last executing test programs: 7m10.847878926s ago: executing program 0 (id=603): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4c800) socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r4, 0x705, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000810) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0xf0, 0xf0, 0x0, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x120, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x101, 0x3, 0x1, [0x5, 0x5, 0x8000, 0x0, 0xc, 0x4, 0x4, 0x0, 0x9d3, 0xd77, 0x3, 0x8, 0x477, 0x5, 0xffff, 0x6], 0x5}}, @common=@srh={{0x30}, {0x0, 0xa5, 0x1, 0x9, 0xf, 0x1208, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], 0x4e20, 0x4e20, 0x4e20, 0x4e20, 0x1, 0xbd16, 0x4ad, 0x1, 0x8000}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0xff000000, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0xa, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0x13}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffe, 0x8000, 0x4, 0x3}, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB], 0x0, 0xffffffffffffff49}, 0x28) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002f00090027f38200000000000400"], 0x14}, 0x1, 0x0, 0x0, 0x42884}, 0x10) bind$inet6(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) 7m4.945761766s ago: executing program 0 (id=610): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f00000000c0)={0x100, 0x3, 0x0, 0x200, 0x2}, 0x30, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x188}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x2080) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) 7m3.357032604s ago: executing program 0 (id=612): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x6ef, &(0x7f0000000a40)={@local, @random="991d32511a2a", @void, {@mpls_uc={0x8847, {[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x6e1, 0x68, 0x0, 0x38, 0x21, 0x0, @private=0xa010102, @multicast2}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xd, 0x0, 0x0, 0x4, 0x5, "c50f7c", 0x2, "6d9bef"}, "f041ef4265f64c61e6b4dfbad02ca95aeb25f8591ea18476f2946cf87cf36257475b8c33af71d98938f850c051014fc51f817fdaeb0238f77f9e4f485718adef2c6a6bd60797d0c5b6f283d02e2f85644f18c9e3ac626d9b9e11461e170193ca0a2c83ddaf42a294218853a56fc80982d65e282d4c6734ec5dc546f028dafe8697468479c5f016b7384f337b2e6dfc0575d40ac7cfd2da6fcfd5964b653e6bf053c3d9c30f67d08ebb53c7e88d4bf70ac624914d8010cdd767dc13d2d2007faac18690efd2077f56cc69b25f397a6d13b8f2f9f6bfd0ecc44f4c42f1ac35c4e5020c612e7bbe89a9f3ca18b6748662a5caf44d86eac0f480b5e2fb614007e787c3a852cb86658c77653e2596f945e6b7b5d4a44f16a3f1d459e60ca4a31f5982400b4a1b9e03e740fb87760dc431a00352442d149c3825032262e23ed170a4f4dd77819b141dc777335527d46dd4d50a362cb08fb9a7eb6697447f0166ed53b098c178fe941e79588495861f71aad7380a7a3025c9d601ce4b4f023395829d3e4d1c48893f494736c2cac110fb87bb9129756ecffb485a829b177644809d27a6b27f78a5ab656e0d2fdf1b2408f9a6390322ca8af5ecb64d7742c8a5d063158bf75b31b9a34c16d250a960e41dc90ecdbbf21c13e83c3e31812d771ce53e0563033c2058f3c31e70fbf97fd251fc22910e43806552b536701c778f7386edadfe6024a699073872cf2892a8737fcce3cae5fcdf90bed56c1512fa46aa0f20a9c0b2cc62bd51ae949b03e90fecd491cd029c29e5ab78fefd67c52ed95f7da8cb46c0692425b74c7deceff32f6eb15563a8b9ecf4b01a9b0f47d833c3c3c48f65c54b256f16860608d11b77ff4f2e0f483fd6911b97a019946cecf18e0312d3011e9396aee097a35f3ac69b105435e547bcbfcdf7338b7841c6d412121928a876e7fc954c7567cb0e11741fe7a573060276bf7b63240718010c1f75fe33269cc3b06586ff7acd9781d7d5cae7386ed9e6ebea20897e20d8387398969989be1c4fa614406be204fff47780b5a9a68ae1437b370d04ef2acd32ee459244e410bded7554e8068fcd2243f2c4e35f1cbf7df87323f27127aad50fdaab3c657b74ff76a45075ecb2973e2c387fc5597f247d3461b3acc2218e3d72e4e745dabc219877d00ffd57616a02a8f031dee54de6e04e953b0eef0ee5accd32cfeb55707598dc26510cb87a15a7137486fecabd08aa461a9af07585ba77db62b8271ca36f8791884b20acb99b875990f363ff5234b2d65362c1ab4a18bca6829ca9d9e1c4dad9243340680b5153ef751cfce67feefdb3ac14ad24061c5232a656f4214d92c7b69a38387af843817186a2a6956fddfdd4ce2b95acc951ce66cc27d8fd7dba0b18340833a9c9c8680efb3d59a795107aad781b820f672b5e818f8ef7f92a44b188f6fbb0b2b05598db61cd61b74ddeb7f6f1971f73fc7c8370ba348c883080d409efcf55ab1473c1a860830b20824482cd32966d89d5eed670ad66f6e23ebe2ae0379ed304b6e4acae6edd67182cb9432a85138f62a916a073c467c0516b3b93deafb9e1a8f746587bf6c5775ed53c5862c223319c764f81bc266ecca8daddb16bf9e6fcaec6334e12df4bc814f1343d892eb131cc24b798ef1fbecdc37dfb00f997bc86e6639795a99575cc178b362882931028f083a7609bc7a8e0bfaa0f53c3fed283c3aa0c25244e1e55444f5dda068d2b53cf1a11d8ed5e7731a9a842de1b6864d976436cb0082d67372c336202c7d80100673541092ee30d5073cf3d8662a90e67f776323a6ff6ae759c6d30462847725fd5bac956a5fad7cb94dee9a1685b78979a4093fd5a45851cc4f70a66c0f30f58d3ccedac3440f71d94df9f9428e17202508dd4e34df0620f9c6c1f02a51744a3c32f83169af401214b28e9a6b97f6e1a1e30cc599237a7c7dd11e8330702a12b0953cd563226322af3d3d5b2fdb33810e334b57bba3cebc84ccc5711131ea6a91d3c04a632fa2526843589ab0d982b089236275f8921fda31baa5d499534a6ac95cc0f65c87880cb3c8c24134ed39fc8a2062abad521c5739dc854566d5def47097d22e887dd763bf8b3d6ef6352add80c6ba16b68e1c17783de5b19317e2910248fff1332a5d64119f10d3c26fb196a0cb889307e4be0f4d061cdf1337756326d14c964e1c5ead0c32f34e7e16080ec57183c3add48a06d3a72dbbe7093f12461eb0ef9c9821d82997e02229bc926b8229b34fba7729a9eb2a4594c0c446381697bec5572dce85b39e11ea8f8a0c8f75318c85e786855b86f29e0e097509fe1169bb33c14c7c330f75ee5f222d7574d407c1475b7b63253ad3856a2e49421c2e5d20b25292032ce060af63749b2f1ab5f01e9b3140f623d533d79b43121278eb2a8d79a23f1e24f0f563e"}}}}}}, 0x0) 7m0.742818348s ago: executing program 0 (id=614): getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x43) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r2}}, 0x48) 7m0.598035576s ago: executing program 0 (id=616): socket$alg(0x26, 0x5, 0x0) syz_open_dev$media(&(0x7f0000000380), 0x10, 0x101000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, 0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x3d, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 6m59.028178517s ago: executing program 0 (id=622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1) 6m43.647932324s ago: executing program 32 (id=622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1) 20.721089881s ago: executing program 2 (id=1492): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x28, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x40030000000000, 0x0, 0x4004000}, 0x80) syz_usb_connect$uac3(0x5, 0x80, &(0x7f00000009c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1397, 0xbd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xd6, 0xa0, 0x2, {0x8, 0xb, 0x2, 0x1, 0x1, 0x23, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa, 0xffffffff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x2, 0x2, 0x7, {0xa, 0x25, 0x25, 0xff, 0x2, 0xca}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x8, 0xa, {0xa, 0x25, 0x25, 0x9bb6, 0x4, 0x3}}}}}}}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@bloom_filter={0x1e, 0x0, 0xedb2, 0x5, 0x4c}, 0x48) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x6, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0x5509, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x4, &(0x7f0000000000)=ANY=[]) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="fc86412c39e0d962e93d945ec9c4efb361054c", 0x13) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0000090582020000000000090503"], 0x0) syz_usb_connect(0x17aff7a88c855ce9, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) fstatfs(r0, &(0x7f00000001c0)=""/91) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100102000040"], 0x0) syz_usb_connect$uac3(0x5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, 0x0, 0x0) 19.400813948s ago: executing program 3 (id=1494): io_uring_setup(0x3eae, &(0x7f0000000d00)={0x0, 0x0, 0x20000, 0x3, 0x1a1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, &(0x7f0000000400)='./cgroup\x00', &(0x7f0000000380)='pstore\x00', 0x9, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='gfs2\x00', 0x800, 0x0) mount(&(0x7f0000000000)=@nullb, 0x0, &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003700)={r3, 0x0, 0x4e, 0x0, &(0x7f0000000300)="a8ba55a9c7701fbafbf819fad33c5623762fd3c30fd9c648d53cd162e15ceb0e05b6167359ecd99d942ab254f1652afc211d235aec8a695d71f6ccf0f255329357bb261f28aa00c50631c1049489", 0x0, 0x10000, 0x0, 0x0, 0xfc0, 0x0, &(0x7f0000002700)="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", 0x2, 0x0, 0x9449}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 18.408029575s ago: executing program 3 (id=1496): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_LOCK(0x0, 0xb) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000050c0)=ANY=[@ANYBLOB="5012000044000701fefffffffcdbdf25037c000004004580381201803412"], 0x1250}}, 0xc000) io_submit(0x0, 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') r4 = creat(&(0x7f0000000100)='./file0\x00', 0x59) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000900, 0x0, &(0x7f0000000500)) sendmsg$inet6(r3, 0x0, 0x40080) chroot(0x0) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, 0x0) 15.958791962s ago: executing program 2 (id=1497): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000020904000001020d0000052406"], 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x20840, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80064d12, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x202, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_VFIO_IOAS$CLEAR(r5, 0x3b88, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x8, 0x700, 0x92, 0x3, {{0x8, 0x4, 0x0, 0x5, 0x20, 0x64, 0x0, 0x9, 0x2f, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x25}, {[@timestamp_prespec={0x44, 0xc, 0x2b, 0x3, 0x6, [{@broadcast, 0x9}]}]}}}}}) r6 = io_uring_setup(0x272a, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x1, 0x117}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/141, 0x8d}], 0x113e) ioctl$XFS_IOC_GETBMAP(r4, 0xc0205826, &(0x7f0000000040)={0x1000000000000000, 0x9, 0x8, 0x4, 0x35d}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r4}, 0x8) r7 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r8 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2000, 0xab) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000080)={r8, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d81a17f7061a74df2cfc06c89f3d9e234b30c50997d3bef4090ebcdda37bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x2, 0x6]}}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000100)={0x7, 0x0, 0x6, 0x40001000080002, 0x8000008, 0xa0000000}) 15.65244085s ago: executing program 4 (id=1498): socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000\t\x000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x62901, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000bb88faa4b22d780900000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000ddfffffdffffff00000000"]}, 0x108) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000400)={0x6, {"88d531faa500431edf0fbb8fabf93b61", "1e7442e1d70c2dc10af710d3e7e3da1e", "f02cb005d6b2f4399e8c70061579e3a8"}, 0x8cd, 0x6}) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x800401, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) 14.257635363s ago: executing program 4 (id=1500): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x8, 0x6}, 0x50) socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x40488102, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) mount$overlay(0x0, &(0x7f00000001c0)='./file0/file1/file0\x00', 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000008240)="0aca6c6a1bafd2989666a6014bd5e9e63945bda64c1239d970f0d349110c18fe029ac3e29dc9ff9ead2ed3cef0fe77ef8348a82d3da186ce2140d53dfeb34dc1e128dca5a5225db8052bd348c2d1a3de224233032fff8b85c85885c90e9d0c205001db3dfc55d17a7dab1761c1733c465113c056d3bcbaf6a52dbda820a1db5e7d777f6c716e5f60b04cc1c6a362d891cb08fa109c5a00e427f8636059d934f255021cf13d2bc9cff93f049018b8e48f6480d324f08eb83655d3eb5a379ec18c861f596db17bcc23ada65f26a02c4c0c9e3167cc582e93661cdd0dc7581ac1958d9cd08104af251d87d8b5d82150b8cc4ca6d23475f259a8b7d69839cf728a6c478eec56135bdfc6428a318cf2b838d16984d0498d33ac41fe67361bdf5752db6a5ae32979463b60ad6b99527affdcb2b4a0f23b2f140c981b00c99cd25d563ff6c3308b048371eb2e599880a2b67ef9a2282947dbb23a3f1944193a801187f206587a52ee7a33032a842b31fcc0db079c554c97a09e3812aea45702099ab648888d08ae48a187a5acee7b9a2edbc320c64514554e540286053dd2acb9f9ec83435f43193b45b324c8406cdf976bc7607cf9385e99bf5f520511080c27abcac49e7ec7deef560f953d2c64bfd014ddcb1b2cbccbe401a312436799235807f4fdf52a9f894656fcbe1e971163e8d743450c49875379522df77d5e8910df837701d135f4589d4d15355e1638eff568a18a0d6217a11acf8fdf0fed0216635215d248aff37d85b62edbc989bc6d4757e6347ec971ae2b1e0d194e6c11dd8f7c108219569e157eceb7c14a288aad98a24de9a81f9ba1dd5271c17adfdf41f3393789c30f9345f6ad4ad1a6bf46640f69f7c038c4fec6652853a3f4fece3c3d15bfdea15f37e961a03de54181724801808a3a9030ba4650ce6fa9e6822c794d7b9da548a2eab977ab0c08b2d985957d5cd70ec677637219c6ca7c7c4d0a7a7ca38c1862583735b46b3addfd1c72cf7f63f11bd85ed59b9ba94db5c2fbd48461ab735b439a992e3a4462545e042e3c863199c006ef3a3be4473b24b782f86a3c1dca9848283bc47f4322273681efa1c8c413dc81a459e4e755846a094971708eb7f428aa67d0c81ce7f33d856e13a342b05eb403af7b4cab191c4ab9d650158808ec74d04f4b765e513b94f10345322e48485d29eb8b1408d7776f98e3625a20220e94789476affdbd19b44bac6bd2fa2b0ba10e93582178a3ef4938dcda25bc6245621b1ced780ca089010e8e51493c1ac7747e949b67fe6e3858e60a1e45a657c080fdc0bcbfcac2ba9d027f02ce30cc7440ce71eac66bb2eb264dcb1306a6054fde6640ca51ec4ccaf500a87f073b58ab286daeefd8d3ec7ee882551f7b6a36ab79a8e10d1d3c234ffaa33e95026025cc39a057efe7823dcb689131b1e83572b4dd1f49097580976c046424618fd6047d46928087d483df952738448d164c9288b15a4982493bf7ebc1976d0942846c8310556732b4cabff937a51e926caa37ae54dea339c2a2a8d73be2ca3a39edcb4ef8bd58a3c4c98c48b9f37a1424b6a54919921d4429611d0dd585d1d357c3c1ad1cf68f36907f8d9c28a14ec2cf2510fe54510111ddd7a67fb8d2f449227da397c32b8dca19971ab9d76e1f6ce0c54c9de1cb1daa1936b62f838170b8b6e7f34168a099619a113c83347ce2c0f6086855385062b6e074b68391e59430236f9ec687a265072f7a40efbef3cfe5bc1cfb364d87a597507811d2bf6af59e20fcf4703caa63285decabcc367ccfb8e27efecb14db8b1167938f457d4117c62f440d807b5482bb223b4b14e9526f9ede33631cdf9fcab53b3fbebc9344ab130d793dad610f2fe41ef388acaebd6cf26aedf7c7c6aaee956cf92c14583bd45b189d43f7b44419df1e0adecc8fbedb357656b7649721f81c2207ebb37e3ae21bdce8c982cbbdec012c7fe587161ff741610fb8ea5883c758527873ca2197b5f1058083c40203cc4dbdf7f4f1388f2309d22a6a1767137703296ad3aeabdbb3529a290da9c6cc5631b2f1ad25c766e3cbd8d9f588bafd17495f572bf1cfe1e8b5bb22130963cca8832f846300bb6dc0baec85b500e1a48fdd14cf0442fe4d441821d7e46fb5e2220c96bfb16ab8ca883a4477bc756dfc662218715be66704be83e9aef33f9986c6517d1a7eb59348541d6d3494ebe7bc1ed4a86f06411491d176da36de8c8a8d8ea28928bda63fe863277e4325b756421d4d2042428250ed526e538fb930671e9ad517aac494a58aecbc908b512016fe4d8f60b576e230b3206a0c7bd4fef717a8cda0029d13ecc3c8f8686f717adc1440353c236aa71f842839c5ce92c83fbfb57b221271aa6f4029219c3c2ed7a3a53d8ff065ce30d403c95cf69e7963d5bfb63bccb5b28ca125f0d7094072273ce3108093d0ff83ab98393b8e9a87117f4933a8c8ecf353931da3b8dacb20685a65dd865bd6031cd2b0b7e237901c782c6e6ea8742e89dbb01eb925dd6e74c53bd28d3c424cee35eb29823f2138b92516075e00342fa4dbc5b27675a651032c8ffb3da6c5349d0f9b2779778d0cfa1c8d4cc34d4fe95fc435e4768e93d56d2c142f25df1b9afa7d103486842372b36261b96b7b3acc0e78ff20a535ed515ace0cf3300168a7ef42d6bd511c019d0ccd7599ba70cbabc95f34a052fe9d6f97b49dc1cde40d5ebf305797d7d572a61cd38a0cf85f28c5d018648b769327bd9559722d5422754f26c9e5439b42bedf34e31bbc845b99ce315eeeb0383fb3ae021084cedcd843b86831c78441ccc0d2c23de528e53cff785816a3a3d99b4a4684df9546a285203bb615eb480fa8385e90226b27b39a7d50c83babf5ba890da1a8848ba372971347dc34b76370544feb183b9292043f2ef072b69bcff45b1917c073222d50bd585f2173bdae673198b95b67f8387f6d2b2934597c5ce165fd420ddcc01d29d71d532b5d127afc98657845230e363cbb9ecc05b247996ecbfce0e8215ec7dc5e9be115de2e7ebe8fe3e191f455d244ad1ce75c828a2adbbe509589f389936e62dfd1ecdef105162d357cfb22412b64570dcb04fe18bbbe5518985d7316a75a19a16a482105b7fac923e1eefd780d036ccc39e3cc53d2002ccd10004be1694be4110fb062110e1a44ba88acfa282d9c7cdae0cb55f48f7caa3c324d9f52265d21606a20779accdc9f69dd0fc49e4bc2c49891e526561569abe5673533c8a9b6a3004c809d3f7452b02787047d4442df3f4cc5d47e5aa73b7994c113541ea312970f2e741d4fd50a83f5a0293fbd56d619aa4bb3b491606642fcb922b5ccd6bedb442e450609343e18f61abb3a4b2fc69e06a72edc7bcba0da06da3e80f59b737f088d01f0dbcad89003b505fe29bdc8118e3fbcdb90a4f464e0e70d20f093790ae1b9f6f8a904a268cb4bb116404de1bd4c3f9522c36893a902a3a90f52670b7ff2074815329f3fe2c8ccfabe2d812394e6b0e34741abece71b7db0fbf0a80e6c13bc7bba89a4ee01cad9dd76e49cd91690db6fe402640db8b3523c49bcf611a9da991123edcb64ef505906d8ab4b8586e631828402105f045cff3681f2f36e3713be5bcb6af157278b194a51f04d04507231aa6f4d77b4065f2a97894c201b23f7b5f79b029c74fc4c57fff87c03e01210674417c1297155ca7a7fbe855fdcf65561619ffca0099fa08ddc8ddd7f713b2b0c6af0fcc4bd4cba9e9f47debdc6d9e6e2dce63fec20efc51e15d013fadba2707a449dbfd025f1a7c329282c797b2071afb37a89f8d58c1e3b4f06586f00a433161373548b699fabd92771346a25ff10789ca89cbf00f92248c6b8468f22aa4cf7ba90aea16a3cc2b1ee598609dfbe75fb8e11c5003ad0c9ac7205cd35552a53703f06e465633f9653cd670952feb9e77db960ea18914235af757e75204d1f74de9829dfac217d87aecc1c80066426f12e52883bfcd982e54bfdae8ef55f3b70f78bae9e6a1e24388c642cba3b3215602294bb7d68bb6f8e0b24c0b6e99df504c30beb2a7f47b02f9af6511eda25407c30dfdee39ec8db32d93e1e09472474883a87b7b4664bef06d5c0a43793237187acaaa9654f74e5d3bf1ce389befc139fba61378e7b66b4b0d87334732592ebd0e4989373ca541b92d003e67e0292256c256344dbf03ad24540f11cdc174b45d3781c1da793a460ba671373a0fa082ba63f5418733c9907d360c9bc54ba0e2b374de7965a87316df1c7af17164e1b6dfe32d71fb5ba641bb8d6cd6299473f37e44a69e90a87cd2f8a486a0db4eb104bf87d9f7cc87dc294e6debec7e5819f3f26bdf4cac91f8ee94a826df99da39a4bd6d476943428e3f5009546ee569d6273f7ecb115538c6ce8fe150249c89452c2f0cf0796208a216fc2cb55e1b6c892778f15e7f8b78e6e97093572a29ca3600c72feb4e1ef42a225da695b3111777f3833e306f2a90b8ed6095127b0f13be495a3321bf8201955d40f6b486904a4e1f4c9965563d30277b30cb0d1ef375338a25314fc5abce41f1e95118e89455af9e786cdc460e4e48fda5f21cece9b4e5276523d6919e165df5efe59aff13067d3ef0e82259305942b5f25e831dcb72f5c7fa67ceba7678078d8311aefdc91916a42630dac61188b46825707dd26d29aec734df8bebd7474277908b2ba9e77daea20c395253b3cc876e5dcac960556072bec36e14da26c335b509a38dbf3037d620f4765e63b946ef8ada1729b1323acc8b5e436f3967ab7cc033ccb7d0c9cc74d3a3faa2ff2afb1cd571e3749cb0203e70756273fc6a4d80cf646d551f3a801ca513ac587f0ddc8c58870d817ea2671b2ef30be91a45dc730c6636e7de2ec235044b837ed9861dc89e4df342cff52a29ae6b8d5817fe31bb3a74d0202efca5d94b4d232f3dff885bf52f8d43097d069ce81220e8578c630d496b01fc60562bfbfda22fce6ce68564ab31d1a3d38af2d7b73a970b9b30f6c48dc38991da402491b2d643e0f5e71bb9c0aa834006ddf24b7dbb180f68751535d8cc34823ba3d1ddfbfeb6a15655118d4e1e11b255b998006906017ad9978d6cf4a45a669eabf653363391e77a82a9da14d184a50f1421eeb61411e859cf6f98ab0846ed5345b63e3ad004d1ffd1e48e6574ba7d832f7ad1345b8df27f7707245b335ddff2e4ca1430ec44af208e633c25678b3cfee96424ca026b159bb18c1bdc51db6c66e8788e5aadce1d3e531c9b02edc65b846763ee64113c0cd0d23824c4baf3516e2c8e5192afb9fcd390e51b3bcdcc0a49f932a6907b38713e2229aaa9abc5305420f50a2016429012e835407dee7d8d0b8404655620c3df407e7be2a5a1e668341dd91224509ffd48db6861f558d098954f83aeb6e426099cc4291da311c37bd46c8d80c3ea975e0db6ce12dbdae9116bf08909431fd5483f7cb3076d33a900d56c26d6f151386abb32ea335f5337683201a1ce5d9df25c5df29a375d2680827e182b1aa0813ee7f9d273d7ce1b86194a8cf48d630a5be0b947245c1ee0a0645500ce2ced6dade1b63c0e7572260cce25636778d79ef11ed5e3c42835c8e53a6d26cf85293050cedee2a116e5f38b9cae91a503ec9e0cf784d9cfdccedf95971540ec37926eb43b27cbff1d96b83f80018e6afec70523b6672111a47f9922db34da15d7ca3cc3a77f1abe7221b72d43d2cb4c23fd2bff6cd5ef6b31b6a4c65babcdc918b0d99fad656e471a20a8f4b66d6e37877da1a8b7fb7a8692d6d578ff953b18deebea1353f915102e4d2064dcf8eb0965a2f4c2eeda70b4177dedd7597797ec76bb72ee422ec4d16e494ed77c9bd843ee01885cc3aba1f77806e8f501b856935494918ef83379ac5ae1e06697606053a8c5c880975d1f085c93f2afb1bd2c6ae07c29bbb245cac4726a20a2f61ded013722eee8878933a90319cc8cab7a2bc69dbc79767ba18fcdd8f9ba7de44e9f0575994b28aa9e3e7b4c1f2ce0eee264dfefe3e1600cd969683551894d28b690122093105133b22ee04a50f4883274cb929beb1bb45444ca5d470c0ac611c4990eefea25526f590b269ad40d23842c5b5996c1cb393dbff28a7e2f7cf04ac30fbc2d29ece6708fad830bc523fa52d2ebbfda27379e8c48d085b260a2dfc2e8d7e1a94a245b518612bfc9ca0260c8fdede5298bf584e5d71fc131f5eb6ad2dd7bfd42a77f523eb0aaa787003fb71b9a64fa783e918595af0413fcc0d7818a514c055a48ba9b1bbc6c974f7cb55c3af3edf117835d169e5e2b31e4278d0419b23625ae004171eb2ef8c231a61331886234b402886b4993ca6376f8664134cead1bea142bbed5d46e3bb71b0f8a4cec0c79a9b5f6c823128d02063967a5363b6bd6e242fa3fd21953fdb57725f1eda22984bcff8e40f2076fc0a462706dc2bd95dc447a2aec2a8a4808f2930ff1353348942e28204af42141fa120c8e5fa9c225d16f3624deb2ce178fdf594db504159bbf475e8bee281e3c8ebb29b404b3fbd13dea76df5aee05ad6a85054b838e149d0ebfabe61dcbda6c3494e170e75633843a01e2458b526ac5424177d6bc4706a09694be1c372cc79cf7c4d82ff4e62489d1fc7819d749710035a6fac239d716b57a1af1346c1e8420dc8ae46fd18245160d43a40c564bf11f0232bfd1fed67ba1aebce120ee93a0a000570b808d9fcd60b622c59ad53ef535c1db7de15b52ed2540708eb5baa7195e1a86990b6611ad5c50127f7e876f8031856e9a2c0566f357d6c75e6ca5f217d428602fa7c8f7fb9f3abbefee76d88b3b08c3be2f0d093ce96c6a00f3a157dc0a05e1fc5d8de583c25e09c77348f5825fcd4631396f3e8c26f5c1432784eb8c377fb520d28aedcaa5addfda6eed11da4d2cc91c2e3c3728c763c9d58283af32d00aa1910011a552adabee99d1387d14e582cf68fea46b729eddd0d3ad8eb9125d5fb060f4d6f70a166cc3ce9b02a7bc65200399fc2a47b90039ac23afb853925195e8079da20cbffea72365158fbd94a6e0a654f6c09a8032fb26df99913c2300e03428ab3cd1b3f7aee15460732d445b4797673b47a93a325b2e5157106ade0959be9c4562d5a4292a9ac94940c66375e559f34e57a1158b5d77a5dc9515bdab63799627301f19398d84c7afde812100a65a1642e9515a30434d344b380a92eeb2013a0f63cba648c37095bfd985c607b120f1769a79f1fd7c03f09f966b72945606ade67f9aaa631948bb82f9ae3f89ecf6db12c02d174f62ad6e1b60f4819ae19f4979e0f9dcf51bedf4b1bd1de73bc2adb1923544ede6dbd40ed4c559cf1f079f5dc8986691540e13f5a2505cc0923ca8fe2608ec92b95dbb5facc320e43b2049b79eb02618f6fab08b7e9dbe00fcd69b338b1bb6a9beae531972e16a19d94bd2273c4d042eca34dd7c5aebfbf16552681ad4e243824a9c5d0d8b8d3aba4c102fb76c216c230c2ec34838a0817b03a04480c61c899b2e442bcf2567d4e73000d9c9d4d0acb712df0183fc288634cfde234b94fdbbc0b7e66ea5b6437f312167b1ea93e2a6b2105308d8198a2d4054ba2ff2855250e0e6c952344056e2d3d09e5a2c578837d6521ffb82780f169d07f2f032b34d62f2712a77a56175017257ea1caea41acbbc520b429bd4e3ec3f9a6eafce46731dd3396f1ce1a6198927fd2dbefb3f77c9173be0934747ca47b98c6548c8cd07249d9715414b8a8ddc8430575d8b8903d3923089282a3ccead6e11044c67f3d5d8ed8cc0c0331f2dc09e1bae77ab55307e6445ad382451eff64faca8a4c0cba7cfa2fc9b087afb040e594115c35ce1dbec69ef1e5af8003339afda5faa1be1a3da7c5cb84273009c32d300fba7d222d2dc783241a9414ee30c8bd7e655c09a7f50dfb249ae9b15284b971503f6ce8866a1b36f993acf28d387da88c8defd323d1cd91d4eb46ff87458269a134675556b067a1b71829b7706ba58c93a919884089dc333c9b5d8279dbcc20071991762d2569c8ff5f21783e2961228b2006f8805750c0f9f4f9dc3df86dae1ab98af22122966a6ba04ccbb2bdf90e91e1f2595b979b6934fe132eda34cec0f83132f3867a197a6dfd0d43528bd56613732704bb62b12f4ede7439b2150384fa04db658fda2ddf97ab571f02d150c50c95009d0aa2e553019ac1cf9bbaf15474bf66d69224913b11080badb47d4a085fa13e965de6e95b7aa6e07bb212774d0240738cc07ccc1670d33c100cead3fb99c3f32fdd97c9b16956b1c22a90cd5c7aa0d920dae9e2b149fb5f9870129a0e97d1edba0dbf8fc4fcca6c65c639dd3eaa8803b1e9e601907e086ed1079ff6bc6de941c91df0634ce3730b8035bfdfa699304666920bfb092354da1f0bdd28c9023bd2e152e931e82eeabb86b0323c789daac94422eb7855f18775917e12feb85019e2e017303002ff8e04513ae0fb03f334a76addd8fcbd69ed25931f44044eeffb5d66cab5a22b21e85324946ab15408dd5d68b17727d2e4779bc378750eaa6ef6e943966c0dc4d066c6b8b8945023a0fc49f81a9c15a35d350e3d741652b8a8014b3649dcfd028f25c0b38b7cc14f7e375acfd3960af2eefc49ac6589f38791c9c0b0ea4e55992274052eed15cb8de213794636c4db2385eb9bcfc28f8a97e7c7ac949cd519ab62d1ab10d855a7ac6acda00b78d35d80a9ab4b7099603782384c461dee90abcc14a539779435cf0677eb0b6ff7e47488667788f9b0fd7d5e0cf53aee5ca0071fa30c062da3c44e79096e24594c01002b7cdbdc49be2ddac8058c7ded15f07d4c413886fdd7017b9fedb86e39917fd1e81b294675bde06c8fac0dbce7f4b90b3859c66f9f6fec640c6781728a8b347da28b4360924ef68c3c740ed5ddbf013720c6de54d9bce5232864f9e80a652cd778641c327876b2a3e1049355a58fb5054aa17064e97142d64be9daf5d1b162566a009c69133f60e3d4c2a53c153185c659d16236fcc1690eed8c6c2e4f8b172eec457a9407003ddad723e3b183e81b17ddbe46ba368ab3e3ff574d9e3fb82e102ab46d7f608e235d064ea963fdf1622ed7278a27fd8210ad39c3acd9069abba71ca051b64561683068ca6a1be906c196ddde1839b3897d5af8fee51614d73e51511b03a5763f3ed3e64bf7293118dc321cf5e940a2829c6b8550083d66d31680fb55af098d9ccebde9882f818c29f4cbb55c26a97c359d8606bff3744ff3efc22e8d34e67b7c97b567483963c574bd1dac8c46c911c48b6e29e73e52f8c9385729a73b70d2ebba9e744247d9003a962fd607686e6c5972b59616acfe327d8b736f38c703832d7690c6474641bf87538e785353c1fd7df1b5ecb1200eed8c5857abd16c26ae72d0147de475b0c4bc98dbff530b334c9c50607bd46ddbcb1ffebf7513cc842e4cdd6c8c00a284e81cb531a04f75210add4f73db3da9783694fc541cd470368c8776973f02835dc355ef54ca90a580a45a2df6137c43b151ade1e51bc879e7fb43141541bfab79b3eaf0eab323c7147ecce6eb3eb3eb02a204755cdcc7405ad903b91fa4d297262cf77fe395a18e269ec36bd534d4939e78719d7c312ce5205979b2fb92fbf9e1d1effb0f663b9361893fcb11bfd66c92af3394e899876990883e9f5374b5642c68e8468498612e3848d367598c2cb0806b7f0c7f4b004dde2b4cc50161a4d293f2ec89c4cd35a767736f9282f848b9d1cdf405f61abcb3e50ff4092d2afb86fdceeec4791d892546e29495f97876cd8015f193113f1b8584a9ff3f32650e29126b81254961e677b6f67023295567f574364b7320313db988616ac123368179beaabb5a56257f0b6df8f6956324ac31d3e8db83dc994425ad80e235051af62ec79a6dc4bfa36283af72af26136c8f5eeb32e1fa1b9e21a228a2a12aed39e717e8f404334d8367ef3edceab1f3e250ab9dc1e89f9b84e658d38806f4d4a09ff07ca539077a5a496699a9d7d4aafa78120eb90f404c2a6ae00aa1c813b25cb6ff9dab8b66b1dd83c80c1225aa24a47df3cbff7f6842d9486bbcd4179150e1bcad3caa604ac1db71aac913c9d3cbc154182187e2aeb852011b22e40b25f9cb31ab7f458a11b1836085c4a99a633215684e7fc70646ee2158faf8329c320a3bc050cdbbac216a18a88af2dd1bb4d648110c5c90f7f5948128eafbe36c01ea709ca8b5fb8ad9eb7384feb7055220aed45690664b0312052792a5b9dfc90a1248995cf68f80b7822fa577724ad143b1d987d2fae7992d3ad270e6b1fc4f1bb3130f134607e8129a6b1442ac05f114062be3604d7cf1595022f49e7cc55282f0f666ad6ff3b03d692c2a66fc2eb5fd0751e4514229861e2343d43162dcbdec156aa5f2c5f9aafaf470f17e5ed688b3516647b9a1a220e843791ddda20fcc444ef63ba31fc27e62fee4676f097f3fecc625755b26ad48dc7ceec1920443c6c466c7bb36e91082f115f4e563a562af1ce5cf37c45bb2da72ab39ecf00e0349eed7e87994b6670e8bde4f4f9142cb99f6bf36eb41bb4dc72b6c6a6686b63fa21c167b1ba5ff481abcc2ca29905d6b75eff932296d75a90080f3a727690eab0e804aa95b545f55107d308f4cd9884d75c28388151a72e82291f79eb52921718903a8bf029a3e7c0ce28f204926dc221f78711a08834a917a0843d8249ca317c7154b88a5a10a09d7477fcf2d6296725bb6a69c2739964a768cd6ae51d7e7de63bb17fe7fabebb0ee46c285c683a41203d059a5c89024a7f3c59915121921000075ed397d30ada6d56e6caa685cb98cc0bf279fa2d96408611ae7e43c3bf70f73148c6615f20060b5c337c6555a3bdb1870bededac9eff951cf1c7fd4f0046d7661789bcfd56fe6198b502e01f90333ad6e9354db449435d0506526bb0c65595dead87be428eb1b988906de152f9a7f126ede6b933c2de1f7d20ec3e64c7468906fba2bdea8b300bab203542dec13a90e4195b3f7da1b669bfe9e8989440b24807ffd44d9e3d61e098caaa029a7063d25604cbacc5f2b3671a163b80a440948230ae90dc3bd7fd46b667cc7d6dba2f53775e9a2180ced0e1cdc6e1275e741607d6dfe40f91ec81602f9bc7c26c322b82114949fd17a9284dd2918326b7880f42db6e468b80f980db98e31ad57be1f131407a0d099cbad9eff25916048e4210c0eb0b68d4d11cc1545cb46114b3969ad0d7a6570b7571c877ed8060cf8b736f8c82ddb64d19fc29af3453f0efe33c68c21c7c8c054707790cf5c056d0ba408d077fb65cef8fb071398ce35cc95c48ba546230f4dd60ad633f81478c87019736044783599a17d4dafd30cc6f4278cae2384763ff2ef395b8e7265ebf0453cef5c98e62a0e48ad422af17a4eee1acc10a51a3fb6e98594069e4976f71027dfe7a9593cdb6860cba745f2346c8d4868b07f381d3c137b396780545e0ea331e586b176821e45f67761fd8b4c6cbbecfd34b72201f6145a6b06eaa8fa9872a54734acbccad497390ff69f676c496258479aa06d9fd1ecec02a01216fd66554afbd5e728608f4572a4d485e57ff5bfc3df", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x1, {0x1, 0x0, 0x0, 0x2, 0x0, 0x8001, {0x1, 0x3, 0xf8, 0x0, 0xc28d, 0x8000000000000004, 0x0, 0xfffffffd, 0x0, 0xc000, 0xfefffffa, 0x0, 0x0, 0x8009aa}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) syz_ublk_setup_io_uring(0x6593, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e05800720"], 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc) socket$inet6(0xa, 0x3, 0x1) 12.444933218s ago: executing program 3 (id=1505): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x60040000) r4 = socket(0xa, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x3f, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="e0", 0x1, 0x401) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x58) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 12.401061814s ago: executing program 2 (id=1506): r0 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000c80)=ANY=[@ANYBLOB="20145e0000003d2dfcf6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.601585971s ago: executing program 3 (id=1507): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x28, 0x0, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x40030000000000, 0x0, 0x4004000}, 0x80) syz_usb_connect$uac3(0x5, 0x80, &(0x7f00000009c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1397, 0xbd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xd6, 0xa0, 0x2, {0x8, 0xb, 0x2, 0x1, 0x1, 0x23, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa, 0xffffffff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x2, 0x2, 0x7, {0xa, 0x25, 0x25, 0xff, 0x2, 0xca}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x8, 0xa, {0xa, 0x25, 0x25, 0x9bb6, 0x4, 0x3}}}}}}}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@bloom_filter={0x1e, 0x0, 0xedb2, 0x5, 0x4c}, 0x48) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x6, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0x5509, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x4, &(0x7f0000000000)=ANY=[]) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000100)="fc86412c39e0d962e93d945ec9c4efb361054c", 0x13) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0000090582020000000000090503"], 0x0) syz_usb_connect(0x17aff7a88c855ce9, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) fstatfs(r0, &(0x7f00000001c0)=""/91) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100102000040"], 0x0) syz_usb_connect$uac3(0x5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, 0x0, 0x0) 9.75197374s ago: executing program 1 (id=1509): r0 = fsopen(&(0x7f00000002c0)='hpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) 9.628006572s ago: executing program 5 (id=1510): socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000\t\x000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x62901, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000bb88faa4b22d780900000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000ddfffffdffffff00000000"]}, 0x108) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000400)={0x6, {"88d531faa500431edf0fbb8fabf93b61", "1e7442e1d70c2dc10af710d3e7e3da1e", "f02cb005d6b2f4399e8c70061579e3a8"}, 0x8cd, 0x6}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x800401, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) 9.572883765s ago: executing program 4 (id=1511): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_LOCK(0x0, 0xb) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000050c0)=ANY=[@ANYBLOB="5012000044000701fefffffffcdbdf25037c00000400458038120180341237803012"], 0x1250}}, 0xc000) io_submit(0x0, 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, 0x0, &(0x7f0000000500)) sendmsg$inet6(r3, 0x0, 0x40080) chroot(0x0) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, 0x0) 9.571591335s ago: executing program 1 (id=1512): r0 = syz_io_uring_setup(0x34b5, &(0x7f0000000540)={0x0, 0x2730, 0x0, 0x201, 0x7f}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) r4 = userfaultfd(0x80000) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000005c0)={{&(0x7f0000d1e000/0x4000)=nil, 0x4000}, 0x3}) recvmmsg(0xffffffffffffffff, &(0x7f0000001640), 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0xfffffffe}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0x7, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, 0x0, 0x305) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000012000000050800000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="e30b83b0d58ff2cd81c649f2a46f1da8733f50d24631a3d14ae40677978feb37ff51e2a40483e005aa404bc59951f53932b3c4ece4f31ecd541b1958cc67bf8e59c2c4795e930a015c87c8c22c6acde554bb93248ab7df4d5d5f", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r6, 0x0, 0x0}, 0x10) 8.651837358s ago: executing program 2 (id=1513): openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x2d1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 8.388527415s ago: executing program 5 (id=1514): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c80)={0x44, &(0x7f00000009c0)={0x0, 0xe, 0x2, "810b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, 0x0, 0x0, 0x0) r1 = epoll_create(0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_usb_control_io$printer(r3, &(0x7f0000000300)={0x14, &(0x7f0000000200)={0x527b62e14c9931de, 0xf, 0x61, {0x61, 0x23, "fbd57d2b6960cb4c4375a84e74fd48625831e4de1ceb12611fe76ed6ce685bb438086ff0b96434d154c14e52ec32c0c11fb4b645da16a8ce1dbb5f45bcb10cd1a843d616a7debf329c3f6978b49348d23918f3d6ec1b6459cb7e6a02253648"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81d}}}, &(0x7f00000006c0)={0x34, &(0x7f0000000340)={0x20, 0xa, 0xba, "7c42d0e67bd2ee243ce72ed4ffdfa1d013018448175be2e84b5275d2defc138458edf98779ad50cd886c27efc31b576ce7fcf3c62a16904d592b855012fe25b7c29f531b4cd3b4f3408746fc1b729b66b03dd5e7348d2d3a2ebb04dcf12c2101b8484b8c8b681a34dfcf387381d94344228892666b5bcfe94ba1836578354c816b40ea16221b64413363418724762b17d5cf469d5b64063eda9833eed9744d957de2fb41f6d5f761eae5e7c68af19205c2c6421c5c5d8f9d6c26"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x98}, &(0x7f00000004c0)={0x0, 0x8, 0x1}, &(0x7f0000000580)={0x20, 0x0, 0x73, {0x71, "d4899e772372629378032c403dc52ad99caecddda27d91bceb1fcb888d6ef76c1e47036f4d783eb59529f09d593bebfc94a9ffc896139fea18537903887e9a51433c83dd83157d9ae1a2583e80b1cde219804ce3e3479a0bfdf12fc122cf0e6cc7bd1631ad43753e9fdcca2d558a3e7e75"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000000680)={0x20, 0x0, 0x1, 0x8}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002880)={0x1f, 0xf, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x5d3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r6}, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0xffffffffffffff41, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c05", @ANYRESDEC=r0], 0x38}, 0x1, 0x0, 0x0, 0x20040801}, 0xc000) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000640)={0x40, 0xf, 0xf, "aa63c2a22a007afb3282cf2f77dfb1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.946963477s ago: executing program 2 (id=1515): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_LOCK(0x0, 0xb) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000050c0)=ANY=[@ANYBLOB="5012000044000701fefffffffcdbdf25037c000004004580381201803412"], 0x1250}}, 0xc000) io_submit(0x0, 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') r4 = creat(&(0x7f0000000100)='./file0\x00', 0x59) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000900, 0x0, &(0x7f0000000500)) sendmsg$inet6(r3, 0x0, 0x40080) chroot(0x0) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, 0x0) 7.356681039s ago: executing program 1 (id=1516): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000020904000001020d0000052406"], 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x20840, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80064d12, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x202, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_VFIO_IOAS$CLEAR(r5, 0x3b88, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x8, 0x700, 0x92, 0x3, {{0x8, 0x4, 0x0, 0x5, 0x20, 0x64, 0x0, 0x9, 0x2f, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x25}, {[@timestamp_prespec={0x44, 0xc, 0x2b, 0x3, 0x6, [{@broadcast, 0x9}]}]}}}}}) r6 = io_uring_setup(0x272a, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x1, 0x117}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/141, 0x8d}], 0x113e) ioctl$XFS_IOC_GETBMAP(r4, 0xc0205826, &(0x7f0000000040)={0x1000000000000000, 0x9, 0x8, 0x4, 0x35d}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r4}, 0x8) r7 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r8 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2000, 0xab) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000080)={r8, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d81a17f7061a74df2cfc06c89f3d9e234b30c50997d3bef4090ebcdda37bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x2, 0x6]}}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000100)={0x7, 0x0, 0x6, 0x40001000080002, 0x8000008, 0xa0000000}) 7.186405936s ago: executing program 3 (id=1517): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000080)=0xb1, 0x4) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e5f, @empty}}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x40, 0x11, 0x3c, {0x3c, 0x8, "481d8b6a5b4e873b9b427c1af0b17ddb7b410dd2098a8169e0b6b18ab3595e2b26f7c373bf2a85e1abcc97cf985e30e9d59ea2919d6b6c08b6a5"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x1c, &(0x7f00000002c0)={0x0, 0x18, 0x7f, "e06e51d5e1916cc4ac71a7f9b8692c5e8c184c17d57bc9e3231ed02f383c162b0a783d5d8e0e5507787b3b2e45beec999130d58f746ea9c143e7185b3d1b466210043d4d94196f6a50ee08be02affbd95e3dc0f885527a28c7c7a00764241846b48a4874f395df267b05f6a8d212f5d3cee3a287afc1392ac6fbf664b387f2"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x81}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2}}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000400)={0x20, 0x16}, 0x0, 0x0}) 6.886930343s ago: executing program 4 (id=1518): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) syz_open_dev$sndmidi(0xfffffffffffffffd, 0x10001, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x0, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}, {}, {}, {0xfffc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[], 0x0, 0x1}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x48) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.896940516s ago: executing program 4 (id=1519): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f00000000c0)={0x100, 0x3, 0x0, 0x200, 0x2}, 0x30, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x188}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x2080) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0) 4.838362832s ago: executing program 4 (id=1520): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) mmap(&(0x7f00005e9000/0x2000)=nil, 0x2000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x6a, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000180)={0x6, 'team_slave_1\x00', {0xfffffff5}, 0xc}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) set_mempolicy(0x6, 0x0, 0xe0) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r7, 0x40305829, &(0x7f0000000500)={0x2, 0x2, 0x7, 0xff, 0x3, 0x5c}) read$FUSE(r6, &(0x7f0000000300)={0x2020}, 0x2020) 3.996019958s ago: executing program 5 (id=1521): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x40400d1}}], 0x1, 0x810) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000100), 0x4) sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000740)={&(0x7f0000000700)=@can={{0x0, 0x0, 0x0, 0x1}, 0x4, 0x2}, 0x10}, 0x1, 0x0, 0x0, 0x4008851}, 0x40008d5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r2 = syz_open_dev$video(&(0x7f0000000040), 0x800000000009, 0x503400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r2, 0x0, &(0x7f0000000340)=""/205, 0xcd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000230a0003000000000004000400"], 0x1c}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @mcast2, 0x2}, {0xa, 0x4e22, 0x8, @private0, 0x6}, 0xffffffffffffffff, 0x9}}, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000000000000000c0002000100000004262600"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 3.936804886s ago: executing program 2 (id=1522): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1806000000000400000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002030702500005cc96ce27c927d840000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000950000000000005fdc5b2cf546b01b6e9762ad8b18d4e7ce25966ded7131c5ee4af96a7d9e5b29429199d65328add246dcd939d09da2296e038269572fdd5d4ca0f8433df484c6c1ede58eb7bce76d7920e2b7b9ae0fb2c3896e45bc490216b7b54f2a32182b3ce71a371a6a82927ea6cc09df635bae8a36bab3cf712cccea2654316e79bbbd22c16046fe926c8bdd7d911fc53f5422744eb063d2967bd91b6258e2d1f793bbd0253f60efa72309"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='2', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x40000007) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r7) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010329bd700000dcdf252400000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x0) write(r3, &(0x7f0000000440)='2', 0x1) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r9, &(0x7f0000000940)='dummy_udc.0', 0xb) 3.893859683s ago: executing program 3 (id=1523): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000280)={{0x3, 0x0, 0x0, 0x3, 0x30a}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e05411, &(0x7f0000000300)) getsockopt(0xffffffffffffffff, 0x3, 0x7, &(0x7f0000000440)=""/183, &(0x7f0000000500)=0xb7) sched_setscheduler(0x0, 0x2, 0x0) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x67cfc0, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) sendmmsg$inet6(r7, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x3f, 0xffffffff, @private0}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000003c0)='.', 0x1}], 0x1}}], 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f00000009c0)={0x0, @in6={{0xa, 0x4e20, 0xab9, @local, 0x8}}}, &(0x7f0000000100)=0x84) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = dup(r8) setsockopt$inet_sctp6_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000080), 0x4) socket$nl_route(0x10, 0x3, 0x0) 3.604559369s ago: executing program 1 (id=1524): socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000\t\x000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x62901, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000bb88faa4b22d780900000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000ddfffffdffffff00000000"]}, 0x108) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000400)={0x6, {"88d531faa500431edf0fbb8fabf93b61", "1e7442e1d70c2dc10af710d3e7e3da1e", "f02cb005d6b2f4399e8c70061579e3a8"}, 0x8cd, 0x6}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4040002}, 0x4000080) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x800401, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) 2.917102541s ago: executing program 5 (id=1525): openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x2d1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 2.512851065s ago: executing program 5 (id=1526): syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) r0 = socket(0x1d, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000001c0), &(0x7f0000000240)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd703100000000080041007369770014003300626f6e64300000000020000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000001d00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x20040000) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) write$nbd(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000005000000400009000000"], 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001880)={r4, &(0x7f0000000880)="4ac6a6728c7057c003ef14ffac9a8ede36268acefa248ac0847fbd52a6b941d0056b15e142d1ace4efd6bd4e5e6af46cbfb203b1bb8f4cbbb6c93d2830ff33bdf8e772619bb8b597ff939dbe3f8450766f786bfc46329bdc255d2df667412e93f8d31d81ede15db8f94b45131aab7201f29866b2dc17511e9ad3d73233b27a2c6b762e19ae058e19b3211efd5dd379afabd9337ac8f6fa6a048c3393a6833ef97932f4c845825fcacaab0629e420cabac4c87239f6212888881ae6169d2bb1506e06b00afb65f7f1b142496b2bd919266190d34c3e3a00dd2ba7953ac030d74abea09cc2780b61a88e83c46e9a8a605e3f8fa28f23e15ed5329eedd31ec396688a155467e318d0b8ba34c7d191a4ddd14ceb3a6c337de63d36c303233b0818b2a8481a602a5230d5e601905f07c1fed05d7605737b3d37cbac980494997f85e61c510a70d4ce705a7badc197c700c9a2b2d506decaf301983361b57ecc4f64f89bbfc552400a0b7eae787607e32a0cf985813cca32ea18dee39da4bc4ded12ec983eb9b5b51fdb94f11da9eb87b86756d2f6c2df637ef6a89432c68ebff0e7826efe9e633f072a1e29de97fcff16b30693dd1df20e1a89dc4ca728073bf0edfce4644da3b48468a1c2433636f4d2e48db8ddb3d942496bb11d9ac7c388ae2062916018b4eaf8843465c40962e1b7cb062d32db236020e99d8de18a70862885532a4dd17ad383cc1db443f23c6e5ab44ddb5fcfebe1225dcaed0595194f179db455d7e5efe5df5961b437293a8f2436a90cf94a64c07e86bf1989bbc7044c4e15021f9c33c31740a8ae7a073e8b507341b70896b44fd00af117e601635a8d9613695848934e22b30587476062185a2d9a1f258dbf77cacb8ffe6cca1cc024fb11659a637e9bdfcf07b5a1ec0226425ad19e9bf0744501db925d2f46daebba755f3e44585e981816f53c32f105130f6757fad9fae496dbe4507c56d4ff3e2eaaacdab05e0bd46bd2822791ba43b2adf2e0954a1629ba06a30374997669e96ffe5003e7f661ded0631fd23c982496025dcb3cc5dbe1aae56389c09958b0e620b0453921fa21a6bfeab349930a6e9051e2491b9c87c89bfb0c54389a5a90671fab22538b6acb50d9140f0d3770c0f2683dfe442823242ae5bc84084971e96a666ff449a9bcc27022271443def7565264aa8ea5a4afbf1421ec72469c4d260122b8fd560b6f7acd2089c526deb89207375ee2ffa4c47b103560eac98b6b9b6a300dd6e23986b711a8a0b1918fccd2debef558886a0edebbd3ab7ba0b9368582ac287623a90cc443b55b563f1ec60edbb45d2734452222519ab04957f2b0bd5577080216c02c3aefa15a92c8f35eb72a4a282f2d167b91f5ec4ab61fcb4d0831c49a8a1e4e00cb48959a95211e85fd2150c5d046c5c759e0d579f75198cb57157e84cccadb281be9d4038d67589558c69a2743225713093c2f9b365b719b465f7e4dc7ae68403b4d049dce986ed04f624cac63ff0664ac14bc8a32aad5faf86f12cbce5e5ddd0d1daf1a224912ac53a0366d9c2725cc1ce359bfb5f5cd4e7d7ed8b7d5db761f8343e03fa1b638d8bc81b66f945d26f7519d2aeb77cabcf707a9a5ecb4b9e593aa5a6a961421f3c5fac0a1da1ad02d9e47369867ba3a4c57d01e2cd4f778249dd1f5fc7b59f5a7f8c1d6f5ede07fb95d5c954ea7723d4181219b71c8c7807cd87144049f3890b754c81882112827a37fa305ba3159fe920f1fdc255c8dc991941771c5f4ff580bce744a8b9639260ec345cd2328f8c467f970b897af04159f235f72f6cab529429ede677cd57fa6c5bfbff6cd2480e33c57d486714601f48162e8750fb1c2c815b54df3525ee311c591fa41f00812680fd7b9be619caf4af568437d77db5c6e42fa91facdde0893393e87f28039dabba1c29273517ca7bd224773dbcd0d0849003cdfcf6122d372623eba7e4f35773b11c840db2cd8c220c7f1482ab139f8ae3a7cea70e7a430dddc09be9017ee9f5e92dc3061309624c38cef0f695eacaa9932a2a935c8ba799c28e4b2f3e16fc2f643cef9e48ff344ecee342a7c1e13ce51f5d48958f954c76b45f8e9a7a4ee69c4fb53bff92659f461ae5b914ba66cc2e8ca64edded17de4f8d86f50ea1c4094b88e9151217302b9e233d306fb297a67178a75d52416bfe44938c174f9233f22a7d9fff3556f7eeb40d200af605160ec7342f3811faea07418701358d4bfc6d18e161ee6128edd7d321291da90dc852930ed0cf8098431e375124f4919f66f2cf539990f0f7f99a8e3bc55275cf60ea03251f9892d9b959efed12b84a27604687ae4469b5d1c28d03cb29e8cbf1b1ecde50c612b8c8890d8c985740604b4e3e4cea832ecfd3bb5038dbaea276eaa3938b20be57d66ceccbd4990a8d3682913a277e7b02181ec9d96f0bbab2892338326facfff4fb05323506be340d1556795dd8a49fd7d2f45ad0dadffef52533eb9105c89f61461d440292100f59229b260a70e3f9b831ab2c9f60996a9644d6676363cb05068460f538173408f6854a39bb7a999ab1047eddd3f6122aa0679995cd0dafca218766698a68fbf75056991ab5e7f8362cfa67b3c6a05ad87841dc8be1edd5d8a6972a8c7038cf6585ffdb8d549902a5dc58fb98847829871c23fe4ab996e9417018be5ff3f6da37b4cf48176f1dd8a257ffa739d8a2061baa1935439cd7e2f313aedbb003a96cdace07cc72d86dcbcc61f8c2938dbce32c9f17ddf115126c83a2dbadb44493dcc42dca8a785f5d9759e59cfe2758ae0910384a076325ca2b3c67f83a3c010f82f762978c8aabe38c30fdb7b881644175c2b6a828f60431707336d64d3768aeab7bd806a42dd18a239b95745f7f803b6110f5ef0d65dfad9b1e8d04bd42c651eee489d46bd296c790aaa34f739534070a76b0b876871edac7d2304099bb54884590b51aa680220cc2dbc9c3ecf5bf954eb51c1acd6549329e47140a1245f344274fd72a05d5c76ac6faeabdc7561aa375ffc54887720ecd405ff82dc4f9ed27f440d6be57f0653736e876d7109d03f126d52dc9d546eea34d00b442e9be7b5fa33b98e605926c8e39c1644c9cb39334d28a83cbc02f05e73e9b5d0a3be0caded1e7be2e7ed0b078bc0d749ac5483270692f39ed2b648b847d2fecbf56581745c0c15a6faa5dfac40e94f249cac74fcc297bb3645969590cb99ee9b630c61e0ca8c622f1f66732eec4af330a91ad60444d4de2c2aa47a902488b6202511b542935ee478880378d4e18ad26abde96a1c21c917dbd0c9e4233b79595a871b8abe23b078c1721d45fb36a9fa5249b7a9624774ac5e8f64785fa9c2421d717ff97cfa497d7b730d7d62d2c4678bf36a1a69cbecd94bd916949827fcd7f4ba30f7d5ebc6c851f7232fc98680154770b98e00f5294a87044150e0501686fdd409b060fe8773bc6e48b3ed6d96a0b2c06b05ed6382b8d6571e7704256e0589ec91cec529a587a6f5924c8089d1af458a2c058f465ee0bac693867a9ba3c1622eab93f0cb82dee81f49a825426c52f93e92efa2d516ada9fb34735ddc72243de09de60aca6e7738fd731d724d91b97ac59ce73012937de00f31b899f62677ae0ced6413d087b087d4af995305c2e286039b9c96d397e285eeba5f1b88a809550d7df9634b98f38fa37b881ce74b54d5e39e5fa21b4f1bfb50d2615d026a175f26bf41931905f416a16d7c1b98631987156982af8d09a86d51d1075614bb94b35f1fd039571489200902830da3d130ce2e0e70687c57d150ba6810db46a9841fe22502135a007bf5ef07621c0e0cb3c5cd2f02044b50481f92c2dcdcd2ded742d6209f476160f55934b4952474d31ae2fe4e3c062526f90f1d157e218689548b9428fe85d353c9c53acce7fae82211326cffeaa55e1d5f7b3d8d33ddf64db181942648ead68fa50d0221fc56faf2b6ee0819d0343272ab343aeed2915c03615d39d149d44e8d7665ce1a38435acd7024028f156ba5c325833d1c67e026048ed7eb8510f9a2e93ddd2bcd67a005d8cca6018179bcfa06ce3926390c53b6d5e7b8e1457e292e7e7e3b61c4004ea8f69bc07afcc38668f7321fbb1bfda0a34f833f99cbac160d71813070c9a6e8e0e726519dc93bf2036eef5aeaed26bf87fc2cb8eab8cd9418f518446dff64478541fcced68c874a88075f0a5968670bde512a2444c6abfd4dc8cbbc2d1025afa13a69caadf1896b343bacce6fc84dbc214bc8d512f62327cced78f1334dde05a19cd0c4442229f3af1ddace078aad37106f20e53b1c5fe92dd2dacdc4f07ba07397ff72ec9913ab6c8e66fc2c7a2622c4ff7ba27fd7def9dab918a0c7876f5b620b48eb893e608f332f483cf85594d3e71b309fcf9580e0ee83ac45cce642aa4d79fecc6ada27e6104f9238119e2b43122a15ac43e88c442a723eccac43ab5ae47050ac54c87590bdab5f8d6c195ef67520a4a7aedf10930e197f06cf546e036385d587db366180adf0f670ebd0e42e91ea3d33cf972d878af7fe93d6720a0d0adcd20f57495ae9e334f06916ce5d67b19da0228d1820a14f7c1d0077d683ff6ff8d93f8ec7753906f6351c8d34663a6b35edc9ea7d2be17fbe5cb5d1f3d6f08e511af7e4835e9f7f9d3e3259432924ae25bbb3ea463683f42a12cad569a7bb43c335ee153e21aa3a76f16d90a1cd4d7f4bd9d6928ce1750c62e79ab0c19e9af5dfe17af1bbdd041fd3c936b546a8f5e5b796dc1488c433e3fdf58309df4f7df6f84e9c9fba3bdffe4dffe9d300c339f8fffb92f3b3c4fe75b55c955a0ef42536c8181dc6131dbfb7d6a779ba7fd4075d46cd8a7e9e9dc41e33102da8a55db8c4e544a636c34ab557339dbc2337359508f15dc00ceb300469eace213e5271e9065e903fb54953288e593024cce2c6c0e3f295b354d57389686270512d171d055d4c5d1b1e519f8899829cd81b7577274ef337720b3ade83aa8826a6e5341d472191878b9326702e506f1847a2f7b25eedba0a04b0b118779497e1ab31be8bae65abf492407291be8a54346c333c75860c6de779b4c13b6e7305331e7db6506e88e91587c81bf816b1b9315763fd7ebfe6beb4f47014e3a9f198c4fc83944b4991b57cdbff3d7c7351becbfc0db7175fec16dd89b9fea469b1d81bc4da4ea137d0f871e72c065f318ddcb289108030b924b26b97f4a40df779cf766e0029da3713a53156c9de2ed0f3666f09833d7844d4f485143cb7a3393904796aa365e1830f06bec89b34d24053fc23e0bf699683131b0ad327418d7e9acc25dd67783cab30349ee97cca653034c7f0dc6b8b0e922602f30bfa2ee5ada218886b2d8a79daad247a13a96dba8c74a1f91176ca62ae315ec45622c0adfb254e02efbaac05bd3abfca614e0b9bfbab8500f87a8f253c4b06cd81ab6013e03ba854ac42b73ce47ee6ad75412afa4265a822c153e3f0bba475b20004f3fc77d40d6e024a3aed0c1101b59878ceb4624730ca1e3facb8fa6f4c69672235c0709d6488a166b5725a232105f3c8daa9dedfa345ab65a89c2082aace03740e7b6c947576624aae1b2698062d5c53d2a82dca42062cb4a91ebfeea98245df8d1211cde8e979e9d2ba6e3c229124ce7896a18639ed4c6a669ed9830a99b17b603248f5b0927deeb48ecd4c2c39d0e7440044544246e05c3c809af1febe1c881a8f846345f59881c843d2786aa82acf45e43ce13fd5aba3632081cc0be486ffd971247642c33764e7b4690cc29d7a9f76e83b"}, 0x1c) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) openat$nci(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x30880, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) r5 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r5, 0x13) tkill(r5, 0x12) waitid(0x0, 0x0, 0x0, 0x100000e, 0x0) 1.926179031s ago: executing program 1 (id=1527): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f8000000190001002abd7000000000007f000001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a004000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7f040000000000000000000000000000000400000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff000000000100"], 0xf8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0x4, 0x4, 0x450, 0xffffffff, 0x0, 0xe8, 0x290, 0xfeffffff, 0xffffffff, 0x380, 0x380, 0x380, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'wg1\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private1, @empty, [0xff], [0xffffff00, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {0x9e28a1eebd22f92e}, {}, 0x0, 0x0, 0x6}, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x3, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xff000000], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff000000], 0x1010, 0x11}}, @common=@ipv6header={{0x28}, {0x88, 0xc1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'pimreg\x00', {0x2}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'veth0_to_batadv\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000000)={0x28, 0x2, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) 20.309462ms ago: executing program 1 (id=1528): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000001280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$user(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, r1) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x12000, 0x7a) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f00000002c0), 0x8400) ioctl$BLKRESETZONE(r6, 0x40101283, &(0x7f00000000c0)={0x80000001, 0x200}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000008c0)={0xc}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r9, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r10, 0x9f) keyctl$chown(0x4, r2, 0x0, 0xee01) keyctl$read(0xb, r2, &(0x7f00000002c0)=""/121, 0x79) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x10, 0x0, 0x0, 0xfe, 0x0, 0xac, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0xa}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_TTL={0x5, 0x2, 0x4}}]}, 0x30}}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x501800, 0x0) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000400)={0xc}) 0s ago: executing program 5 (id=1529): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x8800, 0x0) ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f00000003c0)={0x8000032}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000100)={0x13, 0x10, 0x7, {0x0, r8, 0x2}}, 0xffffff28) write(r6, &(0x7f0000000340), 0x11000) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/4\x00') ioctl$int_in(r9, 0x5452, &(0x7f0000000040)=0x9) fcntl$setstatus(r5, 0x4, 0x42c00) read$FUSE(r5, &(0x7f0000000700)={0x2020}, 0x2020) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600894f0000140002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x28, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0x1c, 0x0, 0x2a}, @ptr={0x70742a85, 0x80200, &(0x7f0000000640)=""/223, 0xdf, 0x1, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x1c}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): ess to the device to prevent other foul-ups. [ 567.781820][ T2362] pvrusb2: Device being rendered inoperable [ 567.793573][ T187] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 567.814148][ T2362] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 567.814875][ T187] usb 2-1: config 0 has no interface number 0 [ 567.847610][ T2362] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 567.876207][ T2362] pvrusb2: Attached sub-driver cx25840 [ 567.898148][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 567.921060][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 568.218266][ T187] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 568.575165][ T805] usb 6-1: USB disconnect, device number 15 [ 568.947792][ T5718] usb 3-1: USB disconnect, device number 22 [ 570.753295][ T187] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 570.765726][ T187] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 570.775002][ T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.795630][ T187] usb 2-1: Product: syz [ 570.800059][ T187] usb 2-1: Manufacturer: syz [ 570.804828][ T187] usb 2-1: SerialNumber: syz [ 570.814027][ T187] usb 2-1: config 0 descriptor?? [ 570.830198][ T187] yurex 2-1:0.50: Could not submitting URB [ 570.836669][ T187] yurex 2-1:0.50: probe with driver yurex failed with error -5 [ 571.843568][ T187] usb 2-1: USB disconnect, device number 21 [ 571.936172][T10557] random: crng reseeded on system resumption [ 572.368581][T10563] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 572.376675][T10563] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 572.386754][T10563] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 572.394874][T10563] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 572.845214][T10568] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1202'. [ 573.155210][T10568] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 573.984989][T10569] netlink: zone id is out of range [ 574.018439][T10580] random: crng reseeded on system resumption [ 574.026454][T10569] netlink: get zone limit has 4 unknown bytes [ 574.210911][T10582] gfs2: not a GFS2 filesystem [ 574.217422][T10582] hpfs: Bad magic ... probably not HPFS [ 574.996716][T10590] fuse: Unknown parameter '0x0000000000000004' [ 575.057461][T10593] random: crng reseeded on system resumption [ 575.540081][T10593] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 575.548024][T10593] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 575.557204][T10593] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 575.565102][T10593] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 575.836744][T10599] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1209'. [ 577.484093][T10616] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1215'. [ 577.566047][T10617] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 577.625054][ T805] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 577.904055][ T805] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.028254][ T805] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 578.124153][ T805] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 578.323346][ T805] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 578.446945][ T805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.520745][ T805] usb 5-1: Product: syz [ 578.530537][ T805] usb 5-1: Manufacturer: syz [ 578.550459][ T805] usb 5-1: SerialNumber: syz [ 578.567216][ T805] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 578.577607][ T805] cdc_ncm 5-1:1.0: bind() failure [ 578.696330][T10625] netlink: zone id is out of range [ 578.717959][T10625] netlink: get zone limit has 4 unknown bytes [ 578.751575][ T187] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 578.873447][T10613] loop7: detected capacity change from 0 to 7 [ 578.880691][ C0] blk_print_req_error: 10 callbacks suppressed [ 578.880707][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 578.896501][ C0] buffer_io_error: 10 callbacks suppressed [ 578.896510][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 578.910713][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 578.920342][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 578.936081][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 578.945701][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 578.954630][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 578.963353][ T187] usb 2-1: Using ep0 maxpacket: 8 [ 578.964291][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 578.977727][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 578.978282][T10630] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1219'. [ 578.987383][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 579.005485][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 579.006938][ T187] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 579.015129][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 579.033510][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 579.043078][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 579.051012][T10613] ldm_validate_partition_table(): Disk read failed. [ 579.059557][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 579.069162][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 579.078083][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 579.083197][ T187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.087725][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 579.103660][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 579.113258][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 579.122140][T10613] Dev loop7: unable to read RDB block 0 [ 579.128711][T10613] loop7: unable to read partition table [ 579.134503][T10613] loop7: partition table beyond EOD, truncated [ 579.140646][T10613] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 579.171725][ T24] usb 5-1: USB disconnect, device number 17 [ 579.241232][T10631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 579.737860][ T187] pvrusb2: Hardware description: Terratec Grabster AV400 [ 579.744988][ T187] pvrusb2: ********** [ 579.751687][ T187] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 581.036934][ T187] pvrusb2: Important functionality might not be entirely working. [ 581.045335][ T187] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 581.056812][ T187] pvrusb2: ********** [ 581.071701][ T2362] pvrusb2: Invalid write control endpoint [ 581.118355][T10641] random: crng reseeded on system resumption [ 581.230231][ T2362] pvrusb2: Invalid write control endpoint [ 581.255388][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 581.281567][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 581.315002][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 581.659732][ T2362] pvrusb2: Device being rendered inoperable [ 581.691461][ T2362] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 581.734210][ T2362] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 581.763590][ T2362] pvrusb2: Attached sub-driver cx25840 [ 581.775258][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 581.789510][T10648] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 581.797374][T10648] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 581.805764][T10648] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 581.813571][T10648] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 581.879577][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 582.115898][T10655] fuse: Bad value for 'rootmode' [ 582.171150][T10656] netlink: zone id is out of range [ 582.177845][T10656] netlink: get zone limit has 4 unknown bytes [ 582.284981][T10658] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 582.293015][T10658] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 582.301562][T10658] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 582.309393][T10658] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 583.025394][ T5710] usb 2-1: USB disconnect, device number 22 [ 583.483258][ T5710] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 583.601564][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 583.641566][ T5710] usb 2-1: Using ep0 maxpacket: 8 [ 583.642014][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 583.648141][ T5710] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 583.676896][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.697189][ T5710] pvrusb2: Hardware description: Terratec Grabster AV400 [ 583.701871][ T187] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 583.704845][ T5710] pvrusb2: ********** [ 583.704857][ T5710] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 583.704870][ T5710] pvrusb2: Important functionality might not be entirely working. [ 583.704879][ T5710] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 583.704890][ T5710] pvrusb2: ********** [ 583.762303][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 583.770063][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 583.780361][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.798481][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 583.805869][ T24] pvrusb2: ********** [ 583.809867][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 583.820019][ T24] pvrusb2: Important functionality might not be entirely working. [ 583.821582][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 583.827870][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 583.835036][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.845719][ T24] pvrusb2: ********** [ 583.855812][ T10] usb 5-1: config 0 has no interfaces? [ 583.867207][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 583.876441][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.887974][ T10] usb 5-1: config 0 descriptor?? [ 583.899255][ T2362] pvrusb2: Invalid write control endpoint [ 583.911579][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 583.919494][ T187] usb 3-1: Using ep0 maxpacket: 8 [ 583.930109][ T187] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 583.942522][ T187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.970624][ T187] pvrusb2: Hardware description: Terratec Grabster AV400 [ 583.986053][ T2362] pvrusb2: Invalid write control endpoint [ 583.989730][ T187] pvrusb2: ********** [ 583.995451][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 584.004372][ T187] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 584.010022][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 584.018666][ T187] pvrusb2: Important functionality might not be entirely working. [ 584.026474][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 584.037250][ T187] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 584.041914][ T2362] pvrusb2: Device being rendered inoperable [ 584.052827][ T187] pvrusb2: ********** [ 584.058780][ T2362] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 584.069961][ T2362] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 584.078284][ T2362] pvrusb2: Attached sub-driver cx25840 [ 584.081950][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 584.083968][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 584.090760][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 584.108324][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 584.119384][ T2362] pvrusb2: Invalid write control endpoint [ 584.144460][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.183091][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 584.211435][ T9] pvrusb2: ********** [ 584.225680][ T2362] pvrusb2: Invalid write control endpoint [ 584.231539][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 584.251070][ T9] pvrusb2: Important functionality might not be entirely working. [ 584.281061][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 584.281102][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 584.303611][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 584.310015][ T9] pvrusb2: ********** [ 584.311167][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 584.328098][ T2362] pvrusb2: Device being rendered inoperable [ 584.345762][ T2362] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 584.366015][ T2362] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 584.395873][ T2362] pvrusb2: Attached sub-driver cx25840 [ 584.418827][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 584.459554][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 584.487281][ T2362] pvrusb2: Invalid write control endpoint [ 584.943902][ T2362] pvrusb2: Invalid write control endpoint [ 584.977872][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 585.001626][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 585.322041][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 585.333209][ T2362] pvrusb2: Device being rendered inoperable [ 585.339564][ T2362] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 585.350093][ T2362] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 585.370862][ T2362] pvrusb2: Attached sub-driver cx25840 [ 585.386590][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 585.423142][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 585.468605][ T2362] pvrusb2: Invalid write control endpoint [ 585.471803][ T9] usb 6-1: USB disconnect, device number 16 [ 585.566594][ T24] usb 4-1: USB disconnect, device number 20 [ 585.605662][ T187] usb 3-1: USB disconnect, device number 23 [ 585.631447][ T2362] pvrusb2: Invalid write control endpoint [ 585.663577][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 585.678481][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 585.690736][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 585.701371][ T2362] pvrusb2: Device being rendered inoperable [ 585.757277][ T2362] cx25840 4-0044: Unable to detect h/w, assuming cx23887 [ 585.765055][ T2362] cx25840 4-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 585.783539][ T2362] pvrusb2: Attached sub-driver cx25840 [ 585.795579][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 585.817377][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 585.904894][ T187] usb 2-1: USB disconnect, device number 23 [ 587.977849][ T9] usb 5-1: USB disconnect, device number 18 [ 588.238763][T10713] random: crng reseeded on system resumption [ 588.329962][T10716] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 588.337810][T10716] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 588.346167][T10716] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 588.353969][T10716] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 588.443944][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 588.498160][T10719] random: crng reseeded on system resumption [ 589.080287][T10724] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1242'. [ 589.611593][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 589.631668][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.655779][ T24] usb 3-1: config 0 has no interfaces? [ 589.682589][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 589.710870][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.797310][T10731] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 589.799501][ T24] usb 3-1: config 0 descriptor?? [ 589.810401][T10731] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 589.821297][T10731] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 589.830893][T10731] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 590.191976][T10728] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 590.199874][T10728] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 590.209145][T10728] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 590.217170][T10728] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 590.568397][T10735] fuse: Bad value for 'fd' [ 590.574065][T10735] random: crng reseeded on system resumption [ 590.709519][T10737] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 590.717630][T10737] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 590.727322][T10737] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 590.735412][T10737] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 591.311199][T10741] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1248'. [ 592.386729][ T24] usb 3-1: USB disconnect, device number 24 [ 592.517383][T10748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1250'. [ 592.777769][T10758] random: crng reseeded on system resumption [ 593.023615][T10758] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 593.031451][T10758] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 593.039778][T10758] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 593.047577][T10758] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 594.072664][T10772] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1255'. [ 594.553800][T10770] random: crng reseeded on system resumption [ 594.759057][T10782] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 594.767921][T10782] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 594.781251][T10782] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 594.790060][T10782] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 594.992950][T10780] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 595.000839][T10780] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 595.010110][T10780] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 595.018077][T10780] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 595.766427][T10770] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 595.801424][T10770] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 595.811115][T10770] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 595.841736][T10770] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 596.072650][T10791] fuse: Unknown parameter '0x0000000000000004' [ 596.079508][T10791] random: crng reseeded on system resumption [ 596.831010][T10796] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 596.839049][T10796] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 596.856717][T10796] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 596.864952][T10796] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 597.631296][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1264'. [ 598.141577][T10813] trusted_key: encrypted_key: insufficient parameters specified [ 598.223861][T10813] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1257'. [ 598.688151][T10812] random: crng reseeded on system resumption [ 598.731562][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 598.776893][T10812] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 598.784808][T10812] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 598.793131][T10812] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 598.800910][T10812] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 598.901753][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 598.901955][T10817] random: crng reseeded on system resumption [ 598.915906][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.939725][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 598.981770][ T24] usb 2-1: New USB device found, idVendor=1241, idProduct=506b, bcdDevice= 0.00 [ 598.993973][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.014618][ T24] usb 2-1: config 0 descriptor?? [ 599.184625][T10822] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 599.192661][T10822] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 599.201467][T10822] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 599.209454][T10822] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 599.305687][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 599.531476][T10803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.542189][T10803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.559621][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 599.581361][T10825] random: crng reseeded on system resumption [ 599.588184][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 599.597525][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 599.637390][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 599.647177][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.655468][ T10] usb 4-1: Product: syz [ 599.659729][ T10] usb 4-1: Manufacturer: syz [ 599.664887][ T10] usb 4-1: SerialNumber: syz [ 599.679453][ T10] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 599.693567][ T10] cdc_ncm 4-1:1.0: bind() failure [ 599.792610][T10825] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 599.800497][T10825] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 599.809616][T10825] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 599.817520][T10825] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 600.281438][T10834] loop7: detected capacity change from 0 to 7 [ 600.300095][ C1] blk_print_req_error: 10 callbacks suppressed [ 600.300114][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 600.315914][ C1] buffer_io_error: 10 callbacks suppressed [ 600.315929][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 600.364216][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 600.373868][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 600.385236][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 600.394881][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 600.404164][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 600.413791][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 600.432183][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 600.441877][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 600.466811][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 600.476472][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 600.498852][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 600.508501][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 600.516377][T10834] ldm_validate_partition_table(): Disk read failed. [ 600.531027][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 600.540691][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 600.553437][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 600.563095][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 600.571766][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 600.581413][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 600.592787][T10834] Dev loop7: unable to read RDB block 0 [ 600.602056][T10834] loop7: unable to read partition table [ 600.609081][T10834] loop7: partition table beyond EOD, truncated [ 600.615458][T10834] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 601.891799][ T805] usb 2-1: USB disconnect, device number 24 [ 602.794160][T10844] random: crng reseeded on system resumption [ 602.808154][ T9] usb 4-1: USB disconnect, device number 21 [ 603.215933][T10844] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 603.224740][T10844] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 603.233086][T10844] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 603.240872][T10844] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 603.382195][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 604.828786][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 605.081281][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 605.104954][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.179071][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 605.200251][ T10] pvrusb2: ********** [ 605.216713][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 605.251635][ T10] pvrusb2: Important functionality might not be entirely working. [ 605.271420][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 605.284095][ T10] pvrusb2: ********** [ 605.473513][ T2362] pvrusb2: Invalid write control endpoint [ 605.616125][T10873] gfs2: not a GFS2 filesystem [ 605.629733][T10873] hpfs: Bad magic ... probably not HPFS [ 606.003681][ T2362] pvrusb2: Invalid write control endpoint [ 606.026786][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 606.056851][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 606.086216][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 606.110332][ T2362] pvrusb2: Device being rendered inoperable [ 606.142958][ T2362] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 606.161597][ T2362] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 606.176069][ T2362] pvrusb2: Attached sub-driver cx25840 [ 606.191650][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 606.291262][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 606.590958][ T805] usb 6-1: USB disconnect, device number 17 [ 606.631019][T10879] fuse: Bad value for 'fd' [ 606.657544][T10879] random: crng reseeded on system resumption [ 606.787730][T10884] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 606.795782][T10884] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 606.805266][T10884] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 606.813402][T10884] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 607.142384][ T187] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 607.301571][ T187] usb 3-1: Using ep0 maxpacket: 8 [ 607.330042][ T187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.351557][ T187] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 607.371842][ T187] usb 3-1: New USB device found, idVendor=1241, idProduct=506b, bcdDevice= 0.00 [ 607.391645][ T187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.572804][ T187] usb 3-1: config 0 descriptor?? [ 608.274178][T10898] trusted_key: encrypted_key: insufficient parameters specified [ 608.360581][T10898] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1286'. [ 609.398260][T10882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.412096][T10882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.091573][ T5710] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 610.284139][ T5710] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.294476][ T5710] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 610.307878][ T5710] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 610.324629][ T5710] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 610.335216][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.343520][ T5710] usb 5-1: Product: syz [ 610.347830][ T5710] usb 5-1: Manufacturer: syz [ 610.352951][ T5710] usb 5-1: SerialNumber: syz [ 610.363040][ T5710] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 610.371279][ T5710] cdc_ncm 5-1:1.0: bind() failure [ 610.451606][ T187] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 610.541591][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 610.594010][ T9] usb 3-1: USB disconnect, device number 25 [ 610.613676][ T187] usb 2-1: Using ep0 maxpacket: 8 [ 610.660535][ T187] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 610.711887][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 610.720946][ T187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.779434][T10922] loop7: detected capacity change from 0 to 7 [ 610.789069][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 610.807409][ C0] blk_print_req_error: 10 callbacks suppressed [ 610.807426][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 610.823268][ C0] buffer_io_error: 10 callbacks suppressed [ 610.823283][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 610.841154][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 610.850867][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 610.877044][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 610.886757][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 610.895738][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 610.905373][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 610.916076][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 610.925792][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 610.935285][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 610.944933][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 610.955665][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 610.965306][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 610.973162][T10922] ldm_validate_partition_table(): Disk read failed. [ 610.988244][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 610.997962][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 611.034492][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 611.044229][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 611.054047][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 611.063734][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 611.080866][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.104921][T10922] Dev loop7: unable to read RDB block 0 [ 611.135911][T10922] loop7: unable to read partition table [ 611.144488][T10922] loop7: partition table beyond EOD, truncated [ 611.151292][T10922] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 611.358976][ T187] pvrusb2: Hardware description: Terratec Grabster AV400 [ 611.447614][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 611.457514][ T187] pvrusb2: ********** [ 611.516946][ T187] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 611.578378][ T10] pvrusb2: ********** [ 611.661260][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 611.726296][ T187] pvrusb2: Important functionality might not be entirely working. [ 611.803934][ T187] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 611.818207][ T10] pvrusb2: Important functionality might not be entirely working. [ 611.827992][ T5725] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 611.859762][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 611.886112][ T187] pvrusb2: ********** [ 611.895983][ T10] pvrusb2: ********** [ 611.950786][ T2362] pvrusb2: Invalid write control endpoint [ 612.021761][ T5725] usb 3-1: Using ep0 maxpacket: 8 [ 612.051682][ T5725] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 612.116960][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.524343][ T5725] pvrusb2: Hardware description: Terratec Grabster AV400 [ 612.644881][ T5725] pvrusb2: ********** [ 612.710160][ T5725] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 612.860284][ T5725] pvrusb2: Important functionality might not be entirely working. [ 612.922168][ T5725] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 613.000707][ T5725] pvrusb2: ********** [ 613.080660][ T2362] pvrusb2: Invalid write control endpoint [ 613.103965][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 613.140484][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 613.158030][ T5725] usb 5-1: USB disconnect, device number 19 [ 613.182561][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 613.518592][ T2362] pvrusb2: Device being rendered inoperable [ 613.531078][ T2362] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 613.573679][ T2362] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 613.602638][ T2362] pvrusb2: Attached sub-driver cx25840 [ 613.641404][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 613.706832][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 613.758778][ T2362] pvrusb2: Invalid write control endpoint [ 614.196921][ T2362] pvrusb2: Invalid write control endpoint [ 614.234301][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 614.328875][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 614.381607][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 614.408574][ T2362] pvrusb2: Device being rendered inoperable [ 614.455519][ T2362] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 614.472281][ T5725] usb 4-1: USB disconnect, device number 22 [ 614.530195][ T2362] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 614.547211][ T2362] pvrusb2: Attached sub-driver cx25840 [ 614.552873][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 614.561552][ T5710] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 614.563123][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 614.620778][ T24] usb 3-1: USB disconnect, device number 26 [ 614.628056][ T24] pvrusb2: Device being rendered inoperable [ 614.752325][ T5710] usb 5-1: Using ep0 maxpacket: 8 [ 614.760904][ T5710] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 614.795769][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.840096][ T5710] pvrusb2: Hardware description: Terratec Grabster AV400 [ 614.853146][ T5710] pvrusb2: ********** [ 614.857185][ T5710] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 614.867386][ T5710] pvrusb2: Important functionality might not be entirely working. [ 614.875408][ T5710] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 614.886771][ T5710] pvrusb2: ********** [ 614.951613][ T805] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 615.048292][ T2362] pvrusb2: Invalid write control endpoint [ 615.062414][ T5710] usb 2-1: USB disconnect, device number 25 [ 615.101703][ T805] usb 6-1: Using ep0 maxpacket: 8 [ 615.119622][ T805] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 615.151935][ T805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.169755][ T2362] pvrusb2: Invalid write control endpoint [ 615.205603][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 615.215289][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 615.223816][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 615.290375][ T805] pvrusb2: Hardware description: Terratec Grabster AV400 [ 615.298603][ T805] pvrusb2: ********** [ 615.302626][ T805] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 615.312724][ T805] pvrusb2: Important functionality might not be entirely working. [ 615.320574][ T805] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 615.332340][ T805] pvrusb2: ********** [ 615.346584][ T2362] pvrusb2: Device being rendered inoperable [ 615.363140][ T2362] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 615.389000][ T2362] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 615.900330][ T2362] pvrusb2: Attached sub-driver cx25840 [ 615.934033][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 616.079786][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 616.333759][ T2362] pvrusb2: Invalid write control endpoint [ 617.592256][ T10] usb 6-1: USB disconnect, device number 18 [ 617.603013][ T2362] pvrusb2: Invalid write control endpoint [ 617.608737][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 617.641435][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 617.650914][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 617.689632][ T2362] pvrusb2: Device being rendered inoperable [ 617.699215][ T805] usb 5-1: USB disconnect, device number 20 [ 617.725839][ T2362] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 617.747605][ T2362] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 617.762365][ T2362] pvrusb2: Attached sub-driver cx25840 [ 617.846035][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 617.860794][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 618.085250][T10966] gfs2: not a GFS2 filesystem [ 618.091103][T10966] hpfs: Bad magic ... probably not HPFS [ 618.585804][T10967] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1302'. [ 619.171612][ T5725] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 619.237012][T10972] random: crng reseeded on system resumption [ 619.334581][ T5725] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 619.370581][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.394631][ T5725] usb 3-1: config 0 descriptor?? [ 619.423929][T10975] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 619.437569][T10975] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 620.481645][T10975] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 620.519854][T10975] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 621.223955][T10988] random: crng reseeded on system resumption [ 622.063902][T10989] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 622.097181][T10989] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 622.137849][T10989] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 622.188007][T10989] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 622.271564][ T5710] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 622.421580][ T5710] usb 5-1: Using ep0 maxpacket: 8 [ 622.435837][ T5710] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 622.470736][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.525528][ T5710] pvrusb2: Hardware description: Terratec Grabster AV400 [ 622.561629][ T5710] pvrusb2: ********** [ 622.579644][ T5710] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 622.624829][ T5710] pvrusb2: Important functionality might not be entirely working. [ 622.692545][ T5710] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 622.775615][ T5710] pvrusb2: ********** [ 622.827433][ T2362] pvrusb2: Invalid write control endpoint [ 623.928182][ T2362] pvrusb2: Invalid write control endpoint [ 623.961361][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 624.638919][T11019] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1313'. [ 625.120184][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 625.149350][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.151677][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 625.159992][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.219247][ T2362] pvrusb2: Device being rendered inoperable [ 625.236053][ T805] usb 5-1: USB disconnect, device number 21 [ 625.241670][ T2362] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 625.272253][ T2362] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 625.293655][ T2362] pvrusb2: Attached sub-driver cx25840 [ 625.411605][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 625.422166][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 625.496114][T11025] gfs2: not a GFS2 filesystem [ 625.507770][T11025] hpfs: Bad magic ... probably not HPFS [ 626.140828][T11030] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1317'. [ 627.277175][T11035] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 627.625194][T11037] random: crng reseeded on system resumption [ 627.931466][T11037] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 627.957753][T11037] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 627.984730][T11037] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 628.007935][T11037] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 628.561557][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 628.744450][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 628.790618][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 629.152843][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 629.198958][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 629.252537][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.277540][ T10] usb 5-1: Product: syz [ 629.292053][ T10] usb 5-1: Manufacturer: syz [ 629.317810][ T10] usb 5-1: SerialNumber: syz [ 629.356264][ T10] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 629.383228][ T10] cdc_ncm 5-1:1.0: bind() failure [ 629.689826][T11059] loop7: detected capacity change from 0 to 7 [ 629.700483][ C1] blk_print_req_error: 10 callbacks suppressed [ 629.700500][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 629.716344][ C1] buffer_io_error: 10 callbacks suppressed [ 629.716359][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 629.731347][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 629.741039][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 629.756564][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 629.766212][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 629.774672][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 629.784260][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 629.793337][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 629.802947][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 629.811397][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 629.821068][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 629.830761][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 629.840359][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 629.848215][T11059] ldm_validate_partition_table(): Disk read failed. [ 629.856665][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 629.866277][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 629.875116][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 629.884701][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 629.900995][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 629.910616][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 629.919756][T11059] Dev loop7: unable to read RDB block 0 [ 629.928742][T11059] loop7: unable to read partition table [ 629.938589][T11059] loop7: partition table beyond EOD, truncated [ 629.951700][T11059] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 630.108924][T11058] fuse: Bad value for 'rootmode' [ 630.228558][T11061] random: crng reseeded on system resumption [ 631.257385][T11065] fuse: Bad value for 'rootmode' [ 632.171562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 632.292741][T11061] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 632.302242][T11061] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 632.311395][T11061] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 632.319539][T11061] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 632.385543][ T5710] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 632.599741][T11070] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 632.611519][T11070] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 632.620571][T11070] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 632.628560][T11070] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 632.994662][ T5710] usb 4-1: Using ep0 maxpacket: 8 [ 633.034442][ T5710] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 633.083266][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.154164][ T5710] pvrusb2: Hardware description: Terratec Grabster AV400 [ 633.192932][T11080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1329'. [ 633.215143][ T5710] pvrusb2: ********** [ 633.232397][ T5710] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 633.276262][ T24] usb 5-1: USB disconnect, device number 22 [ 633.297947][ T5710] pvrusb2: Important functionality might not be entirely working. [ 633.366027][ T5710] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 633.421474][ T5710] pvrusb2: ********** [ 633.447365][ T2362] pvrusb2: Invalid write control endpoint [ 633.535889][T11090] random: crng reseeded on system resumption [ 633.541096][ T2362] pvrusb2: Invalid write control endpoint [ 633.593675][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 633.632818][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 633.665546][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 633.708493][ T2362] pvrusb2: Device being rendered inoperable [ 633.753462][ T2362] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 633.815268][ T2362] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 633.959176][T11090] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 633.978582][T11090] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 633.999812][ T2362] pvrusb2: Attached sub-driver cx25840 [ 634.071805][T11102] /dev/nullb0: Can't open blockdev [ 634.853705][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 634.869401][T11090] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 634.909520][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 634.920691][T11090] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 634.928827][ T5342] usb 4-1: USB disconnect, device number 23 [ 635.447150][T11108] netlink: zone id is out of range [ 635.464700][T11108] netlink: get zone limit has 4 unknown bytes [ 635.830877][T11113] input: syz1 as /devices/virtual/input/input20 [ 636.083146][T11117] syzkaller0: entered promiscuous mode [ 636.097648][T11117] syzkaller0: entered allmulticast mode [ 636.865270][ T1111] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 636.899849][T11133] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1342'. [ 637.036367][T11134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 637.304234][T11136] fuse: Unknown parameter '0x0000000000000004' [ 637.346791][T11136] random: crng reseeded on system resumption [ 637.507691][T11137] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 637.515776][T11137] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 637.525162][T11137] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 637.533554][T11137] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 639.662292][T11127] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 643.007740][T11178] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1354'. [ 643.597132][T11180] netlink: zone id is out of range [ 643.722735][T11180] netlink: get zone limit has 4 unknown bytes [ 644.221607][ T5710] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 644.411701][ T5710] usb 2-1: Using ep0 maxpacket: 32 [ 644.434867][ T5710] usb 2-1: unable to get BOS descriptor or descriptor too short [ 644.470064][ T5710] usb 2-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 644.517552][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.549716][ T5710] usb 2-1: Product: syz [ 644.564246][ T5710] usb 2-1: Manufacturer: syz [ 644.580376][ T5710] usb 2-1: SerialNumber: syz [ 645.066032][T11183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.097535][T11183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.179431][T11183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.367209][T11183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.427160][T11183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.464368][T11183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.737171][ T5710] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 646.861928][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 646.885133][T11198] random: crng reseeded on system resumption [ 646.923026][ T5710] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 646.963272][ T5710] usb 2-1: invalid MIDI EP [ 646.979450][ T5710] usb 2-1: snd-bcd2000: error during probing [ 647.002965][ T5710] snd-bcd2000 2-1:1.0: probe with driver snd-bcd2000 failed with error -22 [ 647.041573][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 647.051192][ T5710] usb 2-1: invalid MIDI EP [ 647.063873][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 647.074448][ T5710] usb 2-1: snd-bcd2000: error during probing [ 647.099070][ T24] usb 5-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 647.110199][ T5710] snd-bcd2000 2-1:1.1: probe with driver snd-bcd2000 failed with error -22 [ 647.136569][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.153187][ T5710] usb 2-1: invalid MIDI EP [ 647.157310][T11203] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 647.167410][T11203] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 647.194031][ T5710] usb 2-1: snd-bcd2000: error during probing [ 647.195008][T11203] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 647.201607][ T24] usb 5-1: Product: syz [ 647.211669][T11203] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 647.230826][ T5710] snd-bcd2000 2-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 647.254815][ T24] usb 5-1: Manufacturer: syz [ 647.272626][T11204] netlink: zone id is out of range [ 647.284210][ T24] usb 5-1: SerialNumber: syz [ 647.335218][ T5710] usb 2-1: USB disconnect, device number 26 [ 647.346816][T11204] netlink: get zone limit has 4 unknown bytes [ 647.586089][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 647.913668][T11193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.932599][T11193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.298246][T11193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.334944][T11193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.405709][T11193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.516909][T11193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.484500][T11219] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1364'. [ 649.621923][T11221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 650.786927][ T24] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 653.065938][ T24] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 653.108156][ T24] usb 5-1: invalid MIDI EP [ 653.134175][ T24] usb 5-1: snd-bcd2000: error during probing [ 653.164775][ T24] snd-bcd2000 5-1:1.0: probe with driver snd-bcd2000 failed with error -22 [ 653.210702][ T24] usb 5-1: invalid MIDI EP [ 653.239444][ T24] usb 5-1: snd-bcd2000: error during probing [ 653.266963][ T24] snd-bcd2000 5-1:1.1: probe with driver snd-bcd2000 failed with error -22 [ 653.305960][ T24] usb 5-1: invalid MIDI EP [ 653.311781][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 653.449723][ T24] usb 5-1: snd-bcd2000: error during probing [ 653.464193][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.497839][ T24] snd-bcd2000 5-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 653.510662][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 653.567668][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 653.571077][ T24] usb 5-1: USB disconnect, device number 23 [ 653.661687][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 653.687094][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 653.712071][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.741647][ T9] usb 2-1: Product: syz [ 653.749240][ T9] usb 2-1: Manufacturer: syz [ 653.771985][ T9] usb 2-1: SerialNumber: syz [ 653.848478][ T9] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 653.872061][T11252] netlink: zone id is out of range [ 653.879433][ T9] cdc_ncm 2-1:1.0: bind() failure [ 653.891737][ T805] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 653.928297][T11252] netlink: get zone limit has 4 unknown bytes [ 654.592194][ T805] usb 4-1: Using ep0 maxpacket: 32 [ 654.599328][ T805] usb 4-1: unable to get BOS descriptor or descriptor too short [ 654.610924][ T805] usb 4-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 654.620219][ T805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.631775][ T805] usb 4-1: Product: syz [ 654.642569][ T805] usb 4-1: Manufacturer: syz [ 654.655315][ T805] usb 4-1: SerialNumber: syz [ 654.797896][T11258] loop7: detected capacity change from 0 to 7 [ 655.289766][ C0] blk_print_req_error: 10 callbacks suppressed [ 655.289788][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.305626][ C0] buffer_io_error: 10 callbacks suppressed [ 655.305636][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 655.330480][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.340121][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 655.354213][T11260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.369463][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.379113][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 655.404264][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.413891][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 655.432929][T11260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.451186][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.460833][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 655.483156][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.492790][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 655.500789][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.510420][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 655.518438][T11258] ldm_validate_partition_table(): Disk read failed. [ 655.548922][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.558598][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 655.571122][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.580790][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 655.599368][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.609108][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 655.610318][T11250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.626005][T11258] Dev loop7: unable to read RDB block 0 [ 655.672418][T11250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.682979][T11258] loop7: unable to read partition table [ 655.742064][T11258] loop7: partition table beyond EOD, truncated [ 655.760553][T11258] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 655.846545][T11250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.885799][T11250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.947328][ T5710] usb 2-1: USB disconnect, device number 27 [ 655.954445][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 656.162554][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 656.196661][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 656.211717][ T805] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 656.234026][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.292131][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 656.329335][ T24] pvrusb2: ********** [ 656.347473][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 656.362706][ T805] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 656.371912][ T24] pvrusb2: Important functionality might not be entirely working. [ 656.388876][ T805] usb 4-1: invalid MIDI EP [ 656.396507][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 656.408273][ T805] usb 4-1: snd-bcd2000: error during probing [ 656.418539][ T805] snd-bcd2000 4-1:1.0: probe with driver snd-bcd2000 failed with error -22 [ 656.437310][ T24] pvrusb2: ********** [ 656.503437][ T2362] pvrusb2: Invalid write control endpoint [ 656.511447][ T805] usb 4-1: invalid MIDI EP [ 656.532440][ T805] usb 4-1: snd-bcd2000: error during probing [ 656.566105][ T805] snd-bcd2000 4-1:1.1: probe with driver snd-bcd2000 failed with error -22 [ 656.630168][ T805] usb 4-1: invalid MIDI EP [ 656.655753][ T805] usb 4-1: snd-bcd2000: error during probing [ 656.694579][ T2362] pvrusb2: Invalid write control endpoint [ 656.701265][ T805] snd-bcd2000 4-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 656.723979][T11270] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1376'. [ 656.736344][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 656.754930][ T805] usb 4-1: USB disconnect, device number 24 [ 656.772343][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 656.922086][T11272] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 657.366729][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 657.681365][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 657.698736][ T2362] pvrusb2: Device being rendered inoperable [ 657.706380][ T2362] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 657.716750][ T2362] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 657.730704][ T2362] pvrusb2: Attached sub-driver cx25840 [ 657.736972][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 657.747107][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 657.995059][ T5342] usb 5-1: USB disconnect, device number 24 [ 658.003392][ T805] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 658.042871][T11281] fuse: Bad value for 'rootmode' [ 658.070154][T11281] random: crng reseeded on system resumption [ 659.490867][T11289] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 659.498861][T11289] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 659.510751][T11289] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 659.519841][T11289] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 659.690957][ T805] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 659.770282][T11293] fuse: Unknown parameter 'fd0x0000000000000004' [ 659.788860][ T805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.050844][ T805] usb 4-1: config 0 descriptor?? [ 660.084371][T11293] random: crng reseeded on system resumption [ 660.338244][T11301] gfs2: not a GFS2 filesystem [ 660.352376][T11301] hpfs: Bad magic ... probably not HPFS [ 660.812421][T11299] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 660.820438][T11299] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 660.830406][T11299] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 660.838353][T11299] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 660.847486][ T805] ath6kl: Failed to submit usb control message: -71 [ 660.861529][ T805] ath6kl: unable to send the bmi data to the device: -71 [ 660.889961][ T805] ath6kl: Unable to send get target info: -71 [ 661.008442][ T805] ath6kl: Failed to init ath6kl core: -71 [ 661.221517][ T805] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 661.311790][ T805] usb 4-1: USB disconnect, device number 25 [ 661.468889][T11308] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1387'. [ 661.541237][T11310] gfs2: not a GFS2 filesystem [ 661.906750][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 662.429414][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 663.082780][T11312] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 663.241661][ T5710] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 663.471618][ T5710] usb 6-1: Using ep0 maxpacket: 32 [ 663.493270][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.528232][ T10] usb 2-1: config 0 descriptor?? [ 663.535863][ T5710] usb 6-1: unable to get BOS descriptor or descriptor too short [ 663.544907][ T10] usb 2-1: can't set config #0, error -71 [ 663.570608][ T10] usb 2-1: USB disconnect, device number 28 [ 663.606549][ T5710] usb 6-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 663.668725][ T5710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.695484][T11320] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1391'. [ 663.719263][ T5710] usb 6-1: Product: syz [ 663.728163][ T805] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 663.742421][ T5710] usb 6-1: Manufacturer: syz [ 663.748914][ T5710] usb 6-1: SerialNumber: syz [ 664.400774][T11322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 664.528351][ T805] usb 5-1: Using ep0 maxpacket: 32 [ 664.607451][ T805] usb 5-1: unable to get BOS descriptor or descriptor too short [ 664.644629][ T805] usb 5-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 664.672657][ T5710] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 664.712914][ T805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.746036][T11329] random: crng reseeded on system resumption [ 664.752869][ T805] usb 5-1: Product: syz [ 664.778814][ T805] usb 5-1: Manufacturer: syz [ 664.808305][ T805] usb 5-1: SerialNumber: syz [ 664.985795][T11339] netlink: 4664 bytes leftover after parsing attributes in process `syz.3.1395'. [ 665.230354][T11343] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 665.238995][T11343] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 665.250766][T11343] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 665.260103][T11343] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 665.905336][T11344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.992973][T11344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.042111][ T5710] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 666.204433][ T29] audit: type=1400 audit(1785122939.058:466): avc: denied { write } for pid=11346 comm="syz.1.1396" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 666.527842][ T5710] usb 6-1: invalid MIDI EP [ 666.544935][T11316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.563371][ T5710] usb 6-1: snd-bcd2000: error during probing [ 666.607015][T11316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.615467][ T5710] snd-bcd2000 6-1:1.0: probe with driver snd-bcd2000 failed with error -22 [ 666.709752][ T5710] usb 6-1: invalid MIDI EP [ 666.720649][T11316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.737930][ T5710] usb 6-1: snd-bcd2000: error during probing [ 666.766150][T11316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.774390][ T5710] snd-bcd2000 6-1:1.1: probe with driver snd-bcd2000 failed with error -22 [ 666.845817][ T5710] usb 6-1: invalid MIDI EP [ 666.856842][ T5710] usb 6-1: snd-bcd2000: error during probing [ 667.023568][ T5710] snd-bcd2000 6-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 667.111755][T11354] gfs2: not a GFS2 filesystem [ 667.124858][T11354] hpfs: Bad magic ... probably not HPFS [ 667.477884][ T805] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 667.498456][ T5710] usb 6-1: USB disconnect, device number 19 [ 667.536741][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 667.754700][ T805] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 667.778047][ T805] usb 5-1: invalid MIDI EP [ 667.785051][T11333] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 667.904581][ T805] usb 5-1: snd-bcd2000: error during probing [ 667.926660][ T805] snd-bcd2000 5-1:1.0: probe with driver snd-bcd2000 failed with error -22 [ 668.003016][ T805] usb 5-1: invalid MIDI EP [ 668.031185][ T805] usb 5-1: snd-bcd2000: error during probing [ 668.066407][ T805] snd-bcd2000 5-1:1.1: probe with driver snd-bcd2000 failed with error -22 [ 668.140507][ T805] usb 5-1: invalid MIDI EP [ 668.157550][ T805] usb 5-1: snd-bcd2000: error during probing [ 668.187622][ T805] snd-bcd2000 5-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 668.246453][ T29] audit: type=1400 audit(1785122941.098:467): avc: denied { setopt } for pid=11367 comm="syz.4.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 668.290090][ T805] usb 5-1: USB disconnect, device number 25 [ 668.446343][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 668.995690][ T5342] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 669.212184][ T5342] usb 6-1: Using ep0 maxpacket: 32 [ 669.241444][ T5342] usb 6-1: unable to get BOS descriptor or descriptor too short [ 669.295163][ T5342] usb 6-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 669.337529][ T5342] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.458433][ T5342] usb 6-1: Product: syz [ 669.466116][ T5342] usb 6-1: Manufacturer: syz [ 669.470759][ T5342] usb 6-1: SerialNumber: syz [ 669.601063][ T29] audit: type=1400 audit(1785122942.448:468): avc: denied { write } for pid=11361 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 669.632781][T11393] input: syz1 as /devices/virtual/input/input21 [ 669.773886][ T805] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 669.925126][T11374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.973821][ T805] usb 2-1: Using ep0 maxpacket: 8 [ 669.999626][T11374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.021145][ T805] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 670.048485][ T805] usb 2-1: config 0 has no interface number 0 [ 670.074393][T11374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.103499][ T805] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 670.139142][T11374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.150725][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.161756][ T29] audit: type=1400 audit(1785122942.998:469): avc: denied { write } for pid=11396 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 670.168900][ T805] usb 2-1: Product: syz [ 670.192076][T11374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.215799][T11374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.264687][ T805] usb 2-1: Manufacturer: syz [ 670.285536][ T805] usb 2-1: SerialNumber: syz [ 670.338877][ T805] usb 2-1: config 0 descriptor?? [ 670.371835][ T805] usb 2-1: selecting invalid altsetting 1 [ 670.392265][ T805] dvb_ttusb_budget: ttusb_init_controller: error [ 670.402615][ T805] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 670.462330][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 670.522430][ T5342] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 670.543459][ T805] DVB: Unable to find symbol stv0299_attach() [ 670.632991][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 670.652055][ T805] DVB: Unable to find symbol tda8083_attach() [ 670.665681][ T5342] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 670.671643][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.677082][ T805] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 670.698726][ T5342] usb 6-1: invalid MIDI EP [ 670.717183][ T5342] usb 6-1: snd-bcd2000: error during probing [ 670.728601][ T10] usb 4-1: config 0 descriptor?? [ 670.729295][ T805] usb 2-1: USB disconnect, device number 29 [ 670.751887][ T5342] snd-bcd2000 6-1:1.0: probe with driver snd-bcd2000 failed with error -22 [ 670.785821][ T5342] usb 6-1: invalid MIDI EP [ 670.800272][ T5342] usb 6-1: snd-bcd2000: error during probing [ 670.815436][ T5342] snd-bcd2000 6-1:1.1: probe with driver snd-bcd2000 failed with error -22 [ 670.839489][ T5342] usb 6-1: invalid MIDI EP [ 670.844583][ T5342] usb 6-1: snd-bcd2000: error during probing [ 670.861328][ T5342] snd-bcd2000 6-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 670.884851][ T5342] usb 6-1: USB disconnect, device number 20 [ 670.966111][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 671.161797][T11398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.254136][T11398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.331446][T11416] gfs2: not a GFS2 filesystem [ 671.341902][T11416] hpfs: Bad magic ... probably not HPFS [ 671.731884][T11398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.781165][T11398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.817652][ T29] audit: type=1400 audit(1785122944.668:470): avc: denied { write } for pid=11400 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 671.866978][ T10] ath6kl: Failed to submit usb control message: -110 [ 671.901949][ T10] ath6kl: unable to send the bmi data to the device: -110 [ 671.929408][ T10] ath6kl: Unable to send get target info: -110 [ 671.976111][ T10] ath6kl: Failed to init ath6kl core: -110 [ 671.992104][ T187] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 672.024131][ T10] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 672.050898][ T29] audit: type=1400 audit(1785122944.898:471): avc: denied { append } for pid=11426 comm="syz.2.1415" name="nbd2" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 672.219837][ T187] usb 6-1: Using ep0 maxpacket: 8 [ 672.425883][ T187] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 672.506425][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 672.549261][ T187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.801811][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 672.868212][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 672.952321][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.006098][T11398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.101231][T11398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.223004][ T5809] usb 4-1: USB disconnect, device number 26 [ 673.234726][ T187] pvrusb2: Hardware description: Terratec Grabster AV400 [ 673.265618][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 673.292838][ T187] pvrusb2: ********** [ 673.312214][ T187] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 673.326936][ T10] pvrusb2: ********** [ 673.338078][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 673.368505][ T187] pvrusb2: Important functionality might not be entirely working. [ 673.384045][ T10] pvrusb2: Important functionality might not be entirely working. [ 673.396700][ T187] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 673.423034][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 673.435443][T11442] netlink: 4664 bytes leftover after parsing attributes in process `syz.2.1417'. [ 673.513050][ T187] pvrusb2: ********** [ 673.591285][ T10] pvrusb2: ********** [ 673.676419][ T2362] pvrusb2: Invalid write control endpoint [ 673.868065][ T29] audit: type=1400 audit(1785122946.018:472): avc: denied { write } for pid=11429 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 674.207808][ T2362] pvrusb2: Invalid write control endpoint [ 674.321522][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 674.353082][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 675.575362][T11454] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1419'. [ 676.041933][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 676.105953][ T2362] pvrusb2: Device being rendered inoperable [ 676.140416][ T2362] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 676.173303][ T2362] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 676.209305][T11458] input: syz1 as /devices/virtual/input/input22 [ 676.233086][ T805] usb 5-1: USB disconnect, device number 26 [ 676.238115][ T2362] pvrusb2: Attached sub-driver cx25840 [ 676.266260][ T805] pvrusb2: Device being rendered inoperable [ 676.291809][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 676.316490][ T10] usb 6-1: USB disconnect, device number 21 [ 676.349719][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 676.442975][ T5342] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 676.631554][ T5342] usb 2-1: Using ep0 maxpacket: 8 [ 676.643438][ T5342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.668406][ T5342] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 676.700567][ T5342] usb 2-1: New USB device found, idVendor=1241, idProduct=506b, bcdDevice= 0.00 [ 676.721769][ T5342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.729792][ T29] audit: type=1400 audit(1785122949.568:473): avc: denied { getopt } for pid=11468 comm="syz.2.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 676.782399][ T5342] usb 2-1: config 0 descriptor?? [ 676.821670][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 676.991614][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 677.014009][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 677.045627][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 677.072564][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.104013][ T10] usb 6-1: config 0 descriptor?? [ 677.142403][ T5342] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 677.153630][T11459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.176146][T11459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.311822][ T5342] usb 5-1: Using ep0 maxpacket: 32 [ 677.332023][ T5342] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 677.348214][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 677.352521][ T5342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.371607][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 677.389016][ T5342] usb 5-1: Product: syz [ 677.402060][ T10] usb 6-1: USB disconnect, device number 22 [ 677.405451][ T5342] usb 5-1: Manufacturer: syz [ 677.426009][ T5342] usb 5-1: SerialNumber: syz [ 677.452606][ T5342] usb 5-1: config 0 descriptor?? [ 677.533111][ T805] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 677.678711][T11471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.691242][T11471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.699236][ T805] usb 4-1: Using ep0 maxpacket: 32 [ 677.712169][ T805] usb 4-1: unable to get BOS descriptor or descriptor too short [ 677.731250][ T805] usb 4-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 677.741580][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 677.763415][ T805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.781843][ T805] usb 4-1: Product: syz [ 677.790831][ T805] usb 4-1: Manufacturer: syz [ 677.802797][ T805] usb 4-1: SerialNumber: syz [ 677.934676][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 677.964075][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 677.992711][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 678.046953][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 678.048808][ T5342] airspy 5-1:0.0: Board ID: 00 [ 678.062554][ T5342] airspy 5-1:0.0: Firmware version: [ 678.071591][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.101528][ T10] usb 6-1: Product: syz [ 678.108051][ T10] usb 6-1: Manufacturer: syz [ 678.131703][ T10] usb 6-1: SerialNumber: syz [ 678.156537][ T10] cdc_ncm 6-1:1.0: NCM or ECM functional descriptors missing [ 678.177605][ T10] cdc_ncm 6-1:1.0: bind() failure [ 678.233114][T11477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.247365][T11477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.268044][T11477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.278785][T11477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.291227][T11477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.308321][T11477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.631347][ T5342] airspy 5-1:0.0: usb_control_msg() failed -71 request 0e [ 679.934875][ T805] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 680.320060][ T10] usb 2-1: USB disconnect, device number 30 [ 680.459966][ T5342] airspy 5-1:0.0: Registered as swradio24 [ 680.478535][ T5342] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 680.505668][ T5342] usb 5-1: USB disconnect, device number 27 [ 680.522253][ T805] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 680.547993][ T805] usb 4-1: invalid MIDI EP [ 680.560989][ T805] usb 4-1: snd-bcd2000: error during probing [ 680.572610][ T805] snd-bcd2000 4-1:1.0: probe with driver snd-bcd2000 failed with error -22 [ 680.634259][ T805] usb 4-1: invalid MIDI EP [ 680.640487][ T187] usb 6-1: USB disconnect, device number 23 [ 680.669760][ T805] usb 4-1: snd-bcd2000: error during probing [ 680.701060][ T805] snd-bcd2000 4-1:1.1: probe with driver snd-bcd2000 failed with error -22 [ 680.733759][T11493] fuse: Bad value for 'rootmode' [ 680.919713][T11493] random: crng reseeded on system resumption [ 680.978715][ T805] usb 4-1: invalid MIDI EP [ 681.327328][ T805] usb 4-1: snd-bcd2000: error during probing [ 681.351003][T11501] fuse: Bad value for 'fd' [ 681.424495][ T805] snd-bcd2000 4-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 681.615661][ T805] usb 4-1: USB disconnect, device number 27 [ 681.698596][T11499] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 681.706879][T11499] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 681.718118][T11499] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 681.726234][T11499] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 682.118937][T11501] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 682.126918][T11501] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 682.128855][T11506] input: syz1 as /devices/virtual/input/input23 [ 682.144985][T11501] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 682.152977][T11501] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 682.487089][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 682.602633][ T29] audit: type=1400 audit(1785122955.458:474): avc: denied { write } for pid=11486 comm="syz.1.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 682.751358][T11491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.785577][T11491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.901214][T11513] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 682.921885][ T187] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 682.970985][T11516] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 683.076177][T11516] CIFS mount error: No usable UNC path provided in device string! [ 683.076177][T11516] [ 683.138326][T11516] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 683.278586][T11519] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1439'. [ 683.368673][T11519] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 683.541951][ T5809] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 683.650373][ T29] audit: type=1400 audit(1785122956.498:475): avc: denied { map } for pid=11526 comm="syz.4.1442" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 683.732082][ T5809] usb 6-1: Using ep0 maxpacket: 32 [ 683.749549][ T5809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.797250][ T5809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59344, setting to 1024 [ 683.831642][ T5809] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 683.860101][ T5809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.892453][ T5809] usb 6-1: config 0 descriptor?? [ 683.914522][T11515] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 683.953605][ T5809] hub 6-1:0.0: USB hub found [ 684.148994][ T5809] hub 6-1:0.0: 1 port detected [ 684.391576][ T187] usb 2-1: device descriptor read/64, error -71 [ 684.892502][ T187] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 684.994508][ T29] audit: type=1400 audit(1785122957.838:476): avc: denied { create } for pid=11514 comm="syz.5.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 685.136038][ T187] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 685.170977][ T29] audit: type=1400 audit(1785122957.988:477): avc: denied { getopt } for pid=11514 comm="syz.5.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 685.173145][ T187] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 685.306401][ T187] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 685.372483][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1446'. [ 685.493747][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.500113][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.885038][ T187] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 685.937268][ T5809] hub 6-1:0.0: hub_ext_port_status failed (err = -32) [ 685.955655][ T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.003902][ T187] usb 2-1: Product: syz [ 686.024781][ T187] usb 2-1: Manufacturer: syz [ 686.045712][ T187] usb 2-1: SerialNumber: syz [ 686.146242][ T187] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 686.178292][ T187] cdc_ncm 2-1:1.0: bind() failure [ 688.686200][ T805] usb 6-1: USB disconnect, device number 24 [ 688.692547][ T29] audit: type=1400 audit(1785122961.408:478): avc: denied { watch watch_reads } for pid=11553 comm="syz.2.1448" path="/295" dev="tmpfs" ino=1595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 689.114077][ T805] usb 2-1: USB disconnect, device number 32 [ 690.144719][T11578] netlink: 4664 bytes leftover after parsing attributes in process `syz.2.1453'. [ 690.191695][ T187] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 690.791967][ T187] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 690.831669][ T187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.289292][ T187] usb 6-1: config 0 descriptor?? [ 691.703273][T11567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.739128][T11567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.762791][ T29] audit: type=1400 audit(1785122964.568:479): avc: denied { write } for pid=11591 comm="syz.2.1454" name="usb_gadget" dev="configfs" ino=487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 692.331838][ T187] ath6kl: Failed to submit usb control message: -110 [ 692.338818][ T187] ath6kl: unable to send the bmi data to the device: -110 [ 693.128433][ T187] ath6kl: Unable to send get target info: -110 [ 693.346846][ T29] audit: type=1400 audit(1785122964.578:480): avc: denied { add_name } for pid=11591 comm="syz.2.1454" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 693.367651][ T29] audit: type=1400 audit(1785122964.578:481): avc: denied { create } for pid=11591 comm="syz.2.1454" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 693.389296][ T29] audit: type=1400 audit(1785122964.948:482): avc: denied { write } for pid=11591 comm="syz.2.1454" name="functions" dev="configfs" ino=33370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 693.389913][ T187] ath6kl: Failed to init ath6kl core: -110 [ 693.481635][ T29] audit: type=1400 audit(1785122964.998:483): avc: denied { write } for pid=11591 comm="syz.2.1454" name="configs" dev="configfs" ino=33371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 693.592265][ T187] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 693.677910][ T187] usb 6-1: USB disconnect, device number 25 [ 694.031586][ T805] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 694.031613][ T187] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 694.039263][ T5710] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 694.221543][ T187] usb 6-1: Using ep0 maxpacket: 8 [ 694.229113][ T5710] usb 5-1: Using ep0 maxpacket: 32 [ 694.238046][ T805] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 694.238471][ T187] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 694.256718][ T805] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 694.267434][ T805] usb 4-1: Product: syz [ 694.274072][ T5710] usb 5-1: unable to get BOS descriptor or descriptor too short [ 694.282668][ T805] usb 4-1: SerialNumber: syz [ 694.282713][ T187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.289937][ T5710] usb 5-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 694.308499][ T805] usb 4-1: config 0 descriptor?? [ 694.316668][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.325365][ T5710] usb 5-1: Product: syz [ 694.329776][ T5710] usb 5-1: Manufacturer: syz [ 694.341770][ T187] pvrusb2: Hardware description: Terratec Grabster AV400 [ 694.346435][ T5710] usb 5-1: SerialNumber: syz [ 694.385886][ T187] pvrusb2: ********** [ 694.401696][ T187] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 694.439152][ T187] pvrusb2: Important functionality might not be entirely working. [ 694.469905][ T187] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 694.511625][ T187] pvrusb2: ********** [ 694.551713][ T2362] pvrusb2: Invalid write control endpoint [ 694.577114][ T29] audit: type=1400 audit(1785122967.428:484): avc: denied { bind } for pid=11611 comm="syz.3.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 694.648085][ T29] audit: type=1400 audit(1785122967.448:485): avc: denied { write } for pid=11611 comm="syz.3.1461" path="socket:[33421]" dev="sockfs" ino=33421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 694.671739][ T5342] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 694.693231][ T2362] pvrusb2: Invalid write control endpoint [ 694.713444][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 694.735893][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 694.747495][ T805] usb 4-1: USB disconnect, device number 28 [ 694.762729][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 694.790515][ T2362] pvrusb2: Device being rendered inoperable [ 694.805957][ T2362] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 694.817749][T11612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.822253][ T2362] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_f) [ 694.828204][T11612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.853867][ T2362] pvrusb2: Attached sub-driver cx25840 [ 694.863536][ T5342] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 694.877482][ T5342] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 694.891697][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 694.893938][T11612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.910301][ T5342] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 694.910493][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 694.933836][T11612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.962900][ T5342] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 694.982270][ T5342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.007190][T11612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.017654][ T5342] usb 2-1: Product: syz [ 695.026270][ T5342] usb 2-1: Manufacturer: syz [ 695.035014][T11612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.044643][ T5342] usb 2-1: SerialNumber: syz [ 695.058721][ T5342] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 695.068678][ T5342] cdc_ncm 2-1:1.0: bind() failure [ 695.272157][ T5710] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 696.494912][ T29] audit: type=1400 audit(1785122969.278:486): avc: denied { name_bind } for pid=11622 comm="syz.3.1463" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 696.689042][ T29] audit: type=1400 audit(1785122969.538:487): avc: denied { mount } for pid=11622 comm="syz.3.1463" name="/" dev="ramfs" ino=34274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 696.879700][ T187] usb 6-1: USB disconnect, device number 26 [ 697.346139][ T29] audit: type=1400 audit(1785122970.178:488): avc: denied { bind } for pid=11626 comm="syz.4.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 697.389106][ T5710] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 697.412449][ T5710] usb 5-1: invalid MIDI EP [ 697.416997][ T5710] usb 5-1: snd-bcd2000: error during probing [ 697.432713][ T5809] usb 2-1: USB disconnect, device number 33 [ 697.432837][ T5710] snd-bcd2000 5-1:1.0: probe with driver snd-bcd2000 failed with error -22 [ 697.514713][ T5710] usb 5-1: invalid MIDI EP [ 697.525683][ T29] audit: type=1400 audit(1785122970.238:489): avc: denied { ioctl } for pid=11626 comm="syz.4.1464" path="socket:[34289]" dev="sockfs" ino=34289 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 697.549678][ T5710] usb 5-1: snd-bcd2000: error during probing [ 697.593943][ T5710] snd-bcd2000 5-1:1.1: probe with driver snd-bcd2000 failed with error -22 [ 697.629712][T11631] FAULT_INJECTION: forcing a failure. [ 697.629712][T11631] name failslab, interval 1, probability 0, space 0, times 1 [ 697.690870][ T5710] usb 5-1: invalid MIDI EP [ 697.733094][ T5710] usb 5-1: snd-bcd2000: error during probing [ 697.741219][T11631] CPU: 1 UID: 0 PID: 11631 Comm: syz.2.1467 Not tainted syzkaller #0 PREEMPT(full) [ 697.741249][T11631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 697.741267][T11631] Call Trace: [ 697.741274][T11631] [ 697.741282][T11631] dump_stack_lvl+0x100/0x190 [ 697.741325][T11631] should_fail_ex.cold+0x5/0xa [ 697.741352][T11631] should_failslab+0xc2/0x120 [ 697.741382][T11631] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 697.741408][T11631] ? sock_alloc_inode+0x26/0x2c0 [ 697.741441][T11631] ? __pfx_sock_alloc_inode+0x10/0x10 [ 697.741471][T11631] sock_alloc_inode+0x26/0x2c0 [ 697.741501][T11631] ? __pfx_sock_alloc_inode+0x10/0x10 [ 697.741529][T11631] alloc_inode+0x68/0x250 [ 697.741560][T11631] sock_alloc+0x44/0x280 [ 697.741590][T11631] do_accept+0xf9/0x530 [ 697.741615][T11631] ? __pfx_do_accept+0x10/0x10 [ 697.741657][T11631] io_accept+0x3d6/0x9f0 [ 697.741689][T11631] ? __pfx_io_accept+0x10/0x10 [ 697.741715][T11631] ? __fget_files+0x21f/0x3d0 [ 697.741740][T11631] __io_issue_sqe+0xe8/0x7a0 [ 697.741770][T11631] io_issue_sqe+0x88/0x1540 [ 697.741801][T11631] ? io_submit_fail_init+0x569/0x580 [ 697.741832][T11631] ? __asan_memset+0x23/0x50 [ 697.741856][T11631] io_submit_sqes+0xb17/0x2480 [ 697.741902][T11631] __do_sys_io_uring_enter+0xa88/0x1b10 [ 697.741942][T11631] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 697.741973][T11631] ? __pfx___seccomp_filter+0x10/0x10 [ 697.742011][T11631] ? ksys_write+0x1ac/0x250 [ 697.742043][T11631] ? __pfx_ksys_write+0x10/0x10 [ 697.742083][T11631] do_syscall_64+0x115/0x870 [ 697.742107][T11631] ? clear_bhb_loop+0x40/0x90 [ 697.742133][T11631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.742156][T11631] RIP: 0033:0x7f54e219de99 [ 697.742178][T11631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.742202][T11631] RSP: 002b:00007f54e313b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 697.742231][T11631] RAX: ffffffffffffffda RBX: 00007f54e2425fa0 RCX: 00007f54e219de99 [ 697.742246][T11631] RDX: 00000000ffffffdc RSI: 000000000000012a RDI: 0000000000000000 [ 697.742259][T11631] RBP: 00007f54e313b090 R08: 0000000000000000 R09: 0000000000000000 [ 697.742272][T11631] R10: 0000000000000017 R11: 0000000000000246 R12: 0000000000000001 [ 697.742286][T11631] R13: 00007f54e2426038 R14: 00007f54e2425fa0 R15: 00007fff7c274c48 [ 697.742316][T11631] [ 698.092360][ T5710] snd-bcd2000 5-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 698.119392][ T5710] usb 5-1: USB disconnect, device number 28 [ 698.227887][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 698.268095][T11645] random: crng reseeded on system resumption [ 698.913943][T11657] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 698.922755][T11657] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 698.932185][T11657] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 698.940154][T11657] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 699.636383][T11672] netlink: zone id is out of range [ 699.651576][ T5809] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 699.674073][T11672] netlink: get zone limit has 4 unknown bytes [ 700.392216][ T5809] usb 2-1: Using ep0 maxpacket: 32 [ 700.413322][ T5809] usb 2-1: unable to get BOS descriptor or descriptor too short [ 700.424277][ T5809] usb 2-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 700.440156][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.470797][ T5809] usb 2-1: Product: syz [ 700.480410][ T5809] usb 2-1: Manufacturer: syz [ 700.499206][ T5809] usb 2-1: SerialNumber: syz [ 701.164498][T11671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.193331][T11646] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 701.202943][T11671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.272973][T11668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.331745][T11668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.378869][T11668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.456216][T11668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.717109][ T5809] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 702.434591][ T29] audit: type=1400 audit(1785122975.288:490): avc: denied { getopt } for pid=11684 comm="syz.4.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 703.381768][ T805] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 703.638917][ T5809] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 703.643650][ T805] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 703.668920][ T805] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 703.680246][ T5809] usb 2-1: invalid MIDI EP [ 703.698600][ T5809] usb 2-1: snd-bcd2000: error during probing [ 703.724703][ T5809] snd-bcd2000 2-1:1.0: probe with driver snd-bcd2000 failed with error -22 [ 703.734588][ T805] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 703.766048][ T5809] usb 2-1: invalid MIDI EP [ 703.983857][ T5809] usb 2-1: snd-bcd2000: error during probing [ 704.013119][ T5809] snd-bcd2000 2-1:1.1: probe with driver snd-bcd2000 failed with error -22 [ 704.013719][ T805] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 704.045803][ T5809] usb 2-1: invalid MIDI EP [ 704.050233][ T5809] usb 2-1: snd-bcd2000: error during probing [ 704.084284][ T5809] snd-bcd2000 2-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 704.111002][ T805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.129182][ T5809] usb 2-1: USB disconnect, device number 34 [ 704.145467][ T805] usb 6-1: Product: syz [ 704.164870][ T805] usb 6-1: Manufacturer: syz [ 704.184633][ T805] usb 6-1: SerialNumber: syz [ 704.257607][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 704.306137][ T805] cdc_ncm 6-1:1.0: NCM or ECM functional descriptors missing [ 704.355584][ T805] cdc_ncm 6-1:1.0: bind() failure [ 704.383298][T11714] netlink: get zone limit has 4 unknown bytes [ 706.009937][ T5809] usb 6-1: USB disconnect, device number 27 [ 706.054527][ T29] audit: type=1400 audit(1785122978.908:491): avc: denied { setopt } for pid=11716 comm="syz.5.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 706.096673][T11719] random: crng reseeded on system resumption [ 706.123083][ T29] audit: type=1400 audit(1785122978.968:492): avc: denied { mount } for pid=11716 comm="syz.5.1487" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 706.424177][T11720] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 706.432324][T11720] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 706.445716][T11720] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 706.453730][T11720] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 706.570970][T11721] IPv6: sit1: Disabled Multicast RS [ 706.648159][T11721] sit1: entered allmulticast mode [ 706.682159][T11724] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1487'. [ 706.995441][T11726] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 707.100462][T11729] bridge0: port 3(macvlan2) entered blocking state [ 707.131244][T11729] bridge0: port 3(macvlan2) entered disabled state [ 707.171911][T11729] macvlan2: entered allmulticast mode [ 707.186449][T11729] ip6gretap0: entered allmulticast mode [ 707.215676][T11729] macvlan2: entered promiscuous mode [ 707.309638][ T29] audit: type=1400 audit(1785122980.158:493): avc: denied { unmount } for pid=8245 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 707.450499][T11734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1490'. [ 707.917542][T11731] can: request_module (can-proto-3) failed. [ 709.047222][T11754] gfs2: not a GFS2 filesystem [ 710.783682][T11758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1495'. [ 712.448979][ T29] audit: type=1400 audit(1785122985.288:494): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 712.605099][T11766] netlink: get zone limit has 4 unknown bytes [ 712.847396][ T29] audit: type=1400 audit(1785122985.698:495): avc: denied { getopt } for pid=11756 comm="syz.1.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 712.926334][T11758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1495'. [ 712.940603][T11772] random: crng reseeded on system resumption [ 713.036025][T11758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1495'. [ 713.170116][T11758] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1495'. [ 713.277573][T11777] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 713.285535][T11777] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 713.297159][T11777] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 713.305144][T11777] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 713.379441][ T29] audit: type=1400 audit(1785122986.208:496): avc: denied { create } for pid=11756 comm="syz.1.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 714.030898][ T5616] Bluetooth: hci0: unexpected event for opcode 0x2007 [ 714.239557][ T29] audit: type=1400 audit(1785122987.088:497): avc: denied { bind } for pid=11784 comm="syz.4.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 715.111582][ T187] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 715.271548][ T187] usb 6-1: Using ep0 maxpacket: 16 [ 715.299600][ T187] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.309934][ T187] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 715.341363][ T187] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 715.370524][ T187] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 715.391698][ T5809] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 715.410766][ T187] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 715.458971][ T187] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 715.468518][ T187] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 715.498750][ T187] usb 6-1: Manufacturer: syz [ 715.520944][ T187] usb 6-1: config 0 descriptor?? [ 715.541580][ T5809] usb 2-1: Using ep0 maxpacket: 8 [ 715.551773][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.564939][ T5809] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 715.611772][ T5809] usb 2-1: New USB device found, idVendor=1241, idProduct=506b, bcdDevice= 0.00 [ 715.648808][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.698457][ T5809] usb 2-1: config 0 descriptor?? [ 715.861641][ T187] rc_core: IR keymap rc-hauppauge not found [ 715.867689][ T187] Registered IR keymap rc-empty [ 715.884419][ T187] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 715.931843][ T187] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 715.978192][ T187] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 716.019211][ T187] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input24 [ 716.102885][ T187] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 716.129047][T11797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.141716][ T187] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 716.162184][T11797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.182686][ T187] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 716.212775][ T187] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 716.242556][ T187] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 716.292671][ T187] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 716.332781][ T187] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 716.361669][ T187] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 716.393635][ T187] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 716.421627][ T187] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 716.452144][ T187] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 716.481720][ T187] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 717.503507][ T805] usb 6-1: USB disconnect, device number 28 [ 718.101863][ T187] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 718.271709][ T187] usb 4-1: Using ep0 maxpacket: 32 [ 718.282372][ T187] usb 4-1: unable to get BOS descriptor or descriptor too short [ 718.306142][ T187] usb 4-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 718.308717][ T805] usb 2-1: USB disconnect, device number 35 [ 718.356954][ T187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.404075][ T187] usb 4-1: Product: syz [ 718.418079][ T187] usb 4-1: Manufacturer: syz [ 718.434930][ T187] usb 4-1: SerialNumber: syz [ 718.593484][T11824] random: crng reseeded on system resumption [ 719.172583][T11815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.236547][T11815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.263327][T11839] netlink: zone id is out of range [ 719.277967][T11839] netlink: get zone limit has 4 unknown bytes [ 719.388935][T11824] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 719.397044][T11824] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 719.406795][T11824] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 719.414868][T11824] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 719.606632][T11815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.683833][T11815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.825349][T11815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.933533][T11827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.952159][T11815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.306141][ T187] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 720.341641][ T5809] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 720.624019][T11849] netlink: get zone limit has 4 unknown bytes [ 721.171691][ T5342] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 721.338712][ T187] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 721.354217][ T5342] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 721.369480][ T187] usb 4-1: invalid MIDI EP [ 721.388501][ T187] usb 4-1: snd-bcd2000: error during probing [ 721.416206][ T5342] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 721.416322][ T187] snd-bcd2000 4-1:1.0: probe with driver snd-bcd2000 failed with error -22 [ 721.448497][ T5809] usb 6-1: config 0 has an invalid interface number: 32 but max is 0 [ 721.456862][ T5809] usb 6-1: config 0 has no interface number 0 [ 721.472084][ T5809] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 721.499256][ T5342] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 721.507224][ T187] usb 4-1: invalid MIDI EP [ 721.518775][ T5809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.551197][ T5342] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 721.560190][ T5809] usb 6-1: config 0 descriptor?? [ 721.568699][ T187] usb 4-1: snd-bcd2000: error during probing [ 721.574754][ T5342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.585226][ T5342] usb 2-1: Product: syz [ 721.625390][ T5342] usb 2-1: Manufacturer: syz [ 721.626305][ T5809] cp210x 6-1:0.32: cp210x converter detected [ 721.636652][ T187] snd-bcd2000 4-1:1.1: probe with driver snd-bcd2000 failed with error -22 [ 721.667734][ T5342] usb 2-1: SerialNumber: syz [ 721.675378][ T187] usb 4-1: invalid MIDI EP [ 722.005331][ T187] usb 4-1: snd-bcd2000: error during probing [ 722.026638][ T187] snd-bcd2000 4-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 722.050069][ T5342] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 722.080739][ T5342] cdc_ncm 2-1:1.0: bind() failure [ 722.102041][ T187] usb 4-1: USB disconnect, device number 29 [ 722.196142][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 722.197887][ T5809] cp210x 6-1:0.32: failed to get vendor val 0x000e size 3: -32 [ 722.533069][T11845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.026723][ T187] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 723.034815][T11845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.507470][ T187] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 723.851672][ T187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.920540][ T187] usb 4-1: config 0 descriptor?? [ 723.932743][ T5342] usb 2-1: USB disconnect, device number 36 [ 723.946117][ T187] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 724.079271][ T5809] cp210x 6-1:0.32: failed to get vendor val 0x370c size 15: -71 [ 724.098791][ T5809] cp210x 6-1:0.32: GPIO initialisation failed: -71 [ 724.146604][ T5809] usb 6-1: cp210x converter now attached to ttyUSB0 [ 724.197580][ T187] usb 4-1: USB disconnect, device number 30 [ 724.274773][ T5809] usb 6-1: USB disconnect, device number 29 [ 724.489873][ T29] audit: type=1400 audit(1785122997.338:498): avc: denied { search } for pid=11872 comm="syz.2.1522" name="/" dev="configfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 724.577235][T11878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11878 comm=syz.5.1521 [ 724.992971][ T5809] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 725.044607][ T5809] cp210x 6-1:0.32: device disconnected [ 725.140916][ T29] audit: type=1400 audit(1785122997.338:499): avc: denied { search } for pid=11872 comm="syz.2.1522" name="usb_gadget" dev="configfs" ino=487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 725.176864][ T29] audit: type=1400 audit(1785122997.368:500): avc: denied { search } for pid=11872 comm="syz.2.1522" name="/" dev="configfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 725.204678][T11883] random: crng reseeded on system resumption [ 725.295093][ T29] audit: type=1400 audit(1785122997.368:501): avc: denied { search } for pid=11872 comm="syz.2.1522" name="usb_gadget" dev="configfs" ino=487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 725.440982][T11890] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 725.449168][T11890] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 725.460752][T11890] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 725.468759][T11890] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 725.517192][ T29] audit: type=1400 audit(1785122997.368:502): avc: denied { search } for pid=11872 comm="syz.2.1522" name="g1" dev="configfs" ino=33369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 725.676014][ T29] audit: type=1400 audit(1785122997.368:503): avc: denied { search } for pid=11872 comm="syz.2.1522" name="configs" dev="configfs" ino=33371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 725.896972][ T29] audit: type=1400 audit(1785122997.828:504): avc: denied { search } for pid=11872 comm="syz.2.1522" name="/" dev="configfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 725.919831][T11877] sctp: [Deprecated]: syz.3.1523 (pid 11877) Use of int in maxseg socket option. [ 725.919831][T11877] Use struct sctp_assoc_value instead [ 726.030480][ T29] audit: type=1400 audit(1785122997.828:505): avc: denied { search } for pid=11872 comm="syz.2.1522" name="usb_gadget" dev="configfs" ino=487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 726.054597][T11897] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1526'. [ 726.373993][ T29] audit: type=1400 audit(1785122997.828:506): avc: denied { search } for pid=11872 comm="syz.2.1522" name="g1" dev="configfs" ino=33369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 726.487282][T11894] can: request_module (can-proto-3) failed. [ 726.500360][ T29] audit: type=1400 audit(1785122997.828:507): avc: denied { search } for pid=11872 comm="syz.2.1522" name="functions" dev="configfs" ino=33370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 726.548685][T11904] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1527'. [ 726.879483][T11904] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 727.131803][ T5710] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 727.641812][ T5710] usb 1-1: Dual-Role OTG device on HNP port [ 727.829452][ T5710] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 727.870809][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.959122][ T5710] gspca_main: spca501-2.14.0 probing 0000:0000 [ 728.035777][ T5710] gspca_spca501: reg write: error -32 [ 728.088590][ T5710] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 728.155077][ T5710] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 728.209771][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 728.221860][ C1] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 728.230271][ C1] CPU: 1 UID: 0 PID: 11880 Comm: syz.2.1522 Tainted: G L syzkaller #0 PREEMPT(full) [ 728.241216][ C1] Tainted: [L]=SOFTLOCKUP [ 728.245528][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 728.255577][ C1] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 728.261487][ C1] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 728.281091][ C1] RSP: 0018:ffffc90000a089e8 EFLAGS: 00010002 [ 728.287145][ C1] RAX: dffffc0000000000 RBX: ffff8880574ac000 RCX: ffffffff87e7a829 [ 728.295100][ C1] RDX: 00000000000000e6 RSI: ffffffff87e7a666 RDI: ffff8880574ac128 [ 728.303055][ C1] RBP: ffff8880574ac128 R08: 0000000000000004 R09: 0000000000000020 [ 728.311009][ C1] R10: 0000000000000020 R11: 0000000000000000 R12: ffff8880574ac0f0 [ 728.318964][ C1] R13: ffff8880574ac128 R14: ffff8880574ac740 R15: 0000000000000001 [ 728.326918][ C1] FS: 0000000000000000(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 728.335835][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 728.342403][ C1] CR2: 000020000002b000 CR3: 000000005e8a8000 CR4: 00000000003526f0 [ 728.350362][ C1] Call Trace: [ 728.353622][ C1] [ 728.356453][ C1] f_midi2_set_alt+0x444/0x5f0 [ 728.361209][ C1] composite_setup+0x16f8/0x9290 [ 728.366143][ C1] ? __lock_acquire+0x49f/0x1a40 [ 728.371080][ C1] ? __pfx_composite_setup+0x10/0x10 [ 728.376359][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 728.381725][ C1] ? do_raw_spin_lock+0x128/0x260 [ 728.386742][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 728.392114][ C1] ? configfs_composite_setup+0xfb/0x130 [ 728.397733][ C1] configfs_composite_setup+0xfb/0x130 [ 728.403183][ C1] dummy_timer+0x2045/0x36f0 [ 728.407771][ C1] ? trace_seq_putmem_hex+0x1e1/0x2e0 [ 728.413143][ C1] ? do_raw_spin_lock+0x128/0x260 [ 728.418161][ C1] ? find_held_lock+0x2b/0x80 [ 728.422836][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 728.428460][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 728.434086][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 728.439877][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 728.445497][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 728.451468][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 728.456404][ C1] ? rcu_is_watching+0x12/0xc0 [ 728.461164][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 728.466954][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 728.471888][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 728.477091][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 728.482202][ C1] handle_softirqs+0x1ea/0x9b0 [ 728.486960][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 728.492239][ C1] ? _raw_spin_unlock+0x28/0x50 [ 728.497087][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 728.502704][ C1] __irq_exit_rcu+0x162/0x210 [ 728.507370][ C1] irq_exit_rcu+0x9/0x30 [ 728.511604][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 728.517225][ C1] [ 728.520135][ C1] [ 728.523050][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 728.529017][ C1] RIP: 0010:unwind_next_frame+0x58b/0x2090 [ 728.534810][ C1] Code: 00 fc ff df 48 c1 ea 03 0f b6 04 02 4c 89 f2 41 c0 ef 03 83 e2 07 41 83 e7 01 38 d0 7f 08 84 c0 0f 85 d6 14 00 00 45 88 7d 35 <44> 0f b6 71 04 41 83 e6 0f 41 80 fe 05 0f 84 76 0d 00 00 0f 87 f3 [ 728.554405][ C1] RSP: 0018:ffffc9001061eef0 EFLAGS: 00000246 [ 728.560456][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff91c98a1c [ 728.568410][ C1] RDX: 0000000000000005 RSI: 0000000000000001 RDI: ffffffff913ec724 [ 728.576364][ C1] RBP: ffffc9001061efa8 R08: ffffffff91c98a20 R09: 0000000000000007 [ 728.584319][ C1] R10: 0000000000000200 R11: 000000000000f471 R12: ffffc9001061efb0 [ 728.592272][ C1] R13: ffffc9001061ef60 R14: ffffc9001061ef95 R15: 0000000000000000 [ 728.600232][ C1] ? stack_trace_save+0x8e/0xc0 [ 728.605069][ C1] ? __unwind_start+0x3cd/0x7e0 [ 728.609904][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 728.616043][ C1] arch_stack_walk+0x94/0xf0 [ 728.620631][ C1] ? stack_trace_save+0x8e/0xc0 [ 728.625468][ C1] stack_trace_save+0x8e/0xc0 [ 728.630132][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 728.635491][ C1] ? __lock_acquire+0x49f/0x1a40 [ 728.640418][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 728.645605][ C1] save_stack+0x162/0x1e0 [ 728.649922][ C1] ? __pfx_save_stack+0x10/0x10 [ 728.654766][ C1] ? page_ext_put+0x3e/0xd0 [ 728.659265][ C1] __reset_page_owner+0x84/0x190 [ 728.664200][ C1] free_unref_folios+0xa44/0x1710 [ 728.669211][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 728.675003][ C1] folios_put_refs+0x585/0xaa0 [ 728.679766][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 728.685052][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 728.691368][ C1] shmem_undo_range+0x5e5/0x1570 [ 728.696296][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 728.701653][ C1] ? __schedule+0x126e/0x6730 [ 728.706327][ C1] ? __lock_acquire+0x49f/0x1a40 [ 728.711265][ C1] ? find_held_lock+0x2b/0x80 [ 728.715948][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 728.721136][ C1] ? percpu_counter_add_batch+0xb9/0x230 [ 728.726762][ C1] shmem_evict_inode+0x3a5/0xbe0 [ 728.731693][ C1] ? inode_wait_for_writeback+0x171/0x390 [ 728.737412][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 728.742857][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 728.748920][ C1] ? find_held_lock+0x2b/0x80 [ 728.753596][ C1] ? evict+0x37e/0xad0 [ 728.757652][ C1] ? evict+0x37e/0xad0 [ 728.761710][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 728.767154][ C1] evict+0x3c2/0xad0 [ 728.771046][ C1] ? __pfx_evict+0x10/0x10 [ 728.775456][ C1] ? iput.part.0+0x981/0x1050 [ 728.780127][ C1] iput.part.0+0x989/0x1050 [ 728.784622][ C1] iput+0x35/0x40 [ 728.788247][ C1] dentry_unlink_inode+0x284/0x470 [ 728.793349][ C1] dentry_kill+0x25d/0xc20 [ 728.797758][ C1] dput.part.0+0xd7/0x240 [ 728.802081][ C1] dput+0x1f/0x30 [ 728.805712][ C1] __fput+0x519/0xb50 [ 728.809684][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 728.814869][ C1] task_work_run+0x150/0x240 [ 728.819447][ C1] ? __pfx_task_work_run+0x10/0x10 [ 728.824545][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 728.829739][ C1] do_exit+0x951/0x2ae0 [ 728.833896][ C1] ? __pfx___might_resched+0x10/0x10 [ 728.839172][ C1] ? __pfx_do_exit+0x10/0x10 [ 728.843756][ C1] ? do_raw_spin_lock+0x128/0x260 [ 728.848779][ C1] ? find_held_lock+0x2b/0x80 [ 728.853451][ C1] ? get_signal+0x7e0/0x21e0 [ 728.858033][ C1] do_group_exit+0xd5/0x2a0 [ 728.862522][ C1] get_signal+0x1ec7/0x21e0 [ 728.867015][ C1] ? __sys_sendmmsg+0x371/0x440 [ 728.871858][ C1] ? __pfx_get_signal+0x10/0x10 [ 728.876706][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 728.882239][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 728.888387][ C1] exit_to_user_mode_loop+0x139/0x6f0 [ 728.893749][ C1] ? rcu_is_watching+0x12/0xc0 [ 728.898515][ C1] do_syscall_64+0x666/0x870 [ 728.903090][ C1] ? clear_bhb_loop+0x40/0x90 [ 728.907755][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.913638][ C1] RIP: 0033:0x7f54e219de99 [ 728.918040][ C1] Code: Unable to access opcode bytes at 0x7f54e219de6f. [ 728.925032][ C1] RSP: 002b:00007f54e311a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 728.933439][ C1] RAX: 000000000000000b RBX: 00007f54e2426090 RCX: 00007f54e219de99 [ 728.941403][ C1] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000009 [ 728.949363][ C1] RBP: 00007f54e2233eaf R08: 0000000000000000 R09: 0000000000000000 [ 728.957319][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 728.965272][ C1] R13: 00007f54e2426128 R14: 00007f54e2426090 R15: 00007fff7c274c48 [ 728.973239][ C1] [ 728.976254][ C1] Modules linked in: [ 728.980139][ C1] ---[ end trace 0000000000000000 ]--- [ 728.985576][ C1] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 728.991468][ C1] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 729.011067][ C1] RSP: 0018:ffffc90000a089e8 EFLAGS: 00010002 [ 729.017120][ C1] RAX: dffffc0000000000 RBX: ffff8880574ac000 RCX: ffffffff87e7a829 [ 729.025075][ C1] RDX: 00000000000000e6 RSI: ffffffff87e7a666 RDI: ffff8880574ac128 [ 729.033029][ C1] RBP: ffff8880574ac128 R08: 0000000000000004 R09: 0000000000000020 [ 729.040984][ C1] R10: 0000000000000020 R11: 0000000000000000 R12: ffff8880574ac0f0 [ 729.048937][ C1] R13: ffff8880574ac128 R14: ffff8880574ac740 R15: 0000000000000001 [ 729.056891][ C1] FS: 0000000000000000(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 729.065806][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 729.072373][ C1] CR2: 000020000002b000 CR3: 000000005e8a8000 CR4: 00000000003526f0 [ 729.080336][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 729.087720][ C1] Kernel Offset: disabled [ 729.092017][ C1] Rebooting in 86400 seconds..