last executing test programs: 19.755445202s ago: executing program 2 (id=2688): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000780)={0x0, 0xf0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x33, 0x1, 0x70bd2b, 0x25dbdbfe, {0x4}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x5, 0x0, 0x0, @uid}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) 17.296377619s ago: executing program 0 (id=2692): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xa000, 0x0, 0x0, 0x0, 0x3ff, 0x801}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 17.295462846s ago: executing program 2 (id=2693): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r2 = syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0x0, 0x13090, 0x0, 0x71}, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) 15.539221381s ago: executing program 0 (id=2695): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000880)='./file0\x00', 0x0) 13.950241986s ago: executing program 0 (id=2699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}]}, 0x4c}}, 0x4004804) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x254, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r4 = msgget$private(0x0, 0x20) msgsnd(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000800000"], 0x8, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b200090585"], 0x0) socket(0x2, 0x80805, 0x0) 13.907471594s ago: executing program 2 (id=2700): pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'geneve0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb188a884d788a89806112405ce811cc3", 0x25, 0x40091, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) read$FUSE(r3, &(0x7f0000002280)={0x2020}, 0x2020) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r1, 0x0, 0x0, 0x800) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x15, 0x43, 0x3c, 0x40, 0x4cb, 0x12d, 0xaa5d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2c, 0x0, 0x0, 0x57, 0x2d, 0xed}}]}}]}}, 0x0) sendmmsg$alg(r7, 0x0, 0x0, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) write$sysctl(0xffffffffffffffff, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x141141, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 9.738575789s ago: executing program 3 (id=2707): mkdir(&(0x7f0000000540)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) setsockopt(0xffffffffffffffff, 0xa, 0x14f, &(0x7f0000000500), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x800074, 0x161341) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x500000, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000200)={0x4065}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f0000000180), 0x0, 0x7f) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000240), 0x4) sched_setattr(0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x84880) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r4, 0x0, 0x43) close_range(r3, 0xffffffffffffffff, 0x0) r5 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x80, 0x80, 0xf7, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x3, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x0, 0x9, 0x3}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x69, &(0x7f0000000580)={0x5, 0xf, 0x69, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "ecb8a743ccba37dee16a16efe16a9f87"}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x2, 0x0, 0x9, [0x0, 0x0, 0xfffe87]}, @ssp_cap={0x24, 0x10, 0xa, 0x14, 0x6, 0x1, 0xf, 0x6, [0xff0f, 0xc000, 0x1f80, 0xc000, 0xf, 0xffcf]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "eb73c8e60842e6c212d33cd03a6cfa13"}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x41d}}, {0x0, 0x0}, {0xe5, &(0x7f0000000380)=@string={0xe5, 0x3, "cbbb816b535518f7f2f939685108430eaac50fd29b22b6f8c5005fb105dff7939f6d7037e3943e2157f3425ac25fdb4fb49d07260078ad73ba7d3262018f40e36e07e16037c0cbf3faa14f9e4ef4d6bce44e8c1339e1939b2401215f78f3fd5b5c4a4496a89c7ec8ad75c4175d3261b051ad5840b955301a03da56444bb09eca0844db76bbda222be73ad73f152a27dd6b5e08583314aa41ea528220eee1eb90ee6f593d0d807b5c5ea3b8ac75a8ab70f25174cd0bd6a62ea716c49ed88b14c1b79ee799005a53eb0dd8f398df3b6dad9cda1723a1fce13f96f8e91f9e8ed7a274fbc7"}}, {0x58, &(0x7f00000002c0)=@string={0x58, 0x3, "0466cf0260e15af22d788d2dcbf68409c877debc50c26fb010cba00b4592999abb6dbde9fc76441c81993cbcf54ae654c41b42f8d3c4eb5131ede9d0c9ed995bc94910560026d798e2c7eb3855f8d4c627a9860a1d29"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x801}}, {0x102, &(0x7f0000000940)=@string={0x102, 0x3, "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"}}]}) syz_usb_control_io$printer(r5, &(0x7f0000000680)={0x14, &(0x7f0000000600)={0x40, 0xa, 0x69, {0x69, 0xf, "e1e0fd614f4ef189e09e41b4253e4cbcdabf374248ebf08aa39e5740eeffa7b1f6573099ae8b07ae296e4971512637fd85646390b2aa6e73b9bc63544fb2574d9a6821735882eb069d41333320b9c16cc66ba123a407a740844659146552fca1c1aac3cb7cbd6a"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB="20064f0000005cae6ccc8f2396d5db7a9a692300001717b817b9a4388d361ebaa460a1c853fd233413bccc9678081fd6c0b9e2e947d4416872bf13b8fee68d060c4f95b64ca89c8c1050766536e2e5a73a063dc3ea"], &(0x7f0000000740)={0x0, 0xa, 0x1, 0x11}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xc}, &(0x7f00000007c0)={0x20, 0x0, 0x19, {0x17, "16eb382f6246c4b32222674ebd1547d9e56da44d23aff2"}}, &(0x7f0000000800)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000840)={0x20, 0x0, 0x1, 0x3}}) 9.074770444s ago: executing program 2 (id=2708): pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'geneve0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb188a884d788a89806112405ce811cc3", 0x25, 0x40091, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) read$FUSE(r3, &(0x7f0000002280)={0x2020}, 0x2020) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r1, 0x0, 0x0, 0x800) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x15, 0x43, 0x3c, 0x40, 0x4cb, 0x12d, 0xaa5d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2c, 0x0, 0x0, 0x57, 0x2d, 0xed}}]}}]}}, 0x0) sendmmsg$alg(r7, 0x0, 0x0, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) write$sysctl(0xffffffffffffffff, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x141141, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 8.591173703s ago: executing program 0 (id=2711): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_usbip_server_init(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f00000003c0)=""/81, 0x90, 0x51, 0x0, 0x6, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000b00)=0x400e704) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) 8.53986104s ago: executing program 1 (id=2712): r0 = userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x528, 0x1a0, 0x0, 0x270, 0x0, 0x1a0, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [0x0, 0x0, 0x0, 0xff], 'ip_vti0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [], [], 'team0\x00', 'macvlan1\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@local, @empty, [], [], 'gre0\x00', 'caif0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x20}}}, {{@ipv6={@private1, @local, [], [0x0, 0xffffff00], 'veth1_virt_wifi\x00', 'pimreg\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@private0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x180, 0x80, 0x2}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000880)='./file1\x00', &(0x7f00000008c0)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x1, 0xe, 0x9, 0x4, 0x9, 0xfffffffffffffff9}}, 0x0, 0x1000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x20, @local}, {0x2, 0x0, @empty}, 0x170, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x5, 0xdc2}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640)="c9", 0x1, 0x600, 0x0, 0x0) connect$unix(r2, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000800), 0x4) 6.968426071s ago: executing program 0 (id=2713): socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x20, 0x572, 0xcb01, 0x663d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5b, 0xe8, 0xeb}}]}}]}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x7a) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/warn_count', 0x48000, 0x0) pipe2$watch_queue(0x0, 0x80) read$watch_queue(r4, &(0x7f0000000140)=""/16, 0x10) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x440, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) poll(0x0, 0x0, 0x3) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) 6.763793038s ago: executing program 4 (id=2714): r0 = io_uring_setup(0x1379, &(0x7f0000000080)={0x0, 0x7f09, 0x1000, 0x800000, 0x121}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="7f060000", @ANYRES16=r3, @ANYBLOB="671d00000000ffdbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00010000000c008f0009000000000000000c0090"], 0x54}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000810) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x2, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x11}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}]}) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) syz_open_dev$usbmon(&(0x7f0000000300), 0xe, 0x184c2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900", @ANYRES32=r7], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) getdents64(r6, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x20) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000000000000000000000000000800000000000000000000000000000000000002000000000000000000000000000000000000002e0b000000000000000000000200000000c0000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="002000000000000000000000000000000000000000000000000000000100"/44], 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 6.667969824s ago: executing program 1 (id=2715): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 6.643768563s ago: executing program 3 (id=2716): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x1010, 0xffffffffffffffff, 0xc143b000) r0 = userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x180, 0x80, 0x2}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000680)={0x400, 0x1, {0xffffffffffffffff, 0x0, 0x6a3, 0x2, 0x2}, 0x4}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x4b74, @mcast2, 0x5}}, 0x0, 0x800, 0x0, 0x0, 0x88, 0x1}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000880)='./file1\x00', &(0x7f00000008c0)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x1, 0xe, 0x9, 0x4, 0x9, 0xfffffffffffffff9}}, &(0x7f0000000900), 0x1000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x20, @local}, {0x2, 0x0, @empty}, 0x170, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x5, 0xdc2}) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000800), 0x4) 5.767142611s ago: executing program 3 (id=2717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x802, 0x1) connect$inet(r3, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$unix(r4, 0x0, 0x0) 5.712964532s ago: executing program 4 (id=2718): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000000000000ff014000000000000000000000000000000000000000080000000000000000000000000000000000000000000043f05d9ab7250615202a6dacfaa9b645926c9113803d18ae20d5e155089231d7c361d56329eebe12d481602b52fd165032dba5fbc5109dfd3f21683cda887537544aa3c660267a3f94f8e2f3e3e2646349dc3c28571d9e03e4d387ba7c80248e3288a385bbac3703557ea200785df8b5e03719800ff652df012e733ada924e7e80c266d7d06eeeb764e10c00a28bb7ceb1f62350255026cfd9802d2a86f1c364404ef097e16c0334fe48acc89a481ffe"]) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0x40) close_range(r1, r2, 0x0) readlinkat(r2, &(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)=""/161, 0xa1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1806040000fb000100000000000000009500010000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000ffffffff00000000000c000000b7000000000000009500000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000240)=0x10) 4.720390182s ago: executing program 3 (id=2719): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r3, 0x0, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xa000, 0x0, 0x0, 0x0, 0x3ff, 0x801}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) 4.293356497s ago: executing program 2 (id=2720): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000ac0)={r3, 0xd0}, &(0x7f0000000b00)=0x8) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r4, 0x0, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000840)=ANY=[@ANYBLOB="b0000000daffff", @ANYRES64=0x3, @ANYRES32], 0xb0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 4.253434321s ago: executing program 4 (id=2721): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_usbip_server_init(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f00000003c0)=""/81, 0x90, 0x51, 0x0, 0x6, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000b00)=0x400e704) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) 3.08321025s ago: executing program 3 (id=2722): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000880)='./file0\x00', 0x0) 2.424370192s ago: executing program 2 (id=2723): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x87) fchdir(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'lo\x00'}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000040)=""/57, 0x39) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x2000000000000135, &(0x7f00000002c0)=ANY=[], 0x0, 0x8007, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1a1642, 0x0) truncate(0x0, 0x50272177) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000030100c0"]) getdents64(r5, 0x0, 0x18) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r9}, 0x18) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000a13de30840205029f1850102030109022d0002000000000904210001d553e5000905060500000000000904000001f238b50009050102f7"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) pipe2$9p(&(0x7f0000000240), 0x84080) 2.422650258s ago: executing program 4 (id=2724): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000004c0)=""/129, &(0x7f0000000100)=0x81) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4000140) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000340)=""/81, 0x51}], 0x2}, 0x40000000) sendmmsg$inet(r0, &(0x7f0000002300), 0x0, 0x2000c000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2.342387012s ago: executing program 1 (id=2725): r0 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0c01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r3 = fanotify_init(0x81, 0x0) fanotify_mark(r3, 0x105, 0x2a, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r3, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r7 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r7, 0x0, 0x14) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x890b, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) setpriority(0x2, 0x0, 0x3) syz_emit_vhci(&(0x7f0000000300)=ANY=[], 0x7) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x8000, 0x1, 0x56555941, 0x3, 0x9, [{0x3, 0x10001}, {0x54, 0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x9, 0x5}, {0x2, 0x10000}, {0x5, 0x400}, {0xc, 0x3000000}], 0xd, 0x3, 0x3, 0x1, 0x7}}) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x16) 2.201204667s ago: executing program 3 (id=2726): mkdir(&(0x7f0000000540)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) setsockopt(0xffffffffffffffff, 0xa, 0x14f, &(0x7f0000000500), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x800074, 0x161341) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x500000, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000200)={0x4065}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f0000000180), 0x0, 0x7f) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000240), 0x4) sched_setattr(0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x84880) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r4, 0x0, 0x43) close_range(r3, 0xffffffffffffffff, 0x0) r5 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x80, 0x80, 0xf7, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x3, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x0, 0x9, 0x3}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x69, &(0x7f0000000580)={0x5, 0xf, 0x69, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "ecb8a743ccba37dee16a16efe16a9f87"}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x2, 0x0, 0x9, [0x0, 0x0, 0xfffe87]}, @ssp_cap={0x24, 0x10, 0xa, 0x14, 0x6, 0x1, 0xf, 0x6, [0xff0f, 0xc000, 0x1f80, 0xc000, 0xf, 0xffcf]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "eb73c8e60842e6c212d33cd03a6cfa13"}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x41d}}, {0x0, 0x0}, {0xe5, &(0x7f0000000380)=@string={0xe5, 0x3, "cbbb816b535518f7f2f939685108430eaac50fd29b22b6f8c5005fb105dff7939f6d7037e3943e2157f3425ac25fdb4fb49d07260078ad73ba7d3262018f40e36e07e16037c0cbf3faa14f9e4ef4d6bce44e8c1339e1939b2401215f78f3fd5b5c4a4496a89c7ec8ad75c4175d3261b051ad5840b955301a03da56444bb09eca0844db76bbda222be73ad73f152a27dd6b5e08583314aa41ea528220eee1eb90ee6f593d0d807b5c5ea3b8ac75a8ab70f25174cd0bd6a62ea716c49ed88b14c1b79ee799005a53eb0dd8f398df3b6dad9cda1723a1fce13f96f8e91f9e8ed7a274fbc7"}}, {0x58, &(0x7f00000002c0)=@string={0x58, 0x3, "0466cf0260e15af22d788d2dcbf68409c877debc50c26fb010cba00b4592999abb6dbde9fc76441c81993cbcf54ae654c41b42f8d3c4eb5131ede9d0c9ed995bc94910560026d798e2c7eb3855f8d4c627a9860a1d29"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x801}}, {0x102, &(0x7f0000000940)=@string={0x102, 0x3, "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"}}]}) syz_usb_control_io$printer(r5, &(0x7f0000000680)={0x14, &(0x7f0000000600)={0x40, 0xa, 0x69, {0x69, 0xf, "e1e0fd614f4ef189e09e41b4253e4cbcdabf374248ebf08aa39e5740eeffa7b1f6573099ae8b07ae296e4971512637fd85646390b2aa6e73b9bc63544fb2574d9a6821735882eb069d41333320b9c16cc66ba123a407a740844659146552fca1c1aac3cb7cbd6a"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB="20064f0000005cae6ccc8f2396d5db7a9a692300001717b817b9a4388d361ebaa460a1c853fd233413bccc9678081fd6c0b9e2e947d4416872bf13b8fee68d060c4f95b64ca89c8c1050766536e2e5a73a063dc3ea"], &(0x7f0000000740)={0x0, 0xa, 0x1, 0x11}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xc}, &(0x7f00000007c0)={0x20, 0x0, 0x19, {0x17, "16eb382f6246c4b32222674ebd1547d9e56da44d23aff2"}}, &(0x7f0000000800)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000000840)={0x20, 0x0, 0x1, 0x3}}) 1.183862299s ago: executing program 1 (id=2727): socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) epoll_create1(0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="d65f0193a777f0e5beb60b69cbb9d2c05919000000000000d11bd4694141079caf37d39e0a8062cadfc684b53cb06534dc2fac4959546f2c1146af4cec321ba3261a0ab516143009fde2a8a3006851a54e8737141e10dfa587d574c9cadf51e5e00a7093886d373e2201ac1c93d04214ede580a7c326090eac8e11e2de6372710f6ddacf64a71a60", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x11) syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, 0x0}}, {{&(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000840)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0xffffffffffffffff}]}}}], 0x18}}], 0x2, 0x20000050) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0b, &(0x7f0000000200)={'wlan1\x00', @random="9ffff7070600"}) 1.046449312s ago: executing program 4 (id=2728): r0 = io_uring_setup(0x1379, &(0x7f0000000080)={0x0, 0x7f09, 0x1000, 0x800000, 0x121}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="7f060000", @ANYRES16=r3, @ANYBLOB="671d00000000ffdbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00010000000c008f0009000000000000000c0090"], 0x54}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000810) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000500)={0x0, 0x2, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x11}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}]}) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) syz_open_dev$usbmon(&(0x7f0000000300), 0xe, 0x184c2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900", @ANYRES32=r7], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) getdents64(r6, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x20) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000000000000000000000000000800000000000000000000000000000000000002000000000000000000000000000000000000002e0b000000000000000000000200000000c0000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="002000000000000000000000000000000000000000000000000000000100"/44], 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 160.177183ms ago: executing program 1 (id=2729): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x80, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xffdfffff}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 78.141323ms ago: executing program 0 (id=2730): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, 0x0, 0x94) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) kexec_load(0xff0f, 0x0, 0x0, 0x0) connect$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) connect$can_j1939(r1, &(0x7f0000000140), 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) 5.722304ms ago: executing program 4 (id=2731): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d000005000100070000"], 0x5c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(0x0, r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r4, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r3, 0xff08, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getitimer(0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r9 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0, 0x85}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xed, 0x0, &(0x7f0000000300)="00004000487d23e68c4778cbb93b6b71672a20650a8759eba61efe399ae8bc6630d4e88314e415b7ff768ed92040c1300c548c58b4e8fe07668a6560a1a4d8b521e4d33bd1d3e5feace1b222fc74dce19c941d5b43f27e9d735d0e4f4038b0401d818785d2cf97fba3f4246957b22844ba2056efde7b03e6768161311c2d57d846caa1fa83995bc800a72317e0e6192e80aba8e9864e96b0fc26e8d37abffb67b029e97152e4a0f5d14821e67fae880e7cb02aee3a25acfec891c76fdfff4c4acd4339f6fc706a1195a3ae64e2c8f0b7f2fe19fba2d5945402328d90eb448e22f3a84d955dfced682731e6c452"}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) 0s ago: executing program 1 (id=2732): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x7f1, 0x84, 0xefcc, 0x6, 0x5, "f06fca79266e82a74b6c5e443a04683cc267a0", 0x6, 0xc}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'veth1_vlan\x00', {0x2, 0x4e22, @empty}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000c00)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001300)={r5, 0x9, 0x0, [0x10000, 0x5, 0x1, 0x9, 0x9], [0x8000000000000000, 0x1, 0x3, 0x5, 0xc, 0xfffffffffffffff8, 0x0, 0x7f, 0x0, 0xd0, 0x91a, 0x3ff, 0x242, 0x3b, 0xe9, 0x9, 0xffffffffffffffff, 0x232, 0x3, 0x1c00000, 0x5, 0xd1e, 0x8, 0x4, 0x4, 0x23, 0x400, 0xcc, 0x0, 0x8, 0x6, 0x2, 0x33, 0x1, 0xfffffffffffffff8, 0x9, 0x5, 0xeb95, 0x1, 0x4, 0x8, 0x401, 0x40, 0x4, 0x2, 0x81df244, 0x25bcdfd2, 0x6, 0x89ff, 0x2, 0x4, 0x3, 0xe2, 0x0, 0x2, 0x90, 0xb3, 0x8, 0x8, 0x5, 0x1, 0x4, 0xa24, 0x0, 0x3, 0x9, 0xe, 0x7, 0x9, 0x3ff, 0x8, 0x1, 0xfff, 0x6, 0x2000000, 0x5, 0x18, 0x8, 0x7ff, 0x200, 0x9147, 0x7, 0xff, 0x2, 0xb, 0x4, 0x1000, 0xd429, 0x2, 0x3, 0xe58, 0x10000, 0x1, 0x80, 0xffffffffffff8001, 0x6, 0x2, 0x4, 0x2421, 0xa, 0x5, 0x0, 0x7fffffffffffffff, 0x0, 0x7, 0x0, 0xbe9f, 0x3, 0x3, 0x3, 0x5, 0x20e, 0x2, 0x3, 0x8000, 0xff, 0x97, 0x4, 0x7, 0x8, 0xffffffff]}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f00000012c0)={0xc, 0x5, {0x6, @struct={0x6, 0x4}, 0x0, 0x12, 0x100000001, 0xb7, 0x732a, 0x101, 0xa0, @usage=0x5, 0x6, 0xffffffff, [0xcbf5, 0x9ccc, 0x3, 0xfffffffffffffffa, 0x1, 0x3]}, {0x4, @usage=0x6, 0x0, 0xac0, 0x2, 0x6, 0x2000000000, 0x3, 0x805, @struct={0x5, 0x6d9c}, 0x7, 0x3398, [0x1, 0x7f29, 0x6, 0x7fffffff, 0xa6, 0xf1]}, {0x0, @struct={0x4, 0x8}, r5, 0x4, 0x9, 0x9059, 0x0, 0xfff, 0x6c, @usage=0x2, 0x100, 0x81, [0x8, 0x16, 0x8, 0xffffffffffffffff, 0xeb, 0x80000001]}, {0x6, 0x8000000000000000, 0x80}}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) kernel console output (not intermixed with test programs): nnamed net_device) (uninitialized): Error reading E2P_CMD [ 419.329026][T10341] fuse: Unknown parameter 'user_i00000000000000000000' [ 419.365900][T10341] snd_dummy snd_dummy.0: control 0:0:0:syz1:67633153 is already present [ 419.451090][ T5829] Bluetooth: hci1: unexpected event for opcode 0x2031 [ 419.825082][T10356] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1377'. [ 419.836640][T10358] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1376'. [ 420.013274][ T43] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 420.035502][ T43] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 420.045254][ T43] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 420.057031][ T43] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 420.945489][T10372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1381'. [ 421.060740][ T5911] usb 3-1: USB disconnect, device number 29 [ 421.145976][T10378] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1383'. [ 421.751209][ T5829] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 422.266902][T10393] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1389'. [ 422.410399][T10405] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1391'. [ 422.428572][T10403] fuse: Unknown parameter 'user_id00000000000000000000' [ 422.458220][T10403] snd_dummy snd_dummy.0: control 0:0:0:syz1:67633153 is already present [ 423.381206][T10414] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1395'. [ 423.856161][ T5941] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 424.695653][ T5941] usb 1-1: Using ep0 maxpacket: 32 [ 424.721904][ T5941] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 424.746404][ T5941] usb 1-1: config 0 has no interface number 0 [ 424.766444][ T5941] usb 1-1: config 0 interface 184 has no altsetting 0 [ 424.916248][ T5941] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 424.935765][T10432] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1402'. [ 424.945372][ T5829] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 424.975566][ T5941] usb 1-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 424.983969][ T5941] usb 1-1: Product: syz [ 424.989236][ T5941] usb 1-1: Manufacturer: syz [ 425.054519][ T5941] usb 1-1: SerialNumber: syz [ 425.062510][ T5941] usb 1-1: config 0 descriptor?? [ 425.079644][ T5941] smsc75xx v1.0.0 [ 425.152213][T10435] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1403'. [ 425.287271][T10443] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1405'. [ 425.306777][T10444] fuse: Unknown parameter 'user_id00000000000000000000' [ 425.339160][T10444] snd_dummy snd_dummy.0: control 0:0:0:syz1:67633153 is already present [ 425.492738][T10448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1408'. [ 425.835741][ T5941] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 425.846779][ T5941] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 426.694495][ T5941] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 426.711453][ T5941] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 426.810203][ T5941] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 426.925063][ T5941] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 427.951647][T10473] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 428.348850][ T43] usb 1-1: USB disconnect, device number 22 [ 428.557079][ T5829] Bluetooth: hci1: unexpected event for opcode 0x2031 [ 428.847592][T10490] fuse: Unknown parameter 'user_id00000000000000000000' [ 428.877491][T10490] snd_dummy snd_dummy.0: control 0:0:0:syz1:67633153 is already present [ 428.880305][T10492] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1420'. [ 428.897240][T10493] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1418'. [ 429.199372][T10501] netlink: 'syz.2.1422': attribute type 4 has an invalid length. [ 431.027110][ T43] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 431.095566][ T5911] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 431.185528][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 431.214700][ T43] usb 2-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1023 [ 431.236168][ T43] usb 2-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 431.268828][ T43] usb 2-1: config 1 interface 0 has no altsetting 0 [ 431.285638][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 431.297352][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 431.301915][ T5911] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 431.313098][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.337014][ T43] usb 2-1: Product: 믋殁啓鱗根ࡑใ얪툏⊛Å녟鏷涟㝰铣ℾ婂忂俛鶴☇砀玭綺戲輁ݮ惡쀷ꇺ鹏볖令ᎌ鮓Ĥ弡寽䩜附鲨졾疭ោ㉝끡굑䁘喹ᨰ䑖끋쪞䐈盛⬢㫧㿗⨕幫堈ᐳ䆪勪₂郫濮㵙耍屻ꍞ겸꡵炫凲쵴혋⺦ᚧ黄诘섔麷駧娀飳㯟국⌗ﲡ㿡Ῡ躞ꋗﭴ [ 431.345138][ T5911] usb 4-1: config 0 has no interface number 0 [ 431.416314][ T5911] usb 4-1: config 0 interface 184 has no altsetting 0 [ 431.437686][ T5911] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 431.452056][ T5911] usb 4-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 431.458878][ T43] usb 2-1: SerialNumber: 昄ˏ砭ⶍ঄矈볞쉐끯쬐஠鉅骙涻盼᱄馁밼䫵哦ᯄ쓓凫탩宙䧉嘐☀飗쟢㣫월ꤧઆ⤝ [ 431.483774][ T5911] usb 4-1: Product: syz [ 431.493966][ T5911] usb 4-1: Manufacturer: syz [ 431.510963][ T5911] usb 4-1: SerialNumber: syz [ 431.530207][T10506] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 431.539215][ T5911] usb 4-1: config 0 descriptor?? [ 431.561018][ T5911] smsc75xx v1.0.0 [ 432.169448][ T43] usb 2-1: USB disconnect, device number 32 [ 432.179168][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 432.227158][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 433.001871][T10537] fuse: Bad value for 'fd' [ 433.049967][T10537] snd_dummy snd_dummy.0: control 0:0:0:syz1:67633153 is already present [ 433.114661][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 433.157551][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 433.176448][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 433.212559][ T5911] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 433.597877][T10549] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1436'. [ 434.473758][T10557] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 434.651503][ T43] usb 4-1: USB disconnect, device number 17 [ 434.893514][T10565] netlink: 'syz.0.1438': attribute type 4 has an invalid length. [ 436.046275][T10583] fuse: Bad value for 'fd' [ 436.062778][T10583] snd_dummy snd_dummy.0: control 0:0:0:syz1:67633153 is already present [ 436.762366][T10593] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 438.406524][T10610] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1452'. [ 439.024849][T10621] netlink: 'syz.2.1455': attribute type 4 has an invalid length. [ 440.011800][T10631] fuse: Bad value for 'fd' [ 440.021410][T10631] snd_dummy snd_dummy.0: control 0:0:0:syz1:67633153 is already present [ 440.091623][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.098264][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.285564][ T1208] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 440.787262][ T1208] usb 5-1: config 0 has an invalid interface number: 156 but max is 0 [ 440.947687][ T1208] usb 5-1: config 0 has no interface number 0 [ 440.964206][ T1208] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 441.025537][ T1208] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 441.045831][ T1208] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 441.075038][ T1208] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 441.114831][ T1208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.159602][ T1208] usb 5-1: config 0 descriptor?? [ 441.191512][ T1208] gspca_main: spca561-2.14.0 probing abcd:cdee [ 441.764907][ T1208] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 441.775222][ T1208] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 441.816160][ T1208] usb 5-1: MIDIStreaming interface descriptor not found [ 441.960670][ T1208] usb 5-1: USB disconnect, device number 15 [ 443.127089][T10657] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1464'. [ 443.190522][T10660] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1465'. [ 444.479243][T10674] fuse: Unknown parameter '0x0000000000000004' [ 444.503312][T10674] snd_dummy snd_dummy.0: control 0:0:0:syz1:67633153 is already present [ 444.766888][T10676] netlink: 'syz.2.1468': attribute type 4 has an invalid length. [ 445.764915][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1477'. [ 445.802759][T10697] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1476'. [ 445.812123][ T5928] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 446.325265][ T5928] usb 2-1: config 0 has an invalid interface number: 156 but max is 0 [ 446.333690][ T5928] usb 2-1: config 0 has no interface number 0 [ 446.377016][ T5928] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 446.442395][ T5928] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 446.915072][ T5928] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 446.926274][ T5928] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 446.935351][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.009646][ T5928] usb 2-1: config 0 descriptor?? [ 447.018271][ T5928] gspca_main: spca561-2.14.0 probing abcd:cdee [ 447.135648][ T5911] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 447.465676][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 447.919210][ T5928] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 447.975013][ T5911] usb 4-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1023 [ 448.070339][ T5928] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 448.078817][ T5911] usb 4-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 448.092205][ T5928] usb 2-1: MIDIStreaming interface descriptor not found [ 448.107092][ T5911] usb 4-1: config 1 interface 0 has no altsetting 0 [ 448.150961][ T5911] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 448.172262][ T5928] usb 2-1: USB disconnect, device number 33 [ 448.210645][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.239450][T10691] udevd[10691]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 448.265545][ T5911] usb 4-1: Product: 믋殁啓鱗根ࡑใ얪툏⊛Å녟鏷涟㝰铣ℾ婂忂俛鶴☇砀玭綺戲輁ݮ惡쀷ꇺ鹏볖令ᎌ鮓Ĥ弡寽䩜附鲨졾疭ោ㉝끡굑䁘喹ᨰ䑖끋쪞䐈盛⬢㫧㿗⨕幫堈ᐳ䆪勪₂郫濮㵙耍屻ꍞ겸꡵炫凲쵴혋⺦ᚧ黄诘섔麷駧娀飳㯟국⌗ﲡ㿡Ῡ躞ꋗﭴ [ 448.447093][T10723] fuse: Unknown parameter '0x0000000000000004' [ 448.454177][ T5911] usb 4-1: SerialNumber: 昄ˏ砭ⶍ঄矈볞쉐끯쬐஠鉅骙涻盼᱄馁밼䫵哦ᯄ쓓凫탩宙䧉嘐☀飗쟢㣫월ꤧઆ⤝ [ 448.491146][T10723] snd_dummy snd_dummy.0: control 0:0:0:syz1:67633153 is already present [ 448.727700][T10706] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 448.841805][T10734] netlink: 'syz.0.1484': attribute type 4 has an invalid length. [ 449.592417][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1488'. [ 449.703089][T10743] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1489'. [ 449.753642][ T5911] usb 4-1: USB disconnect, device number 18 [ 450.916771][ T5911] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 451.050884][T10761] fuse: Unknown parameter '0x0000000000000004' [ 451.078265][ T5911] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 451.099668][T10761] snd_dummy snd_dummy.0: control 0:0:0:syz1:67633153 is already present [ 451.108356][ T5911] usb 1-1: config 0 has no interface number 0 [ 451.123543][ T5911] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 451.136812][ T5911] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 451.149480][ T5911] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 451.161267][ T5911] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 451.341364][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.357123][ T5911] usb 1-1: config 0 descriptor?? [ 451.478213][ T5911] gspca_main: spca561-2.14.0 probing abcd:cdee [ 451.893795][T10772] netlink: 'syz.3.1499': attribute type 4 has an invalid length. [ 452.471786][ T5911] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 452.877333][ T5911] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 452.951842][ T5911] usb 1-1: MIDIStreaming interface descriptor not found [ 454.068543][ T5911] usb 1-1: USB disconnect, device number 23 [ 455.313687][T10801] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1506'. [ 455.658696][T10799] fuse: Unknown parameter '0x0000000000000004' [ 455.689527][T10799] snd_dummy snd_dummy.0: control 0:0:0:syz1:67633153 is already present [ 455.895709][ T5911] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 456.225973][ T5911] usb 1-1: Using ep0 maxpacket: 16 [ 456.450559][ T5911] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1023 [ 456.475920][ T5911] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 456.499964][ T5911] usb 1-1: config 1 interface 0 has no altsetting 0 [ 456.520940][ T5911] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 456.530434][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.551593][ T5911] usb 1-1: Product: 믋殁啓鱗根ࡑใ얪툏⊛Å녟鏷涟㝰铣ℾ婂忂俛鶴☇砀玭綺戲輁ݮ惡쀷ꇺ鹏볖令ᎌ鮓Ĥ弡寽䩜附鲨졾疭ោ㉝끡굑䁘喹ᨰ䑖끋쪞䐈盛⬢㫧㿗⨕幫堈ᐳ䆪勪₂郫濮㵙耍屻ꍞ겸꡵炫凲쵴혋⺦ᚧ黄诘섔麷駧娀飳㯟국⌗ﲡ㿡Ῡ躞ꋗﭴ [ 456.637122][ T5911] usb 1-1: SerialNumber: 昄ˏ砭ⶍ঄矈볞쉐끯쬐஠鉅骙涻盼᱄馁밼䫵哦ᯄ쓓凫탩宙䧉嘐☀飗쟢㣫월ꤧઆ⤝ [ 456.667729][T10825] overlayfs: failed to resolve './file1': -2 [ 457.640744][T10800] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 459.533648][T10833] fuse: Unknown parameter '0x0000000000000004' [ 459.546165][ T5911] usb 1-1: USB disconnect, device number 24 [ 459.575358][T10833] snd_dummy snd_dummy.0: control 0:0:0:syz1:67633153 is already present [ 459.845553][ T5829] Bluetooth: hci4: unexpected event for opcode 0x2031 [ 459.970645][T10844] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1522'. [ 460.171157][ T5911] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 460.895782][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 460.915573][ T5911] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 460.927141][ T5911] usb 4-1: config 0 has no interface number 0 [ 460.933300][ T5911] usb 4-1: config 0 interface 184 has no altsetting 0 [ 461.029437][ T5911] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 461.043060][ T5911] usb 4-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 461.051880][ T5911] usb 4-1: Product: syz [ 461.057545][ T5911] usb 4-1: Manufacturer: syz [ 461.068166][ T5911] usb 4-1: SerialNumber: syz [ 461.077830][ T5911] usb 4-1: config 0 descriptor?? [ 461.086992][ T5911] smsc75xx v1.0.0 [ 462.422930][T10875] fuse: Unknown parameter '0x0000000000000004' [ 462.439686][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 462.454308][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 462.497426][T10875] snd_dummy snd_dummy.0: control 0:0:0:syz1:67633153 is already present [ 464.152644][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 464.212378][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 464.385929][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 464.415242][ T5911] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 464.455950][T10895] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1536'. [ 464.846033][ T5941] usb 4-1: USB disconnect, device number 19 [ 467.069588][ T5941] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 467.425533][ T5941] usb 2-1: Using ep0 maxpacket: 32 [ 467.442670][ T5941] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 467.575498][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.586842][ T5941] usb 2-1: config 0 descriptor?? [ 468.210397][ T5941] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 468.242713][ T5941] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 468.285651][ T5941] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 468.550114][T10934] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1548'. [ 469.716002][T10947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1553'. [ 469.815709][ T5928] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 470.865496][ T5928] usb 1-1: Using ep0 maxpacket: 32 [ 470.907631][ T5928] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 470.925531][ T3669] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 470.932229][ T5928] usb 1-1: config 0 has no interface number 0 [ 471.155715][ T5928] usb 1-1: config 0 interface 184 has no altsetting 0 [ 471.197280][ T3669] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 471.229083][ T5928] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 471.245491][ T5928] usb 1-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 471.249094][ T3669] usb 4-1: config 0 has no interface number 0 [ 471.253691][ T5928] usb 1-1: Product: syz [ 471.253711][ T5928] usb 1-1: Manufacturer: syz [ 471.253723][ T5928] usb 1-1: SerialNumber: syz [ 471.266926][ T5928] usb 1-1: config 0 descriptor?? [ 471.299695][ T5928] smsc75xx v1.0.0 [ 471.311130][ T3669] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 471.335592][ T3669] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 471.487655][ T3669] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 471.499652][ T3669] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 471.535453][ T3669] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.585126][ T3669] usb 4-1: config 0 descriptor?? [ 472.149410][ T5928] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 472.183763][ T3669] gspca_main: spca561-2.14.0 probing abcd:cdee [ 472.292317][ T5928] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 473.314188][ T3669] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 473.324991][ T3669] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 473.340568][ T3669] usb 4-1: MIDIStreaming interface descriptor not found [ 473.520050][ T3669] usb 4-1: USB disconnect, device number 20 [ 473.616407][T10978] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1560'. [ 473.718268][ T5928] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 473.743335][ T5928] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 473.772861][ T5928] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 473.784452][ T5928] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 474.225752][ T1208] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 475.071613][ T1208] usb 3-1: Using ep0 maxpacket: 32 [ 475.115881][ T3669] usb 1-1: USB disconnect, device number 25 [ 475.219298][ T1208] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 475.235487][ T1208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.257115][ T1208] usb 3-1: config 0 descriptor?? [ 475.331430][T10995] IPVS: length: 129 != 8 [ 475.367700][T10997] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1565'. [ 475.478976][ T1208] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 478.159815][T11031] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1571'. [ 479.092521][T11046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1579'. [ 479.571369][ T43] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 480.675639][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 480.684774][ T43] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 480.697750][ T43] usb 4-1: config 0 has no interface number 0 [ 481.417977][ T5829] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 481.547477][ T5829] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 481.654549][ T43] usb 4-1: config 0 interface 184 has no altsetting 0 [ 481.680221][ T43] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 481.806810][ T43] usb 4-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 481.815039][ T43] usb 4-1: Product: syz [ 481.821087][ T43] usb 4-1: Manufacturer: syz [ 481.826533][ T43] usb 4-1: SerialNumber: syz [ 481.859542][ T43] usb 4-1: config 0 descriptor?? [ 481.892333][ T43] smsc75xx v1.0.0 [ 482.202225][ T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 482.393139][ T43] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 482.981040][ T43] usb 4-1: USB disconnect, device number 21 [ 483.122008][T11090] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1589'. [ 483.885924][ T5911] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 484.048086][ T5911] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 484.100118][ T5911] usb 4-1: config 0 has no interface number 0 [ 484.128379][ T5911] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 484.199907][ T5833] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 484.199907][ T5829] Bluetooth: hci4: unexpected event for opcode 0x2031 [ 484.359356][ T5911] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 484.375723][ T5911] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 484.386332][ T5911] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 484.405315][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.443077][ T5911] usb 4-1: config 0 descriptor?? [ 484.509107][ T5911] gspca_main: spca561-2.14.0 probing abcd:cdee [ 485.154748][ T5911] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 485.175810][ T5911] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 485.183253][ T5911] usb 4-1: MIDIStreaming interface descriptor not found [ 486.454538][ T43] usb 4-1: USB disconnect, device number 22 [ 488.850715][T11163] syz.3.1611: attempt to access beyond end of device [ 488.850715][T11163] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 488.864207][T11163] qnx6: unable to read the first superblock [ 488.871639][T11163] syz.3.1611: attempt to access beyond end of device [ 488.871639][T11163] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 488.884798][T11163] qnx6: unable to read the first superblock [ 488.890943][T11163] qnx6: unable to read the first superblock [ 490.276262][ T43] IPVS: starting estimator thread 0... [ 490.292501][T11178] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 490.699179][T11184] IPVS: using max 52 ests per chain, 124800 per kthread [ 491.503775][ T5829] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 494.032767][T11229] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1633'. [ 499.128742][T11284] snd_dummy snd_dummy.0: control 0:0:0:syz1:67633153 is already present [ 499.640354][T11288] netlink: 'syz.4.1647': attribute type 7 has an invalid length. [ 500.099239][T11288] : entered promiscuous mode [ 500.195671][T11302] netlink: 'syz.0.1648': attribute type 4 has an invalid length. [ 501.474827][ T5829] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 501.530281][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.536807][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.549213][T11349] syz.4.1658 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 505.457617][T11358] syz.3.1664: attempt to access beyond end of device [ 505.457617][T11358] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 505.470602][T11358] qnx6: unable to read the first superblock [ 505.476811][T11358] syz.3.1664: attempt to access beyond end of device [ 505.476811][T11358] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 505.489591][T11358] qnx6: unable to read the first superblock [ 505.496905][T11358] qnx6: unable to read the first superblock [ 505.668487][T11360] netlink: 'syz.0.1663': attribute type 4 has an invalid length. [ 509.090353][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 509.090372][ T30] audit: type=1326 audit(1750775938.212:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11383 comm="syz.3.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21458e929 code=0x7ffc0000 [ 509.335662][ T30] audit: type=1326 audit(1750775938.212:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11383 comm="syz.3.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fe21458e929 code=0x7ffc0000 [ 509.363739][ T30] audit: type=1326 audit(1750775938.212:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11383 comm="syz.3.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21458e929 code=0x7ffc0000 [ 509.505531][ T30] audit: type=1326 audit(1750775938.212:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11383 comm="syz.3.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe21458e929 code=0x7ffc0000 [ 509.531518][ T30] audit: type=1326 audit(1750775938.212:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11383 comm="syz.3.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21458e929 code=0x7ffc0000 [ 509.555544][ T30] audit: type=1326 audit(1750775938.212:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11383 comm="syz.3.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fe21458e929 code=0x7ffc0000 [ 509.581647][ T30] audit: type=1326 audit(1750775938.212:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11383 comm="syz.3.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21458e929 code=0x7ffc0000 [ 509.604896][ T30] audit: type=1326 audit(1750775938.212:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11383 comm="syz.3.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe21458e929 code=0x7ffc0000 [ 509.635543][ T30] audit: type=1326 audit(1750775938.212:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11383 comm="syz.3.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21458e929 code=0x7ffc0000 [ 509.665512][ T30] audit: type=1326 audit(1750775938.212:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11383 comm="syz.3.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe2145907bc code=0x7ffc0000 [ 511.204844][T11408] syz.2.1678: attempt to access beyond end of device [ 511.204844][T11408] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 511.218447][T11408] qnx6: unable to read the first superblock [ 511.224571][T11408] syz.2.1678: attempt to access beyond end of device [ 511.224571][T11408] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 511.238415][T11408] qnx6: unable to read the first superblock [ 511.244321][T11408] qnx6: unable to read the first superblock [ 513.135977][T11424] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1682'. [ 514.106288][T11440] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 517.035063][T11460] syz.3.1691: attempt to access beyond end of device [ 517.035063][T11460] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 517.048032][T11460] qnx6: unable to read the first superblock [ 517.054143][T11460] syz.3.1691: attempt to access beyond end of device [ 517.054143][T11460] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 517.068260][T11460] qnx6: unable to read the first superblock [ 517.074171][T11460] qnx6: unable to read the first superblock [ 519.039080][T11475] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1695'. [ 520.473836][T11501] syz.4.1703: attempt to access beyond end of device [ 520.473836][T11501] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0 [ 520.486787][T11501] qnx6: unable to read the first superblock [ 520.492796][T11501] syz.4.1703: attempt to access beyond end of device [ 520.492796][T11501] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 520.505604][T11501] qnx6: unable to read the first superblock [ 520.511482][T11501] qnx6: unable to read the first superblock [ 520.835352][T11503] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 522.386097][T11514] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 522.744847][T11517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1708'. [ 526.433151][T11563] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 530.794690][T11601] evm: overlay not supported [ 531.476320][ T5965] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 531.635620][ T5965] usb 5-1: Using ep0 maxpacket: 32 [ 532.278861][ T5941] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 532.283119][ T1208] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 532.296240][ T5941] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 532.455633][ T5965] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 532.474831][ T5965] usb 5-1: config 0 has no interface number 0 [ 532.496759][ T5965] usb 5-1: config 0 interface 184 has no altsetting 0 [ 532.527212][ T5941] usb 2-1: USB disconnect, device number 34 [ 532.640869][ T1208] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 533.293967][ T1208] usb 3-1: USB disconnect, device number 30 [ 534.677977][ T5965] usb 5-1: string descriptor 0 read error: -71 [ 534.687387][ T5965] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 535.457003][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.469926][ T5965] usb 5-1: config 0 descriptor?? [ 535.475945][ T5965] usb 5-1: can't set config #0, error -71 [ 535.496751][ T5965] usb 5-1: USB disconnect, device number 16 [ 535.967936][T11649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1740'. [ 537.376713][T11657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 537.984971][T11660] fuse: Unknown parameter 'grou00000000000000000000' [ 543.248731][T11710] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 543.537408][T11714] fuse: Unknown parameter 'grou00000000000000000000' [ 543.806806][T11723] syz.3.1759: attempt to access beyond end of device [ 543.806806][T11723] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 543.820269][T11723] qnx6: unable to read the first superblock [ 543.826604][T11723] syz.3.1759: attempt to access beyond end of device [ 543.826604][T11723] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 543.839395][T11723] qnx6: unable to read the first superblock [ 543.845295][T11723] qnx6: unable to read the first superblock [ 544.716185][ T5965] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 545.184350][ T5965] usb 1-1: device descriptor read/64, error -71 [ 545.536099][ T5965] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 545.677318][ T5965] usb 1-1: device descriptor read/64, error -71 [ 545.806396][ T5965] usb usb1-port1: attempt power cycle [ 546.169163][ T5965] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 546.236468][ T5965] usb 1-1: device descriptor read/8, error -71 [ 546.651862][ T5965] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 546.696525][ T5965] usb 1-1: device descriptor read/8, error -71 [ 546.819264][ T5965] usb usb1-port1: unable to enumerate USB device [ 546.961999][T11766] fuse: Unknown parameter 'grou00000000000000000000' [ 547.868122][ T5829] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 549.554760][ T5829] Bluetooth: hci4: unexpected event for opcode 0x2031 [ 551.055482][ T1208] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 552.155647][ T1208] usb 4-1: Using ep0 maxpacket: 32 [ 552.355841][ T1208] usb 4-1: config 0 interface 0 has no altsetting 0 [ 552.407907][ T1208] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 552.511943][ T1208] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 552.524615][ T1208] usb 4-1: Product: syz [ 552.652355][ T1208] usb 4-1: config 0 descriptor?? [ 552.919717][ T5928] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 553.125455][ T5928] usb 1-1: Using ep0 maxpacket: 16 [ 553.149150][ T5928] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1023 [ 553.179592][ T5928] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 553.195344][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1786'. [ 553.225635][ T5928] usb 1-1: config 1 interface 0 has no altsetting 0 [ 553.290667][ T5928] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 553.318817][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.338212][ T5928] usb 1-1: Product: 믋殁啓鱗根ࡑใ얪툏⊛Å녟鏷涟㝰铣ℾ婂忂俛鶴☇砀玭綺戲輁ݮ惡쀷ꇺ鹏볖令ᎌ鮓Ĥ弡寽䩜附鲨졾疭ោ㉝끡굑䁘喹ᨰ䑖끋쪞䐈盛⬢㫧㿗⨕幫堈ᐳ䆪勪₂郫濮㵙耍屻ꍞ겸꡵炫凲쵴혋⺦ᚧ黄诘섔麷駧娀飳㯟국⌗ﲡ㿡Ῡ躞ꋗﭴ [ 553.454252][ T1208] usbhid 4-1:0.0: can't add hid device: -71 [ 553.474570][ T1208] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 553.491580][ T5928] usb 1-1: SerialNumber: 昄ˏ砭ⶍ঄矈볞쉐끯쬐஠鉅骙涻盼᱄馁밼䫵哦ᯄ쓓凫탩宙䧉嘐☀飗쟢㣫월ꤧઆ⤝ [ 553.530779][ T1208] usb 4-1: USB disconnect, device number 23 [ 553.589103][T11830] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 554.107788][ T5928] usb 1-1: USB disconnect, device number 30 [ 555.503276][ T5829] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 555.907299][T11875] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 555.916680][T11875] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 558.695935][T11889] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 559.101420][T11895] fuse: Unknown parameter 'group_id00000000000000000000' [ 560.072367][T11903] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 562.969830][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.976368][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.380308][ T5829] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 566.500026][ T5928] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 567.276714][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 567.304726][ T5928] usb 4-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1023 [ 567.355464][ T5928] usb 4-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 567.410740][ T5928] usb 4-1: config 1 interface 0 has no altsetting 0 [ 567.614585][ T5928] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 568.191899][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.208790][ T5928] usb 4-1: Product: 믋殁啓鱗根ࡑใ얪툏⊛Å녟鏷涟㝰铣ℾ婂忂俛鶴☇砀玭綺戲輁ݮ惡쀷ꇺ鹏볖令ᎌ鮓Ĥ弡寽䩜附鲨졾疭ោ㉝끡굑䁘喹ᨰ䑖끋쪞䐈盛⬢㫧㿗⨕幫堈ᐳ䆪勪₂郫濮㵙耍屻ꍞ겸꡵炫凲쵴혋⺦ᚧ黄诘섔麷駧娀飳㯟국⌗ﲡ㿡Ῡ躞ꋗﭴ [ 568.340878][ T5928] usb 4-1: SerialNumber: 昄ˏ砭ⶍ঄矈볞쉐끯쬐஠鉅骙涻盼᱄馁밼䫵哦ᯄ쓓凫탩宙䧉嘐☀飗쟢㣫월ꤧઆ⤝ [ 568.665567][T11979] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 570.640601][ T5829] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 571.061847][T12027] netlink: 'syz.0.1844': attribute type 7 has an invalid length. [ 571.365567][T12027] : entered promiscuous mode [ 572.460950][ T5928] usb 4-1: USB disconnect, device number 24 [ 576.325261][T12077] netlink: 1396 bytes leftover after parsing attributes in process `syz.2.1860'. [ 577.753182][T12087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.920574][T12105] syz.0.1869: attempt to access beyond end of device [ 578.920574][T12105] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 578.933660][T12105] qnx6: unable to read the first superblock [ 578.939987][T12105] syz.0.1869: attempt to access beyond end of device [ 578.939987][T12105] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 578.952905][T12105] qnx6: unable to read the first superblock [ 578.958912][T12105] qnx6: unable to read the first superblock [ 579.943094][T12113] netlink: 'syz.4.1868': attribute type 7 has an invalid length. [ 580.557824][T12123] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 580.557865][ T5928] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 580.747840][ T5928] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 580.763790][ T5928] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 580.774766][ T5928] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 580.786399][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.843304][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1876'. [ 580.965524][ T1208] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 581.048059][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 581.049185][ T30] audit: type=1326 audit(1750776010.202:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12114 comm="syz.3.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21458e929 code=0x7ffc0000 [ 581.080586][ T30] audit: type=1326 audit(1750776010.202:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12114 comm="syz.3.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fe21458e929 code=0x7ffc0000 [ 581.130561][ T30] audit: type=1326 audit(1750776010.202:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12114 comm="syz.3.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21458e929 code=0x7ffc0000 [ 581.153093][ T1208] usb 3-1: Using ep0 maxpacket: 32 [ 581.162161][ T1208] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 581.173614][ T30] audit: type=1326 audit(1750776010.202:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12114 comm="syz.3.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe21458e929 code=0x7ffc0000 [ 581.197895][ T1208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.227175][ T30] audit: type=1326 audit(1750776010.202:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12114 comm="syz.3.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21458e929 code=0x7ffc0000 [ 581.249742][ T1208] usb 3-1: config 0 descriptor?? [ 581.282705][ T30] audit: type=1326 audit(1750776010.202:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12114 comm="syz.3.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fe21458e929 code=0x7ffc0000 [ 581.305901][ T30] audit: type=1326 audit(1750776010.202:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12114 comm="syz.3.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21458e929 code=0x7ffc0000 [ 581.327882][ T30] audit: type=1326 audit(1750776010.202:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12114 comm="syz.3.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe21458e929 code=0x7ffc0000 [ 581.350237][ T30] audit: type=1326 audit(1750776010.202:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12114 comm="syz.3.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21458e929 code=0x7ffc0000 [ 581.376453][ T30] audit: type=1326 audit(1750776010.202:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12114 comm="syz.3.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe2145907bc code=0x7ffc0000 [ 581.528684][ T1208] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 581.542864][ T1208] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 581.555994][ T1208] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 582.825321][T12147] syz.2.1881: attempt to access beyond end of device [ 582.825321][T12147] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 582.838616][T12147] qnx6: unable to read the first superblock [ 582.844734][T12147] syz.2.1881: attempt to access beyond end of device [ 582.844734][T12147] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 582.857588][T12147] qnx6: unable to read the first superblock [ 582.863569][T12147] qnx6: unable to read the first superblock [ 583.337632][ T5928] usb 4-1: USB disconnect, device number 25 [ 585.267762][T12167] syz.2.1885: attempt to access beyond end of device [ 585.267762][T12167] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 585.280968][T12167] qnx6: unable to read the first superblock [ 585.288198][T12167] syz.2.1885: attempt to access beyond end of device [ 585.288198][T12167] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 585.301368][T12167] qnx6: unable to read the first superblock [ 585.307359][T12167] qnx6: unable to read the first superblock [ 586.095523][ T5829] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 587.416530][ T3669] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 588.444634][T12200] fuse: Bad value for 'group_id' [ 588.451563][T12200] fuse: Bad value for 'group_id' [ 588.528484][T12205] syz.3.1896: attempt to access beyond end of device [ 588.528484][T12205] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 588.542879][T12205] qnx6: unable to read the first superblock [ 588.549076][T12205] syz.3.1896: attempt to access beyond end of device [ 588.549076][T12205] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 588.561865][T12205] qnx6: unable to read the first superblock [ 588.571108][T12205] qnx6: unable to read the first superblock [ 588.795537][ T3669] usb 1-1: Using ep0 maxpacket: 32 [ 589.330300][ T3669] usb 1-1: config 0 interface 0 has no altsetting 0 [ 589.356314][ T3669] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 589.419778][ T3669] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 589.479345][ T3669] usb 1-1: Product: syz [ 589.619385][ T3669] usb 1-1: config 0 descriptor?? [ 590.438637][ T3669] usbhid 1-1:0.0: can't add hid device: -71 [ 590.444696][ T3669] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 590.520310][ T3669] usb 1-1: USB disconnect, device number 31 [ 591.485664][ T5829] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 592.878455][T12252] syz.0.1909: attempt to access beyond end of device [ 592.878455][T12252] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 592.891738][T12252] qnx6: unable to read the first superblock [ 592.897972][T12252] syz.0.1909: attempt to access beyond end of device [ 592.897972][T12252] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 592.911107][T12252] qnx6: unable to read the first superblock [ 592.917352][T12252] qnx6: unable to read the first superblock [ 593.122079][T12261] fuse: Bad value for 'group_id' [ 593.158913][T12261] fuse: Bad value for 'group_id' [ 596.054851][T12297] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 596.736784][T12301] fuse: Bad value for 'fd' [ 597.070308][T12303] syz.3.1923: attempt to access beyond end of device [ 597.070308][T12303] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 597.083175][T12303] qnx6: unable to read the first superblock [ 597.089222][T12303] syz.3.1923: attempt to access beyond end of device [ 597.089222][T12303] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 597.101998][T12303] qnx6: unable to read the first superblock [ 597.107892][T12303] qnx6: unable to read the first superblock [ 597.261426][T12311] netlink: 'syz.0.1926': attribute type 7 has an invalid length. [ 597.420475][T12315] tipc: Started in network mode [ 597.426683][T12315] tipc: Node identity ac141425, cluster identity 4711 [ 597.434189][T12315] tipc: Enabling of bearer rejected, failed to enable media [ 598.703033][T12324] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 599.974345][T12337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1932'. [ 605.318716][T12391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1949'. [ 609.222811][T12429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1960'. [ 612.090035][T12452] fuse: Bad value for 'user_id' [ 612.109903][T12452] fuse: Bad value for 'user_id' [ 612.905765][ T5911] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 614.038819][T12471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1973'. [ 614.049586][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 614.070730][ T5911] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 614.113915][ T5911] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 614.132354][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.757506][ T5829] Bluetooth: hci1: unexpected event for opcode 0x2031 [ 615.115641][ T5911] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 615.124557][ T5911] usb 2-1: config 0 has no interface number 0 [ 615.132366][ T5911] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 615.143511][ T5911] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 615.153402][ T5911] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 615.670055][ T5911] usb 2-1: config 0 interface 125 has no altsetting 0 [ 616.526447][ T5911] usb 2-1: string descriptor 0 read error: -71 [ 616.532777][ T5911] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 616.555192][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.577068][ T5911] usb 2-1: config 0 descriptor?? [ 616.603075][ T5911] usb 2-1: can't set config #0, error -71 [ 616.639127][ T5911] usb 2-1: USB disconnect, device number 35 [ 621.216958][T12521] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 623.777022][T12539] fuse: Unknown parameter '00000000000000000000' [ 624.566151][ T5829] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 624.643167][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.649793][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.961989][ T5829] Bluetooth: hci1: unexpected event for opcode 0x2031 [ 625.691316][T12567] fuse: Bad value for 'fd' [ 626.318912][T12569] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 626.654045][T12580] fuse: Unknown parameter '00000000000000000000' [ 627.495762][T12588] netlink: 'syz.2.2004': attribute type 7 has an invalid length. [ 627.508509][T12588] : entered promiscuous mode [ 628.175734][ T3669] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 628.415657][ T3669] usb 4-1: Using ep0 maxpacket: 16 [ 628.596788][ T3669] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 628.605798][ T3669] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 628.614168][ T3669] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 628.626267][ T3669] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 628.634476][ T3669] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 628.648432][ T3669] usb 4-1: config 0 has no interface number 0 [ 628.654694][ T3669] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 628.666367][ T3669] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 628.676760][ T3669] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 628.801302][ T3669] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 628.815775][ T3669] usb 4-1: config 0 interface 125 has no altsetting 0 [ 628.822767][ T3669] usb 4-1: config 0 interface 125 has no altsetting 2 [ 628.832417][ T3669] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 628.845229][ T3669] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.853592][ T3669] usb 4-1: Product: syz [ 628.858102][ T3669] usb 4-1: Manufacturer: syz [ 628.862781][ T3669] usb 4-1: SerialNumber: syz [ 628.872664][ T3669] usb 4-1: config 0 descriptor?? [ 628.885745][ T3669] usb 4-1: selecting invalid altsetting 2 [ 629.112765][T12600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.207962][T12600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.305971][ T5829] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 629.787702][ C1] usb 4-1: async_complete: urb error -71 [ 629.793915][ C1] usb 4-1: async_complete: urb error -71 [ 629.799765][ C1] usb 4-1: async_complete: urb error -71 [ 629.912953][ T3669] get_1284_register: usb error -71 [ 629.918301][ T3669] uss720 4-1:0.125: probe with driver uss720 failed with error -71 [ 629.935691][ T3669] usb 4-1: USB disconnect, device number 26 [ 629.981254][T12621] fuse: Bad value for 'fd' [ 630.045696][T12625] fuse: Unknown parameter '00000000000000000000' [ 630.527251][T12615] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 631.030011][T12639] netlink: 'syz.2.2016': attribute type 4 has an invalid length. [ 631.292977][ T5911] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 631.396366][ T5829] Bluetooth: hci1: unexpected event for opcode 0x2031 [ 632.037682][T12653] netlink: 'syz.4.2021': attribute type 15 has an invalid length. [ 632.064012][T12653] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2021'. [ 632.077352][ T5911] usb 1-1: Using ep0 maxpacket: 16 [ 632.155072][ T5911] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1023 [ 632.179939][ T5911] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 632.206360][ T5911] usb 1-1: config 1 interface 0 has no altsetting 0 [ 632.429505][ T5911] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 632.472473][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.088233][ T5911] usb 1-1: Product: 믋殁啓鱗根ࡑใ얪툏⊛Å녟鏷涟㝰铣ℾ婂忂俛鶴☇砀玭綺戲輁ݮ惡쀷ꇺ鹏볖令ᎌ鮓Ĥ弡寽䩜附鲨졾疭ោ㉝끡굑䁘喹ᨰ䑖끋쪞䐈盛⬢㫧㿗⨕幫堈ᐳ䆪勪₂郫濮㵙耍屻ꍞ겸꡵炫凲쵴혋⺦ᚧ黄诘섔麷駧娀飳㯟국⌗ﲡ㿡Ῡ躞ꋗﭴ [ 633.185155][ T5911] usb 1-1: SerialNumber: 昄ˏ砭ⶍ঄矈볞쉐끯쬐஠鉅骙涻盼᱄馁밼䫵哦ᯄ쓓凫탩宙䧉嘐☀飗쟢㣫월ꤧઆ⤝ [ 633.209087][ T5928] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 633.370632][ T5911] usb 1-1: can't set config #1, error -71 [ 633.382127][ T5911] usb 1-1: USB disconnect, device number 32 [ 633.447004][ T5928] usb 5-1: Using ep0 maxpacket: 8 [ 633.512516][ T5928] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 633.992197][ T5928] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 634.003528][ T5928] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 634.015816][ T5928] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 634.033575][ T5928] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 634.080133][ T5928] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 634.173022][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.272572][T12678] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.2026'. [ 634.426127][ T5928] usb 5-1: usb_control_msg returned -32 [ 634.516073][ T5928] usbtmc 5-1:16.0: can't read capabilities [ 635.047389][ T3669] usb 5-1: USB disconnect, device number 17 [ 637.345484][ T3669] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 637.481098][ T5965] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 638.153868][ T3669] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 638.164661][ T3669] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 638.173966][ T5965] usb 5-1: Using ep0 maxpacket: 16 [ 638.179722][ T3669] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 638.189229][ T3669] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.198709][ T5965] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 638.290385][ T5965] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 638.310854][ T5965] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 638.319468][ T5965] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 638.328017][ T5965] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 638.371826][ T5965] usb 5-1: config 0 has no interface number 0 [ 638.399869][ T5965] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 638.444361][ T5965] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 638.454859][ T5965] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 638.465436][ T5965] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 638.479346][ T5965] usb 5-1: config 0 interface 125 has no altsetting 0 [ 638.486747][ T5965] usb 5-1: config 0 interface 125 has no altsetting 2 [ 638.593736][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 638.593753][ T30] audit: type=1326 audit(1750776067.752:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.3.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21458e929 code=0x7ffc0000 [ 638.598420][ T5965] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 638.606837][ T30] audit: type=1326 audit(1750776067.752:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.3.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21458e929 code=0x7ffc0000 [ 639.215767][ T3669] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 639.239857][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.248260][ T5965] usb 5-1: Product: syz [ 639.252429][ T5965] usb 5-1: Manufacturer: syz [ 639.316837][T12715] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.2038'. [ 639.371759][ T5965] usb 5-1: SerialNumber: syz [ 639.395915][ T3669] usb 1-1: Using ep0 maxpacket: 16 [ 639.425813][ T30] audit: type=1326 audit(1750776067.772:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.3.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fe21458e929 code=0x7ffc0000 [ 639.671747][ T30] audit: type=1326 audit(1750776067.772:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.3.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21458e929 code=0x7ffc0000 [ 639.822960][ T30] audit: type=1326 audit(1750776067.772:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.3.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21458e929 code=0x7ffc0000 [ 639.929817][ T30] audit: type=1326 audit(1750776068.382:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.3.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe21458e929 code=0x7ffc0000 [ 640.299292][ T5941] usb 4-1: USB disconnect, device number 27 [ 640.320496][ T5965] usb 5-1: config 0 descriptor?? [ 640.358870][ T30] audit: type=1326 audit(1750776068.382:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.3.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21458e929 code=0x7ffc0000 [ 640.392204][ T3669] usb 1-1: device descriptor read/all, error -71 [ 640.422273][ T5965] usb 5-1: can't set config #0, error -71 [ 640.430042][ T5965] usb 5-1: USB disconnect, device number 18 [ 640.617743][ T30] audit: type=1326 audit(1750776068.382:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.3.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21458e929 code=0x7ffc0000 [ 640.647886][ T30] audit: type=1326 audit(1750776068.392:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.3.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe21458e929 code=0x7ffc0000 [ 641.273696][ T30] audit: type=1326 audit(1750776068.392:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12690 comm="syz.3.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe21458e929 code=0x7ffc0000 [ 641.488751][ T5941] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 642.160851][ T5941] usb 4-1: Using ep0 maxpacket: 32 [ 642.534992][ T5941] usb 4-1: config 0 interface 0 has no altsetting 0 [ 642.554362][ T5941] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 642.564771][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 642.577873][ T5941] usb 4-1: Product: syz [ 642.740577][ T5941] usb 4-1: config 0 descriptor?? [ 644.891220][ T1208] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 645.094626][ T1208] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 645.648166][ T1208] usb 3-1: USB disconnect, device number 31 [ 646.130152][ T5941] usbhid 4-1:0.0: can't add hid device: -71 [ 647.031032][ T5941] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 647.150138][ T5941] usb 4-1: USB disconnect, device number 28 [ 650.139948][T12808] fuse: Unknown parameter 'group_i00000000000000000000' [ 654.706069][ T1208] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 655.427466][ T1208] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 655.458196][ T1208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.573586][ T1208] usb 2-1: config 0 descriptor?? [ 657.373698][ T1208] usb 2-1: can't set config #0, error -71 [ 657.560842][ T1208] usb 2-1: USB disconnect, device number 36 [ 657.832763][T12878] syz.1.2079: attempt to access beyond end of device [ 657.832763][T12878] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 657.846286][T12878] qnx6: unable to read the first superblock [ 657.853828][T12878] syz.1.2079: attempt to access beyond end of device [ 657.853828][T12878] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 657.867292][T12878] qnx6: unable to read the first superblock [ 657.873272][T12878] qnx6: unable to read the first superblock [ 658.492613][T12864] netlink: 'syz.4.2077': attribute type 7 has an invalid length. [ 660.459572][T12897] IPVS: length: 129 != 8 [ 661.613522][T12920] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 663.605642][ T5941] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 665.990333][T12957] syz.0.2102: attempt to access beyond end of device [ 665.990333][T12957] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 666.003646][T12957] qnx6: unable to read the first superblock [ 666.011097][T12957] syz.0.2102: attempt to access beyond end of device [ 666.011097][T12957] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 666.024365][T12957] qnx6: unable to read the first superblock [ 666.030438][T12957] qnx6: unable to read the first superblock [ 666.452676][T12959] IPVS: length: 129 != 8 [ 666.931819][T12968] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 667.578321][T12963] tipc: Enabling of bearer rejected, already enabled [ 668.190740][T12976] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.4294967295) [ 671.228766][T13001] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 671.359954][T12983] netlink: 'syz.3.2110': attribute type 7 has an invalid length. [ 672.193731][T12983] : entered promiscuous mode [ 672.380491][T13015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.130971][T13025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 676.174093][T13052] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 679.041220][T13083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 679.717203][T13086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.962765][T13091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.091484][T13105] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 682.706315][T13120] fuse: Bad value for 'user_id' [ 682.711234][T13120] fuse: Bad value for 'user_id' [ 686.304501][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.310915][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.819924][T13151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.695418][ T5941] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 688.771531][T13179] lo speed is unknown, defaulting to 1000 [ 688.836914][T13179] lo speed is unknown, defaulting to 1000 [ 688.845747][T13179] lo speed is unknown, defaulting to 1000 [ 688.859701][T13179] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 688.882191][T13179] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 688.913767][ T5941] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.101919][T13181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 689.146270][T13179] lo speed is unknown, defaulting to 1000 [ 689.165144][T13179] lo speed is unknown, defaulting to 1000 [ 689.183112][T13179] lo speed is unknown, defaulting to 1000 [ 689.198138][T13179] lo speed is unknown, defaulting to 1000 [ 689.207269][T13179] lo speed is unknown, defaulting to 1000 [ 689.438483][ T5941] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 689.447652][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.116966][ T5941] usb 4-1: config 0 descriptor?? [ 690.304138][ T5941] pwc: Askey VC010 type 2 USB webcam detected. [ 690.427234][ T5941] pwc: send_video_command error -71 [ 690.536818][ T5941] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 690.891108][ T5941] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 691.935523][ T5941] usb 4-1: USB disconnect, device number 30 [ 692.840601][T13195] tipc: Started in network mode [ 692.848853][T13195] tipc: Node identity ac141425, cluster identity 4711 [ 692.859984][T13195] tipc: Enabling of bearer rejected, failed to enable media [ 693.088564][T13217] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.2171'. [ 696.466127][T13251] syz.3.2176: attempt to access beyond end of device [ 696.466127][T13251] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 696.480303][T13251] qnx6: unable to read the first superblock [ 696.488521][T13251] syz.3.2176: attempt to access beyond end of device [ 696.488521][T13251] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 696.505379][T13251] qnx6: unable to read the first superblock [ 696.511613][T13251] qnx6: unable to read the first superblock [ 697.412580][ T3669] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 697.812107][ T3669] usb 3-1: device descriptor read/all, error -71 [ 698.557356][T13263] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.2181'. [ 702.363520][ T5928] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 702.655412][ T5928] usb 1-1: Using ep0 maxpacket: 16 [ 702.678029][ T5928] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1023 [ 702.761969][T13297] syz.4.2188: attempt to access beyond end of device [ 702.761969][T13297] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0 [ 702.775221][T13297] qnx6: unable to read the first superblock [ 702.782546][T13297] syz.4.2188: attempt to access beyond end of device [ 702.782546][T13297] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 702.795837][T13297] qnx6: unable to read the first superblock [ 702.801792][T13297] qnx6: unable to read the first superblock [ 703.196510][ T5928] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 703.209437][ T5928] usb 1-1: config 1 interface 0 has no altsetting 0 [ 703.220605][ T5928] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 703.245259][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.276910][ T5928] usb 1-1: Product: 믋殁啓鱗根ࡑใ얪툏⊛Å녟鏷涟㝰铣ℾ婂忂俛鶴☇砀玭綺戲輁ݮ惡쀷ꇺ鹏볖令ᎌ鮓Ĥ弡寽䩜附鲨졾疭ោ㉝끡굑䁘喹ᨰ䑖끋쪞䐈盛⬢㫧㿗⨕幫堈ᐳ䆪勪₂郫濮㵙耍屻ꍞ겸꡵炫凲쵴혋⺦ᚧ黄诘섔麷駧娀飳㯟국⌗ﲡ㿡Ῡ躞ꋗﭴ [ 703.403802][ T5928] usb 1-1: SerialNumber: 昄ˏ砭ⶍ঄矈볞쉐끯쬐஠鉅骙涻盼᱄馁밼䫵哦ᯄ쓓凫탩宙䧉嘐☀飗쟢㣫월ꤧઆ⤝ [ 703.436640][T13283] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 704.498450][ T5928] usb 1-1: USB disconnect, device number 35 [ 705.260508][T13311] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 705.670532][T13314] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.2194'. [ 705.965477][ T5941] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 706.169584][ T5941] usb 2-1: Using ep0 maxpacket: 32 [ 706.224887][T13325] tmpfs: Bad value for 'mpol' [ 706.225459][ T3669] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 706.515342][ T5941] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 706.523567][ T5941] usb 2-1: config 0 has no interface number 0 [ 706.673660][ T5941] usb 2-1: config 0 interface 184 has no altsetting 0 [ 706.838828][ T5941] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 706.862317][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.387114][ T5941] usb 2-1: Product: syz [ 707.393613][ T3669] usb 1-1: unable to get BOS descriptor or descriptor too short [ 707.407844][ T5941] usb 2-1: Manufacturer: syz [ 707.413676][ T3669] usb 1-1: no configurations [ 707.422566][ T5941] usb 2-1: SerialNumber: syz [ 707.431707][ T3669] usb 1-1: can't read configurations, error -22 [ 707.579158][ T5941] usb 2-1: config 0 descriptor?? [ 707.599059][ T5941] smsc75xx v1.0.0 [ 707.609445][ T5941] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 707.671432][ T5941] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 708.344746][ T5829] Bluetooth: hci1: unexpected event for opcode 0x2031 [ 709.804063][ T1208] usb 2-1: USB disconnect, device number 37 [ 709.863769][T13359] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.2206'. [ 709.965461][ T5928] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 710.113505][ T5928] usb 3-1: device descriptor read/64, error -71 [ 710.225638][T13367] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 710.814876][ T5928] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 711.484628][ T5928] usb 3-1: device descriptor read/64, error -71 [ 711.615819][ T5928] usb usb3-port1: attempt power cycle [ 712.236520][ T5928] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 712.364172][T13387] IPVS: length: 129 != 8 [ 712.475739][ T5928] usb 3-1: device not accepting address 36, error -71 [ 712.495437][ T1208] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 712.538705][T13392] fuse: Unknown parameter '0x0000000000000003' [ 712.845765][ T1208] usb 2-1: unable to get BOS descriptor or descriptor too short [ 712.861398][ T1208] usb 2-1: no configurations [ 712.943624][T13400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 713.435615][ T1208] usb 2-1: can't read configurations, error -22 [ 715.915452][ T5928] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 716.905567][ T5928] usb 5-1: Using ep0 maxpacket: 16 [ 716.920242][ T5928] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1023 [ 716.997782][ T5928] usb 5-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 717.014415][ T5928] usb 5-1: config 1 interface 0 has no altsetting 0 [ 717.030017][ T5928] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 717.071932][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.073733][T13437] fuse: Unknown parameter 'fd0x0000000000000003' [ 717.083771][ T5928] usb 5-1: Product: 믋殁啓鱗根ࡑใ얪툏⊛Å녟鏷涟㝰铣ℾ婂忂俛鶴☇砀玭綺戲輁ݮ惡쀷ꇺ鹏볖令ᎌ鮓Ĥ弡寽䩜附鲨졾疭ោ㉝끡굑䁘喹ᨰ䑖끋쪞䐈盛⬢㫧㿗⨕幫堈ᐳ䆪勪₂郫濮㵙耍屻ꍞ겸꡵炫凲쵴혋⺦ᚧ黄诘섔麷駧娀飳㯟국⌗ﲡ㿡Ῡ躞ꋗﭴ [ 717.173401][ T5928] usb 5-1: SerialNumber: 昄ˏ砭ⶍ঄矈볞쉐끯쬐஠鉅骙涻盼᱄馁밼䫵哦ᯄ쓓凫탩宙䧉嘐☀飗쟢㣫월ꤧઆ⤝ [ 717.344289][ T5928] usb 5-1: can't set config #1, error -71 [ 717.405646][ T5928] usb 5-1: USB disconnect, device number 19 [ 717.415436][T13444] IPVS: length: 129 != 8 [ 717.565885][ T1208] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 717.750372][ T1208] usb 3-1: unable to get BOS descriptor or descriptor too short [ 717.779169][ T1208] usb 3-1: no configurations [ 717.791132][ T1208] usb 3-1: can't read configurations, error -22 [ 717.925730][ T5928] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 718.843235][ T5928] usb 5-1: Using ep0 maxpacket: 32 [ 718.852064][ T5928] usb 5-1: config 0 interface 0 has no altsetting 0 [ 718.865334][ T5928] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 718.881013][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 719.566211][ T5928] usb 5-1: Product: syz [ 719.742715][ T5928] usb 5-1: config 0 descriptor?? [ 721.255847][ T3669] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 721.290949][ T5928] waterforce 0003:1044:7A4D.0005: unknown main item tag 0x0 [ 721.316516][T13478] fuse: Unknown parameter 'fd0x0000000000000003' [ 721.340687][ T5928] waterforce 0003:1044:7A4D.0005: unknown main item tag 0x0 [ 721.378394][ T5928] waterforce 0003:1044:7A4D.0005: unknown main item tag 0x0 [ 721.392843][ T5928] waterforce 0003:1044:7A4D.0005: unknown main item tag 0x0 [ 721.406555][ T3669] usb 4-1: device descriptor read/64, error -71 [ 721.411584][ T5928] waterforce 0003:1044:7A4D.0005: unknown main item tag 0x0 [ 721.425969][ T5928] waterforce 0003:1044:7A4D.0005: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.4-1/input0 [ 721.554484][ T5928] waterforce 0003:1044:7A4D.0005: fw version request failed with -38 [ 721.592608][ T5928] usb 5-1: USB disconnect, device number 20 [ 721.815811][ T3669] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 722.564703][T13489] fido_id[13489]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 722.675621][ T5941] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 722.692714][T13496] IPVS: length: 129 != 8 [ 722.845486][ T5941] usb 1-1: Using ep0 maxpacket: 16 [ 722.854640][ T5941] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1023 [ 723.035875][ T5941] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 723.084332][ T5941] usb 1-1: config 1 interface 0 has no altsetting 0 [ 723.114922][ T5941] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 723.142115][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.150917][ T5941] usb 1-1: Product: 믋殁啓鱗根ࡑใ얪툏⊛Å녟鏷涟㝰铣ℾ婂忂俛鶴☇砀玭綺戲輁ݮ惡쀷ꇺ鹏볖令ᎌ鮓Ĥ弡寽䩜附鲨졾疭ោ㉝끡굑䁘喹ᨰ䑖끋쪞䐈盛⬢㫧㿗⨕幫堈ᐳ䆪勪₂郫濮㵙耍屻ꍞ겸꡵炫凲쵴혋⺦ᚧ黄诘섔麷駧娀飳㯟국⌗ﲡ㿡Ῡ躞ꋗﭴ [ 723.192922][ T5941] usb 1-1: SerialNumber: 昄ˏ砭ⶍ঄矈볞쉐끯쬐஠鉅骙涻盼᱄馁밼䫵哦ᯄ쓓凫탩宙䧉嘐☀飗쟢㣫월ꤧઆ⤝ [ 723.348117][T13481] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 723.415856][ T5928] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 724.422727][ T5941] usb 1-1: USB disconnect, device number 39 [ 724.438514][ T5928] usb 5-1: config 0 has no interfaces? [ 724.550637][T13508] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 725.062725][ T5928] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 725.685907][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.693995][ T5928] usb 5-1: Product: syz [ 725.827056][ T5928] usb 5-1: Manufacturer: syz [ 725.831836][ T5928] usb 5-1: SerialNumber: syz [ 725.855094][ T5928] usb 5-1: config 0 descriptor?? [ 726.215534][ T1208] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 727.068335][ T1208] usb 4-1: Using ep0 maxpacket: 8 [ 727.235118][ T1208] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 727.259030][ T1208] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 728.682960][ T1208] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 729.034058][ T1208] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 729.052071][ T1208] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 729.065219][ T1208] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 729.074473][ T1208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.092555][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 729.115606][ T1208] usb 4-1: can't set config #16, error -32 [ 729.183141][T13534] fuse: Invalid rootmode [ 729.293395][ T1208] usb 4-1: USB disconnect, device number 33 [ 730.322143][ T5928] usb 5-1: can't set config #0, error -71 [ 730.359665][ T5928] usb 5-1: USB disconnect, device number 21 [ 730.571278][T13551] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 734.107114][T13577] fuse: Invalid rootmode [ 734.140885][ T5928] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 734.311606][ T5911] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 734.675439][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 734.680834][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 734.746979][ T5928] usb 4-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1023 [ 734.761531][ T5911] usb 2-1: config 0 interface 0 has no altsetting 0 [ 734.779582][ T5928] usb 4-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 734.828276][ T5911] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 734.868237][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 734.881753][ T5928] usb 4-1: config 1 interface 0 has no altsetting 0 [ 734.895351][ T5911] usb 2-1: Product: syz [ 734.916969][ T5928] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 734.935789][ T5911] usb 2-1: config 0 descriptor?? [ 734.955816][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.082286][ T5928] usb 4-1: Product: 믋殁啓鱗根ࡑใ얪툏⊛Å녟鏷涟㝰铣ℾ婂忂俛鶴☇砀玭綺戲輁ݮ惡쀷ꇺ鹏볖令ᎌ鮓Ĥ弡寽䩜附鲨졾疭ោ㉝끡굑䁘喹ᨰ䑖끋쪞䐈盛⬢㫧㿗⨕幫堈ᐳ䆪勪₂郫濮㵙耍屻ꍞ겸꡵炫凲쵴혋⺦ᚧ黄诘섔麷駧娀飳㯟국⌗ﲡ㿡Ῡ躞ꋗﭴ [ 735.808247][ T5928] usb 4-1: SerialNumber: 昄ˏ砭ⶍ঄矈볞쉐끯쬐஠鉅骙涻盼᱄馁밼䫵哦ᯄ쓓凫탩宙䧉嘐☀飗쟢㣫월ꤧઆ⤝ [ 735.952266][ T5928] usb 4-1: can't set config #1, error -71 [ 736.235416][ T5928] usb 4-1: USB disconnect, device number 34 [ 736.653905][T13599] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 737.694309][T13608] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 738.251816][ T5911] usbhid 2-1:0.0: can't add hid device: -71 [ 738.268672][ T5911] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 738.318138][ T5911] usb 2-1: USB disconnect, device number 40 [ 738.480396][T13619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2286'. [ 739.248527][ T5928] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 739.918124][ T5928] usb 5-1: Using ep0 maxpacket: 32 [ 740.023101][T13633] tipc: Enabling of bearer rejected, failed to enable media [ 740.418558][ T5928] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 740.718014][ T5928] usb 5-1: config 0 has no interface number 0 [ 740.901135][ T5928] usb 5-1: config 0 interface 184 has no altsetting 0 [ 741.279690][T13650] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 742.164857][ T5829] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 746.304715][T13688] tipc: Enabling of bearer rejected, already enabled [ 746.820586][ T5928] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 746.846618][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.886655][ T5928] usb 5-1: Product: syz [ 746.905419][T13592] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 746.933439][ T5928] usb 5-1: Manufacturer: syz [ 746.961963][ T5928] usb 5-1: config 0 descriptor?? [ 746.983252][ T5928] usb 5-1: can't set config #0, error -32 [ 747.778058][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.864529][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.289664][T13592] usb 4-1: Using ep0 maxpacket: 16 [ 748.313266][ T5911] usb 5-1: USB disconnect, device number 22 [ 748.338794][T13592] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 748.372697][T13592] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 748.392950][T13592] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 748.410108][T13592] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 748.429562][T13592] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 748.449449][T13592] usb 4-1: config 0 has no interface number 0 [ 748.466105][T13592] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 748.495587][T13592] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 748.512283][T13592] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 748.525546][ T5928] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 748.548558][T13592] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 748.564339][T13592] usb 4-1: config 0 interface 125 has no altsetting 0 [ 748.634512][T13592] usb 4-1: config 0 interface 125 has no altsetting 2 [ 748.648010][T13592] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 748.665490][ T5928] usb 3-1: device descriptor read/64, error -71 [ 748.692452][T13592] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.715827][T13592] usb 4-1: Product: syz [ 748.720066][T13592] usb 4-1: Manufacturer: syz [ 748.735433][T13592] usb 4-1: SerialNumber: syz [ 749.154669][T13592] usb 4-1: config 0 descriptor?? [ 749.177522][T13592] usb 4-1: selecting invalid altsetting 2 [ 749.467391][ T5928] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 749.608794][ C0] usb 4-1: async_complete: urb error -71 [ 749.614656][ C0] usb 4-1: async_complete: urb error -71 [ 749.620480][ C0] usb 4-1: async_complete: urb error -71 [ 749.671923][ T5928] usb 3-1: device descriptor read/64, error -71 [ 749.679131][T13592] get_1284_register: usb error -71 [ 750.151295][T13592] uss720 4-1:0.125: probe with driver uss720 failed with error -71 [ 750.166570][T13592] usb 4-1: USB disconnect, device number 35 [ 750.265847][ T5928] usb usb3-port1: attempt power cycle [ 750.705524][ T5928] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 750.823671][ T5928] usb 3-1: device descriptor read/8, error -71 [ 753.966222][T13754] netlink: 'syz.0.2318': attribute type 7 has an invalid length. [ 754.706461][T13760] netlink: 'syz.4.2324': attribute type 7 has an invalid length. [ 755.287751][T13772] syz.3.2326: attempt to access beyond end of device [ 755.287751][T13772] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 755.300686][T13772] qnx6: unable to read the first superblock [ 755.307158][T13772] syz.3.2326: attempt to access beyond end of device [ 755.307158][T13772] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 755.320094][T13772] qnx6: unable to read the first superblock [ 755.326160][T13772] qnx6: unable to read the first superblock [ 755.340439][T13776] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 756.416045][T13592] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 756.697274][T13791] fuse: Bad value for 'rootmode' [ 756.805531][T13592] usb 3-1: Using ep0 maxpacket: 16 [ 756.829843][T13592] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 756.850894][T13592] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 756.871297][T13592] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 756.885391][T13592] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 756.913343][T13592] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 756.958661][T13592] usb 3-1: config 0 has no interface number 0 [ 757.003379][T13592] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 757.036651][ T3669] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 757.098735][T13592] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 757.130385][T13592] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 757.231830][ T3669] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 757.542358][ T3669] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.643664][T13592] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 757.675370][T13592] usb 3-1: config 0 interface 125 has no altsetting 0 [ 757.682217][T13592] usb 3-1: config 0 interface 125 has no altsetting 2 [ 757.737268][T13592] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 757.780573][T13592] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.799858][T13592] usb 3-1: Product: syz [ 757.804215][T13592] usb 3-1: Manufacturer: syz [ 757.825578][ T3669] usb 4-1: Product: syz [ 757.829795][ T3669] usb 4-1: Manufacturer: syz [ 757.834395][ T3669] usb 4-1: SerialNumber: syz [ 757.864792][T13592] usb 3-1: SerialNumber: syz [ 757.871662][ T3669] usb 4-1: config 0 descriptor?? [ 757.896289][T13592] usb 3-1: config 0 descriptor?? [ 757.923057][T13592] usb 3-1: selecting invalid altsetting 2 [ 758.286496][ T3669] usb-storage 4-1:0.0: USB Mass Storage device detected [ 758.520088][ C0] usb 3-1: async_complete: urb error -71 [ 758.525892][ C0] usb 3-1: async_complete: urb error -71 [ 758.531619][ C0] usb 3-1: async_complete: urb error -71 [ 758.540043][T13592] get_1284_register: usb error -71 [ 758.545403][T13592] uss720 3-1:0.125: probe with driver uss720 failed with error -71 [ 758.973143][ T3669] usb 4-1: USB disconnect, device number 36 [ 759.073606][T13592] usb 3-1: USB disconnect, device number 44 [ 759.505662][ T3669] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 759.670257][ T3669] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.064610][T13830] syz.1.2340: attempt to access beyond end of device [ 760.064610][T13830] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 760.078659][T13830] qnx6: unable to read the first superblock [ 760.085634][T13830] syz.1.2340: attempt to access beyond end of device [ 760.085634][T13830] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 760.098756][T13830] qnx6: unable to read the first superblock [ 760.104693][T13830] qnx6: unable to read the first superblock [ 760.142062][ T3669] usb 4-1: config 0 has no interfaces? [ 760.387642][ T3669] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 760.428242][ T3669] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.459153][ T3669] usb 4-1: config 0 descriptor?? [ 760.698724][T13821] netlink: 'syz.3.2341': attribute type 1 has an invalid length. [ 761.270448][T13842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2341'. [ 761.344062][T13821] 8021q: adding VLAN 0 to HW filter on device bond2 [ 761.353680][T13845] fuse: Unknown parameter 'use00000000000000000000' [ 761.395954][T13844] bond2: (slave dummy0): making interface the new active one [ 761.404860][T13844] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 761.423353][T13842] vlan0: entered promiscuous mode [ 761.435412][T13842] bond2: entered promiscuous mode [ 761.601120][ T5941] usb 4-1: USB disconnect, device number 37 [ 761.977319][T13854] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 761.986423][T13854] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 762.580949][T13856] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 765.155339][T13880] netlink: 'syz.2.2354': attribute type 7 has an invalid length. [ 766.052091][T13892] fuse: Unknown parameter 'use00000000000000000000' [ 766.246556][T13872] Bluetooth: hci4: command 0x0406 tx timeout [ 769.156773][T13915] tmpfs: Bad value for 'mpol' [ 769.549329][T13919] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 771.672678][T13925] netlink: 'syz.0.2367': attribute type 7 has an invalid length. [ 772.096804][ T5829] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 772.314217][T13952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2373'. [ 774.826477][T13968] netlink: 'syz.3.2378': attribute type 7 has an invalid length. [ 776.918532][ T5829] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 779.061624][ T5829] Bluetooth: hci1: unexpected event for opcode 0x2031 [ 779.880989][T14002] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 780.279843][ T5829] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 780.714724][T14012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2389'. [ 781.654510][T13592] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 781.905404][T13592] usb 5-1: Using ep0 maxpacket: 32 [ 783.036774][T13592] usb 5-1: config 0 interface 0 has no altsetting 0 [ 783.048735][T13592] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 783.070863][T13592] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 783.090810][T13592] usb 5-1: Product: syz [ 783.116735][T13592] usb 5-1: config 0 descriptor?? [ 783.134369][T14034] fuse: Unknown parameter 'user_i00000000000000000000' [ 783.625410][ T5928] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 784.565108][ T5928] usb 3-1: device descriptor read/64, error -71 [ 785.088709][ T5829] Bluetooth: hci1: unexpected event for opcode 0x2031 [ 785.110967][T13592] waterforce 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 785.118501][T13592] waterforce 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 785.125905][T13592] waterforce 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 785.133214][T13592] waterforce 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 785.140569][T13592] waterforce 0003:1044:7A4D.0006: unknown main item tag 0x0 [ 785.147957][ T5928] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 785.161464][T13592] waterforce 0003:1044:7A4D.0006: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.4-1/input0 [ 785.233089][T13592] waterforce 0003:1044:7A4D.0006: fw version request failed with -38 [ 785.442312][T14052] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 785.687441][ T5928] usb 3-1: device descriptor read/64, error -71 [ 785.733053][T13592] usb 5-1: USB disconnect, device number 23 [ 785.830678][ T5928] usb usb3-port1: attempt power cycle [ 785.863204][T14056] fido_id[14056]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 787.365710][T14066] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 788.180004][ T5928] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 788.435343][ T5928] usb 3-1: device not accepting address 47, error -71 [ 788.925565][ T5911] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 789.266420][T14080] fuse: Unknown parameter 'user_i00000000000000000000' [ 790.289210][ T5911] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.299570][ T5911] usb 1-1: config 0 has no interfaces? [ 790.305043][ T5911] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 790.324692][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.344729][ T5911] usb 1-1: config 0 descriptor?? [ 790.446897][T14091] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.2413'. [ 790.567801][T14075] netlink: 'syz.0.2405': attribute type 1 has an invalid length. [ 790.682377][T14098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2405'. [ 790.695349][ T5829] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 790.760147][T14101] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 791.076176][T14075] 8021q: adding VLAN 0 to HW filter on device bond3 [ 791.104945][T14098] vlan2: entered promiscuous mode [ 791.157458][T14098] bond3: entered promiscuous mode [ 792.021492][T14100] bond3: (slave dummy0): making interface the new active one [ 792.033640][T14100] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 792.082042][ T5941] usb 1-1: USB disconnect, device number 40 [ 793.087151][T14123] fuse: Unknown parameter 'user_id00000000000000000000' [ 793.449247][T14134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 794.167329][T14143] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.2425'. [ 795.204858][T14155] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 796.195467][ T5941] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 796.437546][T14169] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 796.638459][ T5941] usb 5-1: Using ep0 maxpacket: 32 [ 796.752207][ T5941] usb 5-1: config 0 interface 0 has no altsetting 0 [ 796.782078][ T5941] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 796.849021][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 796.867083][ T5941] usb 5-1: Product: syz [ 796.884233][ T5941] usb 5-1: config 0 descriptor?? [ 798.007575][T14173] fuse: Unknown parameter 'user_id00000000000000000000' [ 798.031710][ T5941] waterforce 0003:1044:7A4D.0007: unknown main item tag 0x0 [ 798.065697][ T5941] waterforce 0003:1044:7A4D.0007: unknown main item tag 0x0 [ 798.085459][ T5941] waterforce 0003:1044:7A4D.0007: unknown main item tag 0x0 [ 798.092881][ T5941] waterforce 0003:1044:7A4D.0007: unknown main item tag 0x0 [ 798.153910][ T5941] waterforce 0003:1044:7A4D.0007: unknown main item tag 0x0 [ 798.358675][ T5941] waterforce 0003:1044:7A4D.0007: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.4-1/input0 [ 798.945117][T14180] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 798.954207][T14180] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 799.176671][ T5941] waterforce 0003:1044:7A4D.0007: fw version request failed with -38 [ 799.359216][T14191] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 799.971730][T14187] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.2439'. [ 800.065535][ T5941] usb 5-1: USB disconnect, device number 24 [ 800.256351][T14199] netlink: 'syz.1.2442': attribute type 15 has an invalid length. [ 800.434864][T14199] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2442'. [ 800.819724][T14198] fido_id[14198]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 800.840136][T14207] fuse: Unknown parameter 'user_id00000000000000000000' [ 801.087013][ T3669] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 801.345495][ T3669] usb 2-1: Using ep0 maxpacket: 8 [ 801.378551][T14216] netlink: 'syz.0.2446': attribute type 7 has an invalid length. [ 801.612628][ T3669] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 801.659809][ T3669] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 802.041108][ T3669] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 802.074669][ T3669] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 802.098270][ T3669] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 802.123021][ T3669] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 802.173139][ T3669] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.203452][T14220] netlink: 'syz.3.2448': attribute type 7 has an invalid length. [ 802.941550][ T3669] usb 2-1: usb_control_msg returned -32 [ 802.953648][ T3669] usbtmc 2-1:16.0: can't read capabilities [ 803.593879][ T3669] usb 2-1: USB disconnect, device number 41 [ 803.815341][T14245] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 805.218978][T14254] fuse: Bad value for 'fd' [ 807.340008][T14287] fuse: Unknown parameter 'user_id00000000000000000000' [ 807.390683][T13592] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 807.983209][T13592] usb 1-1: unable to get BOS descriptor or descriptor too short [ 808.002990][T13592] usb 1-1: no configurations [ 808.014596][T13592] usb 1-1: can't read configurations, error -22 [ 808.706080][T14303] fuse: Bad value for 'fd' [ 808.729276][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.735742][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.907240][T14309] netlink: 'syz.0.2475': attribute type 7 has an invalid length. [ 811.309431][T14330] fuse: Unknown parameter 'user_id00000000000000000000' [ 811.536515][T14333] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 813.853605][T14353] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 816.086409][T14384] syz.0.2494: attempt to access beyond end of device [ 816.086409][T14384] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 816.099900][T14384] qnx6: unable to read the first superblock [ 816.107176][T14384] syz.0.2494: attempt to access beyond end of device [ 816.107176][T14384] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 816.120252][T14384] qnx6: unable to read the first superblock [ 816.126223][T14384] qnx6: unable to read the first superblock [ 817.935515][T14410] netlink: 'syz.4.2500': attribute type 7 has an invalid length. [ 819.576591][T14420] tipc: Enabling of bearer rejected, already enabled [ 820.914351][T14430] autofs4:pid:14430:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.4), cmd(0xc0189379) [ 820.927754][T14430] autofs4:pid:14430:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189379) [ 821.084337][ T5911] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 821.241439][T14437] netlink: 'syz.3.2509': attribute type 15 has an invalid length. [ 821.249858][T14437] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2509'. [ 821.595659][T13592] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 821.855344][ T5911] usb 5-1: unable to get BOS descriptor or descriptor too short [ 821.865979][ T5911] usb 5-1: no configurations [ 821.870865][ T5911] usb 5-1: can't read configurations, error -22 [ 821.985659][T13592] usb 4-1: Using ep0 maxpacket: 8 [ 821.997800][T13592] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 822.009687][T13592] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 822.137755][T14443] syz.2.2510: attempt to access beyond end of device [ 822.137755][T14443] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 822.150982][T14443] qnx6: unable to read the first superblock [ 822.158197][T14443] syz.2.2510: attempt to access beyond end of device [ 822.158197][T14443] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 822.171338][T14443] qnx6: unable to read the first superblock [ 822.177326][T14443] qnx6: unable to read the first superblock [ 822.478536][T13592] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 822.536795][T13592] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 822.553207][T13592] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 822.652370][T14446] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 822.700085][T13592] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 822.709368][T13592] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.179503][T14446] IPVS: set_ctl: invalid protocol: 0 4.0.0.0:32771 [ 823.314550][T14452] netlink: 'syz.1.2511': attribute type 7 has an invalid length. [ 823.455909][T13592] usb 4-1: usb_control_msg returned -32 [ 823.461631][T13592] usbtmc 4-1:16.0: can't read capabilities [ 823.576294][T14452] : entered promiscuous mode [ 825.119001][ T5911] usb 4-1: USB disconnect, device number 38 [ 826.305337][ T3669] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 827.709012][ T3669] usb 2-1: config 0 has no interfaces? [ 827.718209][ T3669] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 827.729428][ T3669] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.738813][ T3669] usb 2-1: Product: syz [ 827.743103][ T3669] usb 2-1: Manufacturer: syz [ 827.751584][ T3669] usb 2-1: SerialNumber: syz [ 827.778370][ T3669] usb 2-1: config 0 descriptor?? [ 828.046504][ T5911] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 828.275592][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short [ 828.288821][ T5911] usb 3-1: no configurations [ 828.870173][ T5911] usb 3-1: can't read configurations, error -22 [ 830.079691][T14472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.143692][T14472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.898875][ T5911] usb 2-1: USB disconnect, device number 42 [ 830.945408][ T3669] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 831.115488][ T3669] usb 1-1: Using ep0 maxpacket: 32 [ 831.132037][ T3669] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 831.984364][ T3669] usb 1-1: config 0 has no interface number 0 [ 832.087437][ T3669] usb 1-1: config 0 interface 184 has no altsetting 0 [ 832.330817][ T3669] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 832.493513][ T3669] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.578310][ T3669] usb 1-1: Product: syz [ 832.582540][ T3669] usb 1-1: Manufacturer: syz [ 832.642561][ T3669] usb 1-1: SerialNumber: syz [ 833.099207][ T3669] usb 1-1: config 0 descriptor?? [ 833.123430][ T3669] smsc75xx v1.0.0 [ 833.147729][ T3669] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 833.177507][ T3669] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 833.324640][T13872] Bluetooth: hci4: command 0x0406 tx timeout [ 834.196578][ T3669] usb 1-1: USB disconnect, device number 43 [ 837.288767][T14558] fuse: Bad value for 'fd' [ 837.553432][T14560] tipc: Started in network mode [ 837.559044][T14560] tipc: Node identity ac141425, cluster identity 4711 [ 837.568062][T14560] tipc: Enabling of bearer rejected, failed to enable media [ 840.035476][ T5911] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 840.150259][T14573] fuse: Unknown parameter '0x0000000000000003' [ 840.507571][T14577] Can't find a SQUASHFS superblock on nullb0 [ 841.412542][ T5911] usb 5-1: device descriptor read/all, error -71 [ 841.535546][T13592] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 841.802876][T13592] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 842.876686][T13592] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 842.939197][T13592] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 843.515456][T13592] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 843.555819][T13592] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.600617][T13592] usb 2-1: config 0 descriptor?? [ 843.826699][T14591] netlink: 'syz.4.2546': attribute type 7 has an invalid length. [ 845.057309][T14607] fuse: Unknown parameter '0x0000000000000003' [ 845.093707][T13592] usb 2-1: can't set config #0, error -71 [ 845.112314][T13592] usb 2-1: USB disconnect, device number 43 [ 846.065350][ T3669] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 846.848573][ T3669] usb 5-1: unable to get BOS descriptor or descriptor too short [ 846.867318][ T3669] usb 5-1: no configurations [ 846.968730][ T3669] usb 5-1: can't read configurations, error -22 [ 848.124059][T14636] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 848.365590][T13592] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 848.442810][T14635] netlink: 'syz.1.2562': attribute type 15 has an invalid length. [ 848.467150][T14635] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2562'. [ 848.587138][T13592] usb 4-1: Using ep0 maxpacket: 8 [ 848.711820][T13592] usb 4-1: config 0 has an invalid interface number: 33 but max is 1 [ 848.726394][T13592] usb 4-1: config 0 has no interface number 1 [ 848.732563][T13592] usb 4-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 848.758075][T13592] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 848.942628][T13592] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 848.953796][T13592] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.075614][ T3669] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 849.694115][T13592] usb 4-1: Product: syz [ 849.698413][T13592] usb 4-1: Manufacturer: syz [ 849.703027][T13592] usb 4-1: SerialNumber: syz [ 849.729006][T13592] usb 4-1: config 0 descriptor?? [ 849.792381][T13592] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 849.945588][ T3669] usb 2-1: Using ep0 maxpacket: 8 [ 850.367727][T13592] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 850.379229][T13592] usb 4-1: USB disconnect, device number 39 [ 850.396547][ T2342] pvrusb2: Failed to submit write-control URB status=-19 [ 850.404358][ T3669] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 850.423026][ T2342] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 850.453550][ T3669] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 850.458031][ T2342] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 850.499981][ T3669] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 850.505658][ T5911] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 850.530510][ T3669] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 850.549473][ T3669] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 850.566167][ T3669] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 850.859671][ T3669] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.986842][ T5911] usb 3-1: device descriptor read/64, error -71 [ 851.407678][ T5911] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 851.418926][ T3669] usb 2-1: can't set config #16, error -71 [ 851.461860][ T3669] usb 2-1: USB disconnect, device number 44 [ 851.595367][ T5911] usb 3-1: device descriptor read/64, error -71 [ 852.335315][ T5911] usb usb3-port1: attempt power cycle [ 852.341169][T14655] tmpfs: Bad value for 'mpol' [ 852.595436][ T3669] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 852.695454][ T5911] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 852.705765][ T5928] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 852.726116][ T5911] usb 3-1: device descriptor read/8, error -71 [ 852.755339][ T3669] usb 1-1: Using ep0 maxpacket: 16 [ 852.767635][ T3669] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1023 [ 852.778669][ T3669] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 852.794194][ T3669] usb 1-1: config 1 interface 0 has no altsetting 0 [ 852.812979][ T3669] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 852.824962][ T3669] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.833462][ T3669] usb 1-1: Product: 믋殁啓鱗根ࡑใ얪툏⊛Å녟鏷涟㝰铣ℾ婂忂俛鶴☇砀玭綺戲輁ݮ惡쀷ꇺ鹏볖令ᎌ鮓Ĥ弡寽 [ 852.916169][ T5928] usb 2-1: unable to get BOS descriptor or descriptor too short [ 852.922043][ T3669] usb 1-1: SerialNumber: 昄ˏ砭ⶍ঄矈볞쉐끯쬐஠鉅骙涻盼᱄馁밼䫵哦ᯄ쓓凫탩宙䧉嘐☀飗쟢㣫월 [ 852.929812][ T5928] usb 2-1: no configurations [ 852.951949][ T5928] usb 2-1: can't read configurations, error -22 [ 852.966338][ T5911] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 853.006577][T14655] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 853.185392][ T5911] usb 3-1: device not accepting address 54, error -71 [ 853.192828][ T5911] usb usb3-port1: unable to enumerate USB device [ 853.326556][ T3669] usb 1-1: USB disconnect, device number 44 [ 856.204921][T14710] tmpfs: Bad value for 'mpol' [ 857.184182][ T5928] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 857.375571][ T5928] usb 5-1: Using ep0 maxpacket: 16 [ 857.401103][ T5928] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1023 [ 857.450377][ T5928] usb 5-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 857.467526][ T5928] usb 5-1: config 1 interface 0 has no altsetting 0 [ 857.947108][ T5928] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 857.985321][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.087904][ T5928] usb 5-1: Product: 믋殁啓鱗根ࡑใ얪툏⊛Å녟鏷涟㝰铣ℾ婂忂俛鶴☇砀玭綺戲輁ݮ惡쀷ꇺ鹏볖令ᎌ鮓Ĥ弡寽 [ 858.226548][ T5928] usb 5-1: SerialNumber: 昄ˏ砭ⶍ঄矈볞쉐끯쬐஠鉅骙涻盼᱄馁밼䫵哦ᯄ쓓凫탩宙䧉嘐☀飗쟢㣫월 [ 858.320800][T14709] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 858.690558][ T5928] usb 5-1: USB disconnect, device number 31 [ 858.805474][ T1208] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 858.966897][ T1208] usb 1-1: unable to get BOS descriptor or descriptor too short [ 858.974928][ T1208] usb 1-1: no configurations [ 858.980743][ T1208] usb 1-1: can't read configurations, error -22 [ 861.606200][ T1208] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 862.065418][ T1208] usb 2-1: Using ep0 maxpacket: 8 [ 862.083642][ T1208] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.096075][ T1208] usb 2-1: config 0 has no interfaces? [ 862.160185][ T1208] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 862.398350][ T1208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.410684][ T1208] usb 2-1: Product: syz [ 862.460758][ T1208] usb 2-1: Manufacturer: syz [ 862.480237][ T1208] usb 2-1: SerialNumber: syz [ 862.831205][ T1208] usb 2-1: config 0 descriptor?? [ 863.644353][ T5928] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 863.827334][ T5928] usb 1-1: config 0 has no interfaces? [ 863.873327][ T5928] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 863.888303][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.910272][ T5928] usb 1-1: Product: syz [ 863.917318][ T5928] usb 1-1: Manufacturer: syz [ 863.922169][ T5928] usb 1-1: SerialNumber: syz [ 863.948020][ T5928] usb 1-1: config 0 descriptor?? [ 865.190775][ T5928] usb 2-1: USB disconnect, device number 47 [ 865.267631][T14772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.359200][T14772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.789120][ T5928] usb 1-1: USB disconnect, device number 47 [ 869.879895][ T1208] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 870.169156][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.180209][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.205693][ T1208] usb 2-1: Using ep0 maxpacket: 16 [ 870.383887][ T1208] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 870.398649][ T1208] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 870.668521][ T1208] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 870.715097][ T1208] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 870.738384][ T1208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.759158][ T1208] usb 2-1: Product: syz [ 870.764048][ T1208] usb 2-1: Manufacturer: syz [ 870.898924][ T1208] usb 2-1: SerialNumber: syz [ 871.975373][ T3669] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 871.991966][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 871.999947][ T1208] usb 2-1: 0:2 : does not exist [ 872.010072][ T1208] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 872.102246][ T1208] usb 2-1: USB disconnect, device number 48 [ 872.180880][ T3669] usb 1-1: unable to get BOS descriptor or descriptor too short [ 872.210219][ T3669] usb 1-1: no configurations [ 872.223388][ T3669] usb 1-1: can't read configurations, error -22 [ 872.687705][T14859] netlink: 'syz.2.2618': attribute type 7 has an invalid length. [ 876.388988][ T5829] Bluetooth: hci1: unexpected event for opcode 0x2031 [ 878.415600][ T3669] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 879.661211][ T3669] usb 3-1: unable to get BOS descriptor or descriptor too short [ 879.685865][ T3669] usb 3-1: no configurations [ 879.692002][ T3669] usb 3-1: can't read configurations, error -22 [ 881.831273][ T5965] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 882.435373][ T5965] usb 5-1: Using ep0 maxpacket: 8 [ 882.464660][ T5965] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.491482][ T5965] usb 5-1: config 0 has no interfaces? [ 882.534886][ T5965] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 882.544435][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.561490][ T5965] usb 5-1: Product: syz [ 882.585840][ T5965] usb 5-1: Manufacturer: syz [ 882.590507][ T5965] usb 5-1: SerialNumber: syz [ 883.313963][ T5965] usb 5-1: config 0 descriptor?? [ 884.187953][ T5941] usb 5-1: USB disconnect, device number 32 [ 887.285664][ T1208] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 887.446181][ T1208] usb 5-1: unable to get BOS descriptor or descriptor too short [ 887.615480][ T1208] usb 5-1: no configurations [ 887.620143][ T1208] usb 5-1: can't read configurations, error -22 [ 887.660916][T14988] netlink: 'syz.3.2650': attribute type 7 has an invalid length. [ 888.135948][ T5928] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 888.400097][ T5928] usb 1-1: Using ep0 maxpacket: 16 [ 888.618632][ T5928] usb 1-1: unable to get BOS descriptor or descriptor too short [ 888.632032][ T5928] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 888.667973][ T5928] usb 1-1: can't read configurations, error -71 [ 893.308453][T15041] syz.3.2662: attempt to access beyond end of device [ 893.308453][T15041] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 893.321575][T15041] qnx6: unable to read the first superblock [ 893.327831][T15041] syz.3.2662: attempt to access beyond end of device [ 893.327831][T15041] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 893.340621][T15041] qnx6: unable to read the first superblock [ 893.346664][T15041] qnx6: unable to read the first superblock [ 894.373390][T15053] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 894.383014][T15053] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 894.391902][ T5941] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 894.799413][ T5941] usb 2-1: unable to get BOS descriptor or descriptor too short [ 894.834667][ T5941] usb 2-1: no configurations [ 895.632048][ T5941] usb 2-1: can't read configurations, error -22 [ 896.039117][ T5829] Bluetooth: hci1: unexpected event for opcode 0x2031 [ 899.329255][ T1208] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 900.138245][ T1208] usb 2-1: Using ep0 maxpacket: 16 [ 900.156958][ T1208] usb 2-1: device descriptor read/all, error -71 [ 900.263961][T15081] tmpfs: Bad value for 'mpol' [ 900.835914][T15089] syz.3.2675: attempt to access beyond end of device [ 900.835914][T15089] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 900.849206][T15089] qnx6: unable to read the first superblock [ 900.856445][T15089] syz.3.2675: attempt to access beyond end of device [ 900.856445][T15089] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 900.928179][T15089] qnx6: unable to read the first superblock [ 900.934213][T15089] qnx6: unable to read the first superblock [ 901.710692][ T5928] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 902.544789][ T5928] usb 1-1: Using ep0 maxpacket: 16 [ 902.669141][T15105] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 902.678295][T15105] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 903.270301][ T5928] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 903.280115][ T5928] usb 1-1: can't read configurations, error -71 [ 907.421116][T15133] netlink: 'syz.0.2687': attribute type 7 has an invalid length. [ 907.714627][ T5941] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 909.135309][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 910.559182][T15161] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 910.568323][T15161] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 910.846986][ T5941] usb 2-1: unable to get BOS descriptor or descriptor too short [ 910.865856][ T5941] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 910.873475][ T5941] usb 2-1: can't read configurations, error -71 [ 911.136451][ T2342] pvrusb2: request_firmware fatal error with code=-110 [ 911.144639][ T2342] pvrusb2: Failure uploading firmware1 [ 911.153436][ T2342] pvrusb2: Device initialization was not successful. [ 911.305456][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 912.327299][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 912.428998][T13592] pvrusb2: Device being rendered inoperable [ 912.435900][ T2342] pvrusb2: Failed to submit write-control URB status=-19 [ 912.453658][ T2342] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 912.462875][ T2342] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 912.795603][ T5941] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 913.640122][T15169] netlink: 'syz.3.2696': attribute type 7 has an invalid length. [ 913.747376][ T5941] usb 5-1: device descriptor read/64, error -71 [ 913.863424][T15187] netlink: 'syz.1.2701': attribute type 7 has an invalid length. [ 914.035510][ T5941] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 914.649982][ T1208] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 916.711676][ T1208] usb 3-1: config 0 has an invalid interface number: 44 but max is 0 [ 916.751207][ T1208] usb 3-1: config 0 has no interface number 0 [ 917.251276][ T1208] usb 3-1: string descriptor 0 read error: -71 [ 917.356988][ T1208] usb 3-1: New USB device found, idVendor=04cb, idProduct=012d, bcdDevice=aa.5d [ 917.366602][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.378976][ T1208] usb 3-1: config 0 descriptor?? [ 917.398060][ T1208] usb 3-1: can't set config #0, error -71 [ 917.419609][ T1208] usb 3-1: USB disconnect, device number 57 [ 917.487868][T15212] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 917.496995][T15212] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 918.199899][T15223] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 919.165614][T15224] IPVS: length: 129 != 8 [ 919.292113][ T1208] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 919.684778][ T1208] usb 3-1: config 0 has an invalid interface number: 44 but max is 0 [ 919.707017][ T1208] usb 3-1: config 0 has no interface number 0 [ 919.744826][ T1208] usb 3-1: New USB device found, idVendor=04cb, idProduct=012d, bcdDevice=aa.5d [ 919.765433][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.785455][ T1208] usb 3-1: Product: syz [ 919.823303][ T1208] usb 3-1: Manufacturer: syz [ 919.840570][ T1208] usb 3-1: SerialNumber: syz [ 919.862574][ T1208] usb 3-1: config 0 descriptor?? [ 919.882625][ T1208] gspca_main: finepix-2.14.0 probing 04cb:012d [ 920.087559][ T5941] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 920.165623][ T5965] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 920.524656][ T3669] usb 3-1: USB disconnect, device number 58 [ 920.555472][ T5941] usb 1-1: Using ep0 maxpacket: 32 [ 920.567964][ T5941] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 920.578837][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.590224][ T5941] usb 1-1: config 0 descriptor?? [ 920.597971][ T5965] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 920.610670][ T5965] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 920.621536][ T5965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.649501][ T5965] usb 2-1: config 0 descriptor?? [ 920.663690][ T5965] pwc: Askey VC010 type 2 USB webcam detected. [ 920.678375][ T5941] cx82310_eth 1-1:0.0: probe with driver cx82310_eth failed with error -22 [ 920.691381][ T5941] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 921.759187][ T5965] pwc: recv_control_msg error -32 req 02 val 2b00 [ 922.188066][ T5965] pwc: recv_control_msg error -32 req 02 val 2700 [ 922.218075][ T5965] pwc: recv_control_msg error -32 req 02 val 2c00 [ 922.235023][ T5965] pwc: recv_control_msg error -32 req 04 val 1000 [ 922.254065][ T5965] pwc: recv_control_msg error -32 req 04 val 1300 [ 922.275192][ T5965] pwc: recv_control_msg error -32 req 04 val 1400 [ 922.639505][T15260] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 922.648558][T15260] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 922.893170][T15263] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 923.320385][ T5965] pwc: recv_control_msg error -32 req 02 val 2000 [ 923.962076][ T5194] udevd[5194]: worker [14580] /devices/platform/dummy_hcd.3/usb4/4-1 is taking a long time [ 924.113865][ T5965] pwc: recv_control_msg error -71 req 02 val 2100 [ 924.129484][ T5965] pwc: recv_control_msg error -71 req 04 val 1500 [ 924.137016][ T5965] pwc: recv_control_msg error -71 req 02 val 2500 [ 924.144480][ T5965] pwc: recv_control_msg error -71 req 02 val 2400 [ 924.163908][ T5965] pwc: recv_control_msg error -71 req 02 val 2600 [ 924.183145][T15274] IPVS: length: 129 != 8 [ 924.188102][ T5965] pwc: recv_control_msg error -71 req 02 val 2900 [ 924.211042][ T5965] pwc: recv_control_msg error -71 req 02 val 2800 [ 924.223151][ T5965] pwc: recv_control_msg error -71 req 04 val 1100 [ 924.279014][ T5965] pwc: recv_control_msg error -71 req 04 val 1200 [ 924.329076][ T5965] pwc: Registered as video103. [ 924.343116][ T3669] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 924.501330][ T5965] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 924.522574][ T5965] usb 2-1: USB disconnect, device number 55 [ 925.162923][ T3669] usb 3-1: Using ep0 maxpacket: 8 [ 925.180439][ T3669] usb 3-1: config 0 has an invalid interface number: 33 but max is 1 [ 925.265341][ T3669] usb 3-1: config 0 has no interface number 1 [ 925.273051][ T3669] usb 3-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 925.343420][ T3669] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 925.373467][ T3669] usb 3-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 925.404532][ T3669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.427724][ T3669] usb 3-1: Product: syz [ 925.544516][ T3669] usb 3-1: Manufacturer: syz [ 925.550412][ T3669] usb 3-1: SerialNumber: syz [ 925.560851][ T3669] usb 3-1: config 0 descriptor?? [ 925.577523][ T3669] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 926.168886][ T3669] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 926.204556][ T3669] usb 3-1: USB disconnect, device number 59 [ 926.218761][ T3669] pvrusb2: Device being rendered inoperable [ 926.229392][ T3669] pvrusb2: Device being rendered inoperable [ 926.390739][ T5965] usb 1-1: USB disconnect, device number 54 [ 926.638633][T13872] non-paged memory [ 926.642865][T13872] list_del corruption, ffff888023c89580->next is LIST_POISON1 (dead000000000100) [ 926.658483][T13872] ------------[ cut here ]------------ [ 926.664158][T13872] kernel BUG at lib/list_debug.c:58! [ 926.695420][T13872] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 926.701759][T13872] CPU: 1 UID: 0 PID: 13872 Comm: kworker/u9:0 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 926.714014][T13872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 926.724085][T13872] Workqueue: hci4 hci_conn_timeout [ 926.729243][T13872] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 926.736288][T13872] Code: 40 bd e1 8b 48 89 de e8 d0 00 67 fc 90 0f 0b 4c 89 e7 e8 c5 86 40 fd 48 c7 c7 a0 bd e1 8b 48 89 de 4c 89 e2 e8 b3 00 67 fc 90 <0f> 0b 4c 89 e7 e8 a8 86 40 fd 48 c7 c7 00 be e1 8b 48 89 de 4c 89 [ 926.755912][T13872] RSP: 0018:ffffc9000c53f980 EFLAGS: 00010246 [ 926.761997][T13872] RAX: 000000000000004e RBX: ffff888023c89580 RCX: 132036d757837a00 [ 926.769975][T13872] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 926.777951][T13872] RBP: ffffffff8a6eb2b0 R08: 0000000000000003 R09: 0000000000000004 [ 926.785924][T13872] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: dead000000000100 [ 926.793900][T13872] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 926.801874][T13872] FS: 0000000000000000(0000) GS:ffff888125d83000(0000) knlGS:0000000000000000 [ 926.810812][T13872] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 926.817397][T13872] CR2: 00007f6432db7bac CR3: 000000007d81c000 CR4: 00000000003526f0 [ 926.825381][T13872] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 926.833355][T13872] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 926.841329][T13872] Call Trace: [ 926.844609][T13872] [ 926.847545][T13872] hci_cmd_sync_dequeue_once+0x24a/0x370 [ 926.853193][T13872] hci_cancel_connect_sync+0xc8/0x120 [ 926.858574][T13872] hci_abort_conn+0x191/0x330 [ 926.863254][T13872] ? process_scheduled_works+0x9ef/0x17b0 [ 926.868985][T13872] process_scheduled_works+0xade/0x17b0 [ 926.874551][T13872] ? __pfx_process_scheduled_works+0x10/0x10 [ 926.880552][T13872] worker_thread+0x8a0/0xda0 [ 926.885151][T13872] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 926.891491][T13872] ? __kthread_parkme+0x7b/0x200 [ 926.896441][T13872] kthread+0x70e/0x8a0 [ 926.900512][T13872] ? __pfx_worker_thread+0x10/0x10 [ 926.905629][T13872] ? __pfx_kthread+0x10/0x10 [ 926.910223][T13872] ? _raw_spin_unlock_irq+0x23/0x50 [ 926.915429][T13872] ? lockdep_hardirqs_on+0x9c/0x150 [ 926.920633][T13872] ? __pfx_kthread+0x10/0x10 [ 926.925225][T13872] ret_from_fork+0x3fc/0x770 [ 926.929827][T13872] ? __pfx_ret_from_fork+0x10/0x10 [ 926.934943][T13872] ? __switch_to_asm+0x39/0x70 [ 926.939706][T13872] ? __switch_to_asm+0x33/0x70 [ 926.944472][T13872] ? __pfx_kthread+0x10/0x10 [ 926.949065][T13872] ret_from_fork_asm+0x1a/0x30 [ 926.953840][T13872] [ 926.956875][T13872] Modules linked in: [ 926.961917][T13872] ---[ end trace 0000000000000000 ]--- [ 927.010149][T13872] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 927.018380][T13872] Code: 40 bd e1 8b 48 89 de e8 d0 00 67 fc 90 0f 0b 4c 89 e7 e8 c5 86 40 fd 48 c7 c7 a0 bd e1 8b 48 89 de 4c 89 e2 e8 b3 00 67 fc 90 <0f> 0b 4c 89 e7 e8 a8 86 40 fd 48 c7 c7 00 be e1 8b 48 89 de 4c 89 [ 927.041602][T13872] RSP: 0018:ffffc9000c53f980 EFLAGS: 00010246 [ 927.049634][T13872] RAX: 000000000000004e RBX: ffff888023c89580 RCX: 132036d757837a00 [ 927.060182][T13872] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 927.070166][T13872] RBP: ffffffff8a6eb2b0 R08: 0000000000000003 R09: 0000000000000004 [ 927.084833][T13872] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: dead000000000100 [ 927.094276][T13872] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 927.105709][T13872] FS: 0000000000000000(0000) GS:ffff888125d83000(0000) knlGS:0000000000000000 [ 927.116642][T13872] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 927.124194][T13872] CR2: 00007ffe9474a9e8 CR3: 000000007d81c000 CR4: 00000000003526f0 [ 927.133351][T13872] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 927.144044][T13872] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 927.152533][T13872] Kernel panic - not syncing: Fatal exception [ 927.158864][T13872] Kernel Offset: disabled [ 927.163177][T13872] Rebooting in 86400 seconds..