last executing test programs: 23m51.205706033s ago: executing program 3 (id=1814): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, 0x0, 0x0}, 0x20) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r4, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}, {0x2, 0x4e23, @empty}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x84, 0x0, 0x0, 0x0, 0x78, &(0x7f0000000000)='bridge_slave_1\x00', 0x80000000, 0xfffffffffffffff9, 0x7}) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r3, 0x100000000) 23m49.492865288s ago: executing program 3 (id=1818): ioperm(0x0, 0x9, 0x58) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r3, 0x0, 0x7ffffffe}}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="340000001100010000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="14001b0000000000000000210000000000000001"], 0x34}], 0x1}, 0x10) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x284203, 0x0) r5 = syz_io_uring_setup(0x5, &(0x7f0000000000)={0x0, 0x9701, 0x0, 0x3, 0x3a0}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000002cc0)={&(0x7f0000006000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000008600)={0x0, 0x0, 0x1}, 0x1) 23m47.528719712s ago: executing program 3 (id=1823): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1) r7 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) ptrace(0x10, r7) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000003c0)=0x1) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000001c0)) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="01002dbd7000fddbdf257b00000008000300", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x40400c0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESDEC=r8], 0x0) 23m42.426778898s ago: executing program 3 (id=1831): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f00000001c0)={&(0x7f0000000280)="654665a49632a9e567b26dd60f5ce04831043c0d91d211d5cadd20fbe6d1907367f1b1349423214aa3b1b4b0b4985d2a11b2fc41656291f4ce8b25b48f0034dfa24f69d81dccc1308b72ac822b35c6ef7358afee32811ac43d8cf5f55157adfb75c9af5f52c76dd0422ad51a20de2c4a3e6fd42dc20d1d176d2584422a6a375d", 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r6, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) 23m41.349846012s ago: executing program 3 (id=1836): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f406", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 23m39.589474275s ago: executing program 3 (id=1843): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0xfffffffffffffffe, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$unix(0x1, 0x5, 0x0) 23m24.504212358s ago: executing program 32 (id=1843): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0xfffffffffffffffe, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$unix(0x1, 0x5, 0x0) 14m44.750490808s ago: executing program 0 (id=3404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x18, 0x2, [@TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x44c, 0x0, 0x4}}}]}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 14m43.265782035s ago: executing program 0 (id=3408): socket(0x840000000002, 0x3, 0x100) socket$inet_sctp(0x2, 0x5, 0x84) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dsp1(0xffffff9c, &(0x7f00000001c0), 0x24003, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000600)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05000100060e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 14m42.311487335s ago: executing program 0 (id=3413): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'new '}, 0x19, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 14m42.173393149s ago: executing program 0 (id=3416): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc3}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x61}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x1e, 0x0, &(0x7f00000000c0)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xe}]}, 0x60}, 0x1, 0x0, 0x0, 0x840}, 0x20000004) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioprio_set$pid(0x2, 0x0, 0x6000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="7961000000000000e5007e"], 0x14}}, 0x4000054) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000040), 0x1, 0x7ad, &(0x7f0000001740)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY772R9N533sybZ80gBbBvjad/chGHIwbS5GhWnkRWEP0RJ+v5h+trhXRJYmPjle+SWtmD9bVCNL0mdTDL/DEiPnsj4khue72VldX5mVKpuJTlJ6sLFycrK6tHLyzMzBXniovHp6anj534x4njexfrD1+uHrr79v//+tHJn17/w623Pk/iZBzK1jXHsVfGYzzbJgPpJtzkf3tdWY8lvW4AzyQ9NPvqR3kcjtHo26En/9PVlgEAnXIlIjYAgH0mcf4HgH2m8TnAg/W1QmOJ+vWcqz39YKJL7v03Iobr8Teub9bX9Nev2X01XLsOOvIgqV0jaUgiYmwP6h+PiOu3z9xMl+jQdUiAVq5ei4hzY+Nbx/90hNt6z8LT+tsunjO+JW/8g+75JJ3//HP7/C8ilx3/w7W/W+c/Qy2O3Wfx5OM/d2dTdmAPKm2Szv/+3XRv28Om+DNjfVnuN7U530By/kKpmI5tv42IiRgYSvNTO9Qxcf/n++3WNc//vn/ntQ/S+tPHx8/I3ekf2vya2ZnqzPPE3OzetYg/9beKP3nU/0mb+e/pXdbx0r/efL/dujT+NN7Gsj3+ztq4EfGXlv3/+D6oZMf7Eydru8NkY6do4eOv3xtpV39z/1+/nda0Vmj8L9ANaf+P7Bz/WNJ8v2bl6ev44sbop+3WbY7/zM20/s3xt97/B5NXa+nBrOzyTLW6NBUxmLy8vfzY49c28o3np/FP/Ln18b/T/p8OQ+ey9MYTbn7sv/vth88ef2el8c+m/Z9kQTyx/58+cevhfF+7+nfX/9O11ERWsn3869/2vrtt4HNtPAAAAAAAAAAAAAAAAAAAAAAAAADYpVxEHIokl3+UzuXy+fpveP8+RnKlcqV65Hx5eXE2ar+VPRYDucZXXY42fR/qVPZ9+I38sS35v0fE7yLi3aEDtXy+UC7N9jp4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgcbPP7/6lvhnrdOgCgY4Z73QAAoOuc/wFg/2lz/h9sXXygo20BALqjdv5P+nvdDACgi3z+DwD7j/M/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHXb61Kl02fhxfa2Q5mcvrSzPly8dnS1W5vMLy4V8obx0MT9XLs+VivlCeaHtG12tP5TK5YvTsbh8ebJarFQnKyurZxfKy4vVsxcWZuaKZ4sDXYsMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHavsrI6P1MqFZckdk5ceSGacS3rtl5vDYkXIjEUEZ2qonmUONCbwQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgV+CXAAAA///Oeh+5") 14m40.18870359s ago: executing program 0 (id=3421): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4, 0x0, 0x1}, 0x18) socket(0x8, 0x5, 0x80001) socket$inet_sctp(0x2, 0x1, 0x84) modify_ldt$write(0x1, 0x0, 0x0) socket$packet(0x11, 0x1bd28a5991a9f4c5, 0x300) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r8 = memfd_secret(0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x8, 0x12d5f, 0xffffffff}}, 0x44) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r9, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x0, @ioapic={0x100010000, 0x1, 0x0, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x3}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0xc, 0xc, 0x9, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xfe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0xff}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x6, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd}, {0x8, 0x81, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x81, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) 14m39.094956922s ago: executing program 0 (id=3423): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000000)) 14m24.037556773s ago: executing program 33 (id=3423): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000000)) 13m14.349628823s ago: executing program 2 (id=3704): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r1, &(0x7f0000000000)="b7", 0x1, 0x24004016, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x6, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) recvmmsg(r1, 0x0, 0x0, 0x120, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0x0, 0x1) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0}) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='keyring\x00', r7) keyctl$restrict_keyring(0xa, r7, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') 13m11.913115773s ago: executing program 2 (id=3711): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab70102030109021200010000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x18, &(0x7f0000000300)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0}) 13m10.042825908s ago: executing program 2 (id=3716): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001002f00fe88a43de1a400000000000000007d01ff0200"/51], 0xfdef) 13m7.404743216s ago: executing program 2 (id=3722): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0x80, {0xdddd0000, 0xd000, 0x2}}, "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", "1acd2077949cf1f27e1e764566e4cffaa168dcad09bfe7c84a06d9db78a4e8f0504116608cffa736ae4427d04f27d39e5de80f8935f281bc483252d1c4e0dff576831d8505d3cf34ddc4f4760b53ec5182b54b352dea1b5975eea9b6bffd5b66524559c7c3e9981d7a0ff5ffe6814c923871db66426d98286aec1debc56864a4b29ee5cb46989af08546d6d1a5d9da45db7d8abea1d392d0c668cc040da5d129ddbbe6a95a7d9e51a13328ea3fbd9ac81f03914ed9d1d2b72c234093a351f7294556996ca5459d796cb4127a9aed8e0cca398d1b5af6eae257d02db91a61d49a5677ee9c8caf1855edd2c25b9b3a9a5174d2193108e5e87d781780d9506a890687c80c429f3a46028ed71364c4b8d3b2380b38d2cf7e447dee058f556dcae2627e49dfd316d169d382f2b6775233157f57c7be54b105e2493e140ad97ecf9c12df8f0db9a973d0ef9197ebbdebc5e822ee06852a408560c7f19c65ab8527edc9ec1d6378f2c748f7e84d1d6e98de8abab3e0e42a866e1ec5d00822b124a98d77e9c8dbb3ac6648afe409b21e1cf2f5458a0588cd11af6887f552f6c16a801abf2594eb9a80e704b8053573f661dd29706e71060b630272037144b33d684f66128950510d4138785418f726eb7c7f84c7dda646b3647d673122f95ef89c863c3d4adec4477664cfe911683f19862cc918451f70a6a359dbc66b3599c0af91858ebe13c253a6e9a96758955fdfd1be103777812339e3786484a25b18994ba69b4275f26a64afb9be5219061d94d7c472236f1a20a9217d70abab15182c5f04c6080d535e34045d6497c1c8a2ea53fc022eb159d0d1be59a21f277ce441f3c5cb03ef0e7e1ac63177dfe567e2cb9055228f32c9ca6d38d99093fdc129951380cedafcca40712a2da5cc0af8d872d8f848ea5ff95210a52d2390e236da76fffce86cc8a78a8ea0e1e4464ceac9021556d29d7470ca19849b417aa6aee032f3bd437cb5c839c9f5fb20ec1367449abfb5e19f8365b7947bda60e34136e2eb53e0243766c2718d4bfe6eec77f8ca04d177cc17bad59d651a08349651de6d4dbf5856a6d42cc8cb2441ab7dfa9420d87d4a5aa5914f619b2478a0d68a98280231c8e7558d11eec87e80f2d039b5d6b287d9b3667b020dc45b999b162247bf38f5ac5fc99b5eb6ac5939d35d7d6e71b366f9553ada2784671aecdbdcaf42a2f254dc0289f7be9c6f0c045b30f63ae1a8fac778030f27e04e980bae66e474bc4f9572b8a0d8119ce13ea2ad1285b3397bc929ff26a2ba1ef2760c77e3e114d15742740b27796cb2fc84761db427cdf3c63be71fd6734ed2cb1300a8d5e2b1964f2a0320bfbad8e9bce0cd9329c8c41d79107d77f65c99f3c03813c1f0f5351869434c2ccb685f1863fac38a44ecf354ffde4926ae3cee90833db386633e6dba3585ec36f1aca6701d4d1fc13ac1c5d4cf2ae8c8c418da372bce96451dc2add28828e45ce3f6e35da3d49dcdb8ceb084a581b68fc5fcd4c45246e6b215ca98ae7239c317fe45404984292a83ac7e62614665bec4a5e80b055a0635003e93172e2045ec88144d9d7a2b50c45333720e2273b165147a0b1af77fe87089fe8c0fd32c4e950aedf6798c9007575dc86c02089414089527baf9bbbe5eaf4d58289de0987f8f310d7900ef2350daa438ac83ff255344a2bc814a3e7055269544310b0fe78b07eb0ee5f16899fc8bdf8e3cc47d27a44c93528885452195706091eaf15930f9df5874c19d0a1deedde0cbe9cda7f0618c378bc4ba6fbe911d546c7bc76954fcc6b5ef56c77d306421f9d24e0770cf8b578aaa6276bff4b98e9968e9a1f8c78c6d647d8c52a42d27ee8359840747913e0983e049ad77d87e35800eeeb19cd786a5edf6886e610f51b4d2290d959c7fe906dad2d3e2a5648c5ec0d48becaf209fbb6599d1b0d6299cb2b2fad3b3efac6ba0911a63ae399fa3f19adecc9b10533c99bba28bf9e37600db41c2b463c25b0602fb86ef043ee72aa26e7f102c3afe4073d1318671a514f8320dcbc699514792d5c90c34fe6809102cb6537a4e76530256cd997a1dba4a75b1578c7f12b409af040afa35c54001a4abf1c402f91413995ced6b64256684c34283e644246d235af905fa2edf8f802a65c1c1e0ba24ea656cb3b1f876b6f335aed27c3a6e8da53b1b9c283d299390310df6dc84e5569ad3ac1744824b329fc24cb8612c061b09440464c1168012dc40e8df788f9c708bde6bd4eb3f6111729b08796d0243b07a21ac542ae418f19ec3d7171197c8ca216b20f786784400f2834d98819a5fbbd909677f7d7309dca5c0e2cf74a8a53c1791c78488fec0520d3c71a9698e5040920acc5eb7764f4c295cb2f00b5a62d5fc1e1d0040c639886712ad4fece171739fbc0519b93c8bccac49f871a0e2f5ba97331be916aaae29b8cd646028629cc227b916d1d8b4729da3baffb0e39b533e039eb9f10073c156485902745ec60b8d281b2f84a8651fe4c533119bab8424bcecb28c067ffb1e03e05bcf9d6d44dfe0782e072934fc36e70b1acbf30387495618ac2729811aa6c2901b109b33a0010cfbe666fe9fcac86cc81023dda253863714e89c78265e219d00ba20b3c846368dd21816f699a6af20a290f075f4346b98ad40d69caaf2614856c0bdaa661907975679f5cb5afd3738ba811db58123922647476de50ccf17360393433b547bf0377b2115a7cd357699d043bd80981a2a28c638f7c2e725d85f9edd2fdcfea1f7e2bf02f9f0d4236c9d14c6d382dad99192125b219eea6a13b5685efcf34454d2a12537c5354dc5e34ecda968422cc472f0fec174b95cd298e89e7efbc164465dae45059a40e104b1a980ebc781848b0109ce9cec600b190a34dcf741dd6145d56c4ec27c983a7d6328130c122217bbbb33e2cffba1a352b6805dbd715772153b53051db7215f475ba8673b0dd59e2db414a658d3d262c5304d300b930921c7c0a9910eed96a705eea2c8657be193836a20f23fcbc8ef105ca25551626caf63c511d3c9dcffd9d485f27a63b6992e4b6fa26b02903a4da52fd7fa06397fe2883f9b6a4cac2ffb8ce1f476ec72bccaf0ec7b16e6f601e72f46e835d9bc2a82dccaa449728d22a7ff17772276f54073c66b184de0fa7f681823dcb7603a20aa94b76a9b7adb9f11f447b8764b2d719bea91ea32edbb4d340d18f18b3f53d1d07d0405facb202c30ac1ec145516e071cc71c59cc6205db061a8c19bb2d3ab463f6fea1c6d3b5a69d96e5b67ed569e1c04cff6c9f69ab9343e9a71bf6776d3b84b47de2ecf9a0d45515ef5a3b5c6d55f2c6543ef2bf0eb795219da3026ab06c9ba9bbdc30d5dc7c3782a9f58141a63f8d4683ad5c1d156c92c508cefd9702e9267263e34ff96800c425f768bd204466f4f9badabdfaf35e1a8096150e8afeea3a30586b89d1002f041612f8e81de4dcd268bf538307c4d28d1d2ae1af979f3b02017ebe942cdc8fa7964fe978254eb15fed7478e4200e381409486d37e0205c597b5ec19243ab547da051dee03f18e079af60dcb2095fe86f292a4b4bba8682ed8b220c0b48958882aaa7e93448bfecebfba6ca3ef28e0752080cbc9f752d6da814a9dc5bc552d9fe73b8a1df8eb0158df58810fce8719f11b04c4e157ac8ae3692f825a4569ff859273775c45eb999fff7a47ca461b2fda6edfe8ed8371ed29c4f7499448cfff0bc47ca1d8fc9eb35f79db389781c36e89541b686edc21f088463b2d26fd9b650eaf5ed1cda0f00040000000000009b0c527ba655252f77b77c2f4cc0f7741c52a57629fe511c5f9c17ee44fec35da363f5356343037b2705a393115062719e6bd87bbff2472a7833be6d2270fe5ff4cc9f0439a53adb91fe1520ff4841c120e80c99fcc2d0ee794fa8c91dc9c4227ef9f9ac784ce41abefa69b84acb285e385b74501ea137be765172d90738f201497cb7c992dcc2f17341c9b6a0ef3dcb14350669802e3295b5a133142df7bc5645bbf222d2da033ee4cc4f225f248ad88782945869c29943eb6498c87c2b125fb2d4067118c2b417308a1703fd9f48c48ee2a9c5af44df473e3b99b8a941fc4967060b4960864bc97e4f2bf53e7a5c2ec3d47e7bf8345b56a4df5f84d0523c1b6cf9399110e393474b3ece22c4923f531ff12242d5e2b293846a7ed06e3e7f062cb173431a2b680188fb46d2cb74d4a0d9dae59e2be485aabbb54c26406e6e77de3031e049bd8a49139fa62151716a665fb9f1966cf6c57f4185f7cffbbc43341f3b69a3ae0a4dcfd9b37f0035a69ac552830f0ca56069c8f69162280bced2ec30c6789f32cd38d7f97953f0989b65cf90f01206b20b0111a3d22f3d2f85104b03283f4fd7b80e53f20f1c91d5bf3b67aac25c4300b3191c1f5d7bb0fe112deac0f6acbea3b57c20c5d8f0bad48873a7e7347ead5a4d0b73041c86bdcd3b91d6cbe0ebb5824fb90cb4e74f439505074f236679c4ea4015fbdf0c44b4063b62cdced485cbca0eae2404da7158a974b7dc14c5207107d5424de14a35739f68f3f151c6de20d0ad19d06521baf26ab2cb7ff7e8f83d60a9f554367f99fa5c44910b886e1c9c2418a7a4b33f19fff9af4724c7c8251ffc24cc4464b8804b6704bc0572b23498ec92263d37bdb54490f3316087c5b192a20027ad6cf1a2c3fef8043e2847b8734fa8dc91ce992474796e3f71580841379279f8b10ab8e6766196fb5a9b2ff44cabece6930fb9f32e867047313410c13b11a8a788a29ad93a5b9ae1b960a46fd48fe5cdd7168815c67b267065453547cb60db74f37238b2f7f3c78abc249ffe118a1d3e7eb5cdd326ad0a07a50bd24a6be4b5e56fade7fb7c3b515b4d0b16884c9eee7ef9c82f2ea4d89113e950622cee8e63519a899da3ee83bcd369b01b373934bbed73d8f94e3312e72d82d3fb8b8e65b0f5580cffda633467fc3285023159c3ac7273a46275d874b87254df07ea15d0806f4b8312c4e95235cab31e015a3603906c188233db45dea658dcf694f5097a9e26aba8b58e248210fa5e12fa08cbbe0a01afa9b2c36d38d298dd180ee6e358d45397471bc064e2e8e51da189e98bf41cc30b50b0d937e8cbfc5b138dc66143716b27190689efebcaa5676c9eb370465f77803b219b0ee1f65f343d70b01435f9adc46979b121944e13a02cbdd47a9898b26d6cc5294a9358971bad37a6b01d8b2ee251e50b02acbd560bcd4a212124f308d87eca79d13c77b90510675989ffb70a9d5643df2db6067bd4e0fd21d0a40b84177279587777f763bb9e2fc99186402ff1905eb61b6ea3bef862beb10ede1fbca93f5b426f683bb72099ffc61c99d8a7527fe9167b13d786402864d2b4237fa47426f46b6d5e0911de793f73610b46de4e62b8a67aaed298a9a2d5b5c5b7936f8bcc62a8f9d64d8ff1470a386974b35f382f42ad1fb2c9de214b35aa0afcff7806d7601ab9142a0dade5c7a9e6b0c16027c4d0fc413ba5d16f0d4826b3f469afa6e5ce4a19e21d2a2c2c1e3055706d0ce371dee59a06e534887cf5e300bd118b7c5e8eee2a8fd4bf6ca96df566f49049bd25533c8ae08eb2334ba183529c041f3d9b45139173f3ee8b1b8f8633c9cb7caa735805d56b1e3119a97f3ce86ecd8f21256c0a5a54266cc00927c881ac18fef64f25704b3f01b4885a9c4053aec5bfe5be638563267548cacbad2a95c3c48e6a913bd87ec0c489c236214b650a17d27081ae8def0d27c0d6a25553601875192d11c9e3ef2a3273c1f9b079"}) 13m6.113922171s ago: executing program 2 (id=3726): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x18, &(0x7f0000000300)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0}) 13m4.788776224s ago: executing program 2 (id=3731): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 12m49.696661584s ago: executing program 34 (id=3731): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 9.393760269s ago: executing program 1 (id=6530): r0 = syz_usb_connect$hid(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000400b060a700000020000010902240001000000000904000001030000000921000000012205000905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="0000570000005700a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103d"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x200) r1 = syz_usb_connect(0x6, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0xe, 0x3d, {0x3d, 0x10, "60d4115e4a6b086995dbb816a4f923936b455bd612c103dd040379d2ea130943c7f66c4274954a0c063c8d4fc851204a6ea2bd449644e9448512e0"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) 9.222496443s ago: executing program 6 (id=6532): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x16c, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xb0, 0x2, [@TCA_CGROUP_ACT={0x50, 0x1, [@m_csum={0x4c, 0x4, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x101, 0xc03a, 0x4, 0x7, 0x1}, 0x5c}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x5c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x7, 0x2, 0xffff}, {0x4, 0x5, 0x2, "779c437a56"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0xb}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x25, 0x73, 0x1}, {0x1, 0xd6}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6a}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x5}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x1}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x2}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x34, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x3}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xd}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}]}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 9.130858048s ago: executing program 6 (id=6533): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000200)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 8.967234085s ago: executing program 4 (id=6536): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000001001000002000000010000000000000014000000000000001001000002"], 0x30}, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r2 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r2, &(0x7f0000000140)=@OVL_FILEID_V1={0x30, 0x300f8, {'\x00', {0x0, 0xfb, 0x15, 0x7, 0x5, "e8371f2efe0868327a31a705ec978547"}}}, 0x30000) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) getsockopt$MRT6(r3, 0x29, 0xd0, 0x0, 0x0) setrlimit(0x0, &(0x7f0000000980)={0x7, 0x10}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, 0xfffffffb}) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000065000000000000598500008112", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000fdffffff00"/28], 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x40}}, 0x20000840) r5 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r5}) 7.893423991s ago: executing program 4 (id=6539): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_init_net_socket$ax25(0x3, 0x3, 0xcc) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00', 0x7}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="10065010704b"], 0x10}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYRES8=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='dlm_lock_start\x00', r5, 0x0, 0x2000020003}, 0x18) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40046f41, &(0x7f0000000440)=0x1f) recvmmsg(r4, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000380)=""/173, 0xad}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000002b80)=""/4104, 0x1008}, {&(0x7f0000000780)=""/238, 0xfffffffffffffe50}, {&(0x7f0000000700)=""/90, 0x5a}, {&(0x7f0000001a80)=""/207, 0xcf}], 0x6}, 0x80000000}], 0x4, 0x20, 0x0) 7.773724346s ago: executing program 7 (id=6540): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 7.547897901s ago: executing program 5 (id=6541): r0 = fsopen(&(0x7f000001fac0)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='user\x00', &(0x7f0000000900)='\xc9 \xad;(U\xc3\x89\x81\x17\x98\xd5\xff\xd8\x9bO\x1dfQ\x02r\xd1\xb6\x16U\xb1\x97P\x9e\xb7D\x93.\xf3\x15\xd2\xb4\x11\x15\xa3^\x9eHm\x89\fU\xfc\xe8\x7f=\xf8j\xa5J\xb9\x87\x11\xdb\xa7\x94\xd3\xc7KZ\xc6z\xee\xd3+\xf8L\xf8>\x1f\x99FJ\x9a\x8b\xca\x0e\x9ah\xcf\x13\xa4;\xe0\x8d\x9e\x1bkR\x18+\xf7%(.\x13\xf07\x15_\x91\xa3\xeb\xd7\xef\x8bt\x93\xc1\x8b;\x15\\\xe2\xd6\xde\xf0\x9f\xf5\xaa\xf5\x14*\x1a\x14\x88p?\xa4u\xcb\xed\xf4P\xc3\x1d\x1f\xb3\xcc\xd6,\x8e%\x02\xb0\x8b\x9e\x90\xde\x17i\xbdMv\x8cW~4\x00[\xddD\x96\x96a\xd7\xa9\xad\xc7\x90Kp\x834\xaez\xd9\\#\x7f\x84_>\xde0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init() r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x16c, 0x30, 0x1, 0x0, 0x0, {}, [{0x158, 0x1, [@m_tunnel_key={0xa8, 0x1, 0x0, 0x0, {{0xf}, {0x78, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x640100fe}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x400003, 0x100, 0x2, 0x7, 0xd4}, 0x2}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x20}]}, {0x4}, {0xc}, {0xc}}}, @m_tunnel_key={0xac, 0x12, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, {0x49, 0x6, "193639eb498b8581f9454ffdd35ea0a7ae936dcf8133fafc31265cc76abd4cb36c76dc570f6024fb0c520defb01800c3728b39ac73fe32f7c88e9a34f756635b5273249753"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x16c}}, 0x8000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fffffff}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000bd3000/0x2000)=nil}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000180)) close_range(r4, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x0) 6.351435537s ago: executing program 7 (id=6543): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x16c, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xb0, 0x2, [@TCA_CGROUP_ACT={0x50, 0x1, [@m_csum={0x4c, 0x4, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x101, 0xc03a, 0x4, 0x7, 0x1}, 0x5c}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x5c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x7, 0x2, 0xffff}, {0x4, 0x5, 0x2, "779c437a56"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0xb}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x25, 0x73, 0x1}, {0x1, 0xd6}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6a}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x5}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x1}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x2}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x34, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x3}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xd}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}]}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 6.279162305s ago: executing program 1 (id=6544): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105"], 0xa8}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 5.993855721s ago: executing program 7 (id=6545): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000007c0)={0xc, 0x0, &(0x7f0000000600)=[@free_buffer], 0x0, 0x0, 0x0}) 5.781052212s ago: executing program 7 (id=6546): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000440)={0x20, 0x31, 0x4, "d9f9f296"}, 0x0, 0x0, 0x0, 0x0}) 5.622925599s ago: executing program 1 (id=6547): r0 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc3}, &(0x7f0000000300)={0x0, "9f80af750d38df00bcffe4eb9eed83de92ec72fe9f34eeccbf8570c4a4725ffee6a9361ed74ed765bfb5bd690f15b0997fc5ede52e30266c1ccfe384bd892fd8", 0x17}, 0x48, 0xffffffffffffffff) keyctl$link(0x8, r0, 0xfffffffffffffffc) 5.57921256s ago: executing program 4 (id=6548): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup(0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={0x0}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) 5.445697137s ago: executing program 1 (id=6549): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x4, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000"], 0xb0) 4.48486969s ago: executing program 4 (id=6550): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) pivot_root(0x0, 0x0) 4.438057981s ago: executing program 7 (id=6551): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 4.404526081s ago: executing program 5 (id=6552): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 4.224358698s ago: executing program 6 (id=6553): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x15, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init() r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x16c, 0x30, 0x1, 0x0, 0x0, {}, [{0x158, 0x1, [@m_tunnel_key={0xa8, 0x1, 0x0, 0x0, {{0xf}, {0x78, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x640100fe}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x400003, 0x100, 0x2, 0x7, 0xd4}, 0x2}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x20}]}, {0x4}, {0xc}, {0xc}}}, @m_tunnel_key={0xac, 0x12, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, {0x49, 0x6, "193639eb498b8581f9454ffdd35ea0a7ae936dcf8133fafc31265cc76abd4cb36c76dc570f6024fb0c520defb01800c3728b39ac73fe32f7c88e9a34f756635b5273249753"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x16c}}, 0x8000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fffffff}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000bd3000/0x2000)=nil}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000180)) close_range(r4, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x0) 4.153160983s ago: executing program 4 (id=6554): syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000997aa910c6250290ba62010203010902120001000000000904"], 0x0) 4.08812613s ago: executing program 5 (id=6555): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x16c, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xb0, 0x2, [@TCA_CGROUP_ACT={0x50, 0x1, [@m_csum={0x4c, 0x4, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x101, 0xc03a, 0x4, 0x7, 0x1}, 0x5c}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x5c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x7, 0x2, 0xffff}, {0x4, 0x5, 0x2, "779c437a56"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0xb}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x25, 0x73, 0x1}, {0x1, 0xd6}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6a}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x5}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x1}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x2}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x34, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x3}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xd}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}]}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.144228902s ago: executing program 5 (id=6556): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) unlink(&(0x7f0000000000)='./file0\x00') mknod$loop(0x0, 0x2000, 0x1) 3.036555562s ago: executing program 6 (id=6557): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105"], 0xa8}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.893577363s ago: executing program 5 (id=6558): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_init_net_socket$ax25(0x3, 0x3, 0xcc) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00', 0x7}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="10065010704bfb0000"], 0x10}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYRES8=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='dlm_lock_start\x00', r5, 0x0, 0x2000020003}, 0x18) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40046f41, &(0x7f0000000440)=0x1f) recvmmsg(r4, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000380)=""/173, 0xad}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000002b80)=""/4104, 0x1008}, {&(0x7f0000000780)=""/238, 0xfffffffffffffe50}, {&(0x7f0000000700)=""/90, 0x5a}, {&(0x7f0000001a80)=""/207, 0xcf}], 0x6}, 0x80000000}], 0x4, 0x20, 0x0) 2.20040866s ago: executing program 6 (id=6559): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x108c8, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x445c, &(0x7f000000c300)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x202, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) 2.140107594s ago: executing program 1 (id=6560): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup(0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={0x0}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) 1.797476829s ago: executing program 4 (id=6561): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000440)={0x20, 0x31, 0x4, "d9f9f296"}, 0x0, 0x0, 0x0, 0x0}) 835.216915ms ago: executing program 1 (id=6562): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b81000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000040108117980800000000000109022400010000000009040000170300000009210000010122290a0905", @ANYRES64], 0x0) 834.968527ms ago: executing program 6 (id=6563): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000200)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 0s ago: executing program 5 (id=6564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYRES8], 0x1, 0x5a0c, &(0x7f00000001c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) kernel console output (not intermixed with test programs): ™ìŠ³ë¤µê†ºé›à¡ê½‚춑꾎䦯䟤顛◢러洹歆鹜ᛨᎋᅕ⎽윷뎋匙鷱ê…Ж홥ì‘삥窵鬬며ጂ⤚뾣蹗ᩆ൤斣븣⫭줳éŠê¥¥â—® [ 1887.196159][T17772] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1887.219518][T17772] usb 7-1: config 0 descriptor?? [ 1887.811809][T17772] pwc: Askey VC010 type 2 USB webcam detected. [ 1887.828509][T10571] usb 5-1: SerialNumber: 茷徇㖖஻ꄈ䄸▔䵑ï¯çµ›ï ‹á™³ê¿ˆäš­ã¨Ÿï¼ä²‹ä¦ˆä¡œâ«ªé€®ï¢“蛄㋋âŒê•¥æµ´è™šâ¬©åŽ™ä¿½í‚¥ï³¹æŸ¢æšªÊ¦é¬™ë첬䚴䨣ä¡í‘¼ê”—禺៦鿙벪훰í”ꖂ뗯매牳ç‰è§¬â¹ëˆŸï¢ªå·±Ú©ã›Žî­´ç›¦æ¯œè²±çš¤à ²â§è‘‡ [ 1887.843650][T14952] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1888.127268][T14952] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1888.139621][T17772] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1888.155025][T17772] pwc: recv_control_msg error -32 req 02 val 2700 [ 1888.159339][T14952] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1888.189035][T17772] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1888.204856][T17772] pwc: recv_control_msg error -32 req 04 val 1000 [ 1888.205704][T14952] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1888.212744][T17772] pwc: recv_control_msg error -32 req 04 val 1300 [ 1888.238881][T26205] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20000 [ 1888.250181][T14952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1888.255000][T17772] pwc: recv_control_msg error -32 req 04 val 1400 [ 1888.295182][T17772] pwc: recv_control_msg error -32 req 02 val 2000 [ 1888.314621][T14952] usb 6-1: config 0 descriptor?? [ 1888.355188][T17772] pwc: recv_control_msg error -71 req 02 val 2100 [ 1888.357906][T14952] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1888.370346][T18337] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1888.403915][T17772] pwc: recv_control_msg error -71 req 04 val 1500 [ 1888.442510][T17772] pwc: recv_control_msg error -71 req 02 val 2500 [ 1888.462836][T17772] pwc: recv_control_msg error -71 req 02 val 2400 [ 1888.472700][T17772] pwc: recv_control_msg error -71 req 02 val 2600 [ 1888.492808][T17772] pwc: recv_control_msg error -71 req 02 val 2900 [ 1888.513808][T18337] usb 2-1: device descriptor read/64, error -71 [ 1888.518476][T17772] pwc: recv_control_msg error -71 req 02 val 2800 [ 1888.561342][T17772] pwc: recv_control_msg error -71 req 04 val 1100 [ 1888.572077][T17772] pwc: recv_control_msg error -71 req 04 val 1200 [ 1888.582537][T17772] pwc: Registered as video103. [ 1888.606104][T17772] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input112 [ 1888.617568][T10571] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1888.630267][ T1151] usb 5-1: Failed to submit usb control message: -71 [ 1888.644733][T10571] usb 5-1: USB disconnect, device number 123 [ 1888.653916][ T1151] usb 5-1: unable to send the bmi data to the device: -71 [ 1888.658900][T17772] usb 7-1: USB disconnect, device number 78 [ 1888.664432][ T1151] usb 5-1: unable to get target info from device [ 1888.679500][ T1151] usb 5-1: could not get target info (-71) [ 1888.686190][ T1151] usb 5-1: could not probe fw (-71) [ 1888.773892][T18337] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1889.429255][T18337] usb 2-1: device descriptor read/64, error -71 [ 1889.544041][T18337] usb usb2-port1: attempt power cycle [ 1889.903814][T18337] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1889.916436][T26246] netlink: 'syz.7.5779': attribute type 23 has an invalid length. [ 1889.967233][T18337] usb 2-1: device descriptor read/8, error -71 [ 1890.224493][T18337] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1890.305415][T18337] usb 2-1: device descriptor read/8, error -71 [ 1890.425860][T18337] usb usb2-port1: unable to enumerate USB device [ 1890.619401][T18337] usb 6-1: USB disconnect, device number 107 [ 1892.554219][T11536] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1892.766105][T11536] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1892.834205][T11536] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1892.863823][T11536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1892.899013][T11536] usb 6-1: config 0 descriptor?? [ 1892.927078][T11536] pwc: Askey VC010 type 2 USB webcam detected. [ 1893.340787][T11536] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1893.356496][T11536] pwc: recv_control_msg error -32 req 02 val 2700 [ 1893.381766][T11536] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1893.524277][T11536] pwc: recv_control_msg error -32 req 04 val 1000 [ 1893.543099][T11536] pwc: recv_control_msg error -32 req 04 val 1300 [ 1893.562546][T11536] pwc: recv_control_msg error -32 req 04 val 1400 [ 1894.357199][T11536] pwc: recv_control_msg error -71 req 02 val 2100 [ 1894.361179][T26291] hsr0: entered promiscuous mode [ 1894.368554][T11536] pwc: recv_control_msg error -71 req 04 val 1500 [ 1894.383008][T11536] pwc: recv_control_msg error -71 req 02 val 2500 [ 1894.391469][T11536] pwc: recv_control_msg error -71 req 02 val 2400 [ 1894.393852][T26291] hsr0: entered allmulticast mode [ 1894.402875][T11536] pwc: recv_control_msg error -71 req 02 val 2600 [ 1894.404462][T26291] hsr_slave_0: entered allmulticast mode [ 1894.404504][T26291] hsr_slave_1: entered allmulticast mode [ 1894.407949][T26293] random: crng reseeded on system resumption [ 1894.442957][T11536] pwc: recv_control_msg error -71 req 02 val 2900 [ 1894.458562][T11536] pwc: recv_control_msg error -71 req 02 val 2800 [ 1894.469585][T11536] pwc: recv_control_msg error -71 req 04 val 1100 [ 1894.508028][T11536] pwc: recv_control_msg error -71 req 04 val 1200 [ 1894.521170][T11536] pwc: Registered as video103. [ 1894.533081][T11536] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input113 [ 1894.583445][T11536] usb 6-1: USB disconnect, device number 108 [ 1894.793462][T17772] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1894.975707][T17772] usb 5-1: Using ep0 maxpacket: 16 [ 1895.019335][T17772] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1895.034276][T17772] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1895.045486][T17772] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1895.055402][T17772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1895.071345][T17772] usb 5-1: config 0 descriptor?? [ 1895.607667][T17772] hid (null): unknown global tag 0x9c [ 1895.622349][T17772] hid (null): unknown global tag 0xd [ 1895.622862][T26323] netlink: 'syz.1.5805': attribute type 23 has an invalid length. [ 1895.643809][T17772] hid (null): unknown global tag 0xe [ 1895.650499][T17772] hid (null): invalid report_count -732277914 [ 1895.657026][T17772] hid (null): global environment stack underflow [ 1895.784147][T17772] hid (null): unknown global tag 0xe [ 1895.793134][T17772] hid (null): invalid report_size 39531 [ 1895.801865][T17772] hid (null): invalid report_count 16579 [ 1895.813422][T17772] hid (null): unknown global tag 0xe [ 1895.836343][T17772] usb 5-1: string descriptor 0 read error: -71 [ 1895.963620][T17772] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 1896.528251][T17772] letsketch 0003:6161:4D15.0017: probe with driver letsketch failed with error -32 [ 1896.547442][T17772] usb 5-1: USB disconnect, device number 124 [ 1897.888164][T26351] bridge_slave_0: default FDB implementation only supports local addresses [ 1897.922601][T26351] random: crng reseeded on system resumption [ 1899.273868][T18337] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1899.493954][T18337] usb 7-1: Using ep0 maxpacket: 16 [ 1899.510490][T18337] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1899.522322][T18337] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1899.540870][T18337] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1899.548943][T26376] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5828'. [ 1899.551767][T18337] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1899.572855][T18337] usb 7-1: config 0 descriptor?? [ 1899.575062][T26376] gretap0: entered promiscuous mode [ 1899.979572][T26384] netlink: 'syz.1.5831': attribute type 23 has an invalid length. [ 1900.122354][T18337] hid (null): unknown global tag 0x9c [ 1900.130703][T18337] hid (null): unknown global tag 0xd [ 1900.137124][T18337] hid (null): unknown global tag 0xe [ 1900.142712][T18337] hid (null): invalid report_count -732277914 [ 1900.150949][T18337] hid (null): global environment stack underflow [ 1900.159041][T18337] hid (null): unknown global tag 0xe [ 1900.169947][T18337] hid (null): invalid report_size 39531 [ 1900.175808][T18337] hid (null): invalid report_count 16579 [ 1900.181540][T18337] hid (null): unknown global tag 0xe [ 1900.213622][T14952] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1900.331629][T18337] usb 7-1: string descriptor 0 read error: -71 [ 1900.363974][T18337] usb 7-1: Max retries (5) exceeded reading string descriptor 200 [ 1900.371987][T18337] letsketch 0003:6161:4D15.0018: probe with driver letsketch failed with error -32 [ 1900.390850][T14952] usb 5-1: Using ep0 maxpacket: 32 [ 1900.402592][T14952] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1900.426624][T18337] usb 7-1: USB disconnect, device number 79 [ 1900.438059][T14952] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1900.447206][T14952] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1900.457495][T14952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.487418][T14952] usb 5-1: config 0 descriptor?? [ 1901.527549][ C0] raw-gadget.2 gadget.4: ignoring, device is not running [ 1901.536326][ C0] raw-gadget.2 gadget.4: ignoring, device is not running [ 1901.544078][ C0] raw-gadget.2 gadget.4: ignoring, device is not running [ 1901.547937][ T5840] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1901.551592][T14952] usbhid 5-1:0.0: can't add hid device: -32 [ 1901.562893][T26396] random: crng reseeded on system resumption [ 1901.569910][T14952] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1901.582794][T14952] usb 5-1: USB disconnect, device number 125 [ 1901.653460][T10571] usb 7-1: new full-speed USB device number 80 using dummy_hcd [ 1901.815723][T10571] usb 7-1: config 0 has an invalid interface number: 93 but max is 0 [ 1901.836010][T10571] usb 7-1: config 0 has no interface number 0 [ 1901.857807][T10571] usb 7-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 1901.867145][T10571] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.875880][T10571] usb 7-1: Product: syz [ 1901.880469][T10571] usb 7-1: Manufacturer: syz [ 1901.885923][T10571] usb 7-1: SerialNumber: syz [ 1901.893077][T10571] usb 7-1: config 0 descriptor?? [ 1902.107523][T10571] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 1902.139345][T10571] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1902.170027][T10571] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 1902.180100][T10571] usb 7-1: media controller created [ 1902.189876][T10571] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1902.284700][T10571] DVB: Unable to find symbol dib7000p_attach() [ 1902.291213][T10571] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 1902.320226][T10571] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1904.615668][T26432] random: crng reseeded on system resumption [ 1904.737730][T26434] netlink: 'syz.4.5846': attribute type 23 has an invalid length. [ 1906.029571][ T24] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1906.215054][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1906.333065][ T24] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1906.528503][ T24] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1906.669304][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1906.704546][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1906.739607][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1906.804172][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1906.850955][ T24] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1907.096863][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1907.109451][ T24] usb 5-1: config 0 descriptor?? [ 1907.812475][T10571] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 1907.836486][T10571] usb 7-1: media controller created [ 1907.846979][T10571] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1907.888038][T10571] dib0700: the master dib7090 has to be initialized first [ 1907.914065][T10571] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 1908.659795][T10571] rc_core: IR keymap rc-dib0700-rc5 not found [ 1908.666457][T10571] Registered IR keymap rc-empty [ 1908.671842][T10571] dvb-usb: could not initialize remote control. [ 1908.678686][T10571] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 1908.776042][T10571] usb 7-1: USB disconnect, device number 80 [ 1908.842741][T10571] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 1908.861520][T26484] bridge_slave_0: default FDB implementation only supports local addresses [ 1908.899448][T26484] random: crng reseeded on system resumption [ 1909.288010][T26486] netlink: 'syz.6.5864': attribute type 23 has an invalid length. [ 1912.205745][ T24] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 126 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1912.313191][ T24] usb 5-1: USB disconnect, device number 126 [ 1912.336239][ T24] usblp0: removed [ 1912.574030][T26528] random: crng reseeded on system resumption [ 1914.814519][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.710096][T26557] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5886'. [ 1915.891141][T26561] loop1: detected capacity change from 0 to 1024 [ 1916.603726][T26561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1916.616634][T26561] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1916.791366][T25398] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1917.364579][T26584] bridge0: port 1(bridge_slave_0) entered disabled state [ 1917.382819][T26584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1918.418214][T26591] bridge_slave_0: default FDB implementation only supports local addresses [ 1918.910525][ T24] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1919.063482][ T24] usb 2-1: device descriptor read/64, error -71 [ 1919.279214][T26609] loop7: detected capacity change from 0 to 512 [ 1919.353451][ T24] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1919.373960][T26609] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1919.460894][T26609] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc128, mo2=0002] [ 1919.480940][T26609] System zones: 1-12 [ 1919.513584][ T24] usb 2-1: device descriptor read/64, error -71 [ 1919.540509][T26609] EXT4-fs (loop7): 1 truncate cleaned up [ 1919.566494][T26609] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1919.601688][T26617] loop6: detected capacity change from 0 to 512 [ 1919.639123][T26617] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1919.643962][ T24] usb usb2-port1: attempt power cycle [ 1919.673669][T26617] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1919.695824][T26617] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 1919.718314][T26617] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 1919.728294][T26617] System zones: 0-2, 18-18, 34-34 [ 1919.737153][T26617] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.5906: iget: bad i_size value: 360287970189639680 [ 1919.755859][T26617] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.5906: couldn't read orphan inode 15 (err -117) [ 1919.843038][T26617] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1920.188244][ T24] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1920.224511][ T24] usb 2-1: device descriptor read/8, error -71 [ 1920.543896][ T24] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1920.731865][ T24] usb 2-1: device descriptor read/8, error -71 [ 1921.090948][ T24] usb usb2-port1: unable to enumerate USB device [ 1922.295002][T18519] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1922.557800][T19110] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1922.677937][T26649] loop4: detected capacity change from 0 to 128 [ 1922.743096][T26649] vfat: Unknown parameter '0x0000000000000003' [ 1925.837072][T26670] loop6: detected capacity change from 0 to 8 [ 1928.823460][ T5923] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1928.963157][T26689] loop5: detected capacity change from 0 to 1024 [ 1929.026601][ T5923] usb 5-1: Using ep0 maxpacket: 16 [ 1929.041385][ T5923] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1929.483906][T26695] netlink: 272 bytes leftover after parsing attributes in process `syz.5.5929'. [ 1929.575108][ T5923] usb 5-1: config 0 has no interface number 0 [ 1929.602115][ T5923] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1929.613375][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.622526][ T5923] usb 5-1: Product: syz [ 1930.304566][ T5923] usb 5-1: Manufacturer: syz [ 1930.333393][ T5923] usb 5-1: SerialNumber: syz [ 1930.366815][ T5923] usb 5-1: config 0 descriptor?? [ 1930.420945][ T5923] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1930.572808][T26700] bridge_slave_0: default FDB implementation only supports local addresses [ 1931.062796][T26714] loop1: detected capacity change from 0 to 8 [ 1931.085307][T26714] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1931.247682][T26714] cramfs: Error -5 while decompressing! [ 1931.255353][T26714] cramfs: ffffffff99bb2be8(26)->ffff88807f6eb000(4096) [ 1931.262649][T26714] cramfs: Error -3 while decompressing! [ 1931.269377][T26714] cramfs: ffffffff99bb2c02(26)->ffff88806b268000(4096) [ 1931.276863][T26714] cramfs: Error -3 while decompressing! [ 1931.282961][T26714] cramfs: ffffffff99bb2c1c(16)->ffff88806c17f000(4096) [ 1931.291120][T26714] cramfs: Error -5 while decompressing! [ 1931.296949][T26714] cramfs: ffffffff99bb2be8(26)->ffff88807f6eb000(4096) [ 1931.343642][ T30] audit: type=1800 audit(1747984593.167:1393): pid=26714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5935" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 1931.371049][ T5923] gspca_spca1528: reg_w err -110 [ 1931.416330][ T5923] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 1931.497858][T14952] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1932.395146][T14952] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1932.413453][T14952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1932.419157][T26727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1932.422122][T14952] usb 7-1: Product: syz [ 1932.443457][T14952] usb 7-1: Manufacturer: syz [ 1932.448173][T14952] usb 7-1: SerialNumber: syz [ 1932.457534][T26727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1932.465899][ T5923] usb 5-1: USB disconnect, device number 127 [ 1932.467297][T14952] usb 7-1: config 0 descriptor?? [ 1932.484047][T14952] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1932.505798][T26727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1932.528112][T26727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1932.897087][T14952] gspca_sunplus: reg_r err -32 [ 1932.924499][T14952] sunplus 7-1:0.0: probe with driver sunplus failed with error -32 [ 1932.934805][T18337] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1933.093529][T18337] usb 5-1: Using ep0 maxpacket: 8 [ 1933.709533][T18337] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1933.736340][T18337] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1933.749999][T18337] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1933.783745][T18337] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1933.802429][T18337] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1933.849163][T18337] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1933.869911][T18337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1934.450205][ T24] usb 7-1: USB disconnect, device number 81 [ 1934.487062][T26754] random: crng reseeded on system resumption [ 1934.652058][T18337] usb 5-1: GET_CAPABILITIES returned 0 [ 1934.658500][T18337] usbtmc 5-1:16.0: can't read capabilities [ 1935.534307][T14952] usb 5-1: USB disconnect, device number 2 [ 1935.666287][T26770] loop5: detected capacity change from 0 to 16 [ 1935.694200][T26770] erofs (device loop5): mounted with root inode @ nid 36. [ 1935.864606][T26775] erofs (device loop5): read error -117 @ 8200 of nid 36 [ 1935.864844][ T24] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1936.073718][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1936.149254][ T24] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1936.160160][ T24] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1936.256452][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1936.337132][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1936.370895][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1936.385992][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1936.403750][ T24] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1936.427931][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1936.461648][ T24] usb 7-1: config 0 descriptor?? [ 1937.625472][T26798] random: crng reseeded on system resumption [ 1937.863813][T18337] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1938.074093][T18337] usb 5-1: Using ep0 maxpacket: 32 [ 1938.143031][T18337] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1938.226976][T18337] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1938.282483][T18337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1938.356082][T18337] usb 5-1: config 0 descriptor?? [ 1939.193926][ T24] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 82 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1939.229087][T26817] fuse: Unknown parameter '00000000000000000003¡ßn¢¿Ÿ™–3ºXY¾"k\· L»÷ZÿêXû̼Îó}Yáwñ©—h™÷aÐáñÜZ<±‹gЀÈÊÅÒÅKwœ¼(‚»²—«dHjÌ*»…—”ª' [ 1939.230816][ T24] usb 7-1: USB disconnect, device number 82 [ 1939.258705][ T24] usblp0: removed [ 1939.386740][T26823] loop7: detected capacity change from 0 to 128 [ 1939.503636][T26823] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1939.526554][T26823] ext4 filesystem being mounted at /417/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1939.762780][ T24] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1940.351179][T19110] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1940.440783][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1940.483177][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1940.762836][T26836] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5976'. [ 1940.783648][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1940.826533][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1940.888620][T10571] usb 5-1: USB disconnect, device number 3 [ 1940.923123][ T24] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1940.972234][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1941.041149][ T24] usb 7-1: config 0 descriptor?? [ 1941.092528][T26845] bridge_slave_0: default FDB implementation only supports local addresses [ 1941.106978][T26845] random: crng reseeded on system resumption [ 1941.334495][T10571] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1941.422261][T26850] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3751145815 (480146664320 ns) > initial count (329410449792 ns). Using initial count to start timer. [ 1941.503846][T10571] usb 5-1: device descriptor read/64, error -71 [ 1941.512870][ T24] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1941.542134][ T24] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1941.565933][ T24] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1941.577541][ T24] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1941.586035][ T24] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1941.598987][ T24] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1941.609413][ T24] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1941.621191][ T24] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1941.630156][ T24] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1941.641311][ T24] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1941.650263][ T24] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1941.660121][ T24] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1941.669665][ T24] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1941.682746][ T24] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1941.691431][ T24] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1941.701393][ T24] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1941.715185][ T24] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1941.726564][ T24] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1941.741893][ T24] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1941.750903][ T24] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1941.760602][ T24] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1941.769413][ T24] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1941.779591][T10571] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1941.789899][ T24] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1941.798567][ T24] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1941.807778][ T24] microsoft 0003:045E:07DA.0019: No inputs registered, leaving [ 1941.819647][ T24] microsoft 0003:045E:07DA.0019: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1941.833883][ T24] microsoft 0003:045E:07DA.0019: no inputs found [ 1941.841225][ T24] microsoft 0003:045E:07DA.0019: could not initialize ff, continuing anyway [ 1941.864271][ T24] usb 7-1: USB disconnect, device number 83 [ 1941.913917][T10571] usb 5-1: device descriptor read/64, error -71 [ 1942.152504][T10571] usb usb5-port1: attempt power cycle [ 1942.517461][T10571] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1942.794298][T10571] usb 5-1: device descriptor read/8, error -71 [ 1943.065816][T10571] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1944.353780][T10571] usb 5-1: device descriptor read/8, error -71 [ 1944.481921][T10571] usb usb5-port1: unable to enumerate USB device [ 1945.162390][T26900] : renamed from bond0 (while UP) [ 1945.326119][T26901] loop6: detected capacity change from 0 to 1024 [ 1946.026805][T26901] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1946.042055][T26901] ext4 filesystem being mounted at /474/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1946.815131][T18519] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1947.233928][T18337] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1947.962076][T18337] usb 6-1: device descriptor read/64, error -71 [ 1948.293509][ T24] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1949.023492][T18337] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1949.093676][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1949.114411][ T24] usb 7-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1949.163536][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1949.176802][ T24] usb 7-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1949.191520][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1949.207655][ T24] usb 7-1: config 0 descriptor?? [ 1949.208619][T18337] usb 6-1: device descriptor read/64, error -71 [ 1949.356419][T18337] usb usb6-port1: attempt power cycle [ 1949.723151][T18337] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1949.756669][T18337] usb 6-1: device descriptor read/8, error -71 [ 1949.832024][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 1949.839290][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1949.851106][ T24] usb 7-1: USB disconnect, device number 84 [ 1949.893612][T14952] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1950.072788][T14952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1950.096241][T14952] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1950.124879][T14952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1950.147807][T14952] usb 5-1: config 0 descriptor?? [ 1950.213725][T18337] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1950.255775][T18337] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1950.284176][T18337] usb 6-1: config 0 has no interfaces? [ 1950.292654][T18337] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1950.323451][T18337] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1950.343423][T18337] usb 6-1: Product: syz [ 1950.348169][T18337] usb 6-1: Manufacturer: syz [ 1950.374902][T18337] usb 6-1: config 0 descriptor?? [ 1950.383252][T14952] usbhid 5-1:0.0: can't add hid device: -71 [ 1950.389483][T14952] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1950.419421][T14952] usb 5-1: USB disconnect, device number 8 [ 1950.631814][T18337] usb 6-1: USB disconnect, device number 112 [ 1950.921575][T14952] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1951.314155][T14952] usb 5-1: Using ep0 maxpacket: 32 [ 1951.537121][T14952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1951.630798][T14952] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1951.663567][T14952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1951.685264][T14952] usb 5-1: config 0 descriptor?? [ 1951.697621][T14952] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1951.728737][T14952] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1951.831283][T26955] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6014'. [ 1951.843117][T26955] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6014'. [ 1952.148773][T14952] usb 5-1: USB disconnect, device number 9 [ 1952.762748][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 1952.774727][T14952] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1952.819560][T26965] kvm: pic: non byte read [ 1952.917012][T26965] kvm: pic: level sensitive irq not supported [ 1952.917150][T26965] kvm: pic: non byte read [ 1952.933923][T26965] kvm: pic: level sensitive irq not supported [ 1952.933980][T26965] kvm: pic: non byte read [ 1954.283564][T18337] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1954.506262][T18337] usb 6-1: Using ep0 maxpacket: 32 [ 1954.557199][T18337] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1954.627592][T18337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1954.652578][T18337] usb 6-1: Product: syz [ 1954.663421][T18337] usb 6-1: Manufacturer: syz [ 1954.679980][T18337] usb 6-1: SerialNumber: syz [ 1954.714416][T18337] usb 6-1: config 0 descriptor?? [ 1954.943426][T18337] snd-usb-6fire 6-1:0.0: unknown device firmware state received from device: [ 1954.954657][ T5923] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1954.979201][T18337] eb 9a 47 80 9b f8 7a f0 [ 1954.995818][T18337] snd-usb-6fire 6-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 1955.172143][T26993] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6026'. [ 1955.195206][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1955.243711][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1955.243851][T26993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6026'. [ 1955.277450][ T5923] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1955.300323][ T5923] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1955.333949][ T5923] usb 5-1: Manufacturer: syz [ 1955.369069][ T5923] usb 5-1: config 0 descriptor?? [ 1955.418845][T18337] usb 6-1: USB disconnect, device number 113 [ 1955.810942][ T5923] usbhid 5-1:0.0: can't add hid device: -71 [ 1955.903636][ T5923] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1955.904699][T18337] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1955.924896][ T5923] usb 5-1: USB disconnect, device number 10 [ 1956.104117][T18337] usb 7-1: Using ep0 maxpacket: 32 [ 1956.163553][T14952] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1956.173128][T18337] usb 7-1: no configurations [ 1956.183399][T18337] usb 7-1: can't read configurations, error -22 [ 1956.324054][T18337] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1956.380041][T14952] usb 2-1: config 0 has no interfaces? [ 1956.394249][T14952] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1956.460767][T14952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1956.490814][T14952] usb 2-1: Product: syz [ 1956.506009][T14952] usb 2-1: Manufacturer: syz [ 1956.512528][T14952] usb 2-1: SerialNumber: syz [ 1956.539763][T18337] usb 7-1: Using ep0 maxpacket: 32 [ 1956.575662][T18337] usb 7-1: no configurations [ 1956.614983][T14952] usb 2-1: config 0 descriptor?? [ 1956.626865][T18337] usb 7-1: can't read configurations, error -22 [ 1956.652591][T18337] usb usb7-port1: attempt power cycle [ 1957.054469][T18337] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 1957.233772][T18337] usb 7-1: Using ep0 maxpacket: 32 [ 1957.254117][T18337] usb 7-1: no configurations [ 1957.259094][T18337] usb 7-1: can't read configurations, error -22 [ 1957.398147][T18337] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 1957.584147][T18337] usb 7-1: Using ep0 maxpacket: 32 [ 1957.590224][T18337] usb 7-1: no configurations [ 1957.594962][T18337] usb 7-1: can't read configurations, error -22 [ 1957.602002][T18337] usb usb7-port1: unable to enumerate USB device [ 1957.631395][T27025] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6039'. [ 1957.645794][T27025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6039'. [ 1959.259807][T18337] usb 2-1: USB disconnect, device number 104 [ 1959.803817][ T5923] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1960.093774][T18337] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1960.095990][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1960.118387][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1960.679841][ T5923] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1960.709047][ T5923] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1960.727810][ T5923] usb 5-1: Manufacturer: syz [ 1960.855341][ T5923] usb 5-1: config 0 descriptor?? [ 1960.863449][T18337] usb 6-1: Using ep0 maxpacket: 32 [ 1960.878994][T18337] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1960.911962][T18337] usb 6-1: config 0 has no interface number 0 [ 1960.948909][T18337] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1960.976598][T18337] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1960.993607][T18337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.031929][T18337] usb 6-1: Product: syz [ 1961.053677][T18337] usb 6-1: Manufacturer: syz [ 1961.089075][T18337] usb 6-1: SerialNumber: syz [ 1961.111306][T18337] usb 6-1: config 0 descriptor?? [ 1961.289080][ T5923] usbhid 5-1:0.0: can't add hid device: -71 [ 1961.342871][ T5923] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1961.410533][ T5923] usb 5-1: USB disconnect, device number 11 [ 1961.524110][T10571] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 1961.873586][T10571] usb 7-1: Using ep0 maxpacket: 32 [ 1961.889240][T10571] usb 7-1: no configurations [ 1961.912685][T10571] usb 7-1: can't read configurations, error -22 [ 1961.970511][T27070] lo speed is unknown, defaulting to 1000 [ 1961.977677][T27070] lo speed is unknown, defaulting to 1000 [ 1961.990810][T27070] lo speed is unknown, defaulting to 1000 [ 1962.080324][T27070] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1962.233956][T27070] lo speed is unknown, defaulting to 1000 [ 1962.251701][T27070] lo speed is unknown, defaulting to 1000 [ 1962.277123][T27070] lo speed is unknown, defaulting to 1000 [ 1962.294337][T27070] lo speed is unknown, defaulting to 1000 [ 1962.311538][T27070] lo speed is unknown, defaulting to 1000 [ 1962.643796][T10571] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1962.794543][T27074] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6055'. [ 1963.043439][T10571] usb 7-1: Using ep0 maxpacket: 32 [ 1963.064058][T10571] usb 7-1: no configurations [ 1963.068945][T10571] usb 7-1: can't read configurations, error -22 [ 1963.096433][T10571] usb usb7-port1: attempt power cycle [ 1963.519819][T10571] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1963.794168][T10571] usb 7-1: Using ep0 maxpacket: 32 [ 1963.802937][T10571] usb 7-1: no configurations [ 1963.809027][T10571] usb 7-1: can't read configurations, error -22 [ 1963.867164][T18337] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1963.891782][T18337] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1964.431933][T10571] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 1964.762120][T18337] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1964.775450][T18337] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 1964.786775][T18337] usb 6-1: USB disconnect, device number 114 [ 1965.662051][T10571] usb 7-1: device descriptor read/8, error -71 [ 1965.670542][T27096] loop4: detected capacity change from 0 to 512 [ 1965.883935][T10571] usb usb7-port1: unable to enumerate USB device [ 1965.922687][T27096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1965.974765][T27096] ext4 filesystem being mounted at /587/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1966.225322][T27110] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 1966.274978][T27110] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1966.310561][T27110] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.6062: Failed to acquire dquot type 0 [ 1966.332183][T10571] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1966.514669][T10571] usb 6-1: Using ep0 maxpacket: 32 [ 1966.523245][T10571] usb 6-1: config index 0 descriptor too short (expected 50356, got 796) [ 1966.544588][T10571] usb 6-1: config 41 has too many interfaces: 195, using maximum allowed: 32 [ 1966.619453][T10571] usb 6-1: config 41 has an invalid descriptor of length 0, skipping remainder of the config [ 1966.641810][T10571] usb 6-1: config 41 has 0 interfaces, different from the descriptor's value: 195 [ 1966.669497][T10571] usb 6-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 1966.681261][T10571] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1966.696431][T10571] usb 6-1: Product: syz [ 1966.709332][T10571] usb 6-1: Manufacturer: syz [ 1966.709422][T16926] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1966.722212][T10571] usb 6-1: SerialNumber: syz [ 1967.124780][T10571] usb 6-1: USB disconnect, device number 115 [ 1967.233827][T18337] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 1967.405823][T18337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1967.438758][T18337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1967.481466][T27122] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6068'. [ 1967.531487][T18337] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1967.558086][T18337] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1967.611158][T18337] usb 5-1: Manufacturer: syz [ 1967.617664][T27125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6069'. [ 1967.645333][T18337] usb 5-1: config 0 descriptor?? [ 1968.204382][T18337] usbhid 5-1:0.0: can't add hid device: -71 [ 1968.220100][T18337] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1968.841100][T18337] usb 5-1: USB disconnect, device number 12 [ 1969.145094][ T30] audit: type=1326 audit(1747984631.007:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27140 comm="syz.5.6074" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8cfa38e969 code=0x0 [ 1970.332159][T27162] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6080'. [ 1970.909636][T27172] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6082'. [ 1970.953471][T18337] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1971.153531][T18337] usb 2-1: Using ep0 maxpacket: 8 [ 1971.407911][T18337] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1971.507826][T18337] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1971.582285][T18337] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1971.640029][T18337] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1971.689286][T18337] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1971.723400][T18337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1971.966140][T18337] usb 2-1: GET_CAPABILITIES returned 0 [ 1972.001694][T18337] usbtmc 2-1:16.0: can't read capabilities [ 1972.208059][T17772] usb 2-1: USB disconnect, device number 105 [ 1972.552599][T27201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6090'. [ 1972.832253][T27208] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6092'. [ 1972.920389][T27214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6093'. [ 1973.902366][T27231] loop4: detected capacity change from 0 to 2048 [ 1973.933878][T18337] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1973.961548][T27231] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1974.134596][T18337] usb 6-1: Using ep0 maxpacket: 32 [ 1976.103632][T18337] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1976.130233][T18337] usb 6-1: config 253 has an invalid interface number: 202 but max is 0 [ 1976.139332][T18337] usb 6-1: config 253 has no interface number 0 [ 1976.179804][T18337] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1976.199608][T18337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1976.201418][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.208391][T18337] usb 6-1: Product: 橛딹醔ᢚ웊鎰≿ë›å¨“軬ꔧ趪п㪌ݓี橅৽岙㴶á±ï’’㔚䑞疟ï˜â‰»è…½æ¦…ᬷ敯ﻳ⎕赻㨟身㓢死듄ç¬æ²¤ì½¹í’­ã¾³ë‘…쥌ᶜ䂰㨴칖Ộ [ 1976.244305][T18337] usb 6-1: Manufacturer: 㙷ệ骠곿ë¨ê¾ƒë£žæ”‘î€å¦­äŒ½ç§®èƒî¿Ôžê´½ç¬ƒî‚žå¢ˆæ£†æ¹‰î¦ºì‰©ê•ˆç®¬î€¥á²±è´€ìµ’ꨗ廵ﮩ旒멗ﴞ벩央䊓啜嗄꩸矡뼵ï‘垞颼좥꯰ë”⛴랦ꯛæŠâ™ìŠ³ë¤µê†ºé›à¡ê½‚춑꾎䦯䟤顛◢러洹歆鹜ᛨᎋᅕ⎽윷뎋匙鷱ê…Ж홥ì‘삥窵鬬며ጂ⤚뾣蹗ᩆ൤斣븣⫭줳éŠê¥¥â—® [ 1976.420737][ T5925] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 1976.468775][T18337] usb 6-1: SerialNumber: 茷徇㖖஻ꄈ䄸▔䵑ï¯çµ›ï ‹á™³ê¿ˆäš­ã¨Ÿï¼ä²‹ä¦ˆä¡œâ«ªé€®ï¢“蛄㋋âŒê•¥æµ´è™šâ¬©åŽ™ä¿½í‚¥ï³¹æŸ¢æšªÊ¦é¬™ë첬䚴䨣ä¡í‘¼ê”—禺៦鿙벪훰í”ꖂ뗯매牳ç‰è§¬â¹ëˆŸï¢ªå·±Ú©ã›Žî­´ç›¦æ¯œè²±çš¤à ²â§è‘‡ [ 1977.683431][T18337] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1977.718949][T18337] usb 6-1: USB disconnect, device number 116 [ 1977.786544][T27262] netlink: 'syz.5.6106': attribute type 10 has an invalid length. [ 1977.844858][T27262] bridge0: port 2(bridge_slave_1) entered disabled state [ 1977.853881][T27262] bridge0: port 1(bridge_slave_0) entered disabled state [ 1977.871772][ T5925] usb 7-1: config 0 has no interfaces? [ 1977.968334][ T5925] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1978.003512][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1978.014037][T27262] bridge0: port 2(bridge_slave_1) entered blocking state [ 1978.021998][T27262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1978.030093][T27262] bridge0: port 1(bridge_slave_0) entered blocking state [ 1978.038242][T27262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1978.054457][T27266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6107'. [ 1978.092900][ T5925] usb 7-1: Product: syz [ 1978.106782][ T5925] usb 7-1: Manufacturer: syz [ 1978.111503][ T5925] usb 7-1: SerialNumber: syz [ 1978.141543][ T5925] usb 7-1: config 0 descriptor?? [ 1978.167038][T27262] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1978.458547][ T5925] usb 7-1: can't set config #0, error -71 [ 1978.498329][ T5925] usb 7-1: USB disconnect, device number 93 [ 1980.251412][T18337] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1980.943435][T18337] usb 6-1: Using ep0 maxpacket: 32 [ 1980.971879][T27305] loop7: detected capacity change from 0 to 8192 [ 1980.987253][T18337] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1981.052274][T18337] usb 6-1: config 253 has an invalid interface number: 202 but max is 0 [ 1981.063429][T18337] usb 6-1: config 253 has no interface number 0 [ 1981.074520][T18337] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1981.085069][T18337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.103482][T18337] usb 6-1: Product: 橛딹醔ᢚ웊鎰≿ë›å¨“軬ꔧ趪п㪌ݓี橅৽岙㴶á±ï’’㔚䑞疟ï˜â‰»è…½æ¦…ᬷ敯ﻳ⎕赻㨟身㓢死듄ç¬æ²¤ì½¹í’­ã¾³ë‘…쥌ᶜ䂰㨴칖Ộ [ 1981.132945][T18337] usb 6-1: Manufacturer: 㙷ệ骠곿ë¨ê¾ƒë£žæ”‘î€å¦­äŒ½ç§®èƒî¿Ôžê´½ç¬ƒî‚žå¢ˆæ£†æ¹‰î¦ºì‰©ê•ˆç®¬î€¥á²±è´€ìµ’ꨗ廵ﮩ旒멗ﴞ벩央䊓啜嗄꩸矡뼵ï‘垞颼좥꯰ë”⛴랦ꯛæŠâ™ìŠ³ë¤µê†ºé›à¡ê½‚춑꾎䦯䟤顛◢러洹歆鹜ᛨᎋᅕ⎽윷뎋匙鷱ê…Ж홥ì‘삥窵鬬며ጂ⤚뾣蹗ᩆ൤斣븣⫭줳éŠê¥¥â—® [ 1981.183707][T18337] usb 6-1: SerialNumber: 茷徇㖖஻ꄈ䄸▔䵑ï¯çµ›ï ‹á™³ê¿ˆäš­ã¨Ÿï¼ä²‹ä¦ˆä¡œâ«ªé€®ï¢“蛄㋋âŒê•¥æµ´è™šâ¬©åŽ™ä¿½í‚¥ï³¹æŸ¢æšªÊ¦é¬™ë첬䚴䨣ä¡í‘¼ê”—禺៦鿙벪훰í”ꖂ뗯매牳ç‰è§¬â¹ëˆŸï¢ªå·±Ú©ã›Žî­´ç›¦æ¯œè²±çš¤à ²â§è‘‡ [ 1981.369251][T27319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6121'. [ 1981.477581][T27324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6124'. [ 1981.816521][T18337] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1981.837880][T27335] loop4: detected capacity change from 0 to 128 [ 1981.846392][ T1108] usb 6-1: Failed to submit usb control message: -71 [ 1981.886517][T27335] EXT4-fs: Ignoring removed nobh option [ 1981.901456][T18337] usb 6-1: USB disconnect, device number 117 [ 1981.908116][ T1108] usb 6-1: unable to send the bmi data to the device: -71 [ 1981.943600][ T1108] usb 6-1: unable to get target info from device [ 1981.955895][ T1108] usb 6-1: could not get target info (-71) [ 1981.962143][ T1108] usb 6-1: could not probe fw (-71) [ 1981.970760][T27335] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1981.984265][T27337] loop1: detected capacity change from 0 to 256 [ 1982.010695][T27337] exfat: Deprecated parameter 'namecase' [ 1982.045425][T27335] ext4 filesystem being mounted at /599/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1982.166508][T27337] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 1982.493736][T27337] exFAT-fs (loop1): error, in sector 160, dentry 5 should be unused, but 0xc1 [ 1982.639318][T16926] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1983.760374][T27352] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1984.023563][T14952] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1984.890007][T14952] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1984.919191][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1984.941187][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1984.962104][T14952] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1984.975984][T14952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1985.064983][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1985.099622][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1985.139475][T14952] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1985.173867][T22730] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1985.222399][T27363] lo speed is unknown, defaulting to 1000 [ 1985.425038][T27374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6137'. [ 1985.449103][T14952] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1986.806763][T14952] usb 2-1: USB disconnect, device number 106 [ 1986.957840][ T2961] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1987.075858][ T2961] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1987.236252][ T5849] Bluetooth: hci5: command tx timeout [ 1987.426160][ T2961] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1987.534225][ T2961] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1988.719389][ T2961] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1988.776730][ T2961] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1988.863796][T27415] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6148'. [ 1989.177943][T27423] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6149'. [ 1989.323845][ T5849] Bluetooth: hci5: command tx timeout [ 1989.892166][T27363] chnl_net:caif_netlink_parms(): no params data found [ 1990.159678][T27431] overlayfs: overlapping lowerdir path [ 1990.200129][T27431] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1990.830109][T27436] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1990.906153][ T2961] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1990.922865][ T2961] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1991.011352][T27441] loop5: detected capacity change from 0 to 1024 [ 1991.074520][T27441] hfsplus: xattr searching failed [ 1991.183572][ T5923] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 1991.393687][ T5849] Bluetooth: hci5: command tx timeout [ 1991.665754][ T5923] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1991.823908][T27445] bond9: entered promiscuous mode [ 1991.833657][T27445] bond9: entered allmulticast mode [ 1991.846737][T27445] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1991.957999][ T5923] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1992.004978][ T5923] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1992.055442][ T5923] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1992.140976][T27363] bridge0: port 1(bridge_slave_0) entered blocking state [ 1992.157390][T27363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1992.167338][ T5923] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1992.178496][T27363] bridge_slave_0: entered allmulticast mode [ 1992.217500][T27363] bridge_slave_0: entered promiscuous mode [ 1992.299035][T27363] bridge0: port 2(bridge_slave_1) entered blocking state [ 1992.308301][T27363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1992.332092][T27363] bridge_slave_1: entered allmulticast mode [ 1992.341469][T27363] bridge_slave_1: entered promiscuous mode [ 1992.418592][T27458] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6158'. [ 1992.807418][T27363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1992.884754][T27470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6160'. [ 1992.911011][T27363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1993.080612][T27476] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6162'. [ 1993.303279][T27363] team0: Port device team_slave_0 added [ 1993.473608][ T5849] Bluetooth: hci5: command tx timeout [ 1993.776431][ T5925] usb 7-1: USB disconnect, device number 94 [ 1994.931239][T27498] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6170'. [ 1995.007050][ T2961] team0: Port device geneve0 removed [ 1996.318337][T27513] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1996.469441][ T5923] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 1996.633455][ T5923] usb 7-1: Using ep0 maxpacket: 32 [ 1996.658640][ T5923] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1996.673742][ T5923] usb 7-1: config 253 has an invalid interface number: 202 but max is 0 [ 1996.684917][ T5923] usb 7-1: config 253 has no interface number 0 [ 1996.716531][ T5923] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1996.726410][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1996.753732][ T5923] usb 7-1: Product: 橛딹醔ᢚ웊鎰≿ë›å¨“軬ꔧ趪п㪌ݓี橅৽岙㴶á±ï’’㔚䑞疟ï˜â‰»è…½æ¦…ᬷ敯ﻳ⎕赻㨟身㓢死듄ç¬æ²¤ì½¹í’­ã¾³ë‘…쥌ᶜ䂰㨴칖Ộ [ 1996.802010][ T5923] usb 7-1: Manufacturer: 㙷ệ骠곿ë¨ê¾ƒë£žæ”‘î€å¦­äŒ½ç§®èƒî¿Ôžê´½ç¬ƒî‚žå¢ˆæ£†æ¹‰î¦ºì‰©ê•ˆç®¬î€¥á²±è´€ìµ’ꨗ廵ﮩ旒멗ﴞ벩央䊓啜嗄꩸矡뼵ï‘垞颼좥꯰ë”⛴랦ꯛæŠâ™ìŠ³ë¤µê†ºé›à¡ê½‚춑꾎䦯䟤顛◢러洹歆鹜ᛨᎋᅕ⎽윷뎋匙鷱ê…Ж홥ì‘삥窵鬬며ጂ⤚뾣蹗ᩆ൤斣븣⫭줳éŠê¥¥â—® [ 1996.855156][ T5923] usb 7-1: SerialNumber: 茷徇㖖஻ꄈ䄸▔䵑ï¯çµ›ï ‹á™³ê¿ˆäš­ã¨Ÿï¼ä²‹ä¦ˆä¡œâ«ªé€®ï¢“蛄㋋âŒê•¥æµ´è™šâ¬©åŽ™ä¿½í‚¥ï³¹æŸ¢æšªÊ¦é¬™ë첬䚴䨣ä¡í‘¼ê”—禺៦鿙벪훰í”ꖂ뗯매牳ç‰è§¬â¹ëˆŸï¢ªå·±Ú©ã›Žî­´ç›¦æ¯œè²±çš¤à ²â§è‘‡ [ 1996.888342][ T2961] bond0 (unregistering): Released all slaves [ 1996.912711][ T2961] bond1 (unregistering): Released all slaves [ 1996.962151][ T2961] bond2 (unregistering): (slave veth5): Releasing active interface [ 1996.983011][ T2961] bond2 (unregistering): Released all slaves [ 1997.001499][ T2961] bond3 (unregistering): Released all slaves [ 1997.032904][ T2961] bond4 (unregistering): (slave veth13): Releasing backup interface [ 1997.065217][ T2961] bond4 (unregistering): Released all slaves [ 1997.091101][ T2961] bond5 (unregistering): (slave veth15): Releasing active interface [ 1997.123012][ T2961] bond5 (unregistering): Released all slaves [ 1997.154306][ T2961] bond6 (unregistering): (slave veth17): Releasing active interface [ 1997.182187][ T2961] bond6 (unregistering): Released all slaves [ 1997.206272][T27363] team0: Port device team_slave_1 added [ 1997.462398][T27363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1997.472923][ T5923] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1997.473683][T27519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6175'. [ 1997.489035][ T5923] usb 7-1: USB disconnect, device number 95 [ 1997.552190][T27363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1997.626398][T27363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1997.642391][ T2986] usb 7-1: Failed to submit usb control message: -19 [ 1997.660004][ T2986] usb 7-1: unable to send the bmi data to the device: -19 [ 1997.677364][ T2986] usb 7-1: unable to get target info from device [ 1997.696924][ T2986] usb 7-1: could not get target info (-19) [ 1997.725876][ T2986] usb 7-1: could not probe fw (-19) [ 1997.744302][T27363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1997.751480][T27363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1997.824754][T27363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1998.009506][T27363] hsr_slave_0: entered promiscuous mode [ 1998.065319][T27363] hsr_slave_1: entered promiscuous mode [ 1998.074244][T27363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1998.082364][T27363] Cannot create hsr debugfs directory [ 1999.418206][T27541] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6183'. [ 1999.495824][T27544] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6184'. [ 1999.544785][T27545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6185'. [ 1999.613860][T27547] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6185'. [ 1999.626505][T27547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6185'. [ 2000.079022][T27363] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2000.109829][T27559] 9pnet_virtio: no channels available for device [ 2000.141143][T27550] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6186'. [ 2000.141217][T14952] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 2000.827700][T27557] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2000.933488][T14952] usb 7-1: Using ep0 maxpacket: 32 [ 2000.936250][T27363] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2000.947630][T14952] usb 7-1: config 0 has an invalid interface number: 96 but max is 0 [ 2000.966127][T14952] usb 7-1: config 0 has no interface number 0 [ 2000.975687][T14952] usb 7-1: config 0 interface 96 has no altsetting 0 [ 2000.988520][T14952] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b2.44 [ 2001.012538][T14952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2001.046553][T14952] usb 7-1: Product: syz [ 2001.051355][T14952] usb 7-1: Manufacturer: syz [ 2001.125764][T14952] usb 7-1: SerialNumber: syz [ 2001.138322][T14952] usb 7-1: config 0 descriptor?? [ 2001.209191][T14952] legousbtower 7-1:0.96: interrupt endpoints not found [ 2001.280672][ T2961] hsr_slave_0: left promiscuous mode [ 2001.318756][ T2961] hsr_slave_1: left promiscuous mode [ 2001.367082][ T2961] veth1_macvtap: left promiscuous mode [ 2001.374768][ T2961] veth0_macvtap: left promiscuous mode [ 2001.380869][ T2961] veth1_vlan: left promiscuous mode [ 2001.390012][ T2961] veth0_vlan: left promiscuous mode [ 2001.444817][T14952] usb 7-1: USB disconnect, device number 96 [ 2001.471376][T27570] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2001.753526][T10571] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 2002.362204][T10571] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2002.367426][T27580] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6196'. [ 2002.399823][T10571] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2002.572423][ T5849] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 2002.584619][ T5849] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 2002.647041][T10571] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2002.667725][T10571] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2002.695482][T10571] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2006.591032][T27363] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2006.599639][ T5849] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 2006.599790][ T5849] Bluetooth: hci0: Injecting HCI hardware error event [ 2006.603771][ T5849] Bluetooth: hci0: hardware error 0x00 [ 2006.636365][T27363] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2006.663293][T27592] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 2006.948262][ T5923] usb 6-1: USB disconnect, device number 118 [ 2007.021653][T27363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2007.123793][T27607] loop6: detected capacity change from 0 to 256 [ 2007.132429][T27363] 8021q: adding VLAN 0 to HW filter on device team0 [ 2007.241952][T27610] loop5: detected capacity change from 0 to 1024 [ 2007.256438][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 2007.263830][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2007.320534][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 2007.327843][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2007.935230][T27617] loop5: detected capacity change from 0 to 1024 [ 2008.248540][T27624] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6210'. [ 2008.673833][ T5849] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2009.321125][T11536] hid-generic C98F:0003:0000.001A: unknown main item tag 0x0 [ 2010.005598][T11536] hid-generic C98F:0003:0000.001A: unknown main item tag 0x0 [ 2010.039196][T11536] hid-generic C98F:0003:0000.001A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 2010.218879][T27638] bond5: entered promiscuous mode [ 2010.224361][T27638] bond5: entered allmulticast mode [ 2010.230547][T27638] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2010.320289][T27363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2010.338556][ T5925] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 2010.585111][ T5925] usb 7-1: Using ep0 maxpacket: 32 [ 2010.651383][ T5925] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 2010.713424][ T5925] usb 7-1: config 0 has no interface number 0 [ 2010.741537][ T5925] usb 7-1: config 0 interface 12 has no altsetting 0 [ 2010.779393][ T5925] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2010.820400][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2010.892573][ T5925] usb 7-1: Product: syz [ 2010.914832][ T5925] usb 7-1: Manufacturer: syz [ 2010.920009][ T5925] usb 7-1: SerialNumber: syz [ 2010.954786][ T5925] usb 7-1: config 0 descriptor?? [ 2011.102538][T27665] sd 0:0:1:0: device reset [ 2011.107625][T17772] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 2011.283938][T17772] usb 2-1: Using ep0 maxpacket: 32 [ 2011.312861][T17772] usb 2-1: config 0 has an invalid interface number: 136 but max is 0 [ 2011.325468][T17772] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2011.368577][T17772] usb 2-1: config 0 has no interface number 0 [ 2011.391158][T17772] usb 2-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 2011.422666][T17772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2011.481910][T17772] usb 2-1: config 0 descriptor?? [ 2012.134540][T17772] usb 2-1: USB disconnect, device number 107 [ 2012.627187][T27665] loop5: detected capacity change from 0 to 32768 [ 2014.392349][ T5925] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 2015.369331][ T5925] f81534 7-1:0.12: f81534_find_config_idx: read failed: -32 [ 2015.379486][ T5925] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 2015.388165][ T5925] f81534 7-1:0.12: probe with driver f81534 failed with error -32 [ 2015.757072][T27673] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6223'. [ 2015.863661][ T24] usb 7-1: USB disconnect, device number 97 [ 2016.032505][T27665] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 2016.037633][T27665] (syz.5.6221,27665,0):ocfs2_initialize_super:2229 ERROR: status = -12 [ 2016.088182][T27665] (syz.5.6221,27665,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 2017.171471][T27363] veth0_vlan: entered promiscuous mode [ 2017.209136][T27363] veth1_vlan: entered promiscuous mode [ 2017.328776][T27363] veth0_macvtap: entered promiscuous mode [ 2017.368549][T27363] veth1_macvtap: entered promiscuous mode [ 2017.417656][T27363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2017.468958][T27363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2017.504253][T27363] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2017.523968][T27363] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2017.533024][T27363] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2017.545606][ T24] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 2017.569435][T27363] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2017.734089][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2017.804423][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2017.835136][T27700] random: crng reseeded on system resumption [ 2017.849782][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2017.888316][ T24] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 2017.916433][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2017.934084][ T24] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2017.956215][ T24] usb 2-1: Manufacturer: syz [ 2018.005758][ T24] usb 2-1: config 0 descriptor?? [ 2018.515462][T27706] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2018.529059][T27706] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2018.648082][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2018.664738][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2018.722918][ T24] cougar 0003:060B:700A.001B: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 2018.916791][T27714] sd 0:0:1:0: device reset [ 2019.423673][T11536] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 2019.657460][ T24] usb 2-1: USB disconnect, device number 108 [ 2020.437466][T27714] loop6: detected capacity change from 0 to 32768 [ 2022.496462][T27714] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 2022.736656][T11536] usb 5-1: device descriptor read/all, error -71 [ 2022.937793][T18519] ocfs2: Unmounting device (7,6) on (node local) [ 2023.307543][T27746] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2023.319370][T27746] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2023.823483][T24825] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 2023.989746][T27750] loop7: detected capacity change from 0 to 32768 [ 2024.013948][T24825] usb 6-1: Using ep0 maxpacket: 32 [ 2024.025884][T27750] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.6248 (27750) [ 2024.054291][T24825] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 2024.631205][T24825] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2024.640845][T24825] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2024.650122][T24825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2024.650305][T27750] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2024.659921][T24825] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2024.680500][T24825] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2024.691725][T27750] BTRFS info (device loop7): using crc32c (crc32c-x86_64) checksum algorithm [ 2024.694256][T11536] usb 7-1: new full-speed USB device number 98 using dummy_hcd [ 2024.710537][T24825] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2024.711752][T27750] BTRFS info (device loop7): disk space caching is enabled [ 2024.728355][T24825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2024.740536][T27750] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 2024.743996][T24825] usb 6-1: config 0 descriptor?? [ 2024.865331][T27768] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2024.966690][T11536] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2024.979796][T11536] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2025.028285][T11536] usb 7-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 2025.068757][T11536] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2025.068996][ T6781] BTRFS warning (device loop7): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0x248cb7dc level 0 [ 2025.123884][T27750] BTRFS error (device loop7): failed to read chunk root [ 2025.173543][T24831] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2025.180458][T11536] usb 7-1: Manufacturer: syz [ 2025.218743][T11536] usb 7-1: config 0 descriptor?? [ 2025.450621][T24825] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 119 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2025.492567][T24831] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2025.509088][T24831] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2025.535266][T24831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2025.672224][T24831] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2025.686669][T27750] BTRFS error (device loop7): open_ctree failed: -5 [ 2025.711218][T11536] cougar 0003:060B:700A.001C: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 2025.778723][ C1] vkms_vblank_simulate: vblank timer overrun [ 2025.855275][T24831] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2025.965791][ C1] vkms_vblank_simulate: vblank timer overrun [ 2025.992907][T24831] usb 7-1: USB disconnect, device number 98 [ 2026.598737][T27795] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6257'. [ 2026.687659][ C1] vkms_vblank_simulate: vblank timer overrun [ 2026.709979][T27796] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6257'. [ 2027.033403][ C1] vkms_vblank_simulate: vblank timer overrun [ 2027.373152][T27803] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2027.385895][T27803] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2027.669706][ T5837] usb 6-1: USB disconnect, device number 119 [ 2027.680783][ T5837] usblp0: removed [ 2028.054788][T27811] ceph: No source [ 2028.187012][ T5837] usb 5-1: USB disconnect, device number 15 [ 2028.486505][T27820] loop7: detected capacity change from 0 to 2048 [ 2029.173741][T27820] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2029.532752][T27834] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2029.544238][T27834] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2029.683740][T11536] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 2029.855693][T11536] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2029.868261][T11536] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2029.881658][T11536] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 2029.891892][T11536] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2029.903550][T11536] usb 5-1: Manufacturer: syz [ 2029.910737][T11536] usb 5-1: config 0 descriptor?? [ 2029.954372][ T24] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2030.113495][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 2030.893953][ T24] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 2030.902692][ T24] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2030.961896][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2031.096469][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2031.135688][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2031.381458][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2031.396042][ T24] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2031.520528][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2031.543435][ T24] usb 2-1: config 0 descriptor?? [ 2031.619558][T11536] cougar 0003:060B:700A.001D: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 2031.631384][T27855] ceph: No source [ 2031.724838][T11536] usb 5-1: USB disconnect, device number 16 [ 2032.040898][ T24] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 109 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2033.583635][T27877] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2033.595702][T27877] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2034.111682][T27882] loop7: detected capacity change from 0 to 32768 [ 2034.967764][T27882] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode. [ 2035.044765][T24825] usb 2-1: USB disconnect, device number 109 [ 2035.078793][T24825] usblp0: removed [ 2035.241477][T19110] ocfs2: Unmounting device (7,7) on (node local) [ 2035.343677][T11536] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 2035.548574][T11536] usb 7-1: Using ep0 maxpacket: 32 [ 2035.565668][T11536] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2035.587128][T11536] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2035.601507][T11536] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2035.614559][T11536] usb 7-1: config 0 descriptor?? [ 2035.623190][T11536] hub 7-1:0.0: bad descriptor, ignoring hub [ 2035.632482][T11536] hub 7-1:0.0: probe with driver hub failed with error -5 [ 2035.643303][T11536] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 2035.719343][T27902] loop7: detected capacity change from 0 to 256 [ 2035.990774][ T5837] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2036.933591][ T5837] usb 2-1: Using ep0 maxpacket: 16 [ 2036.942385][ T5837] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2036.967262][ T5837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2037.053868][ T5837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2037.138373][ T5837] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2037.181758][ T5837] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 2037.192872][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2037.212045][ T5837] usb 2-1: config 0 descriptor?? [ 2037.224208][T27897] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2037.266191][ T5837] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input122 [ 2037.946307][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 2038.065781][ T5837] usb 2-1: USB disconnect, device number 110 [ 2038.065921][ C0] pxrc 2-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 2038.104754][ T5192] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 2038.134682][ T5192] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 2038.208055][ T24] usb 7-1: USB disconnect, device number 99 [ 2038.208282][ T5192] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 2038.218566][T27931] ceph: No source [ 2038.813580][T11536] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2038.843455][ T5837] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2038.974316][T11536] usb 5-1: Using ep0 maxpacket: 16 [ 2038.988968][T11536] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2039.010628][ T5837] usb 2-1: Using ep0 maxpacket: 16 [ 2039.023104][T11536] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2039.046190][T11536] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 2039.055594][ T5837] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2039.076009][ T5837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2039.080544][T11536] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2039.116594][ T5837] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2039.126834][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.143469][ T5837] usb 2-1: Product: syz [ 2039.150637][T11536] usb 5-1: config 0 descriptor?? [ 2039.152592][ T5837] usb 2-1: Manufacturer: syz [ 2039.214781][ T5837] usb 2-1: SerialNumber: syz [ 2039.234813][ T5837] usb 2-1: config 0 descriptor?? [ 2039.250359][ T5837] em28xx 2-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 2039.619021][T11536] hid (null): unknown global tag 0x9c [ 2039.655997][T11536] hid (null): unknown global tag 0xd [ 2039.661606][T11536] hid (null): unknown global tag 0xd [ 2039.671921][T11536] hid (null): unknown global tag 0xe [ 2039.684338][T11536] hid (null): unknown global tag 0xc [ 2039.696254][T11536] hid (null): invalid report_size 39531 [ 2039.702581][T11536] hid (null): invalid report_count 16579 [ 2039.711196][T11536] hid (null): unknown global tag 0xe [ 2039.718531][T11536] hid (null): unknown global tag 0xe [ 2039.825036][T11536] usb 5-1: string descriptor 0 read error: -71 [ 2039.885571][T11536] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 2039.897660][T11536] letsketch 0003:6161:4D15.001E: probe with driver letsketch failed with error -32 [ 2039.917491][T11536] usb 5-1: USB disconnect, device number 17 [ 2040.173522][ T5837] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 2040.337383][ T5837] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2040.357595][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2040.381159][ T5837] usb 6-1: config 0 descriptor?? [ 2040.658372][T27969] sd 0:0:1:0: device reset [ 2041.499968][T27969] loop6: detected capacity change from 0 to 32768 [ 2041.539200][ T5837] pegasus 6-1:0.0: probe with driver pegasus failed with error -32 [ 2041.556428][T24831] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2041.621974][T27969] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 2041.633424][T11536] usb 2-1: USB disconnect, device number 111 [ 2041.752217][T18519] ocfs2: Unmounting device (7,6) on (node local) [ 2042.209302][T24831] usb 5-1: Using ep0 maxpacket: 32 [ 2042.219919][T24831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2042.242178][T24831] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2042.275926][T24831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2042.292706][T24831] usb 5-1: config 0 descriptor?? [ 2042.317327][T24831] hub 5-1:0.0: bad descriptor, ignoring hub [ 2042.424663][T24831] hub 5-1:0.0: probe with driver hub failed with error -5 [ 2042.439327][T24831] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2042.623119][T27988] ceph: No source [ 2042.944203][ T24] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 2042.967723][T11536] usb 6-1: USB disconnect, device number 120 [ 2043.040861][T28003] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6316'. [ 2043.096579][T28003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6316'. [ 2043.133469][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 2043.155198][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 2043.165404][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2043.174598][ T24] usb 2-1: Product: syz [ 2043.180370][ T24] usb 2-1: Manufacturer: syz [ 2043.186144][ T24] usb 2-1: SerialNumber: syz [ 2043.198095][ T24] usb 2-1: config 0 descriptor?? [ 2043.409939][ T24] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device: [ 2043.476651][ T24] eb 9a 47 80 9b f8 7a f0 [ 2043.521836][ T24] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 2043.623863][ T5837] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 2043.813449][ T5837] usb 6-1: Using ep0 maxpacket: 32 [ 2043.902277][ T5837] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 2043.904526][T24831] usb 2-1: USB disconnect, device number 112 [ 2043.912629][ T5837] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2043.929142][ T5837] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2043.938493][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2043.948442][ T5837] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2043.959077][ T5837] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2043.974550][ T5837] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2043.986280][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2044.002685][ T5837] usb 6-1: config 0 descriptor?? [ 2044.407090][ T5837] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 121 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2044.514849][ T24] usb 5-1: USB disconnect, device number 18 [ 2045.003677][T24831] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 2045.215788][T24831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2045.227239][T24831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2045.286464][T24831] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 2045.296161][T24831] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2045.306594][T24831] usb 2-1: Manufacturer: syz [ 2045.370343][T24831] usb 2-1: config 0 descriptor?? [ 2045.858774][T24831] cougar 0003:060B:700A.001F: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 2046.128465][ T5837] usb 2-1: USB disconnect, device number 113 [ 2046.183823][T24831] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 2046.355614][T24831] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2046.367457][T24831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2046.407020][T24831] usb 7-1: config 0 descriptor?? [ 2046.556874][ T5837] usb 6-1: USB disconnect, device number 121 [ 2046.587994][ T5837] usblp0: removed [ 2047.225356][T28053] loop5: detected capacity change from 0 to 256 [ 2047.711241][T24831] pegasus 7-1:0.0: probe with driver pegasus failed with error -32 [ 2047.994138][T10571] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 2048.053158][T28061] loop7: detected capacity change from 0 to 256 [ 2048.079067][T28061] exfat: Deprecated parameter 'namecase' [ 2048.118553][T28061] exfat: Deprecated parameter 'utf8' [ 2048.177440][T28061] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 2048.307474][T10571] usb 6-1: Using ep0 maxpacket: 32 [ 2048.319207][T10571] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 2048.332185][T10571] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2048.340950][T10571] usb 6-1: Product: syz [ 2048.345330][T10571] usb 6-1: Manufacturer: syz [ 2048.349940][T10571] usb 6-1: SerialNumber: syz [ 2048.360005][T10571] usb 6-1: config 0 descriptor?? [ 2049.007347][T10571] snd-usb-6fire 6-1:0.0: unknown device firmware state received from device: [ 2049.025219][T10571] eb 9a 47 80 9b f8 7a f0 [ 2049.035029][T10571] snd-usb-6fire 6-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 2049.164279][ T5925] usb 7-1: USB disconnect, device number 100 [ 2049.209676][T10571] hid-generic C98F:0003:0000.0020: unknown main item tag 0x0 [ 2049.243887][T10571] hid-generic C98F:0003:0000.0020: unknown main item tag 0x0 [ 2049.264925][T10571] hid-generic C98F:0003:0000.0020: hidraw0: HID v0.00 Device [syz0] on syz1 [ 2049.471557][T24831] usb 6-1: USB disconnect, device number 122 [ 2050.130741][ T5925] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2050.363452][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 2050.373401][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2050.432073][ T5925] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2050.480582][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2050.540382][ T5925] usb 5-1: config 0 descriptor?? [ 2050.570228][ T5925] hub 5-1:0.0: bad descriptor, ignoring hub [ 2050.595776][ T5925] hub 5-1:0.0: probe with driver hub failed with error -5 [ 2050.640265][ T5925] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2051.103530][ T24] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 2051.313779][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 2051.322468][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2051.335696][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2051.350522][ T24] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2051.996043][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.013493][ T24] usb 7-1: Product: syz [ 2052.020205][ T24] usb 7-1: Manufacturer: syz [ 2052.094266][ T24] usb 7-1: SerialNumber: syz [ 2052.110223][ T24] usb 7-1: config 0 descriptor?? [ 2052.122000][ T24] em28xx 7-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 2052.178038][T28113] loop1: detected capacity change from 0 to 256 [ 2052.187558][T28113] exfat: Deprecated parameter 'namecase' [ 2052.198505][T28113] exfat: Deprecated parameter 'utf8' [ 2052.216463][T28113] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 2052.290959][ T24] hid-generic C98F:0003:0000.0021: unknown main item tag 0x0 [ 2052.301531][ T24] hid-generic C98F:0003:0000.0021: unknown main item tag 0x0 [ 2052.322496][ T24] hid-generic C98F:0003:0000.0021: hidraw0: HID v0.00 Device [syz0] on syz1 [ 2052.413824][T24831] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 2052.575474][T24831] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2052.586308][T24831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2052.597743][T24831] usb 6-1: config 0 descriptor?? [ 2052.675868][T11536] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2052.833608][T11536] usb 2-1: Using ep0 maxpacket: 16 [ 2052.847012][T11536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2052.861212][T11536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2052.872974][T11536] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 2052.887701][T11536] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2052.904749][ T24] usb 5-1: USB disconnect, device number 19 [ 2052.906230][T11536] usb 2-1: config 0 descriptor?? [ 2053.387322][T11536] hid (null): unknown global tag 0x9c [ 2053.396514][T11536] hid (null): global environment stack underflow [ 2053.406256][T11536] hid (null): unknown global tag 0x5a [ 2053.413109][T11536] hid (null): invalid report_size 1317873079 [ 2053.452461][T11536] hid (null): invalid report_count -1243364614 [ 2053.463527][T11536] hid (null): invalid report_size 26552 [ 2053.473087][T11536] hid (null): global environment stack underflow [ 2053.489223][T11536] hid (null): unknown global tag 0xc [ 2053.505624][T11536] hid (null): invalid report_size 39531 [ 2053.519891][T11536] hid (null): invalid report_count 16579 [ 2053.531847][T11536] hid (null): unknown global tag 0xe [ 2053.543507][T11536] hid (null): unknown global tag 0xe [ 2053.588811][T11536] usb 2-1: string descriptor 0 read error: -71 [ 2053.634063][T11536] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 2053.653082][T11536] letsketch 0003:6161:4D15.0022: probe with driver letsketch failed with error -32 [ 2053.698844][T11536] usb 2-1: USB disconnect, device number 114 [ 2053.909090][ T5837] usb 7-1: USB disconnect, device number 101 [ 2053.949367][T28131] ceph: No source [ 2053.990188][T24831] pegasus 6-1:0.0: probe with driver pegasus failed with error -32 [ 2055.104859][T28152] loop6: detected capacity change from 0 to 256 [ 2055.112574][T28152] exfat: Deprecated parameter 'namecase' [ 2055.118663][T28152] exfat: Deprecated parameter 'utf8' [ 2055.206852][T28152] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 2055.211378][ T24] usb 6-1: USB disconnect, device number 123 [ 2055.348254][ T5837] hid-generic C98F:0003:0000.0023: unknown main item tag 0x0 [ 2055.366851][ T5837] hid-generic C98F:0003:0000.0023: unknown main item tag 0x0 [ 2055.394719][ T5837] hid-generic C98F:0003:0000.0023: hidraw0: HID v0.00 Device [syz0] on syz1 [ 2055.482748][T28162] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6363'. [ 2055.532533][T28165] ceph: No source [ 2055.923586][T24831] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2056.664787][T24831] usb 2-1: Using ep0 maxpacket: 16 [ 2056.682753][T24831] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2056.697015][T24831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2056.710115][T24831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2056.733687][T24831] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2056.772682][T24831] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 2056.785240][T11536] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 2056.801227][T24831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2056.846460][T24831] usb 2-1: config 0 descriptor?? [ 2056.859075][T28170] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2056.896490][T28189] loop4: detected capacity change from 0 to 256 [ 2056.906339][T24831] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input123 [ 2056.906599][T28189] exfat: Deprecated parameter 'namecase' [ 2056.925585][T28189] exfat: Deprecated parameter 'utf8' [ 2056.997700][T28189] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 2056.999717][T11536] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2057.027151][T28193] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6376'. [ 2057.035180][T11536] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2057.066431][T11536] usb 7-1: config 0 descriptor?? [ 2057.107803][T24831] usb 2-1: USB disconnect, device number 115 [ 2057.199739][T28198] ceph: No source [ 2058.525651][T11536] pegasus 7-1:0.0: probe with driver pegasus failed with error -32 [ 2058.816292][T28226] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6389'. [ 2059.489195][T28243] loop4: detected capacity change from 0 to 1024 [ 2059.603491][ T24] usb 7-1: USB disconnect, device number 102 [ 2060.401692][T24831] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 2060.942711][T24831] usb 6-1: config 0 has no interfaces? [ 2061.122952][T28263] sd 0:0:1:0: device reset [ 2061.222134][T24831] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2061.232735][T24831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2061.241755][T24831] usb 6-1: Product: syz [ 2061.246808][T24831] usb 6-1: Manufacturer: syz [ 2061.255359][T24831] usb 6-1: SerialNumber: syz [ 2061.262267][T24831] usb 6-1: config 0 descriptor?? [ 2061.584227][T28267] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6402'. [ 2062.238249][T28279] netlink: 'syz.4.6404': attribute type 20 has an invalid length. [ 2063.130160][ T5925] usb 6-1: USB disconnect, device number 124 [ 2063.223453][ T24] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 2063.245565][T24831] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 2063.385225][ T24] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2063.400454][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2063.415322][T24831] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 2063.440731][T24831] usb 2-1: config 0 has no interface number 0 [ 2063.461027][T24831] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 2063.461782][ T24] usb 7-1: config 0 descriptor?? [ 2063.488391][T24831] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 2063.519421][T24831] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 2063.562667][T24831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2063.578694][T24831] usb 2-1: Product: syz [ 2063.584990][T24831] usb 2-1: Manufacturer: syz [ 2063.590145][T24831] usb 2-1: SerialNumber: syz [ 2063.601449][T24831] usb 2-1: config 0 descriptor?? [ 2063.621115][T24831] cypress_m8 2-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 2063.948942][T24831] usb 2-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 2064.030272][T28304] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6414'. [ 2064.097487][T10571] usb 2-1: USB disconnect, device number 116 [ 2064.157052][T10571] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 2064.168273][T10571] cypress_m8 2-1:0.35: device disconnected [ 2064.707524][ T24] pegasus 7-1:0.0: probe with driver pegasus failed with error -32 [ 2066.032459][T28330] netlink: 'syz.1.6421': attribute type 20 has an invalid length. [ 2066.073695][ T5837] usb 7-1: USB disconnect, device number 103 [ 2066.492437][T28228] Set syz1 is full, maxelem 65536 reached [ 2066.753937][T28344] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6425'. [ 2067.263593][T24831] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 2067.433783][T24831] usb 7-1: Using ep0 maxpacket: 32 [ 2067.472562][T24831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2067.543274][T24831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2067.565145][T24831] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2067.574803][T24831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2067.611378][T24831] usb 7-1: config 0 descriptor?? [ 2067.636240][T24831] hub 7-1:0.0: USB hub found [ 2067.646057][T28353] overlayfs: failed to clone lowerpath [ 2067.656065][T28353] overlayfs: failed to clone upperpath [ 2067.743793][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2067.862170][T24831] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 2067.871095][T11536] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 2068.034815][T11536] usb 6-1: Using ep0 maxpacket: 16 [ 2068.044271][T11536] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2068.057355][T11536] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2068.082849][T11536] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 2068.086224][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2068.103633][T11536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2068.114383][T24831] usbhid 7-1:0.0: can't add hid device: -71 [ 2068.121359][T24831] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2068.131436][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2068.149461][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2068.183620][ T24] usb 5-1: config 0 descriptor?? [ 2068.253231][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 2068.348120][T11536] usb 6-1: config 0 descriptor?? [ 2068.389387][T24831] usb 7-1: USB disconnect, device number 104 [ 2068.633984][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2068.677016][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 2068.694504][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2068.704585][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 2068.713097][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 2068.729923][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 2068.739529][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 2068.762909][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 2068.770024][T28368] fuse: Bad value for 'fd' [ 2068.788187][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 2068.791555][T11536] hid (null): unknown global tag 0x9c [ 2068.807277][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 2068.811087][T11536] hid (null): invalid report_size 13223 [ 2068.824303][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 2068.832845][T11536] hid (null): report_id 19427 is invalid [ 2068.838619][ T24] pwc: recv_control_msg error -32 req 02 val 2600 [ 2068.849834][T11536] hid (null): unknown global tag 0xe [ 2068.866171][T11536] hid (null): report_id 3513774235 is invalid [ 2068.866359][T28370] loop6: detected capacity change from 0 to 256 [ 2068.880650][ T24] pwc: recv_control_msg error -32 req 02 val 2900 [ 2068.883993][T11536] hid (null): unknown global tag 0xc [ 2068.894811][T28370] exfat: Deprecated parameter 'namecase' [ 2068.903868][T28370] exfat: Deprecated parameter 'utf8' [ 2068.908925][T11536] hid (null): invalid report_size 39531 [ 2068.933638][T11536] hid (null): invalid report_count 16579 [ 2068.934849][T28370] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 2068.943871][T11536] hid (null): unknown global tag 0xe [ 2068.983458][T11536] hid (null): unknown global tag 0xe [ 2069.018687][T11536] usb 6-1: string descriptor 0 read error: -71 [ 2069.067997][T11536] usb 6-1: Max retries (5) exceeded reading string descriptor 200 [ 2069.083683][T11536] letsketch 0003:6161:4D15.0024: probe with driver letsketch failed with error -32 [ 2069.094840][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 2069.106438][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 2069.113822][T11536] usb 6-1: USB disconnect, device number 125 [ 2069.121996][ T24] pwc: Registered as video103. [ 2069.152400][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input124 [ 2069.171971][ T24] usb 5-1: USB disconnect, device number 20 [ 2069.312187][T28381] loop1: detected capacity change from 0 to 1024 [ 2069.526408][T28385] overlayfs: failed to clone lowerpath [ 2069.538772][T28385] overlayfs: failed to clone upperpath [ 2069.652512][T11536] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2069.856723][T11536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2069.870603][T11536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2069.883456][T28396] loop4: detected capacity change from 0 to 256 [ 2069.902925][T28396] exfat: Deprecated parameter 'namecase' [ 2069.909461][T11536] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2069.913655][T28396] exfat: Deprecated parameter 'utf8' [ 2069.920440][T11536] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2069.939735][T28396] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 2069.959318][T11536] usb 2-1: config 0 descriptor?? [ 2070.253042][T11536] usbhid 2-1:0.0: can't add hid device: -71 [ 2070.262604][T11536] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2070.300021][T11536] usb 2-1: USB disconnect, device number 117 [ 2072.123634][T11536] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2072.283595][T11536] usb 2-1: Using ep0 maxpacket: 32 [ 2072.394147][T28417] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2072.406306][T28417] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2072.841549][ T5837] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2073.294972][T11536] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2073.302783][T11536] usb 2-1: can't read configurations, error -71 [ 2073.333549][ T5837] usb 5-1: Using ep0 maxpacket: 16 [ 2073.348214][ T5837] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2073.483960][ T5837] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2073.497834][ T5837] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2073.507651][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2073.517182][ T5837] usb 5-1: Product: syz [ 2073.521672][ T5837] usb 5-1: Manufacturer: syz [ 2073.526443][ T5837] usb 5-1: SerialNumber: syz [ 2073.543035][ T5837] usb 5-1: config 0 descriptor?? [ 2074.286062][T28427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6459'. [ 2074.336924][T28427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6459'. [ 2074.347779][T28427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6459'. [ 2074.423570][ T5837] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 2074.774106][ T5837] usb 7-1: Using ep0 maxpacket: 16 [ 2074.805428][ T5837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2074.818947][ T5837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2074.830390][ T5837] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 2074.849642][ T5837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2075.355376][ T5837] usb 7-1: config 0 descriptor?? [ 2075.502095][T11536] usb 5-1: USB disconnect, device number 21 [ 2075.643909][T28448] overlayfs: failed to clone lowerpath [ 2075.655119][T28448] overlayfs: failed to clone upperpath [ 2075.694942][T28450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6466'. [ 2075.934128][ T5837] hid (null): unknown global tag 0x9c [ 2075.940206][ T5837] hid (null): invalid report_size 13223 [ 2075.951568][ T5837] hid (null): report_id 19427 is invalid [ 2075.958508][ T5837] hid (null): unknown global tag 0xe [ 2075.966402][ T5837] hid (null): report_id 3513774235 is invalid [ 2075.974102][ T5837] hid (null): unknown global tag 0xc [ 2075.984220][ T5837] hid (null): invalid report_size 39531 [ 2075.991299][ T5837] hid (null): invalid report_count 16579 [ 2075.998997][ T5837] hid (null): unknown global tag 0xe [ 2076.007740][ T5837] hid (null): unknown global tag 0xe [ 2076.073907][T11536] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2076.156077][ T5837] usb 7-1: string descriptor 0 read error: -71 [ 2076.193860][ T5837] usb 7-1: Max retries (5) exceeded reading string descriptor 200 [ 2076.202820][ T5837] letsketch 0003:6161:4D15.0025: probe with driver letsketch failed with error -32 [ 2076.220708][ T5837] usb 7-1: USB disconnect, device number 105 [ 2076.247298][T11536] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2076.263081][T11536] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2076.280274][T11536] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2076.293154][T11536] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2076.315309][T11536] usb 5-1: config 0 descriptor?? [ 2076.623879][T11536] usbhid 5-1:0.0: can't add hid device: -71 [ 2076.658050][T11536] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2076.794162][T11536] usb 5-1: USB disconnect, device number 22 [ 2076.936307][T28468] Illegal XDP return value 4294967274 on prog (id 985) dev syz_tun, expect packet loss! [ 2077.183616][T11536] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2077.421485][T11536] usb 5-1: Using ep0 maxpacket: 32 [ 2077.437361][T11536] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2077.469427][T11536] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2077.520501][T11536] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 2077.573119][T11536] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2077.630487][T11536] usb 5-1: config 0 descriptor?? [ 2077.679005][T11536] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2077.874965][T11536] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2078.536845][T11536] usb 5-1: USB disconnect, device number 23 [ 2078.549505][T11536] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 2078.987211][T28483] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2079.000280][T28483] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2079.105521][T17772] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 2079.856064][T28485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6479'. [ 2079.938879][T17772] usb 6-1: Using ep0 maxpacket: 16 [ 2079.959669][T28487] loop4: detected capacity change from 0 to 512 [ 2079.984865][T28487] ext4: Unknown parameter 'seclabel' [ 2079.991418][T17772] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2080.003678][T17772] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2080.020790][T17772] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2080.032696][T17772] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2080.047750][T17772] usb 6-1: Product: syz [ 2080.052169][T17772] usb 6-1: Manufacturer: syz [ 2080.065558][T17772] usb 6-1: SerialNumber: syz [ 2080.092604][T17772] usb 6-1: config 0 descriptor?? [ 2080.518948][T11536] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 2080.692240][T11536] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 2080.726866][T11536] usb 5-1: config 0 has no interface number 0 [ 2080.745924][T11536] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 2080.783515][T11536] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 2080.806013][T11536] usb 5-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 2080.832159][T11536] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2080.878851][T11536] usb 5-1: Product: syz [ 2080.901405][T11536] usb 5-1: Manufacturer: syz [ 2080.926096][T11536] usb 5-1: SerialNumber: syz [ 2080.978654][T11536] usb 5-1: config 0 descriptor?? [ 2081.020414][T11536] cypress_m8 5-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 2081.037158][T28491] loop1: detected capacity change from 0 to 32768 [ 2081.289526][T28491] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6483 (28491) [ 2081.636666][T11536] usb 5-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 2081.673727][T28491] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 2081.713547][T28491] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm [ 2081.747381][T11536] usb 5-1: USB disconnect, device number 24 [ 2081.757720][T28491] BTRFS info (device loop1): using free-space-tree [ 2081.760300][T11536] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 2081.775638][T11536] cypress_m8 5-1:0.35: device disconnected [ 2081.993888][T17772] usb 6-1: USB disconnect, device number 126 [ 2082.108626][T28529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6488'. [ 2082.449918][T25398] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 2082.891394][T17772] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 2083.070423][T17772] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2083.088585][T17772] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2083.099421][T17772] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2083.143119][T17772] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2083.214795][T17772] usb 6-1: config 0 descriptor?? [ 2083.288415][T28545] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6493'. [ 2083.459106][T17772] usbhid 6-1:0.0: can't add hid device: -71 [ 2083.467682][T17772] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2083.514902][T17772] usb 6-1: USB disconnect, device number 127 [ 2084.073576][T17772] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2084.766553][T28558] tipc: Started in network mode [ 2084.796688][T28558] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 2084.803675][T17772] usb 6-1: Using ep0 maxpacket: 32 [ 2084.835835][T28558] tipc: Enabled bearer , priority 10 [ 2084.856202][T17772] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2084.883602][T17772] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2084.907249][T17772] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 2084.941283][T17772] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2084.980252][T17772] usb 6-1: config 0 descriptor?? [ 2084.998079][T17772] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2085.019690][T17772] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2085.138760][ T5925] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 2085.169006][T28564] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6501'. [ 2085.200897][T17772] usb 6-1: USB disconnect, device number 2 [ 2085.251943][T17772] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 2085.363966][ T5925] usb 7-1: Using ep0 maxpacket: 16 [ 2085.383712][ T5925] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2085.406291][ T5925] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2085.478210][ T5925] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2085.500178][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2085.523457][ T5925] usb 7-1: Product: syz [ 2085.537889][ T5925] usb 7-1: Manufacturer: syz [ 2085.551216][ T5925] usb 7-1: SerialNumber: syz [ 2085.592863][ T5925] usb 7-1: config 0 descriptor?? [ 2085.973143][T17772] tipc: Node number set to 10398378 [ 2086.278124][T28562] loop1: detected capacity change from 0 to 32768 [ 2086.298942][T28562] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6500 (28562) [ 2086.338430][T28562] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 2086.385897][T28562] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm [ 2086.436696][T28562] BTRFS info (device loop1): using free-space-tree [ 2086.460774][T28580] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6505'. [ 2086.820589][T25398] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 2088.019014][ T5837] usb 7-1: USB disconnect, device number 106 [ 2089.372486][T28633] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6514'. [ 2089.553672][T10571] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2089.578504][T28639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6518'. [ 2089.713451][T10571] usb 2-1: Using ep0 maxpacket: 16 [ 2089.727385][T10571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2089.741337][T10571] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2089.778509][T10571] usb 2-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 2089.793639][T10571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2089.816223][T10571] usb 2-1: config 0 descriptor?? [ 2090.016782][ T5837] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 2090.193625][ T5837] usb 6-1: Using ep0 maxpacket: 16 [ 2090.363275][T10571] asus 0003:0B05:18C6.0026: unknown main item tag 0x0 [ 2090.370931][T10571] asus 0003:0B05:18C6.0026: unknown main item tag 0x0 [ 2090.378104][T10571] asus 0003:0B05:18C6.0026: unknown main item tag 0x0 [ 2090.385693][ T5837] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2090.398614][T10571] asus 0003:0B05:18C6.0026: unknown main item tag 0x0 [ 2090.407576][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2090.447987][T10571] asus 0003:0B05:18C6.0026: hidraw0: USB HID vff.fd Device [HID 0b05:18c6] on usb-dummy_hcd.1-1/input0 [ 2091.014636][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2091.033460][T10571] asus 0003:0B05:18C6.0026: Asus input not registered [ 2091.041571][ T5837] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2091.060985][T10571] asus 0003:0B05:18C6.0026: probe with driver asus failed with error -12 [ 2091.084302][T10571] usb 2-1: USB disconnect, device number 120 [ 2091.093449][ T5837] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 2091.107963][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2091.124249][ T5837] usb 6-1: config 0 descriptor?? [ 2091.193668][T28642] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2091.217865][ T5837] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input126 [ 2091.419127][T24831] usb 6-1: USB disconnect, device number 3 [ 2091.577954][T28666] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6528'. [ 2091.903567][T10571] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 2092.183468][T24831] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 2092.255763][T10571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2092.270883][T10571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2092.283191][T10571] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 2092.293757][T10571] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2092.303912][T10571] usb 2-1: Manufacturer: syz [ 2092.311379][T10571] usb 2-1: config 0 descriptor?? [ 2092.885364][T24831] usb 7-1: Using ep0 maxpacket: 16 [ 2092.893718][T24831] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2092.923706][T24831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2093.023134][T10571] cougar 0003:060B:700A.0027: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 2093.053518][T24831] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2093.062638][T24831] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2093.101856][T24831] usb 7-1: Product: syz [ 2093.136574][T24831] usb 7-1: Manufacturer: syz [ 2093.142500][T24831] usb 7-1: SerialNumber: syz [ 2093.145038][T10571] usb 2-1: USB disconnect, device number 121 [ 2093.204602][T24831] usb 7-1: config 0 descriptor?? [ 2093.244598][T24831] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2093.426527][T24831] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 2093.866030][T10571] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 2094.525130][T24831] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 2094.633786][T10571] usb 6-1: Using ep0 maxpacket: 32 [ 2094.641641][T24831] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 2094.712418][T10571] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 2094.743848][T10571] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2094.752909][T10571] usb 6-1: Product: syz [ 2094.758077][T10571] usb 6-1: Manufacturer: syz [ 2094.774263][T10571] usb 6-1: SerialNumber: syz [ 2094.803059][T10571] usb 6-1: config 0 descriptor?? [ 2094.920824][T24831] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 2094.938659][T24831] em28xx 7-1:0.0: No AC97 audio processor [ 2095.026917][T10571] snd-usb-6fire 6-1:0.0: unknown device firmware state received from device: [ 2095.069592][T10571] eb 9a 47 80 9b f8 7a f0 [ 2095.104527][T10571] snd-usb-6fire 6-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 2095.411805][T10571] usb 6-1: USB disconnect, device number 4 [ 2096.744862][T11536] usb 7-1: USB disconnect, device number 107 [ 2096.784052][T11536] em28xx 7-1:0.0: Disconnecting em28xx [ 2096.850925][T11536] em28xx 7-1:0.0: Freeing device [ 2097.261280][T10571] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2097.963597][T10571] usb 5-1: Using ep0 maxpacket: 16 [ 2097.974146][T10571] usb 5-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 2097.988534][T10571] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2098.002568][T10571] usb 5-1: Product: syz [ 2098.007008][T10571] usb 5-1: Manufacturer: syz [ 2098.013773][T10571] usb 5-1: SerialNumber: syz [ 2098.074409][T10571] usb 5-1: config 0 descriptor?? [ 2098.415891][T10571] usb 5-1: can't set first interface for hiFace device. [ 2098.423132][T10571] snd-usb-hiface 5-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 2098.542756][T10571] usb 5-1: USB disconnect, device number 25 [ 2098.551125][T28731] infiniband syz!: set down [ 2098.604319][T28731] infiniband syz!: added team_slave_0 [ 2098.710042][T28731] syz!: rxe_create_cq: returned err = -12 [ 2098.757673][T28731] infiniband syz!: Couldn't create ib_mad CQ [ 2098.824161][T28731] infiniband syz!: Couldn't open port 1 [ 2099.085934][T28752] loop6: detected capacity change from 0 to 32768 [ 2099.094172][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.162276][T28731] RDS/IB: syz!: added [ 2099.212907][T28752] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 2099.378227][T28731] smc: adding ib device syz! with port count 1 [ 2100.114215][T28731] smc: ib device syz! port 1 has pnetid [ 2100.159507][T18519] (syz-executor,18519,1):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 72 [ 2100.231646][T18519] ocfs2: Unmounting device (7,6) on (node local) [ 2100.414015][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2100.586862][T24825] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2100.597818][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 2100.635124][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2100.673439][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2100.733060][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2100.768293][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2100.783604][T24825] usb 2-1: Using ep0 maxpacket: 16 [ 2100.784377][ T24] usb 5-1: config 0 descriptor?? [ 2100.808043][T24825] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2100.827688][ T24] hub 5-1:0.0: USB hub found [ 2100.856891][T24825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2100.917715][T24825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2100.942959][T24825] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 2100.971167][T24825] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 2100.991387][T24825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2101.047541][ T24] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2101.048438][T24825] usb 2-1: config 0 descriptor?? [ 2101.062647][T28762] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2101.173455][T10571] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 2101.333543][T10571] usb 7-1: Using ep0 maxpacket: 16 [ 2101.340842][T28767] loop5: detected capacity change from 0 to 32768 [ 2101.354464][T10571] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2101.372907][T24825] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input127 [ 2101.377557][T10571] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2101.409150][T28767] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 2101.450502][T10571] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2101.461312][T28767] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 2101.461312][T28767] allowing incompatible features above 0.0: (unknown version) [ 2101.461312][T28767] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 2101.461706][T28767] bcachefs (loop5): initializing new filesystem [ 2101.520916][T28767] bcachefs (loop5): going read-write [ 2101.562267][ T24] usbhid 5-1:0.0: can't add hid device: -32 [ 2101.569513][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 2101.593124][T24825] usb 2-1: USB disconnect, device number 122 [ 2101.602551][ T5192] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 2101.645505][T10571] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2101.670394][ T24] usb 5-1: USB disconnect, device number 26 [ 2101.683857][T10571] usb 7-1: Product: syz [ 2101.692163][T10571] usb 7-1: Manufacturer: syz [ 2101.693711][T28778] ODEBUG: object ffffc9000c1afb90 is on stack ffffc9000c1a8000, but NOT annotated. [ 2101.700175][T28778] [ 2101.700191][T28778] ====================================================== [ 2101.700199][T28778] WARNING: possible circular locking dependency detected [ 2101.700214][T28778] 6.15.0-rc7-next-20250522-syzkaller #0 Not tainted [ 2101.700225][T28778] ------------------------------------------------------ [ 2101.700233][T28778] bch-copygc/loop/28778 is trying to acquire lock: [ 2101.700244][T28778] ffffffff8e133280 (console_owner){-.-.}-{0:0}, at: vprintk_emit+0x444/0x7a0 [ 2101.700291][T28778] [ 2101.700291][T28778] but task is already holding lock: [ 2101.700296][T28778] ffffffff99d4b7d8 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x85/0x3c0 [ 2101.700337][T28778] [ 2101.700337][T28778] which lock already depends on the new lock. [ 2101.700337][T28778] [ 2101.700344][T28778] [ 2101.700344][T28778] the existing dependency chain (in reverse order) is: [ 2101.700351][T28778] [ 2101.700351][T28778] -> #3 (&obj_hash[i].lock){-.-.}-{2:2}: [ 2101.700371][T28778] lock_acquire+0x120/0x360 [ 2101.700391][T28778] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2101.700412][T28778] debug_check_no_obj_freed+0x17a/0x470 [ 2101.700433][T28778] __free_frozen_pages+0x509/0xe70 [ 2101.700450][T28778] stack_depot_save_flags+0x445/0x900 [ 2101.700465][T28778] kasan_save_track+0x4f/0x80 [ 2101.700486][T28778] __kasan_kmalloc+0x93/0xb0 [ 2101.700499][T28778] __kmalloc_noprof+0x27a/0x4f0 [ 2101.700513][T28778] __tty_buffer_request_room+0x1c8/0x520 [ 2101.700534][T28778] __tty_insert_flip_string_flags+0xb8/0x430 [ 2101.700562][T28778] tty_insert_flip_string_and_push_buffer+0xa3/0x1f0 [ 2101.700583][T28778] pty_write+0xa7/0xe0 [ 2101.700598][T28778] tty_put_char+0x10e/0x160 [ 2101.700618][T28778] __process_echoes+0x193/0xa20 [ 2101.700631][T28778] n_tty_receive_char_flow_ctrl+0x1b0/0x280 [ 2101.700648][T28778] n_tty_receive_buf_standard+0x614/0x5150 [ 2101.700663][T28778] n_tty_receive_buf_common+0xab3/0x12f0 [ 2101.700678][T28778] tty_port_default_receive_buf+0x6e/0xa0 [ 2101.700697][T28778] flush_to_ldisc+0x2c2/0x810 [ 2101.700716][T28778] process_scheduled_works+0xade/0x17b0 [ 2101.700737][T28778] worker_thread+0x8a0/0xda0 [ 2101.700750][T28778] kthread+0x711/0x8a0 [ 2101.700765][T28778] ret_from_fork+0x3fc/0x770 [ 2101.700783][T28778] ret_from_fork_asm+0x1a/0x30 [ 2101.700800][T28778] [ 2101.700800][T28778] -> #2 (&port->lock#2){-.-.}-{3:3}: [ 2101.700825][T28778] lock_acquire+0x120/0x360 [ 2101.700843][T28778] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2101.700862][T28778] tty_port_default_wakeup+0x21/0xf0 [ 2101.700881][T28778] serial8250_tx_chars+0x72e/0x970 [ 2101.700900][T28778] serial8250_handle_irq+0x633/0xbb0 [ 2101.700918][T28778] serial8250_default_handle_irq+0xbf/0x1b0 [ 2101.700939][T28778] serial8250_interrupt+0xa2/0x1d0 [ 2101.700954][T28778] __handle_irq_event_percpu+0x28c/0x980 [ 2101.700971][T28778] handle_irq_event+0x8b/0x1e0 [ 2101.700986][T28778] handle_edge_irq+0x267/0x9c0 [ 2101.701001][T28778] __common_interrupt+0x140/0x250 [ 2101.701020][T28778] common_interrupt+0xb6/0xe0 [ 2101.701037][T28778] asm_common_interrupt+0x26/0x40 [ 2101.701052][T28778] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 2101.701071][T28778] uart_port_unlock_deref+0x111/0x2f0 [ 2101.701089][T28778] uart_write+0xe8/0x130 [ 2101.701105][T28778] n_tty_write+0xd32/0x11d0 [ 2101.701118][T28778] file_tty_write+0x501/0x990 [ 2101.701134][T28778] vfs_write+0x548/0xa90 [ 2101.701147][T28778] ksys_write+0x145/0x250 [ 2101.701159][T28778] do_syscall_64+0xfa/0x3b0 [ 2101.701174][T28778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2101.701188][T28778] [ 2101.701188][T28778] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 2101.701209][T28778] lock_acquire+0x120/0x360 [ 2101.701227][T28778] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2101.701246][T28778] serial8250_console_write+0x17e/0x1ba0 [ 2101.701265][T28778] console_flush_all+0x728/0xc40 [ 2101.701280][T28778] console_unlock+0xc4/0x270 [ 2101.701293][T28778] vprintk_emit+0x5b7/0x7a0 [ 2101.701312][T28778] _printk+0xcf/0x120 [ 2101.701326][T28778] register_console+0xa8b/0xf90 [ 2101.701341][T28778] univ8250_console_init+0x52/0x90 [ 2101.701362][T28778] console_init+0x1a1/0x670 [ 2101.701382][T28778] start_kernel+0x2cc/0x500 [ 2101.701400][T28778] x86_64_start_reservations+0x24/0x30 [ 2101.701414][T28778] x86_64_start_kernel+0x143/0x1c0 [ 2101.701434][T28778] common_startup_64+0x13e/0x147 [ 2101.701450][T28778] [ 2101.701450][T28778] -> #0 (console_owner){-.-.}-{0:0}: [ 2101.701470][T28778] validate_chain+0xb9b/0x2140 [ 2101.701483][T28778] __lock_acquire+0xab9/0xd20 [ 2101.701502][T28778] lock_acquire+0x120/0x360 [ 2101.701519][T28778] vprintk_emit+0x460/0x7a0 [ 2101.701533][T28778] _printk+0xcf/0x120 [ 2101.701551][T28778] __debug_object_init+0x2c8/0x3c0 [ 2101.701570][T28778] rhashtable_init_noprof+0x7c0/0xbb0 [ 2101.701587][T28778] bch2_copygc_thread+0x116/0xdc0 [ 2101.701605][T28778] kthread+0x711/0x8a0 [ 2101.701619][T28778] ret_from_fork+0x3fc/0x770 [ 2101.701636][T28778] ret_from_fork_asm+0x1a/0x30 [ 2101.701651][T28778] [ 2101.701651][T28778] other info that might help us debug this: [ 2101.701651][T28778] [ 2101.701658][T28778] Chain exists of: [ 2101.701658][T28778] console_owner --> &port->lock#2 --> &obj_hash[i].lock [ 2101.701658][T28778] [ 2101.701686][T28778] Possible unsafe locking scenario: [ 2101.701686][T28778] [ 2101.701692][T28778] CPU0 CPU1 [ 2101.701698][T28778] ---- ---- [ 2101.701704][T28778] lock(&obj_hash[i].lock); [ 2101.701715][T28778] lock(&port->lock#2); [ 2101.701730][T28778] lock(&obj_hash[i].lock); [ 2101.701742][T28778] lock(console_owner); [ 2101.701753][T28778] [ 2101.701753][T28778] *** DEADLOCK *** [ 2101.701753][T28778] [ 2101.701758][T28778] 1 lock held by bch-copygc/loop/28778: [ 2101.701769][T28778] #0: ffffffff99d4b7d8 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x85/0x3c0 [ 2101.701810][T28778] [ 2101.701810][T28778] stack backtrace: [ 2101.701821][T28778] CPU: 0 UID: 0 PID: 28778 Comm: bch-copygc/loop Not tainted 6.15.0-rc7-next-20250522-syzkaller #0 PREEMPT(full) [ 2101.701840][T28778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2101.701852][T28778] Call Trace: [ 2101.701859][T28778] [ 2101.701869][T28778] dump_stack_lvl+0x189/0x250 [ 2101.701886][T28778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2101.701901][T28778] ? __pfx__printk+0x10/0x10 [ 2101.701918][T28778] ? print_lock_name+0xde/0x100 [ 2101.701935][T28778] print_circular_bug+0x2ee/0x310 [ 2101.701953][T28778] check_noncircular+0x134/0x160 [ 2101.701971][T28778] validate_chain+0xb9b/0x2140 [ 2101.701995][T28778] __lock_acquire+0xab9/0xd20 [ 2101.702018][T28778] ? vprintk_emit+0x444/0x7a0 [ 2101.702031][T28778] lock_acquire+0x120/0x360 [ 2101.702051][T28778] ? vprintk_emit+0x444/0x7a0 [ 2101.702069][T28778] ? do_raw_spin_unlock+0x122/0x240 [ 2101.702086][T28778] ? vprintk_emit+0x444/0x7a0 [ 2101.702101][T28778] vprintk_emit+0x460/0x7a0 [ 2101.702115][T28778] ? vprintk_emit+0x444/0x7a0 [ 2101.702131][T28778] ? __pfx_vprintk_emit+0x10/0x10 [ 2101.702146][T28778] ? __lock_acquire+0xab9/0xd20 [ 2101.702169][T28778] ? do_raw_spin_lock+0x121/0x290 [ 2101.702188][T28778] _printk+0xcf/0x120 [ 2101.702206][T28778] ? __pfx__printk+0x10/0x10 [ 2101.702227][T28778] __debug_object_init+0x2c8/0x3c0 [ 2101.702250][T28778] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 2101.702271][T28778] rhashtable_init_noprof+0x7c0/0xbb0 [ 2101.702291][T28778] bch2_copygc_thread+0x116/0xdc0 [ 2101.702311][T28778] ? __lock_acquire+0xab9/0xd20 [ 2101.702335][T28778] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 2101.702379][T28778] ? __pfx_rhashtable_jhash2+0x10/0x10 [ 2101.702412][T28778] ? __kthread_parkme+0x7b/0x200 [ 2101.702427][T28778] ? __kthread_parkme+0x1a1/0x200 [ 2101.702444][T28778] kthread+0x711/0x8a0 [ 2101.702462][T28778] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 2101.702481][T28778] ? __pfx_kthread+0x10/0x10 [ 2101.702498][T28778] ? _raw_spin_unlock_irq+0x23/0x50 [ 2101.702519][T28778] ? lockdep_hardirqs_on+0x9c/0x150 [ 2101.702532][T28778] ? __pfx_kthread+0x10/0x10 [ 2101.702555][T28778] ret_from_fork+0x3fc/0x770 [ 2101.702576][T28778] ? __pfx_ret_from_fork+0x10/0x10 [ 2101.702598][T28778] ? __switch_to_asm+0x39/0x70 [ 2101.702613][T28778] ? __switch_to_asm+0x33/0x70 [ 2101.702629][T28778] ? __pfx_kthread+0x10/0x10 [ 2101.702646][T28778] ret_from_fork_asm+0x1a/0x30 [ 2101.702668][T28778] [ 2101.707309][T10571] usb 7-1: SerialNumber: syz [ 2101.709309][T28778] ------------[ cut here ]------------ [ 2102.604542][T28778] WARNING: CPU: 0 PID: 28778 at lib/debugobjects.c:655 __debug_object_init+0x2c9/0x3c0 [ 2102.614628][T28778] Modules linked in: [ 2102.618528][T28778] CPU: 0 UID: 0 PID: 28778 Comm: bch-copygc/loop Not tainted 6.15.0-rc7-next-20250522-syzkaller #0 PREEMPT(full) [ 2102.630961][T28778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2102.641484][T28778] RIP: 0010:__debug_object_init+0x2c9/0x3c0 [ 2102.648015][T28778] Code: a0 06 cc 41 ff c7 44 89 3d 64 e9 13 15 48 c7 c1 80 98 e2 8b 48 c7 c7 e0 98 e2 8b 84 c0 48 0f 45 f9 48 89 de e8 28 2c 61 fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 3a 1c 00 00 8b 05 3c 9d c6 09 3b 05 3a [ 2102.670179][T28778] RSP: 0018:ffffc9000c1af6e0 EFLAGS: 00010046 [ 2102.677902][T28778] RAX: 0000000000000050 RBX: ffffc9000c1afb90 RCX: 6af828bb87082800 [ 2102.686758][T28778] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 2102.695556][T28778] RBP: ffff88802ac69e20 R08: ffffffff8e133223 R09: 1ffffffff1c26644 [ 2102.704594][T28778] R10: dffffc0000000000 R11: fffffbfff1c26645 R12: ffff88806a9ef6e0 [ 2102.714457][T28778] R13: ffff888067844770 R14: dffffc0000000000 R15: 0000000000000001 [ 2102.722813][T28778] FS: 0000000000000000(0000) GS:ffff888125c59000(0000) knlGS:0000000000000000 [ 2102.732464][T28778] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2102.740311][T28778] CR2: 000055e148936660 CR3: 000000008427e000 CR4: 00000000003526f0 [ 2102.749715][T28778] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2102.758862][T28778] DR3: 00000000fee0000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2102.767182][T28778] Call Trace: [ 2102.770582][T28778] [ 2102.773631][T28778] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 2102.779191][T28778] rhashtable_init_noprof+0x7c0/0xbb0 [ 2102.785012][T28778] bch2_copygc_thread+0x116/0xdc0 [ 2102.790629][T28778] ? __lock_acquire+0xab9/0xd20 [ 2102.795634][T28778] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 2102.801663][T28778] ? __pfx_rhashtable_jhash2+0x10/0x10 [ 2102.807261][T28778] ? __kthread_parkme+0x7b/0x200 [ 2102.812381][T28778] ? __kthread_parkme+0x1a1/0x200 [ 2102.817533][T28778] kthread+0x711/0x8a0 [ 2102.821616][T28778] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 2102.827193][T28778] ? __pfx_kthread+0x10/0x10 [ 2102.831820][T28778] ? _raw_spin_unlock_irq+0x23/0x50 [ 2102.837064][T28778] ? lockdep_hardirqs_on+0x9c/0x150 [ 2102.842648][T28778] ? __pfx_kthread+0x10/0x10 [ 2102.847255][T28778] ret_from_fork+0x3fc/0x770 [ 2102.851942][T28778] ? __pfx_ret_from_fork+0x10/0x10 [ 2102.857061][T28778] ? __switch_to_asm+0x39/0x70 [ 2102.862113][T28778] ? __switch_to_asm+0x33/0x70 [ 2102.867267][T28778] ? __pfx_kthread+0x10/0x10 [ 2102.872163][T28778] ret_from_fork_asm+0x1a/0x30 [ 2102.877558][T28778] [ 2102.880616][T28778] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2102.888241][T28778] CPU: 0 UID: 0 PID: 28778 Comm: bch-copygc/loop Not tainted 6.15.0-rc7-next-20250522-syzkaller #0 PREEMPT(full) [ 2102.900307][T28778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2102.910581][T28778] Call Trace: [ 2102.914503][T28778] [ 2102.917527][T28778] dump_stack_lvl+0x99/0x250 [ 2102.922407][T28778] ? __asan_memcpy+0x40/0x70 [ 2102.927136][T28778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2102.932383][T28778] ? __pfx__printk+0x10/0x10 [ 2102.937078][T28778] panic+0x2db/0x790 [ 2102.941114][T28778] ? __pfx_panic+0x10/0x10 [ 2102.945805][T28778] ? show_trace_log_lvl+0x4fb/0x550 [ 2102.952094][T28778] ? ret_from_fork_asm+0x1a/0x30 [ 2102.957580][T28778] __warn+0x31b/0x4b0 [ 2102.961754][T28778] ? __debug_object_init+0x2c9/0x3c0 [ 2102.967156][T28778] ? __debug_object_init+0x2c9/0x3c0 [ 2102.972593][T28778] report_bug+0x2be/0x4f0 [ 2102.977148][T28778] ? __debug_object_init+0x2c9/0x3c0 [ 2102.982557][T28778] ? __debug_object_init+0x2c9/0x3c0 [ 2102.988902][T28778] ? __debug_object_init+0x2cb/0x3c0 [ 2102.994834][T28778] handle_bug+0x84/0x160 [ 2102.999619][T28778] exc_invalid_op+0x1a/0x50 [ 2103.004260][T28778] asm_exc_invalid_op+0x1a/0x20 [ 2103.009337][T28778] RIP: 0010:__debug_object_init+0x2c9/0x3c0 [ 2103.015412][T28778] Code: a0 06 cc 41 ff c7 44 89 3d 64 e9 13 15 48 c7 c1 80 98 e2 8b 48 c7 c7 e0 98 e2 8b 84 c0 48 0f 45 f9 48 89 de e8 28 2c 61 fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 3a 1c 00 00 8b 05 3c 9d c6 09 3b 05 3a [ 2103.035756][T28778] RSP: 0018:ffffc9000c1af6e0 EFLAGS: 00010046 [ 2103.041965][T28778] RAX: 0000000000000050 RBX: ffffc9000c1afb90 RCX: 6af828bb87082800 [ 2103.050657][T28778] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 2103.059128][T28778] RBP: ffff88802ac69e20 R08: ffffffff8e133223 R09: 1ffffffff1c26644 [ 2103.067212][T28778] R10: dffffc0000000000 R11: fffffbfff1c26645 R12: ffff88806a9ef6e0 [ 2103.075362][T28778] R13: ffff888067844770 R14: dffffc0000000000 R15: 0000000000000001 [ 2103.083633][T28778] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 2103.089256][T28778] rhashtable_init_noprof+0x7c0/0xbb0 [ 2103.095697][T28778] bch2_copygc_thread+0x116/0xdc0 [ 2103.100815][T28778] ? __lock_acquire+0xab9/0xd20 [ 2103.105671][T28778] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 2103.111232][T28778] ? __pfx_rhashtable_jhash2+0x10/0x10 [ 2103.116784][T28778] ? __kthread_parkme+0x7b/0x200 [ 2103.121717][T28778] ? __kthread_parkme+0x1a1/0x200 [ 2103.126743][T28778] kthread+0x711/0x8a0 [ 2103.130835][T28778] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 2103.136406][T28778] ? __pfx_kthread+0x10/0x10 [ 2103.141225][T28778] ? _raw_spin_unlock_irq+0x23/0x50 [ 2103.146501][T28778] ? lockdep_hardirqs_on+0x9c/0x150 [ 2103.151721][T28778] ? __pfx_kthread+0x10/0x10 [ 2103.156307][T28778] ret_from_fork+0x3fc/0x770 [ 2103.160915][T28778] ? __pfx_ret_from_fork+0x10/0x10 [ 2103.166052][T28778] ? __switch_to_asm+0x39/0x70 [ 2103.170815][T28778] ? __switch_to_asm+0x33/0x70 [ 2103.175575][T28778] ? __pfx_kthread+0x10/0x10 [ 2103.180254][T28778] ret_from_fork_asm+0x1a/0x30 [ 2103.185017][T28778] [ 2103.188420][T28778] Kernel Offset: disabled [ 2103.192760][T28778] Rebooting in 86400 seconds..