0x7f0000000040), 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04080b9cc9003800000000010400"], 0xe) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 3m0.566054114s ago: executing program 47 (id=1326): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'ovf\x00', 0x28, 0x5, 0x72}, 0x2c) openat$mice(0xffffffffffffff9c, 0x0, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000048040)=""/102392, 0x18ff8) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x80, 0x0) write$proc_mixer(r2, 0x0, 0x9f) write$char_usb(0xffffffffffffffff, &(0x7f0000000040), 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04080b9cc9003800000000010400"], 0xe) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 15.242901184s ago: executing program 1 (id=1868): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/diskstats\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000380)=""/135, 0x87}], 0x1, 0x154, 0x0) 14.452297602s ago: executing program 1 (id=1870): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, &(0x7f0000001c00)=[{}]}) 14.155430473s ago: executing program 1 (id=1871): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f0000000700)={0xe, 0x1, &(0x7f00000000c0)=[0x5], &(0x7f0000000040), &(0x7f0000000240)=[0x7], 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 13.402648199s ago: executing program 4 (id=1875): io_uring_setup(0x9, 0x0) syz_io_uring_setup(0x1237, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x3b, 0x0) syz_usb_connect$hid(0x1, 0x36, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xfefffffa, 0x0) 10.937474116s ago: executing program 5 (id=1880): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="0a00f7ff080211000001000004002a0008009e"], 0x34}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 10.188600715s ago: executing program 4 (id=1881): setresuid(0xee00, 0xee00, 0x0) socket$key(0xf, 0x3, 0x2) 10.165000522s ago: executing program 5 (id=1882): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000380)={0x0, 0x8, 0x2, &(0x7f0000000000)={0x1b, "a7d46004b8e589618ceb9201a7347d377e11caa4391ba1929e6785a4864a9331ab"}}) 9.556039535s ago: executing program 4 (id=1885): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1020}], 0x1}}], 0x8, 0x34000, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) write$FUSE_ATTR(r0, 0x0, 0x0) 8.762402248s ago: executing program 1 (id=1886): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) userfaultfd(0x80001) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20000400) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0x5ea, 0x3, 0x0, 0x0, 0xe}, 0x0, 0x0, 0x0, 0x0) 7.540524351s ago: executing program 0 (id=1892): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0xa002, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x6) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023892) io_uring_enter(r1, 0x23bb, 0x8088, 0x2a, &(0x7f0000000180)={[0x3]}, 0x8) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x8, 0x8, 0x2, 0x0, 0x4, "9da1cd7ab0d5d3fd"}) 6.98013887s ago: executing program 1 (id=1893): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="611404"], 0xa8) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=ANY=[@ANYBLOB="c2bfc9e6ca04348807f4a4d987bc162b671c8159ca759ce451"], 0x38}}, 0x0) 6.724949012s ago: executing program 1 (id=1895): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet6_udp(0xa, 0x2, 0x0) gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) 6.580144379s ago: executing program 5 (id=1896): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x14, r5}) 6.579857029s ago: executing program 6 (id=1897): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r1, 0x1, 0x1e, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c010000100013072abd70000000000064010100000000000000000000000000200100000000000000000000000000020000000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000000000032000000ff02000000000000000000000000000100000000000000000000000000000000fffffeffffffffff000000000000000004000000000000000000000000000002000000000000000002000000000000000000000000000000d105000000000000000000000000000007000000000000000900000002000000030000002dbd70000635000002000400000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000a"], 0x16c}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) 6.519713196s ago: executing program 2 (id=1898): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) writev(r0, &(0x7f0000000880)=[{&(0x7f0000000600)="18dff49858454fa491119b39f4ec02351402d69d02218513b580502ab73969fbcb8a40bb1a64809c163303e86c133317f29d7e6e36c73e48253f01c272ec92fbc348244d10ce2c6bf23ea037d0557d84d20daea2bf3c058abfe432abbd8e9caa85ad0b8735520934a1d67b761b5dc37cf6e5f8c97d4bd70594b5a70a07775b2be008eed722b8555654b1c7bf539c5971e42a4a77b80a520022826b00b1ef2c9847787cac29cbaa00434abf377f953fe1f06ff3cbe07550b622bde2bc7d5c5b68753a4d94bdeb60c704ec50fc674079ea876dfba754ac108a5b9c6ad9dfbf1b1349e3df786438ca6398943f11669967824c3e4300", 0xf4}, {&(0x7f0000000d00)="845a6ee005638b2ad5dfa946f0633199a56cfa28b954f52ce3bc96ed1ffc361391d7d17045334ce9d5bce43aec5764594c6990570a911f8e19b67ac28237444f36db4d873eb720364e02738406b1db285123e01365ddb94decdbe7fb481edcddf8fc77a271c54201dd827c7283600fda09663bac7efb887e41cb330805bbba05cea8248bad80d8c3df57d2b83ce207239a2f0efd1c414d737315e3a650cd62caad58b3f1bb8b3732b3fa1ed3d38a9088490ba4a8c694e3c07f5953bdff4a145188e9c60155529b3ba1595fbce830268d5a21eec04c46e1950d2f167ff9fff49cd6111017294bf8c5d2", 0xe9}, {&(0x7f0000000f00)="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", 0x102}, {&(0x7f0000000200)="202bb0415639f0c1e98ad3c35ba126faa9e43e618c9679bae2c30304d1850473f4302215ea2a192d9901b0781473c381e7904a63aba8ed92e2c3d816ba0ccb9c36956022c1f7656660e573c38b9cf98d3e6ea19ea82ffab1ff10efc0b8351d0fe7423a3e5158c1e0e4831ecc8df81a0f8827e5c49556cabf334789727d6414d056bd6fb1a1311c748dfdc72879c6091c30be23580eecd40e8c4071375d5b4dc64f1a7c409c904b6ea93b2e9fabfe6ced7c0f03624557addd7d4329b5a8bb86b164c377202f2c41b910d6fe0009b5c29030e62ef0d0359a430000000000", 0xdd}, {&(0x7f0000000e80)="94d1f2e1ab95afe67e299cbc47530ccadacb8ecabe3c73ac55d925a0d52a79ceedae83cf90a1789f07fbde8a75991d1e775ce7bdb15e59273429b52a246643318051f60e", 0x44}, {&(0x7f0000002300)="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", 0x29a}, {&(0x7f0000001040)="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", 0xfdc}], 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 5.946226598s ago: executing program 2 (id=1899): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xb, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001200)=""/150, 0x96}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0xc, "000080f100df000000a7d9de16c708db7200"}) r3 = syz_open_pts(r2, 0x42) r4 = dup3(r3, r2, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) 5.816101538s ago: executing program 0 (id=1900): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000019440)=[{0x0}], 0x1) 5.436614075s ago: executing program 6 (id=1901): setreuid(0xee01, 0x0) 5.334230443s ago: executing program 0 (id=1902): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@union={0x3, 0x1, 0x0, 0x5, 0x1, 0x4b22, [{0x5, 0x2001}]}]}, {0x0, [0x30, 0x5f, 0x61, 0x30, 0x2e]}}, &(0x7f0000000f40)=""/4057, 0x37, 0xfd9, 0x5, 0xffffffff}, 0x28) 5.109266607s ago: executing program 6 (id=1903): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0xf00, 0x0, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000180), 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x6, @multicast2, 0x4e22, 0x1, 'wrr\x00', 0x20, 0x1b53, 0xd}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r6, 0x5407, 0x0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) 4.986573409s ago: executing program 4 (id=1904): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0xffffffffffffff61) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) flock(0xffffffffffffffff, 0x1) socket(0x28, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r1}, 0x38) 4.88007194s ago: executing program 0 (id=1905): r0 = syz_io_uring_setup(0x6c3a, &(0x7f00000000c0)={0x0, 0xa6a3, 0x3010, 0x0, 0xfffffffd}, &(0x7f0000000040), &(0x7f0000000080)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) read$FUSE(r3, &(0x7f0000004240)={0x2020}, 0xfffffd7d) sendmmsg(r2, &(0x7f0000009c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)='m', 0x1}], 0x1}}], 0x1, 0x40008c1) poll(&(0x7f00000001c0)=[{r0, 0x400}], 0x1, 0x9) 1.993919751s ago: executing program 2 (id=1906): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000180)=0xdee4, 0x4) 1.166595307s ago: executing program 6 (id=1907): unshare(0x22020600) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f0000000240)=0x47ee917f) 1.05999014s ago: executing program 0 (id=1908): io_setup(0x6, &(0x7f0000001380)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'ovf\x00', 0x10, 0xfffffffd, 0x35}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00'}, 0x2c) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast1}}, 0x0, @in6=@empty}}, 0x0) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000402, r3, &(0x7f0000000200)) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4c, &(0x7f0000000280)) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r4, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043ed21d"], 0x20) 1.036795968s ago: executing program 4 (id=1909): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)={0x14, 0x76, 0x31f, 0x0, 0x0, "", [@nested={0x4, 0x112}]}, 0x14}], 0x1}, 0x0) 1.035484404s ago: executing program 5 (id=1910): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x1]}, 0x8, 0x0) 956.176011ms ago: executing program 2 (id=1911): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) 664.195225ms ago: executing program 6 (id=1912): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x10) 664.056996ms ago: executing program 5 (id=1913): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 576.89197ms ago: executing program 2 (id=1914): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000019440)=[{&(0x7f0000000200)}], 0x1) 552.91045ms ago: executing program 4 (id=1915): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 288.059193ms ago: executing program 6 (id=1916): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1020}], 0x1}}], 0x8, 0x34000, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) write$FUSE_ATTR(r0, 0x0, 0x0) 279.386264ms ago: executing program 5 (id=1917): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) 183.928527ms ago: executing program 0 (id=1918): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xb, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001200)=""/150, 0x96}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0xc, "000080f100df000000a7d9de16c708db7200"}) r3 = syz_open_pts(r2, 0x42) r4 = dup3(r3, r2, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) 0s ago: executing program 2 (id=1919): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0xf00, 0x0, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000180), 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x6, @multicast2, 0x4e22, 0x1, 'wrr\x00', 0x20, 0x1b53, 0xd}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r6, 0x5407, 0x0) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) kernel console output (not intermixed with test programs): 44: Unable to detect h/w, assuming cx23887 [ 826.231157][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 826.242968][ T2340] pvrusb2: Attached sub-driver cx25840 [ 826.248782][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 826.599482][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 827.501106][ T5939] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 827.615242][T11909] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1248'. [ 827.962427][ T5939] usb 2-1: Using ep0 maxpacket: 32 [ 828.020095][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.061834][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.161226][ T5939] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 828.219281][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.339837][ T5939] usb 2-1: config 0 descriptor?? [ 829.007629][ T5939] hub 2-1:0.0: USB hub found [ 829.716902][ T5939] hub 2-1:0.0: 1 port detected [ 829.831766][T11939] blktrace: Concurrent blktraces are not allowed on nullb0 [ 831.393944][ T5939] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 831.445847][ T5939] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 831.495163][ T5939] usbhid 2-1:0.0: can't add hid device: -71 [ 831.534055][ T5939] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 831.927084][ T5939] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 832.001126][ T5939] usb 2-1: device reset changed ep0 maxpacket size! [ 832.108150][ T5939] usb 2-1: USB disconnect, device number 4 [ 832.108400][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1260'. [ 832.125142][ T5831] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 832.230007][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1260'. [ 832.344460][ T5831] usb 1-1: Using ep0 maxpacket: 16 [ 832.377456][ T5831] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 832.411079][ T5831] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 832.420256][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.026467][ T5831] usb 1-1: config 0 descriptor?? [ 833.067461][ T5939] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 833.107403][ T5831] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input29 [ 833.301863][ T5939] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.324333][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 833.361066][ T5179] bcm5974 1-1:0.0: could not read from device [ 833.361299][ T5939] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 833.406141][ T5831] usb 1-1: USB disconnect, device number 12 [ 833.455747][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.554193][ T5939] usb 2-1: config 0 descriptor?? [ 833.659751][ T5939] pwc: Askey VC010 type 2 USB webcam detected. [ 834.062841][ T5939] pwc: recv_control_msg error -32 req 02 val 2b00 [ 834.103880][ T5939] pwc: recv_control_msg error -32 req 02 val 2700 [ 834.144489][ T5939] pwc: recv_control_msg error -32 req 02 val 2c00 [ 834.193268][ T5939] pwc: recv_control_msg error -32 req 04 val 1000 [ 834.221762][ T5939] pwc: recv_control_msg error -32 req 04 val 1300 [ 834.263871][ T5939] pwc: recv_control_msg error -32 req 04 val 1400 [ 834.302951][ T5939] pwc: recv_control_msg error -32 req 02 val 2000 [ 834.337899][ T5939] pwc: recv_control_msg error -32 req 02 val 2100 [ 834.587598][T11978] tipc: Started in network mode [ 834.593633][T11978] tipc: Node identity 46, cluster identity 4711 [ 834.600020][T11978] tipc: Node number set to 70 [ 834.675609][ T5939] pwc: recv_control_msg error -32 req 04 val 1500 [ 834.980994][ T5939] pwc: recv_control_msg error -32 req 02 val 2500 [ 835.226182][ T5939] pwc: recv_control_msg error -71 req 02 val 2600 [ 835.265587][ T5939] pwc: recv_control_msg error -71 req 02 val 2900 [ 835.287720][ T5939] pwc: recv_control_msg error -71 req 02 val 2800 [ 835.326741][ T5939] pwc: recv_control_msg error -71 req 04 val 1100 [ 835.432023][T11985] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1266'. [ 835.533967][ T5939] pwc: recv_control_msg error -71 req 04 val 1200 [ 836.039766][ T5939] pwc: Registered as video103. [ 836.076634][ T5939] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input31 [ 836.258306][ T5939] usb 2-1: USB disconnect, device number 5 [ 836.889221][T12004] binder: 12000:12004 ioctl c0306201 0 returned -14 [ 837.300443][T12008] loop6: detected capacity change from 0 to 524287487 [ 837.360523][T12008] buffer_io_error: 10 callbacks suppressed [ 837.360549][T12008] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.505537][T12008] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.531140][ T5831] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 837.549181][T12008] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.640564][T12008] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.723875][T12008] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.740953][ T5831] usb 6-1: Using ep0 maxpacket: 32 [ 837.763623][T12008] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.782039][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.812624][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.828642][T12008] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.847795][T12008] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.869666][ T5831] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 837.881189][T12008] ldm_validate_partition_table(): Disk read failed. [ 837.887993][T12008] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.900799][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.928347][ T5831] usb 6-1: config 0 descriptor?? [ 837.939595][T12008] Buffer I/O error on dev loop6, logical block 0, async page read [ 837.973057][ T5831] hub 6-1:0.0: USB hub found [ 837.987502][T12008] Dev loop6: unable to read RDB block 0 [ 838.009118][T12008] loop6: unable to read partition table [ 838.060659][T12008] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 838.192189][ T5831] hub 6-1:0.0: 1 port detected [ 839.607301][ T5995] usb 6-1: USB disconnect, device number 3 [ 839.961312][T12048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1282'. [ 841.056438][T12060] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1285'. [ 844.307402][ T6096] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.730593][ T6096] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.188096][ T6096] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.467330][ T6096] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.313456][ T6096] bridge_slave_1: left allmulticast mode [ 846.335605][ T6096] bridge_slave_1: left promiscuous mode [ 846.411111][T11338] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 846.419232][ T6096] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.565784][ T6096] bridge_slave_0: left allmulticast mode [ 846.591100][T11338] usb 1-1: Using ep0 maxpacket: 16 [ 846.607435][ T6096] bridge_slave_0: left promiscuous mode [ 846.620332][T11338] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 846.690091][ T6096] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.753952][T11338] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 846.796371][T11338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.835616][T11338] usb 1-1: config 0 descriptor?? [ 846.858998][T11338] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input33 [ 847.079250][ T5179] bcm5974 1-1:0.0: could not read from device [ 847.376254][T11338] usb 1-1: USB disconnect, device number 13 [ 847.411628][ T5179] bcm5974 1-1:0.0: could not read from device [ 847.607047][T12129] bcm5974 1-1:0.0: could not read from device [ 847.751677][T11109] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 847.761419][ T5831] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 847.773273][T11109] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 847.855140][T11109] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 847.878892][T11109] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 847.911461][T11109] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 847.940961][ T5831] usb 2-1: Using ep0 maxpacket: 16 [ 847.976248][T12138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1308'. [ 848.028397][ T5831] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 848.067458][ T5831] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 848.111833][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.146723][ T5831] usb 2-1: config 0 descriptor?? [ 848.169601][ T5831] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input34 [ 848.374380][ T5179] bcm5974 2-1:0.0: could not read from device [ 848.493265][ T5179] bcm5974 2-1:0.0: could not read from device [ 848.538612][ T5831] bcm5974 2-1:0.0: could not read from device [ 848.547966][ T5179] bcm5974 2-1:0.0: could not read from device [ 848.623789][ T5831] input: failed to attach handler mousedev to device input34, error: -5 [ 848.671416][ T5831] usb 2-1: USB disconnect, device number 6 [ 850.210412][ T5846] Bluetooth: hci1: command tx timeout [ 850.336196][ T6096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 850.384275][ T6096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 850.419532][ T6096] bond0 (unregistering): Released all slaves [ 851.039463][T12159] ALSA: mixer_oss: invalid OSS volume '' [ 851.069275][T11338] IPVS: starting estimator thread 0... [ 851.178724][T12161] IPVS: using max 27 ests per chain, 64800 per kthread [ 852.290650][ T5846] Bluetooth: hci1: command tx timeout [ 854.346168][ T5846] Bluetooth: hci1: command tx timeout [ 854.411099][T11338] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 854.760993][T11338] usb 6-1: Using ep0 maxpacket: 32 [ 855.025428][T11338] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 855.230446][T11338] usb 6-1: config 0 has no interface number 0 [ 855.254219][T11338] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 855.308959][T11338] usb 6-1: config 0 interface 85 has no altsetting 0 [ 855.345871][T11338] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 855.387859][T11338] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.408990][T11338] usb 6-1: Product: syz [ 855.423572][T11338] usb 6-1: Manufacturer: syz [ 855.445742][T11338] usb 6-1: SerialNumber: syz [ 855.491902][T11338] usb 6-1: config 0 descriptor?? [ 855.607464][ T6096] hsr_slave_0: left promiscuous mode [ 855.619549][ T6096] hsr_slave_1: left promiscuous mode [ 855.626098][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 855.655585][ T6096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.669419][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 855.687517][ T6096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.730744][ T6096] veth1_macvtap: left promiscuous mode [ 855.772836][ T6096] veth0_macvtap: left promiscuous mode [ 855.785007][ T6096] veth1_vlan: left promiscuous mode [ 855.790413][ T6096] veth0_vlan: left promiscuous mode [ 855.926592][T11338] appletouch 6-1:0.85: Failed to read mode from device. [ 855.941049][T11338] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 855.967969][T11338] usb 6-1: USB disconnect, device number 4 [ 856.430348][ T5846] Bluetooth: hci1: command tx timeout [ 856.535796][T12229] netlink: 'syz.0.1329': attribute type 4 has an invalid length. [ 856.543660][T12229] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1329'. [ 857.390977][ T5995] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 857.610955][ T5995] usb 3-1: Using ep0 maxpacket: 32 [ 857.636787][ T5995] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.693491][ T5995] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.733645][ T5995] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 857.777226][ T5995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.552148][ T5995] usb 3-1: config 0 descriptor?? [ 858.605640][ T5995] hub 3-1:0.0: USB hub found [ 858.814399][ T5995] hub 3-1:0.0: 1 port detected [ 858.958744][ T977] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 859.309850][ T977] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 859.346302][ T977] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 859.422730][ T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.582624][ T977] usb 6-1: config 0 descriptor?? [ 859.620749][ T977] pwc: Askey VC010 type 2 USB webcam detected. [ 859.727012][T11109] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 859.737935][T11109] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 859.749172][T11109] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 859.767190][T11109] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 859.783331][T11109] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 859.815387][T11338] usb 3-1: USB disconnect, device number 7 [ 860.038317][ T977] pwc: recv_control_msg error -32 req 02 val 2b00 [ 860.061332][ T977] pwc: recv_control_msg error -32 req 02 val 2700 [ 860.069217][ T977] pwc: recv_control_msg error -32 req 02 val 2c00 [ 860.091997][ T977] pwc: recv_control_msg error -32 req 04 val 1000 [ 860.121425][ T977] pwc: recv_control_msg error -32 req 04 val 1300 [ 860.133208][ T977] pwc: recv_control_msg error -32 req 04 val 1400 [ 860.140900][ T977] pwc: recv_control_msg error -32 req 02 val 2000 [ 860.160246][ T977] pwc: recv_control_msg error -32 req 02 val 2100 [ 860.169518][ T977] pwc: recv_control_msg error -32 req 04 val 1500 [ 860.196128][ T977] pwc: recv_control_msg error -32 req 02 val 2500 [ 860.409807][ T977] pwc: recv_control_msg error -71 req 02 val 2600 [ 860.437585][ T977] pwc: recv_control_msg error -71 req 02 val 2900 [ 860.452216][ T977] pwc: recv_control_msg error -71 req 02 val 2800 [ 860.465818][ T977] pwc: recv_control_msg error -71 req 04 val 1100 [ 860.493812][ T977] pwc: recv_control_msg error -71 req 04 val 1200 [ 860.517474][ T977] pwc: Registered as video103. [ 860.540403][ T977] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input38 [ 860.561597][ T6096] team0 (unregistering): Port device team_slave_1 removed [ 860.627994][ T977] usb 6-1: USB disconnect, device number 5 [ 860.813391][ T6096] team0 (unregistering): Port device team_slave_0 removed [ 861.646590][T12250] tipc: Started in network mode [ 861.657365][T12250] tipc: Node identity 46, cluster identity 4711 [ 861.664437][T12250] tipc: Node number set to 70 [ 861.863457][T11109] Bluetooth: hci3: command tx timeout [ 862.436574][T12293] netlink: 'syz.0.1342': attribute type 4 has an invalid length. [ 862.445035][T12293] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1342'. [ 863.673516][T12133] chnl_net:caif_netlink_parms(): no params data found [ 863.693974][ T6096] IPVS: stop unused estimator thread 0... [ 863.942359][T11109] Bluetooth: hci3: command tx timeout [ 865.075510][ T6096] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.398336][ T6096] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.421701][ T5939] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 865.588322][T12133] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.597978][ T5939] usb 3-1: Using ep0 maxpacket: 32 [ 865.624921][ T5939] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 865.633782][T12133] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.651204][ T5939] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 865.660481][T12133] bridge_slave_0: entered allmulticast mode [ 865.681164][ T5939] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 865.710860][T12133] bridge_slave_0: entered promiscuous mode [ 865.731235][ T5939] usb 3-1: config 1 has no interface number 0 [ 865.752493][T12133] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.771402][ T5939] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 865.803149][T12133] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.825241][ T5939] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 865.840652][T12133] bridge_slave_1: entered allmulticast mode [ 865.863659][T12133] bridge_slave_1: entered promiscuous mode [ 865.874016][ T5939] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 865.934208][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.021000][T11109] Bluetooth: hci3: command tx timeout [ 866.022428][ T5939] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 866.494525][ T6096] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.388392][ T5939] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 867.430742][T12253] chnl_net:caif_netlink_parms(): no params data found [ 867.680493][T12133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.025044][T12133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.182917][T11109] Bluetooth: hci3: command tx timeout [ 869.042881][ T5939] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 869.224193][ T6096] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.343651][T11338] usb 3-1: USB disconnect, device number 8 [ 869.355474][T11338] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 869.670887][T12353] netlink: 'syz.2.1354': attribute type 4 has an invalid length. [ 869.678772][T12353] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1354'. [ 869.705692][ T5995] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 869.971994][ T5995] usb 1-1: Using ep0 maxpacket: 8 [ 870.202149][ T5995] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 870.240983][ T5995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.305608][ T5995] pvrusb2: Hardware description: Terratec Grabster AV400 [ 870.333603][ T5995] pvrusb2: ********** [ 870.340597][ T5995] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 870.356758][ T5995] pvrusb2: Important functionality might not be entirely working. [ 870.368556][ T5995] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 870.384595][ T5995] pvrusb2: ********** [ 870.517185][ T2340] pvrusb2: Invalid write control endpoint [ 871.039195][ T5995] usb 1-1: USB disconnect, device number 14 [ 871.207278][T12361] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.215060][T12361] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.226860][T12361] bridge0: entered allmulticast mode [ 871.307279][ T2340] pvrusb2: Invalid write control endpoint [ 871.314875][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 871.325584][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 871.334744][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 871.349776][T12133] team0: Port device team_slave_0 added [ 871.355179][ T2340] pvrusb2: Device being rendered inoperable [ 871.377867][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 871.395614][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 871.415487][ T2340] pvrusb2: Attached sub-driver cx25840 [ 871.427869][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 871.482202][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 871.617690][T12133] team0: Port device team_slave_1 added [ 871.794685][T12253] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.814479][T12253] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.836318][T12253] bridge_slave_0: entered allmulticast mode [ 871.868445][T12253] bridge_slave_0: entered promiscuous mode [ 872.010483][T12133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.043977][T12133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.239486][T12133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.289303][T12253] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.323484][T12253] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.373224][T12253] bridge_slave_1: entered allmulticast mode [ 872.580269][T12253] bridge_slave_1: entered promiscuous mode [ 872.768694][T12133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.829506][T12133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.859540][T12133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 873.273217][T12394] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.281185][T12394] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.723630][T12394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 873.784572][T12394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 874.593612][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 874.600075][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.927077][T11338] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 876.054908][T10637] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.122454][T11338] usb 2-1: Using ep0 maxpacket: 32 [ 876.140313][T11338] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.163486][T11338] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.175937][T11338] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.199648][T12133] hsr_slave_0: entered promiscuous mode [ 876.208366][T11338] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 876.223749][T12133] hsr_slave_1: entered promiscuous mode [ 876.252353][T12133] debugfs: 'hsr0' already exists in 'hsr' [ 876.260499][T11338] usb 2-1: config 0 interface 0 has no altsetting 0 [ 876.268210][T12133] Cannot create hsr debugfs directory [ 876.387049][T12413] netlink: 'syz.5.1367': attribute type 4 has an invalid length. [ 876.395019][T12413] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1367'. [ 877.056223][T11338] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 877.068738][T10637] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.077982][T10637] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.088212][T11338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.099795][T12253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.134195][T11338] usb 2-1: config 0 descriptor?? [ 877.172276][T12253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.281819][ T151] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.484004][ T6096] bridge_slave_1: left allmulticast mode [ 877.494440][ T6096] bridge_slave_1: left promiscuous mode [ 877.507924][ T6096] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.529444][ T6096] bridge_slave_0: left allmulticast mode [ 877.541021][ T6096] bridge_slave_0: left promiscuous mode [ 877.552743][ T6096] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.657588][T11338] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 877.683291][T11338] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 877.699915][T11338] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 877.723103][T11338] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 877.739789][T11338] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 877.793159][T11338] hid-thrustmaster 0003:044F:B65D.000C: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 877.844479][T11338] hid-thrustmaster 0003:044F:B65D.000C: Wrong number of endpoints? [ 877.855628][ C0] hid-thrustmaster 0003:044F:B65D.000C: URB to get model id failed with error -71 [ 877.904708][T11338] usb 2-1: USB disconnect, device number 7 [ 878.011294][ T5831] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 878.043988][T12435] fido_id[12435]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 878.192599][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 878.215453][ T5831] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 878.257856][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.279660][ T5831] pvrusb2: Hardware description: Terratec Grabster AV400 [ 878.293803][ T5831] pvrusb2: ********** [ 878.302883][ T5831] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 878.336320][ T5831] pvrusb2: Important functionality might not be entirely working. [ 878.346340][ T5831] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 878.385323][ T5831] pvrusb2: ********** [ 878.490118][ T2340] pvrusb2: Invalid write control endpoint [ 878.610691][ T2340] pvrusb2: Invalid write control endpoint [ 878.619537][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 878.629126][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 878.639829][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 878.655264][ T2340] pvrusb2: Device being rendered inoperable [ 878.666285][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 878.692668][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 878.736983][ T2340] pvrusb2: Attached sub-driver cx25840 [ 878.743902][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 878.761235][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 879.072362][ T6096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 879.093516][ T6096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 879.114793][ T6096] bond0 (unregistering): Released all slaves [ 879.187176][T12253] team0: Port device team_slave_0 added [ 879.197945][T12424] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.206951][T12424] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.236991][T12424] bridge0: entered allmulticast mode [ 879.318027][ T5995] usb 3-1: USB disconnect, device number 9 [ 879.453851][T12253] team0: Port device team_slave_1 added [ 879.532084][ T6096] tipc: Left network mode [ 880.387968][T12253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 880.414152][T12253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.003481][T12468] netlink: 'syz.2.1379': attribute type 4 has an invalid length. [ 881.011977][T12468] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1379'. [ 881.035974][T12253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.162558][T12253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.231883][T12253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.343729][T12253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.574795][ T6096] hsr_slave_0: left promiscuous mode [ 882.631126][ T6096] hsr_slave_1: left promiscuous mode [ 882.655956][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 882.681513][ T6096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 882.720987][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 882.749826][T12498] io-wq is not configured for unbound workers [ 882.797499][ T6096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.941349][ T6096] veth1_macvtap: left promiscuous mode [ 882.967414][ T6096] veth0_macvtap: left promiscuous mode [ 882.984576][ T6096] veth1_vlan: left promiscuous mode [ 883.003227][ T6096] veth0_vlan: left promiscuous mode [ 883.968308][ T6096] team0 (unregistering): Port device team_slave_1 removed [ 884.026197][ T6096] team0 (unregistering): Port device team_slave_0 removed [ 885.227398][T12495] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.235257][T12495] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.272724][T12495] bridge0: entered allmulticast mode [ 885.352315][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 885.455580][T12507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 885.472263][T12507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 885.491912][ T24] usb 3-1: device descriptor read/64, error -71 [ 885.571004][ T5932] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 885.650956][ T5995] syz0: Port: 1 Link DOWN [ 885.655829][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.687325][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.752254][ T5932] usb 1-1: Using ep0 maxpacket: 32 [ 885.773328][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 886.066139][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.131222][ T24] usb 3-1: device descriptor read/64, error -71 [ 886.202175][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.212652][ T5932] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 886.221799][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.266621][ T5932] usb 1-1: config 0 descriptor?? [ 886.271532][ T24] usb usb3-port1: attempt power cycle [ 886.324245][ T5932] hub 1-1:0.0: USB hub found [ 886.442754][T12253] hsr_slave_0: entered promiscuous mode [ 886.459216][T12253] hsr_slave_1: entered promiscuous mode [ 886.486567][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.517062][ T5932] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 886.527245][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.671017][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 886.730430][ T24] usb 3-1: device descriptor read/8, error -71 [ 886.791444][ T5932] usbhid 1-1:0.0: can't add hid device: -71 [ 886.831137][ T5932] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 887.051635][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 887.332623][ T24] usb 3-1: device descriptor read/8, error -71 [ 887.762074][ T5932] usb 1-1: USB disconnect, device number 15 [ 887.951487][ T24] usb usb3-port1: unable to enumerate USB device [ 888.479507][T12557] loop5: detected capacity change from 0 to 512 [ 888.566430][T12557] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 888.661727][T12557] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 888.734559][T12557] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1402: invalid indirect mapped block 1 (level 1) [ 888.754607][T12557] EXT4-fs (loop5): 1 truncate cleaned up [ 888.853614][T12557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 888.976031][T12571] bridge0: entered allmulticast mode [ 889.087047][T11104] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.283888][T12133] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 889.713502][T12133] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 890.112930][T12133] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 890.227785][T12133] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 892.197746][T12133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 892.330685][T12133] 8021q: adding VLAN 0 to HW filter on device team0 [ 892.483022][ T6096] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.490257][ T6096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 892.778315][T12607] Bluetooth: MGMT ver 1.23 [ 893.276689][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.283940][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 893.429058][T12253] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 893.491160][ T30] audit: type=1326 audit(1764002184.182:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12613 comm="syz.5.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 893.587224][ T30] audit: type=1326 audit(1764002184.182:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12613 comm="syz.5.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 893.638475][T12253] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 893.661745][ T30] audit: type=1326 audit(1764002184.182:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12613 comm="syz.5.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 893.702378][T12253] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 893.709379][ T30] audit: type=1326 audit(1764002184.182:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12613 comm="syz.5.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 893.736682][ T30] audit: type=1326 audit(1764002184.182:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12613 comm="syz.5.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 893.793300][ T30] audit: type=1326 audit(1764002184.182:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12613 comm="syz.5.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 893.857482][ T30] audit: type=1326 audit(1764002184.182:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12613 comm="syz.5.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f36e59865e7 code=0x7ffc0000 [ 893.879703][T12619] bond1: Unable to set down delay as MII monitoring is disabled [ 893.883301][ T30] audit: type=1326 audit(1764002184.182:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12613 comm="syz.5.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36e592b829 code=0x7ffc0000 [ 893.909924][ T30] audit: type=1326 audit(1764002184.182:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12613 comm="syz.5.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 893.932910][ T30] audit: type=1326 audit(1764002184.182:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12613 comm="syz.5.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 893.958647][T12619] bond1 (unregistering): Released all slaves [ 894.026511][T12253] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 894.236124][T12133] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 894.258206][T12647] loop1: detected capacity change from 0 to 164 [ 894.340975][T11337] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 894.512270][T11337] usb 3-1: Using ep0 maxpacket: 16 [ 894.525513][T11337] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 894.592737][T11337] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 894.623467][T11337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.762268][T11337] usb 3-1: config 0 descriptor?? [ 894.786463][T12253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.100646][T11337] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input42 [ 895.474724][ T5179] bcm5974 3-1:0.0: could not read from device [ 895.648408][T12253] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.727079][T11337] usb 3-1: USB disconnect, device number 14 [ 896.240402][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.247655][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.562448][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.569692][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.833440][T12133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 899.061594][ T5831] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 899.219524][T12722] tipc: Started in network mode [ 899.225997][T12722] tipc: Node identity 46, cluster identity 4711 [ 899.232897][T12722] tipc: Node number set to 70 [ 899.360866][ T5831] usb 3-1: Using ep0 maxpacket: 32 [ 899.369066][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.412573][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.435123][T12253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 899.451175][ T5831] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 899.518297][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.785717][ T5831] usb 3-1: config 0 descriptor?? [ 899.820600][ T5831] hub 3-1:0.0: USB hub found [ 900.006120][T12133] veth0_vlan: entered promiscuous mode [ 900.049771][ T5831] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 900.084567][T12133] veth1_vlan: entered promiscuous mode [ 900.329683][ T5831] usbhid 3-1:0.0: can't add hid device: -71 [ 900.350708][ T5831] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 900.359321][T12133] veth0_macvtap: entered promiscuous mode [ 900.438075][T12133] veth1_macvtap: entered promiscuous mode [ 900.464340][ T5831] usb 3-1: USB disconnect, device number 15 [ 900.642967][T12133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 900.657803][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 900.657827][ T30] audit: type=1326 audit(1764002191.382:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.5.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 900.752980][T12133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 900.811485][ T30] audit: type=1326 audit(1764002191.422:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.5.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 900.854167][T10637] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.889615][T10637] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.945276][ T30] audit: type=1326 audit(1764002191.422:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.5.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 900.989355][T10637] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.035109][T10637] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.119653][ T30] audit: type=1326 audit(1764002191.422:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.5.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 901.323458][ T30] audit: type=1326 audit(1764002191.422:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.5.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 901.495435][ T30] audit: type=1326 audit(1764002191.422:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.5.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 902.152945][ T30] audit: type=1326 audit(1764002191.422:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.5.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 902.182203][ T30] audit: type=1326 audit(1764002191.422:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.5.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f36e59865e7 code=0x7ffc0000 [ 902.205064][ T30] audit: type=1326 audit(1764002191.422:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.5.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36e592b829 code=0x7ffc0000 [ 902.260360][ T30] audit: type=1326 audit(1764002191.422:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12746 comm="syz.5.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 902.371376][ T2964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.379287][ T2964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.719785][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.750904][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.781715][T12253] veth0_vlan: entered promiscuous mode [ 902.862619][T12253] veth1_vlan: entered promiscuous mode [ 903.111039][T12253] veth0_macvtap: entered promiscuous mode [ 903.213349][T12253] veth1_macvtap: entered promiscuous mode [ 903.293307][T11337] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 903.440922][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 903.493996][T12253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 903.511364][T11337] usb 3-1: Using ep0 maxpacket: 16 [ 903.538753][T11337] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 903.557481][T12253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.600288][ T2964] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.611343][T11337] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 903.648579][T11337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.659599][ T2964] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.671227][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 903.680751][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 903.691317][ T24] usb 5-1: config 0 has no interface number 0 [ 903.715719][T11337] usb 3-1: config 0 descriptor?? [ 903.730372][ T2964] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.760745][T11337] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input43 [ 903.781752][ T5995] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 903.809681][ T2964] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.829821][ T24] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 903.861489][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.914447][ T24] usb 5-1: Product: syz [ 903.954537][ T5179] bcm5974 3-1:0.0: could not read from device [ 903.963230][ T24] usb 5-1: Manufacturer: syz [ 903.990458][ T5995] usb 6-1: unable to get BOS descriptor or descriptor too short [ 904.006779][ T24] usb 5-1: SerialNumber: syz [ 904.022023][T11337] bcm5974 3-1:0.0: could not read from device [ 904.035550][ T5995] usb 6-1: not running at top speed; connect to a high speed hub [ 904.069998][ T24] usb 5-1: config 0 descriptor?? [ 904.091644][ T5179] bcm5974 3-1:0.0: could not read from device [ 904.118208][ T5995] usb 6-1: config 3 interface 0 has no altsetting 0 [ 904.154130][ T24] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 904.182667][ T5995] usb 6-1: New USB device found, idVendor=0bda, idProduct=318b, bcdDevice=85.86 [ 904.194134][T11337] input: failed to attach handler mousedev to device input43, error: -5 [ 904.202739][ T5995] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.202783][ T5995] usb 6-1: Product: syz [ 904.202830][ T5995] usb 6-1: Manufacturer: syz [ 904.202855][ T5995] usb 6-1: SerialNumber: syz [ 904.269687][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.291480][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.617982][ T5179] bcm5974 3-1:0.0: could not read from device [ 904.628797][T11337] usb 3-1: USB disconnect, device number 16 [ 904.647719][ T5995] usb 6-1: USB disconnect, device number 6 [ 905.281189][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.289206][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.758952][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 905.759013][ T30] audit: type=1326 audit(1764002196.482:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12801 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 906.032544][ T30] audit: type=1326 audit(1764002196.522:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12801 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 906.564991][ T30] audit: type=1326 audit(1764002196.522:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12801 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 906.797536][ T24] gspca_spca1528: reg_r err -71 [ 907.304286][ T24] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 907.352268][ T24] usb 5-1: USB disconnect, device number 3 [ 907.379979][ T30] audit: type=1326 audit(1764002196.532:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12801 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 907.590361][ T30] audit: type=1326 audit(1764002196.532:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12801 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 907.640202][ T30] audit: type=1326 audit(1764002196.532:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12801 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 907.664016][ T30] audit: type=1326 audit(1764002196.532:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12801 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f36e59865e7 code=0x7ffc0000 [ 907.687889][ T30] audit: type=1326 audit(1764002196.532:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12801 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36e592b829 code=0x7ffc0000 [ 907.911352][ T30] audit: type=1326 audit(1764002196.532:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12801 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 908.750380][ T30] audit: type=1326 audit(1764002196.542:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12801 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f36e59865e7 code=0x7ffc0000 [ 909.601033][T11337] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 909.820955][T11337] usb 1-1: Using ep0 maxpacket: 16 [ 910.061970][T11337] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 910.770276][T11337] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 910.779990][T11337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.812271][T11337] usb 1-1: config 0 descriptor?? [ 910.872069][T11337] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input44 [ 911.038649][ T5179] bcm5974 1-1:0.0: could not read from device [ 911.096067][T11337] bcm5974 1-1:0.0: could not read from device [ 911.388805][ T5179] bcm5974 1-1:0.0: could not read from device [ 911.522368][T11337] input: failed to attach handler mousedev to device input44, error: -5 [ 912.118378][ T5179] bcm5974 1-1:0.0: could not read from device [ 912.213604][T11337] usb 1-1: USB disconnect, device number 16 [ 912.839050][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 912.839128][ T30] audit: type=1326 audit(1764002203.552:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.5.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 913.021139][ T30] audit: type=1326 audit(1764002203.602:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.5.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 913.725258][ T30] audit: type=1326 audit(1764002203.602:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.5.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 913.973791][ T30] audit: type=1326 audit(1764002203.612:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.5.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 914.025289][T12882] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1474'. [ 914.100404][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1474'. [ 914.113598][ T30] audit: type=1326 audit(1764002203.612:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.5.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 914.146784][T12882] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1474'. [ 914.180293][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1474'. [ 914.350985][ T5934] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 914.429002][ T30] audit: type=1326 audit(1764002203.622:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.5.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 914.454666][ T30] audit: type=1326 audit(1764002203.662:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.5.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 914.490906][ T30] audit: type=1326 audit(1764002203.662:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.5.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f36e59865e7 code=0x7ffc0000 [ 914.872410][ T30] audit: type=1326 audit(1764002203.662:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.5.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36e592b829 code=0x7ffc0000 [ 914.895288][ T30] audit: type=1326 audit(1764002203.662:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12870 comm="syz.5.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 915.341547][ T5934] usb 7-1: Using ep0 maxpacket: 16 [ 915.368830][ T5934] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 915.426844][ T5934] usb 7-1: config 0 has no interface number 0 [ 915.457191][ T5934] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 915.494782][ T5934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.564747][ T5934] usb 7-1: Product: syz [ 915.569251][ T5934] usb 7-1: Manufacturer: syz [ 915.604767][ T5934] usb 7-1: SerialNumber: syz [ 915.664345][ T5934] usb 7-1: config 0 descriptor?? [ 915.756438][ T5934] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 916.021058][T11337] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 916.238466][T12913] loop1: detected capacity change from 0 to 512 [ 916.341189][T12912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1480'. [ 916.605358][T12913] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 916.645350][T12913] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 916.681476][T11337] usb 5-1: Using ep0 maxpacket: 16 [ 916.709790][T11337] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 916.712325][T12913] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1482: invalid indirect mapped block 4294967295 (level 0) [ 916.766319][T12913] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1482: invalid indirect mapped block 4294967295 (level 1) [ 916.792890][T11337] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 916.812694][T12913] EXT4-fs (loop1): 1 orphan inode deleted [ 916.818445][T12913] EXT4-fs (loop1): 1 truncate cleaned up [ 916.832637][T11337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.868650][T11337] usb 5-1: config 0 descriptor?? [ 916.907834][T12913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 916.953436][T11337] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input45 [ 917.199817][ T5179] bcm5974 5-1:0.0: could not read from device [ 917.202469][T11119] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 917.437488][T11337] bcm5974 5-1:0.0: could not read from device [ 917.474749][T12924] tipc: Started in network mode [ 917.480874][T12924] tipc: Node identity 46, cluster identity 4711 [ 917.487371][T12924] tipc: Node number set to 70 [ 917.836253][ T5179] bcm5974 5-1:0.0: could not read from device [ 917.948997][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 917.949024][ T30] audit: type=1326 audit(1764002208.662:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12925 comm="syz.5.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 918.043604][T11337] input: failed to attach handler mousedev to device input45, error: -5 [ 918.088050][ T30] audit: type=1326 audit(1764002208.662:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12925 comm="syz.5.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 918.122868][ T5179] bcm5974 5-1:0.0: could not read from device [ 918.129449][T11337] usb 5-1: USB disconnect, device number 4 [ 918.196888][ T30] audit: type=1326 audit(1764002208.662:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12925 comm="syz.5.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 918.282350][ T30] audit: type=1326 audit(1764002208.662:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12925 comm="syz.5.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 918.391294][ T30] audit: type=1326 audit(1764002208.662:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12925 comm="syz.5.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 918.433372][ T30] audit: type=1326 audit(1764002208.662:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12925 comm="syz.5.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 918.463605][ T30] audit: type=1326 audit(1764002208.662:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12925 comm="syz.5.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 918.518535][ T5934] gspca_spca1528: reg_r err -71 [ 918.543972][ T5934] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 918.593999][ T30] audit: type=1326 audit(1764002208.662:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12925 comm="syz.5.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f36e59865e7 code=0x7ffc0000 [ 918.678366][ T30] audit: type=1326 audit(1764002208.662:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12925 comm="syz.5.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36e592b829 code=0x7ffc0000 [ 918.739899][ T5934] usb 7-1: USB disconnect, device number 12 [ 918.970477][ T30] audit: type=1326 audit(1764002208.662:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12925 comm="syz.5.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f36e59865e7 code=0x7ffc0000 [ 923.179665][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 923.179688][ T30] audit: type=1326 audit(1764002213.892:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12988 comm="syz.0.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0173f8f749 code=0x7ffc0000 [ 923.234491][ T30] audit: type=1326 audit(1764002213.892:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12988 comm="syz.0.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0173f8f749 code=0x7ffc0000 [ 923.330942][ T5995] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 923.366403][ T30] audit: type=1326 audit(1764002213.892:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12988 comm="syz.0.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0173f8f749 code=0x7ffc0000 [ 923.529417][ T30] audit: type=1326 audit(1764002213.892:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12988 comm="syz.0.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0173f8f749 code=0x7ffc0000 [ 923.571550][ T5995] usb 7-1: Using ep0 maxpacket: 16 [ 923.619815][ T5995] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 923.708872][ T5995] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 924.264674][ T5995] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.270103][ T30] audit: type=1326 audit(1764002213.892:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12988 comm="syz.0.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0173f8f749 code=0x7ffc0000 [ 924.363325][ T5995] usb 7-1: config 0 descriptor?? [ 924.405908][ T30] audit: type=1326 audit(1764002213.892:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12988 comm="syz.0.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0173f8f749 code=0x7ffc0000 [ 924.427604][ T5995] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input46 [ 924.530877][ T30] audit: type=1326 audit(1764002213.892:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12988 comm="syz.0.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0173f865e7 code=0x7ffc0000 [ 924.629510][ T5179] bcm5974 7-1:0.0: could not read from device [ 924.679672][ T5995] bcm5974 7-1:0.0: could not read from device [ 924.696975][ T30] audit: type=1326 audit(1764002213.892:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12988 comm="syz.0.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0173f2b829 code=0x7ffc0000 [ 924.866907][T13014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1508'. [ 924.987364][ T5995] input: failed to attach handler mousedev to device input46, error: -5 [ 925.011184][ T30] audit: type=1326 audit(1764002213.892:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12988 comm="syz.0.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0173f8f749 code=0x7ffc0000 [ 925.048526][ T5179] bcm5974 7-1:0.0: could not read from device [ 925.068859][ T5995] usb 7-1: USB disconnect, device number 13 [ 925.240974][ T30] audit: type=1326 audit(1764002213.902:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12988 comm="syz.0.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0173f8f749 code=0x7ffc0000 [ 925.991036][T11338] IPVS: starting estimator thread 0... [ 926.471593][T13037] IPVS: using max 27 ests per chain, 64800 per kthread [ 929.104230][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 929.104256][ T30] audit: type=1326 audit(1764002219.832:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13070 comm="syz.0.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0173f8f749 code=0x7ffc0000 [ 929.287696][ T30] audit: type=1326 audit(1764002219.872:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13070 comm="syz.0.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0173f8f749 code=0x7ffc0000 [ 929.585971][ T30] audit: type=1326 audit(1764002219.872:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13070 comm="syz.0.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0173f8f749 code=0x7ffc0000 [ 929.708104][ T30] audit: type=1326 audit(1764002219.872:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13070 comm="syz.0.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0173f8f749 code=0x7ffc0000 [ 929.731088][ T30] audit: type=1326 audit(1764002219.902:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13070 comm="syz.0.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f0173f8f749 code=0x7ffc0000 [ 929.761115][ T30] audit: type=1326 audit(1764002219.902:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13070 comm="syz.0.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0173f8f749 code=0x7ffc0000 [ 929.785518][ T30] audit: type=1326 audit(1764002219.902:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13070 comm="syz.0.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0173f8f749 code=0x7ffc0000 [ 929.825819][ T30] audit: type=1326 audit(1764002219.902:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13070 comm="syz.0.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0173f8f749 code=0x7ffc0000 [ 929.970964][ T30] audit: type=1326 audit(1764002219.902:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13070 comm="syz.0.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f0173f8f749 code=0x7ffc0000 [ 930.111517][ T30] audit: type=1326 audit(1764002219.902:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13070 comm="syz.0.1525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0173f8f749 code=0x7ffc0000 [ 932.411220][T13125] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 932.811140][T13134] capability: warning: `syz.0.1547' uses deprecated v2 capabilities in a way that may be insecure [ 933.186676][T13146] loop5: detected capacity change from 0 to 1024 [ 933.255719][T13139] bond1 (unregistering): Released all slaves [ 935.062411][T13175] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 935.110898][ T5995] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 935.201667][T13181] loop2: detected capacity change from 0 to 512 [ 935.268771][T13181] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 935.281339][ T5995] usb 5-1: device descriptor read/64, error -71 [ 935.493342][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1563'. [ 935.520097][T13189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1563'. [ 935.601734][ T5995] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 935.902617][ T5995] usb 5-1: device descriptor read/64, error -71 [ 936.046083][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.071393][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.120062][ T5995] usb usb5-port1: attempt power cycle [ 936.611650][ T5995] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 936.782614][ T5995] usb 5-1: device descriptor read/8, error -71 [ 937.041081][ T5995] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 937.098807][ T5995] usb 5-1: device descriptor read/8, error -71 [ 937.221624][ T5995] usb usb5-port1: unable to enumerate USB device [ 937.537302][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 937.537324][ T30] audit: type=1326 audit(1764002228.262:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.2.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a6b8f749 code=0x7ffc0000 [ 937.566577][ C0] vkms_vblank_simulate: vblank timer overrun [ 937.626588][T13206] bond1 (unregistering): Released all slaves [ 937.705086][ T30] audit: type=1326 audit(1764002228.312:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.2.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f59a6b8f749 code=0x7ffc0000 [ 937.844378][ T30] audit: type=1326 audit(1764002228.312:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.2.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a6b8f749 code=0x7ffc0000 [ 937.867007][ C0] vkms_vblank_simulate: vblank timer overrun [ 937.965242][ T30] audit: type=1326 audit(1764002228.312:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.2.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f59a6b8f749 code=0x7ffc0000 [ 938.016732][ T30] audit: type=1326 audit(1764002228.312:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.2.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a6b8f749 code=0x7ffc0000 [ 938.146293][ T30] audit: type=1326 audit(1764002228.312:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.2.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f59a6b8f749 code=0x7ffc0000 [ 938.268419][ T30] audit: type=1326 audit(1764002228.312:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.2.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f59a6b865e7 code=0x7ffc0000 [ 938.344797][ T30] audit: type=1326 audit(1764002228.312:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.2.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f59a6b2b829 code=0x7ffc0000 [ 938.391506][T13238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1576'. [ 938.440711][T13238] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1576'. [ 938.470189][ T30] audit: type=1326 audit(1764002228.312:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.2.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59a6b8f749 code=0x7ffc0000 [ 938.550125][T13239] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 938.707668][ T30] audit: type=1326 audit(1764002228.312:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13210 comm="syz.2.1570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f59a6b8f749 code=0x7ffc0000 [ 939.545974][ T977] IPVS: starting estimator thread 0... [ 939.671572][T13255] IPVS: using max 22 ests per chain, 52800 per kthread [ 940.092932][ T977] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 940.345452][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 940.396169][ T977] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 940.512654][ T977] usb 2-1: New USB device found, idVendor=04f2, idProduct=affc, bcdDevice=88.61 [ 940.570877][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.599561][ T977] usb 2-1: Product: syz [ 940.609704][ T977] usb 2-1: Manufacturer: syz [ 940.631879][ T977] usb 2-1: SerialNumber: syz [ 940.675554][ T977] usb 2-1: config 0 descriptor?? [ 940.731051][T11337] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 940.901128][T11337] usb 6-1: device descriptor read/64, error -71 [ 941.971747][T13279] bond1 (unregistering): Released all slaves [ 942.062845][T11337] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 942.267182][T11337] usb 6-1: device descriptor read/64, error -71 [ 942.404227][T11337] usb usb6-port1: attempt power cycle [ 942.607563][T13301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1593'. [ 942.637219][T13301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1593'. [ 942.751545][ T5841] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 942.852608][T11337] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 943.157065][T11337] usb 6-1: device descriptor read/8, error -71 [ 943.231489][ T5841] usb 1-1: Using ep0 maxpacket: 8 [ 943.347567][ T5841] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 943.360966][ T5841] usb 1-1: config 179 has an invalid descriptor of length 48, skipping remainder of the config [ 943.378930][ T5841] usb 1-1: config 179 has no interface number 0 [ 943.385870][ T5841] usb 1-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 943.744905][T11337] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 944.460193][ T5841] usb 1-1: config 179 interface 65 has no altsetting 0 [ 944.481258][ T5841] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 944.493363][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.633804][T11337] usb 6-1: device descriptor read/8, error -71 [ 944.692965][ T5932] usb 2-1: USB disconnect, device number 8 [ 944.751319][T11337] usb usb6-port1: unable to enumerate USB device [ 944.795372][ T5841] usb 1-1: USB disconnect, device number 17 [ 945.183990][T13326] loop2: detected capacity change from 0 to 512 [ 945.222066][T13326] EXT4-fs (loop2): Test dummy encryption mode enabled [ 945.229310][T13326] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 945.884884][T13326] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1599: bad orphan inode 131083 [ 945.910520][T13326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 946.358952][T13337] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 946.486967][T13337] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.1599: iget: bad extra_isize 1312 (inode size 256) [ 948.345469][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 948.345490][ T30] audit: type=1326 audit(1764002239.072:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13334 comm="syz.5.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 948.391706][T11103] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.688108][ T30] audit: type=1326 audit(1764002239.082:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13334 comm="syz.5.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 948.710876][ T30] audit: type=1326 audit(1764002239.082:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13334 comm="syz.5.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 948.733633][ T30] audit: type=1326 audit(1764002239.082:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13334 comm="syz.5.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 948.764765][ T30] audit: type=1326 audit(1764002239.082:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13334 comm="syz.5.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 948.813523][ T30] audit: type=1326 audit(1764002239.112:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13334 comm="syz.5.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 948.865353][ T30] audit: type=1326 audit(1764002239.112:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13334 comm="syz.5.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f36e59865e7 code=0x7ffc0000 [ 948.888029][ T30] audit: type=1326 audit(1764002239.112:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13334 comm="syz.5.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36e592b829 code=0x7ffc0000 [ 948.911979][ T30] audit: type=1326 audit(1764002239.112:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13334 comm="syz.5.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 948.947033][ T30] audit: type=1326 audit(1764002239.112:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13334 comm="syz.5.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f36e598f749 code=0x7ffc0000 [ 949.063396][T13344] bond1 (unregistering): Released all slaves [ 950.761757][T13376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1610'. [ 950.800487][T13376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1610'. [ 951.974942][T11338] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 952.160903][T11338] usb 3-1: Using ep0 maxpacket: 8 [ 952.190946][T11338] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 952.283208][T11338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.402566][ T977] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 952.449666][T11338] pvrusb2: Hardware description: Terratec Grabster AV400 [ 952.713815][T11338] pvrusb2: ********** [ 953.556404][ T977] usb 6-1: Using ep0 maxpacket: 8 [ 953.560864][T11338] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 953.600867][T11338] pvrusb2: Important functionality might not be entirely working. [ 953.608819][T11338] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 953.614736][ T977] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 953.654085][ T977] usb 6-1: config 179 has no interface number 0 [ 953.677666][ T977] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 953.712094][ T977] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 953.737932][T11338] pvrusb2: ********** [ 953.765000][ T2340] pvrusb2: Invalid write control endpoint [ 953.798684][ T977] usb 6-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 953.956082][ T977] usb 6-1: config 179 interface 65 has no altsetting 0 [ 953.984143][ T5932] usb 3-1: USB disconnect, device number 17 [ 954.009114][ T977] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 954.053643][ T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.120404][ T2340] pvrusb2: Invalid write control endpoint [ 954.170270][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 954.244169][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 954.281166][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 954.334699][ T2340] pvrusb2: Device being rendered inoperable [ 954.355380][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 954.396788][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 954.429084][ T5934] usb 6-1: USB disconnect, device number 11 [ 954.459195][ T2340] pvrusb2: Attached sub-driver cx25840 [ 954.507488][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 954.562118][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 955.219395][T13427] loop6: detected capacity change from 0 to 512 [ 955.422374][T13427] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 955.481226][T13427] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 955.994390][T12253] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.222703][T13451] loop6: detected capacity change from 0 to 524287487 [ 956.253393][T13451] buffer_io_error: 7 callbacks suppressed [ 956.253411][T13451] Buffer I/O error on dev loop6, logical block 0, async page read [ 956.292519][T13451] Buffer I/O error on dev loop6, logical block 0, async page read [ 956.361153][T13451] Buffer I/O error on dev loop6, logical block 0, async page read [ 956.382005][T13451] Buffer I/O error on dev loop6, logical block 0, async page read [ 956.434377][T13451] Buffer I/O error on dev loop6, logical block 0, async page read [ 956.490522][T13451] Buffer I/O error on dev loop6, logical block 0, async page read [ 956.552875][T13451] Buffer I/O error on dev loop6, logical block 0, async page read [ 956.591321][T13451] Buffer I/O error on dev loop6, logical block 0, async page read [ 956.638543][T13451] ldm_validate_partition_table(): Disk read failed. [ 956.668491][T13451] Buffer I/O error on dev loop6, logical block 0, async page read [ 956.761054][T13451] Buffer I/O error on dev loop6, logical block 0, async page read [ 956.821192][T13451] Dev loop6: unable to read RDB block 0 [ 956.861250][T13451] loop6: unable to read partition table [ 956.907246][T13451] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 956.946020][ T5194] ldm_validate_partition_table(): Disk read failed. [ 956.989652][ T5194] Dev loop6: unable to read RDB block 0 [ 957.026329][ T5194] loop6: unable to read partition table [ 957.351161][T11338] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 957.723544][T11338] usb 6-1: Using ep0 maxpacket: 8 [ 957.755308][T11338] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 957.788164][T11338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.890156][T11338] pvrusb2: Hardware description: Terratec Grabster AV400 [ 957.932741][T11338] pvrusb2: ********** [ 957.936790][T11338] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 957.982698][T11338] pvrusb2: Important functionality might not be entirely working. [ 957.993171][T11338] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 958.007918][T11338] pvrusb2: ********** [ 958.079057][ T2340] pvrusb2: Invalid write control endpoint [ 958.100930][T11337] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 958.631872][T13461] pvrusb2: Invalid write control endpoint [ 958.675764][ T5831] usb 6-1: USB disconnect, device number 12 [ 958.781032][T11337] usb 5-1: Using ep0 maxpacket: 8 [ 958.872321][ T2340] pvrusb2: Invalid write control endpoint [ 958.979569][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 958.990201][T11337] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 959.117742][T11337] usb 5-1: config 179 has no interface number 0 [ 959.226557][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 959.511822][T11337] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 959.526980][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 959.545220][T11337] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 959.564603][ T2340] pvrusb2: Device being rendered inoperable [ 959.601956][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 959.621502][T11337] usb 5-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 959.651534][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 959.692193][ T2340] pvrusb2: Attached sub-driver cx25840 [ 959.698344][T11337] usb 5-1: config 179 interface 65 has no altsetting 0 [ 959.722583][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 959.758347][T11337] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 959.768628][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 959.799755][T11337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.081193][ T5932] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 960.156473][T11337] usb 5-1: USB disconnect, device number 9 [ 960.270547][ T5932] usb 3-1: config 0 has no interfaces? [ 960.324458][ T5932] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 960.342941][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.366540][ T5932] usb 3-1: Product: syz [ 960.404883][ T5932] usb 3-1: Manufacturer: syz [ 960.432018][ T5932] usb 3-1: SerialNumber: syz [ 960.464066][ T5932] usb 3-1: config 0 descriptor?? [ 960.694524][T13511] loop6: detected capacity change from 0 to 524287487 [ 961.052912][T13511] ldm_validate_partition_table(): Disk read failed. [ 961.097362][T13511] Dev loop6: unable to read RDB block 0 [ 961.103943][T13511] loop6: unable to read partition table [ 961.113210][T13511] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 961.561022][T13491] netlink: 'syz.2.1643': attribute type 16 has an invalid length. [ 961.569064][T13491] netlink: 'syz.2.1643': attribute type 17 has an invalid length. [ 961.686923][T13491] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 961.727113][T11337] usb 3-1: USB disconnect, device number 18 [ 962.973753][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 963.371425][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 963.414095][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 963.447037][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.872452][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 963.949246][ T24] pvrusb2: ********** [ 964.025971][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 964.170839][ T24] pvrusb2: Important functionality might not be entirely working. [ 964.204549][T13550] tipc: Started in network mode [ 964.209530][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 964.249261][T13550] tipc: Node identity 46, cluster identity 4711 [ 964.260053][T13550] tipc: Node number set to 70 [ 964.278231][ T24] pvrusb2: ********** [ 964.349363][ T2340] pvrusb2: Invalid write control endpoint [ 964.539049][T11337] usb 3-1: USB disconnect, device number 19 [ 964.666103][ T2340] pvrusb2: Invalid write control endpoint [ 964.705530][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 964.749276][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 964.770911][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 964.798038][ T2340] pvrusb2: Device being rendered inoperable [ 964.816513][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 964.842104][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 964.876101][ T2340] pvrusb2: Attached sub-driver cx25840 [ 964.894505][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 964.954603][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 965.032457][ T5831] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 965.097025][T13573] loop6: detected capacity change from 0 to 524287487 [ 965.182873][T13573] buffer_io_error: 39 callbacks suppressed [ 965.182900][T13573] Buffer I/O error on dev loop6, logical block 0, async page read [ 965.211274][ T5831] usb 1-1: Using ep0 maxpacket: 8 [ 965.239548][ T5831] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 965.261554][T13573] Buffer I/O error on dev loop6, logical block 0, async page read [ 965.268062][ T5831] usb 1-1: config 179 has no interface number 0 [ 965.270162][T13573] Buffer I/O error on dev loop6, logical block 0, async page read [ 965.290445][ T5831] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 965.321823][ T5831] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 965.344701][T13573] Buffer I/O error on dev loop6, logical block 0, async page read [ 965.366452][ T5831] usb 1-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 965.402659][T13573] Buffer I/O error on dev loop6, logical block 0, async page read [ 965.421406][ T5831] usb 1-1: config 179 interface 65 has no altsetting 0 [ 965.442824][ T5831] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 965.455628][T13573] Buffer I/O error on dev loop6, logical block 0, async page read [ 965.463452][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.552600][T13573] Buffer I/O error on dev loop6, logical block 0, async page read [ 965.590169][T13573] Buffer I/O error on dev loop6, logical block 0, async page read [ 965.626285][T13573] ldm_validate_partition_table(): Disk read failed. [ 965.651610][T13573] Buffer I/O error on dev loop6, logical block 0, async page read [ 965.659577][T13573] Buffer I/O error on dev loop6, logical block 0, async page read [ 965.685557][T13573] Dev loop6: unable to read RDB block 0 [ 965.695695][ T5831] usb 1-1: USB disconnect, device number 18 [ 965.696382][T13573] loop6: unable to read partition table [ 965.728572][T13573] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 966.590943][ T5831] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 966.781068][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 966.807932][ T5831] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 966.824525][ T5831] usb 3-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 966.874914][ T5831] usb 3-1: config 179 has no interface number 0 [ 966.902272][ T5831] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 966.923152][ T5831] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 966.946430][ T5831] usb 3-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 966.986083][ T5831] usb 3-1: config 179 interface 65 has no altsetting 0 [ 967.006870][ T5831] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 967.027692][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.200913][T11338] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 968.385756][T11338] usb 2-1: Using ep0 maxpacket: 8 [ 968.417987][T11338] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 968.437735][T11338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.444981][ T5831] usb 3-1: USB disconnect, device number 20 [ 968.524143][T11338] pvrusb2: Hardware description: Terratec Grabster AV400 [ 968.546572][T11338] pvrusb2: ********** [ 968.550608][T11338] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 968.611077][T11338] pvrusb2: Important functionality might not be entirely working. [ 968.639387][T11338] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 968.665121][T11338] pvrusb2: ********** [ 968.683638][T13636] loop6: detected capacity change from 0 to 524287487 [ 968.707350][ T2340] pvrusb2: Invalid write control endpoint [ 968.726530][T13636] ldm_validate_partition_table(): Disk read failed. [ 968.766438][T13636] Dev loop6: unable to read RDB block 0 [ 968.791819][T13636] loop6: unable to read partition table [ 968.826717][T13636] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 968.831550][T13639] fuse: Bad value for 'fd' [ 968.892614][ T2340] pvrusb2: Invalid write control endpoint [ 968.924314][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 968.991615][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 969.048369][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 969.127591][ T2340] pvrusb2: Device being rendered inoperable [ 969.196745][T13618] pvrusb2: Attempted to execute control transfer when device not ok [ 969.242558][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 969.244837][T11337] usb 2-1: USB disconnect, device number 9 [ 969.300166][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 969.404661][ T2340] pvrusb2: Attached sub-driver cx25840 [ 969.410190][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 969.520551][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 969.621140][ T5831] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 970.030884][ T5831] usb 3-1: Using ep0 maxpacket: 8 [ 970.327872][ T5831] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 970.711484][ T5831] usb 3-1: config 179 has no interface number 0 [ 970.717827][ T5831] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 970.881350][ T5831] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 970.909226][ T5831] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 7 [ 970.960875][ T5831] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 9272, setting to 1024 [ 971.015446][ T5831] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 971.064284][ T5831] usb 3-1: config 179 interface 65 has no altsetting 0 [ 971.093306][ T5831] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 971.115616][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.192602][T13683] loop4: detected capacity change from 0 to 512 [ 971.225265][T13683] EXT4-fs: Ignoring removed i_version option [ 971.520213][T13689] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1695'. [ 971.536794][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 972.303152][T13691] 9pnet_fd: Insufficient options for proto=fd [ 972.449533][ T24] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 972.469167][T13683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 972.470368][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 972.494016][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 972.507962][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 972.521461][T13683] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 972.581012][ T5841] usb 3-1: USB disconnect, device number 21 [ 972.618046][T13699] loop6: detected capacity change from 0 to 524287487 [ 972.661942][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 972.688243][T13699] buffer_io_error: 24 callbacks suppressed [ 972.688270][T13699] Buffer I/O error on dev loop6, logical block 0, async page read [ 972.703372][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.745347][ T24] usb 1-1: config 0 descriptor?? [ 972.767470][T13678] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 972.772256][T13703] misc userio: The device must be registered before sending interrupts [ 972.791608][T13699] Buffer I/O error on dev loop6, logical block 0, async page read [ 972.822605][T13699] Buffer I/O error on dev loop6, logical block 0, async page read [ 972.832131][T13704] fuse: Bad value for 'fd' [ 972.875980][T13699] Buffer I/O error on dev loop6, logical block 0, async page read [ 972.912650][T12133] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.944298][T13699] Buffer I/O error on dev loop6, logical block 0, async page read [ 972.976763][T13699] Buffer I/O error on dev loop6, logical block 0, async page read [ 972.987603][T13699] Buffer I/O error on dev loop6, logical block 0, async page read [ 973.034270][T13699] Buffer I/O error on dev loop6, logical block 0, async page read [ 973.060542][T13699] ldm_validate_partition_table(): Disk read failed. [ 973.091240][T13699] Buffer I/O error on dev loop6, logical block 0, async page read [ 973.099391][T13699] Buffer I/O error on dev loop6, logical block 0, async page read [ 973.165399][T13713] loop4: detected capacity change from 0 to 512 [ 973.170902][T13699] Dev loop6: unable to read RDB block 0 [ 973.178341][T13699] loop6: unable to read partition table [ 973.187112][T13699] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 973.231573][T13713] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1702: inode has both inline data and extents flags [ 973.282929][T13713] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1702: couldn't read orphan inode 15 (err -117) [ 973.376304][T13713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 973.391400][ T977] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 973.571128][ T977] usb 3-1: Using ep0 maxpacket: 8 [ 973.607624][ T977] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 973.649524][ T24] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 973.679880][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.693341][ T24] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 973.753859][ T24] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 973.777176][ T24] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 973.788433][T12133] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.799348][ T977] pvrusb2: Hardware description: Terratec Grabster AV400 [ 973.826946][ T977] pvrusb2: ********** [ 973.832043][ T24] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 973.850948][ T977] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 973.870023][ T24] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 973.923648][ T977] pvrusb2: Important functionality might not be entirely working. [ 973.946561][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 973.985141][ T977] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 974.005253][ T24] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 974.040478][ T977] pvrusb2: ********** [ 974.102106][ T2340] pvrusb2: Invalid write control endpoint [ 974.134717][ T24] usb 1-1: USB disconnect, device number 19 [ 975.807414][T13711] pvrusb2: Invalid write control endpoint [ 975.921535][T11338] usb 3-1: USB disconnect, device number 22 [ 976.081293][ T2340] pvrusb2: Invalid write control endpoint [ 976.087056][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 976.175702][T13736] fido_id[13736]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 976.198455][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 976.228216][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 976.280261][ T2340] pvrusb2: Device being rendered inoperable [ 976.294121][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 976.310927][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 976.506708][T13753] loop1: detected capacity change from 0 to 2048 [ 976.518078][ T2340] pvrusb2: Attached sub-driver cx25840 [ 976.638627][T13758] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1710'. [ 977.330977][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 977.530857][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 977.656604][T13753] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 977.706413][T13753] UDF-fs: Scanning with blocksize 512 failed [ 977.813737][T13764] misc userio: The device must be registered before sending interrupts [ 977.898898][T13769] fuse: Bad value for 'fd' [ 977.949284][T13753] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 977.995374][T13767] loop6: detected capacity change from 0 to 524287487 [ 978.044033][T12253] buffer_io_error: 7 callbacks suppressed [ 978.044062][T12253] Buffer I/O error on dev loop6, logical block 0, async page read [ 978.153067][T12253] Buffer I/O error on dev loop6, logical block 0, async page read [ 978.870734][T12253] Buffer I/O error on dev loop6, logical block 0, async page read [ 978.938065][T12253] Buffer I/O error on dev loop6, logical block 0, async page read [ 979.079103][T12253] Buffer I/O error on dev loop6, logical block 0, async page read [ 979.111068][T12253] Buffer I/O error on dev loop6, logical block 0, async page read [ 979.119062][T12253] Buffer I/O error on dev loop6, logical block 0, async page read [ 979.160424][T12253] Buffer I/O error on dev loop6, logical block 0, async page read [ 979.190541][T12253] ldm_validate_partition_table(): Disk read failed. [ 979.231490][T12253] Buffer I/O error on dev loop6, logical block 0, async page read [ 979.240067][T13753] UDF-fs: warning (device loop1): udf_truncate_tail_extent: Too long extent after EOF in inode 830: i_size: 131072 lbcount: 135168 extent 65+118784 [ 979.262954][T12253] Buffer I/O error on dev loop6, logical block 0, async page read [ 979.315928][T12253] Dev loop6: unable to read RDB block 0 [ 979.344407][T12253] loop6: unable to read partition table [ 982.558705][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 983.581735][ T977] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 985.063296][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 985.183995][ T24] usb 2-1: device descriptor read/all, error -71 [ 985.308087][ T977] usb 6-1: device descriptor read/all, error -71 [ 985.739444][T13832] loop1: detected capacity change from 0 to 2048 [ 985.929480][T13832] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 988.017941][T13863] loop4: detected capacity change from 0 to 1764 [ 988.883792][T13871] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 989.050940][ T5932] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 989.251374][ T5932] usb 5-1: unable to get BOS descriptor or descriptor too short [ 989.282598][ T5932] usb 5-1: not running at top speed; connect to a high speed hub [ 989.357334][ T5932] usb 5-1: config index 0 descriptor too short (expected 2560, got 155) [ 989.401493][ T5932] usb 5-1: config 1 has too many interfaces: 36, using maximum allowed: 32 [ 989.411867][T11338] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 989.472073][ T5932] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 989.515426][ T5932] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 989.555274][ T5932] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 36 [ 989.591333][T11338] usb 3-1: Using ep0 maxpacket: 8 [ 989.671287][T11338] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 989.760952][ T5932] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 989.770068][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.793952][T11338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.822808][ T5932] usb 5-1: Product: syz [ 989.844941][T11338] pvrusb2: Hardware description: Terratec Grabster AV400 [ 989.855405][ T5932] usb 5-1: Manufacturer: syz [ 989.860033][ T5932] usb 5-1: SerialNumber: syz [ 989.909639][T11338] pvrusb2: ********** [ 989.940986][T11338] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 990.011181][T11338] pvrusb2: Important functionality might not be entirely working. [ 990.052996][T11338] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 990.107675][T11338] pvrusb2: ********** [ 990.160976][ T2340] pvrusb2: Invalid write control endpoint [ 990.209655][ T5932] usb 5-1: USB disconnect, device number 10 [ 990.678160][T13875] pvrusb2: Invalid write control endpoint [ 991.003656][ T24] usb 3-1: USB disconnect, device number 23 [ 991.062441][ T2340] pvrusb2: Invalid write control endpoint [ 991.386011][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 991.410838][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 991.418653][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 991.421182][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 991.421202][ T30] audit: type=1326 audit(1764002282.122:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13901 comm="syz.0.1752" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0173f8f749 code=0x0 [ 991.499212][ T2340] pvrusb2: Device being rendered inoperable [ 991.561536][T13905] blktrace: Concurrent blktraces are not allowed on nullb0 [ 992.099403][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 992.160866][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 992.249639][ T2340] pvrusb2: Attached sub-driver cx25840 [ 992.260334][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 992.271277][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 992.304702][T13907] loop6: detected capacity change from 0 to 1024 [ 992.436389][T13907] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 992.535820][T13907] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 992.554988][T13920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1756'. [ 992.685120][T13907] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm syz.6.1753: inode has both inline data and extents flags [ 993.499558][T12253] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 994.060075][ T30] audit: type=1326 audit(1764002284.722:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13931 comm="syz.0.1761" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0173f8f749 code=0x0 [ 994.187681][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 994.632194][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 994.666363][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 994.695447][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 994.721866][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.283105][T13958] blktrace: Concurrent blktraces are not allowed on nullb0 [ 995.671011][T11337] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 995.709752][ T24] usb 6-1: config 0 descriptor?? [ 995.791878][ T24] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input47 [ 995.937743][ T24] bcm5974 6-1:0.0: could not read from device [ 996.013096][T11337] usb 7-1: no configurations [ 996.013155][ T5179] bcm5974 6-1:0.0: could not read from device [ 996.031843][T11337] usb 7-1: can't read configurations, error -22 [ 996.107562][ T24] input: failed to attach handler mousedev to device input47, error: -5 [ 996.115361][ T5179] bcm5974 6-1:0.0: could not read from device [ 996.148108][T13966] pim6reg1: entered promiscuous mode [ 996.152227][ T24] usb 6-1: USB disconnect, device number 15 [ 996.162407][T11337] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 996.180250][T13966] pim6reg1: entered allmulticast mode [ 996.189195][ T5179] bcm5974 6-1:0.0: could not read from device [ 996.281005][ T9882] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 996.382302][T11337] usb 7-1: no configurations [ 996.386959][T11337] usb 7-1: can't read configurations, error -22 [ 996.417257][T11337] usb usb7-port1: attempt power cycle [ 996.460902][ T9882] usb 3-1: Using ep0 maxpacket: 8 [ 996.492922][ T9882] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 996.525050][ T9882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.592692][ T9882] pvrusb2: Hardware description: Terratec Grabster AV400 [ 996.641071][ T9882] pvrusb2: ********** [ 996.648823][ T9882] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 996.730823][ T9882] pvrusb2: Important functionality might not be entirely working. [ 996.761150][ T9882] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 996.780899][T11337] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 996.830851][ T9882] pvrusb2: ********** [ 996.842649][T11337] usb 7-1: no configurations [ 996.847274][T11337] usb 7-1: can't read configurations, error -22 [ 996.863140][ T2340] pvrusb2: Invalid write control endpoint [ 996.966856][T13986] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1779'. [ 997.035037][T13986] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1779'. [ 997.050161][T11337] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 997.058313][T13964] pvrusb2: Invalid write control endpoint [ 997.076302][ T5932] usb 3-1: USB disconnect, device number 24 [ 997.092606][T11337] usb 7-1: no configurations [ 997.094687][ T2340] pvrusb2: Invalid write control endpoint [ 997.104061][T11337] usb 7-1: can't read configurations, error -22 [ 997.125209][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 997.145739][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 997.154955][T11337] usb usb7-port1: unable to enumerate USB device [ 997.219434][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 997.240481][ T2340] pvrusb2: Device being rendered inoperable [ 997.268966][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 997.309310][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 997.344680][ T2340] pvrusb2: Attached sub-driver cx25840 [ 997.350191][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 997.475171][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 997.481706][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.580841][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 997.920690][T14003] loop5: detected capacity change from 0 to 1024 [ 997.963277][ T30] audit: type=1326 audit(1764002288.692:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14005 comm="syz.1.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160b98f749 code=0x7ffc0000 [ 998.045816][T14003] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 998.090309][ T30] audit: type=1326 audit(1764002288.692:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14005 comm="syz.1.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160b98f749 code=0x7ffc0000 [ 998.174851][ T30] audit: type=1326 audit(1764002288.692:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14005 comm="syz.1.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160b98f749 code=0x7ffc0000 [ 998.200681][ T30] audit: type=1326 audit(1764002288.702:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14005 comm="syz.1.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160b98f749 code=0x7ffc0000 [ 998.233670][ T30] audit: type=1326 audit(1764002288.702:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14005 comm="syz.1.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f160b98f749 code=0x7ffc0000 [ 998.257668][ T30] audit: type=1326 audit(1764002288.702:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14005 comm="syz.1.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160b98f749 code=0x7ffc0000 [ 998.297512][T14014] usb usb8: usbfs: process 14014 (syz.6.1787) did not claim interface 0 before use [ 998.345394][ T30] audit: type=1326 audit(1764002288.712:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14005 comm="syz.1.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160b98f749 code=0x7ffc0000 [ 998.472856][ T30] audit: type=1326 audit(1764002288.712:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14005 comm="syz.1.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160b98f749 code=0x7ffc0000 [ 998.578719][T11104] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 998.604384][ T30] audit: type=1326 audit(1764002288.712:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14005 comm="syz.1.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f160b98f749 code=0x7ffc0000 [ 998.745689][ T30] audit: type=1326 audit(1764002288.712:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14005 comm="syz.1.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f160b98f749 code=0x7ffc0000 [ 999.291869][ T9882] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 999.391339][T14033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1795'. [ 999.547116][ T9882] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 999.572261][ T9882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.594668][ T9882] usb 2-1: Product: syz [ 999.621394][ T24] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 999.622695][ T9882] usb 2-1: Manufacturer: syz [ 999.706185][T14038] netlink: 'syz.4.1785': attribute type 4 has an invalid length. [ 999.714348][T14038] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1785'. [ 1000.051307][ T9882] usb 2-1: SerialNumber: syz [ 1000.079411][ T9882] usb 2-1: config 0 descriptor?? [ 1000.136781][ T9882] usb 2-1: Waiting for MOTU Microbook II to boot up... [ 1000.175469][ T24] usb 7-1: no configurations [ 1000.184543][ T24] usb 7-1: can't read configurations, error -22 [ 1000.204426][ T9882] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1000.518121][ T9882] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1001.331020][ T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1001.341094][ T9882] usb 2-1: USB disconnect, device number 12 [ 1001.598523][ T24] usb 7-1: no configurations [ 1001.609681][ T24] usb 7-1: can't read configurations, error -22 [ 1001.628096][ T24] usb usb7-port1: attempt power cycle [ 1002.001900][ T24] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1002.183727][ T24] usb 7-1: no configurations [ 1002.490859][ T24] usb 7-1: can't read configurations, error -22 [ 1004.439989][T14086] netlink: 'syz.2.1809': attribute type 4 has an invalid length. [ 1004.452865][T14086] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1809'. [ 1007.120932][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1007.425044][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.460831][ T24] usb 2-1: config 0 has no interfaces? [ 1007.501066][ T24] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1007.564157][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.662094][ T24] usb 2-1: config 0 descriptor?? [ 1008.921088][ T977] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1009.031106][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1009.093193][ T977] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1009.131066][ T977] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1009.151297][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.185861][ T977] usb 5-1: config 0 descriptor?? [ 1009.191145][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1009.211841][ T24] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1009.248815][ T24] usb 3-1: config index 0 descriptor too short (expected 258, got 36) [ 1009.251053][T14146] netlink: 'syz.5.1824': attribute type 12 has an invalid length. [ 1009.263075][ T24] usb 3-1: config 0 has no interfaces? [ 1009.315729][ T24] usb 3-1: config index 1 descriptor too short (expected 258, got 36) [ 1009.355811][ T24] usb 3-1: config 0 has no interfaces? [ 1009.407838][ T24] usb 3-1: config index 2 descriptor too short (expected 258, got 36) [ 1009.448491][ T977] ath6kl: Failed to submit usb control message: -71 [ 1009.492157][ T977] ath6kl: unable to send the bmi data to the device: -71 [ 1009.499525][ T24] usb 3-1: config 0 has no interfaces? [ 1009.562442][ T24] usb 3-1: config index 3 descriptor too short (expected 258, got 36) [ 1009.575324][ T977] ath6kl: Unable to send get target info: -71 [ 1009.598087][ T24] usb 3-1: config 0 has no interfaces? [ 1009.608278][ T977] ath6kl: Failed to init ath6kl core: -71 [ 1009.619952][ T24] usb 3-1: config index 4 descriptor too short (expected 258, got 36) [ 1009.631399][ T977] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1009.639998][ T24] usb 3-1: config 0 has no interfaces? [ 1009.651147][ T977] usb 5-1: USB disconnect, device number 11 [ 1009.651435][ T24] usb 3-1: config index 5 descriptor too short (expected 258, got 36) [ 1009.699362][ T24] usb 3-1: config 0 has no interfaces? [ 1009.722353][ T24] usb 3-1: config index 6 descriptor too short (expected 258, got 36) [ 1009.738571][ T24] usb 3-1: config 0 has no interfaces? [ 1009.926912][ T24] usb 3-1: config index 7 descriptor too short (expected 258, got 36) [ 1010.209505][ T24] usb 3-1: config 0 has no interfaces? [ 1010.314128][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= b.5d [ 1010.331472][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.341040][ T24] usb 3-1: Product: syz [ 1010.401039][ T24] usb 3-1: Manufacturer: syz [ 1010.405687][ T24] usb 3-1: SerialNumber: syz [ 1010.461780][ T24] usb 3-1: config 0 descriptor?? [ 1010.546244][ T9882] usb 2-1: USB disconnect, device number 13 [ 1010.896098][T14163] loop6: detected capacity change from 0 to 164 [ 1010.920954][T11337] usb 3-1: USB disconnect, device number 25 [ 1010.975367][T14166] netlink: 'syz.4.1826': attribute type 4 has an invalid length. [ 1010.983299][T14166] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1826'. [ 1012.325887][ T30] audit: type=1400 audit(1764002302.932:1094): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=14182 comm="syz.2.1833" [ 1014.187827][ T9882] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 1014.718303][ T9882] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1015.287599][ T9882] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1015.366748][ T9882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.447859][ T9882] usb 5-1: config 0 descriptor?? [ 1015.638278][T14222] loop6: detected capacity change from 0 to 1024 [ 1015.708168][ T9882] ath6kl: Failed to submit usb control message: -71 [ 1015.757247][ T9882] ath6kl: unable to send the bmi data to the device: -71 [ 1015.784111][T14222] hfsplus: failed to load extents file [ 1015.836756][ T9882] ath6kl: Unable to send get target info: -71 [ 1015.888784][ T9882] ath6kl: Failed to init ath6kl core: -71 [ 1015.941454][ T9882] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1016.031067][ T9882] usb 5-1: USB disconnect, device number 12 [ 1016.400823][T14231] binder: 14227:14231 ioctl 4018620d 0 returned -22 [ 1017.372187][T14237] netlink: 'syz.6.1846': attribute type 4 has an invalid length. [ 1017.380007][T14237] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1846'. [ 1018.520874][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1019.581025][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1019.632693][ T24] usb 2-1: config 0 has an invalid interface number: 136 but max is 0 [ 1019.671021][ T24] usb 2-1: config 0 has no interface number 0 [ 1019.705591][ T24] usb 2-1: config 0 interface 136 altsetting 2 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1019.769081][ T24] usb 2-1: config 0 interface 136 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1019.809939][ T24] usb 2-1: config 0 interface 136 has no altsetting 0 [ 1019.853964][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=0214, bcdDevice=4f.82 [ 1019.870808][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.910800][ T24] usb 2-1: Product: syz [ 1019.915009][ T24] usb 2-1: Manufacturer: syz [ 1019.950840][ T24] usb 2-1: SerialNumber: syz [ 1019.972017][ T24] usb 2-1: config 0 descriptor?? [ 1020.029845][ T24] appletouch 2-1:0.136: Could not find int-in endpoint [ 1020.069689][ T24] appletouch 2-1:0.136: probe with driver appletouch failed with error -5 [ 1020.111355][ T24] usbhid 2-1:0.136: couldn't find an input interrupt endpoint [ 1020.190446][ T24] usb 2-1: USB disconnect, device number 14 [ 1021.049075][T14292] netlink: 'syz.0.1854': attribute type 4 has an invalid length. [ 1021.058286][T14292] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1854'. [ 1022.049602][T14310] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1023.620859][ T977] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1023.810503][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 1023.830607][ T977] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1023.891113][ T977] usb 5-1: config 179 has no interface number 0 [ 1023.912951][ T977] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1023.966840][ T977] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1024.028386][ T977] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1024.093965][ T977] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1024.183916][ T977] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1024.250293][ T977] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1024.270891][ T977] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1024.305693][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.309280][T14342] loop5: detected capacity change from 0 to 128 [ 1024.412439][ T977] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input48 [ 1024.436741][T14342] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1024.487400][ T5179] input input48: unable to receive magic message: -110 [ 1024.510162][ T5179] input input48: unable to receive magic message: -32 [ 1024.521958][ T5179] input input48: unable to receive magic message: -32 [ 1024.535765][T14342] ext4 filesystem being mounted at /132/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1025.674386][ T24] usb 5-1: USB disconnect, device number 13 [ 1025.680384][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1025.813609][T11104] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1026.941027][ T5932] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1027.122175][ T5932] usb 6-1: device descriptor read/64, error -71 [ 1027.562638][ T5932] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1027.960912][ T5932] usb 6-1: device descriptor read/64, error -71 [ 1028.075222][ T5932] usb usb6-port1: attempt power cycle [ 1028.502293][ T5932] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1028.563595][ T5932] usb 6-1: device descriptor read/8, error -71 [ 1028.829744][ T5932] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1028.872933][ T5932] usb 6-1: device descriptor read/8, error -71 [ 1029.001629][ T5932] usb usb6-port1: unable to enumerate USB device [ 1030.115986][T14420] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1897'. [ 1034.444676][ T24] IPVS: starting estimator thread 0... [ 1034.611173][T14455] IPVS: using max 23 ests per chain, 55200 per kthread [ 1036.711427][T14502] netlink: 165 bytes leftover after parsing attributes in process `syz.5.1917'. [ 1038.064648][T14513] ttyS ttyS3: tty_port_close_start: tty->count = 1 port count = 2 [ 1038.064901][T14513] [ 1038.064911][T14513] ====================================================== [ 1038.064922][T14513] WARNING: possible circular locking dependency detected [ 1038.064935][T14513] syzkaller #0 Not tainted [ 1038.064953][T14513] ------------------------------------------------------ [ 1038.064963][T14513] syz.2.1919/14513 is trying to acquire lock: [ 1038.064979][T14513] ffffffff8df31660 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xb10 [ 1038.065068][T14513] [ 1038.065068][T14513] but task is already holding lock: [ 1038.065075][T14513] ffff888023cc8d40 (&port->lock#2){-.-.}-{3:3}, at: tty_port_close_start+0x5e/0x580 [ 1038.065129][T14513] [ 1038.065129][T14513] which lock already depends on the new lock. [ 1038.065129][T14513] [ 1038.065136][T14513] [ 1038.065136][T14513] the existing dependency chain (in reverse order) is: [ 1038.065144][T14513] [ 1038.065144][T14513] -> #2 (&port->lock#2){-.-.}-{3:3}: [ 1038.065179][T14513] lock_acquire+0x120/0x360 [ 1038.065198][T14513] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1038.065227][T14513] tty_port_default_wakeup+0x23/0x170 [ 1038.065246][T14513] serial8250_tx_chars+0x72e/0x970 [ 1038.065276][T14513] serial8250_handle_irq+0x633/0xbb0 [ 1038.065307][T14513] serial8250_default_handle_irq+0xbf/0x200 [ 1038.065328][T14513] serial8250_interrupt+0x8d/0x180 [ 1038.065353][T14513] __handle_irq_event_percpu+0x295/0xab0 [ 1038.065382][T14513] handle_irq_event+0x8b/0x1e0 [ 1038.065409][T14513] handle_edge_irq+0x23b/0xa10 [ 1038.065434][T14513] __common_interrupt+0x141/0x1f0 [ 1038.065467][T14513] common_interrupt+0xb6/0xe0 [ 1038.065489][T14513] asm_common_interrupt+0x26/0x40 [ 1038.065510][T14513] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1038.065538][T14513] uart_port_unlock_deref+0x111/0x2f0 [ 1038.065568][T14513] uart_write+0xe8/0x130 [ 1038.065595][T14513] n_tty_write+0xd27/0x1200 [ 1038.065616][T14513] file_tty_write+0x559/0xa20 [ 1038.065643][T14513] vfs_write+0x5c9/0xb30 [ 1038.065671][T14513] ksys_write+0x145/0x250 [ 1038.065699][T14513] do_syscall_64+0xfa/0xfa0 [ 1038.065729][T14513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.065749][T14513] [ 1038.065749][T14513] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 1038.065778][T14513] lock_acquire+0x120/0x360 [ 1038.065796][T14513] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1038.065823][T14513] serial8250_console_write+0x17e/0x1ba0 [ 1038.065855][T14513] console_flush_all+0x6f3/0xb10 [ 1038.065882][T14513] console_unlock+0xbb/0x190 [ 1038.065905][T14513] vprintk_emit+0x4c5/0x590 [ 1038.065929][T14513] _printk+0xcf/0x120 [ 1038.065949][T14513] register_console+0xa8b/0xf90 [ 1038.065975][T14513] univ8250_console_init+0x3a/0x70 [ 1038.066007][T14513] console_init+0x10e/0x430 [ 1038.066041][T14513] start_kernel+0x254/0x410 [ 1038.066064][T14513] x86_64_start_reservations+0x24/0x30 [ 1038.066096][T14513] x86_64_start_kernel+0x143/0x1c0 [ 1038.066126][T14513] common_startup_64+0x13e/0x147 [ 1038.066155][T14513] [ 1038.066155][T14513] -> #0 (console_owner){-.-.}-{0:0}: [ 1038.066184][T14513] validate_chain+0xb9b/0x2140 [ 1038.066207][T14513] __lock_acquire+0xab9/0xd20 [ 1038.066226][T14513] lock_acquire+0x120/0x360 [ 1038.066243][T14513] console_flush_all+0x69c/0xb10 [ 1038.066271][T14513] console_unlock+0xbb/0x190 [ 1038.066294][T14513] vprintk_emit+0x4c5/0x590 [ 1038.066317][T14513] _printk+0xcf/0x120 [ 1038.066336][T14513] tty_port_close_start+0x3f4/0x580 [ 1038.066356][T14513] tty_port_close+0x2a/0x170 [ 1038.066376][T14513] tty_release+0x389/0x1640 [ 1038.066405][T14513] tty_open+0x816/0xd10 [ 1038.066423][T14513] chrdev_open+0x4cc/0x5e0 [ 1038.066441][T14513] do_dentry_open+0x953/0x13f0 [ 1038.066463][T14513] vfs_open+0x3b/0x340 [ 1038.066483][T14513] path_openat+0x2ee5/0x3830 [ 1038.066509][T14513] do_filp_open+0x1fa/0x410 [ 1038.066534][T14513] do_sys_openat2+0x121/0x1c0 [ 1038.066557][T14513] __x64_sys_openat+0x138/0x170 [ 1038.066580][T14513] do_syscall_64+0xfa/0xfa0 [ 1038.066610][T14513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.066630][T14513] [ 1038.066630][T14513] other info that might help us debug this: [ 1038.066630][T14513] [ 1038.066638][T14513] Chain exists of: [ 1038.066638][T14513] console_owner --> &port_lock_key --> &port->lock#2 [ 1038.066638][T14513] [ 1038.066679][T14513] Possible unsafe locking scenario: [ 1038.066679][T14513] [ 1038.066685][T14513] CPU0 CPU1 [ 1038.066692][T14513] ---- ---- [ 1038.066699][T14513] lock(&port->lock#2); [ 1038.066719][T14513] lock(&port_lock_key); [ 1038.066736][T14513] lock(&port->lock#2); [ 1038.066757][T14513] lock(console_owner); [ 1038.066772][T14513] [ 1038.066772][T14513] *** DEADLOCK *** [ 1038.066772][T14513] [ 1038.066778][T14513] 4 locks held by syz.2.1919/14513: [ 1038.066791][T14513] #0: ffff88801ff541c0 (&tty->legacy_mutex){+.+.}-{4:4}, at: tty_release+0x72/0x1640 [ 1038.066850][T14513] #1: ffff888023cc8d40 (&port->lock#2){-.-.}-{3:3}, at: tty_port_close_start+0x5e/0x580 [ 1038.066907][T14513] #2: ffffffff8df316c0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 1038.066956][T14513] #3: ffffffff8de18f90 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xb10 [ 1038.067014][T14513] [ 1038.067014][T14513] stack backtrace: [ 1038.067025][T14513] CPU: 0 UID: 0 PID: 14513 Comm: syz.2.1919 Not tainted syzkaller #0 PREEMPT(full) [ 1038.067053][T14513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1038.067066][T14513] Call Trace: [ 1038.067075][T14513] [ 1038.067084][T14513] dump_stack_lvl+0x189/0x250 [ 1038.067117][T14513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1038.067147][T14513] ? __pfx__printk+0x10/0x10 [ 1038.067169][T14513] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.067194][T14513] ? print_lock_name+0xde/0x100 [ 1038.067217][T14513] print_circular_bug+0x2ee/0x310 [ 1038.067246][T14513] check_noncircular+0x134/0x160 [ 1038.067276][T14513] validate_chain+0xb9b/0x2140 [ 1038.067315][T14513] __lock_acquire+0xab9/0xd20 [ 1038.067339][T14513] ? console_flush_all+0x13a/0xb10 [ 1038.067367][T14513] lock_acquire+0x120/0x360 [ 1038.067386][T14513] ? console_flush_all+0x13a/0xb10 [ 1038.067417][T14513] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.067444][T14513] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.067468][T14513] ? do_raw_spin_unlock+0x122/0x240 [ 1038.067499][T14513] ? console_flush_all+0x13a/0xb10 [ 1038.067528][T14513] console_flush_all+0x69c/0xb10 [ 1038.067556][T14513] ? console_flush_all+0x13a/0xb10 [ 1038.067586][T14513] ? console_flush_all+0x13a/0xb10 [ 1038.067619][T14513] ? __pfx_console_flush_all+0x10/0x10 [ 1038.067650][T14513] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.067678][T14513] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.067702][T14513] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1038.067737][T14513] console_unlock+0xbb/0x190 [ 1038.067766][T14513] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 1038.067796][T14513] ? __pfx_console_unlock+0x10/0x10 [ 1038.067828][T14513] vprintk_emit+0x4c5/0x590 [ 1038.067855][T14513] ? __pfx_vprintk_emit+0x10/0x10 [ 1038.067880][T14513] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.067904][T14513] ? __lock_acquire+0xab9/0xd20 [ 1038.067929][T14513] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.067954][T14513] ? do_raw_spin_lock+0x121/0x290 [ 1038.067987][T14513] _printk+0xcf/0x120 [ 1038.068010][T14513] ? __pfx__printk+0x10/0x10 [ 1038.068034][T14513] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1038.068067][T14513] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.068094][T14513] tty_port_close_start+0x3f4/0x580 [ 1038.068119][T14513] tty_port_close+0x2a/0x170 [ 1038.068142][T14513] ? __pfx_uart_close+0x10/0x10 [ 1038.068171][T14513] tty_release+0x389/0x1640 [ 1038.068202][T14513] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1038.068234][T14513] ? tty_port_tty_set+0x104/0x150 [ 1038.068258][T14513] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.068286][T14513] tty_open+0x816/0xd10 [ 1038.068313][T14513] ? __pfx_tty_open+0x10/0x10 [ 1038.068332][T14513] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.068360][T14513] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.068384][T14513] ? do_raw_spin_unlock+0x122/0x240 [ 1038.068417][T14513] chrdev_open+0x4cc/0x5e0 [ 1038.068438][T14513] ? __pfx_chrdev_open+0x10/0x10 [ 1038.068459][T14513] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.068484][T14513] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1038.068511][T14513] ? __pfx_chrdev_open+0x10/0x10 [ 1038.068530][T14513] do_dentry_open+0x953/0x13f0 [ 1038.068561][T14513] vfs_open+0x3b/0x340 [ 1038.068582][T14513] ? path_openat+0x2ecd/0x3830 [ 1038.068612][T14513] path_openat+0x2ee5/0x3830 [ 1038.068644][T14513] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.068671][T14513] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.068702][T14513] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.068731][T14513] ? __pfx_path_openat+0x10/0x10 [ 1038.068769][T14513] do_filp_open+0x1fa/0x410 [ 1038.068796][T14513] ? __lock_acquire+0xab9/0xd20 [ 1038.068817][T14513] ? __pfx_do_filp_open+0x10/0x10 [ 1038.068857][T14513] ? _raw_spin_unlock+0x28/0x50 [ 1038.068884][T14513] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.068909][T14513] ? alloc_fd+0x64c/0x6c0 [ 1038.068948][T14513] do_sys_openat2+0x121/0x1c0 [ 1038.068974][T14513] ? __pfx_do_sys_openat2+0x10/0x10 [ 1038.069003][T14513] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.069039][T14513] ? rcu_is_watching+0x15/0xb0 [ 1038.069069][T14513] __x64_sys_openat+0x138/0x170 [ 1038.069097][T14513] do_syscall_64+0xfa/0xfa0 [ 1038.069130][T14513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.069151][T14513] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1038.069176][T14513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.069197][T14513] RIP: 0033:0x7f59a6b8f749 [ 1038.069215][T14513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1038.069234][T14513] RSP: 002b:00007f59a456e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1038.069256][T14513] RAX: ffffffffffffffda RBX: 00007f59a6de6360 RCX: 00007f59a6b8f749 [ 1038.069272][T14513] RDX: 0000000000020040 RSI: 0000200000000140 RDI: 00000000ffffff9c [ 1038.069287][T14513] RBP: 00007f59a6c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1038.069301][T14513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1038.069315][T14513] R13: 00007f59a6de63f8 R14: 00007f59a6de6360 R15: 00007ffece01ca98 [ 1038.069341][T14513]