last executing test programs: 39.430913783s ago: executing program 1 (id=581): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x7) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000000)={0x0, r1}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eef76c20c80a01c3650d0102030109021200010000100009048d0000"], 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0xfe, 0x10, 0x0, 0x0, 0x0, 0x7e4, 0x0, 0x0, 0x45, [0x7fff, 0x10000000]}}) (async) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x101002) (async) r5 = socket(0x1e, 0x5, 0x0) (async, rerun: 32) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000010001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd70000035000002000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r7], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) (async) listen(r5, 0x0) (async) accept4$inet6(r5, 0x0, 0x0, 0x0) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000080)=0x8e0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x3) 39.280763114s ago: executing program 1 (id=584): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mlock2(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000a40)=0x4, 0x4) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x4004e502, 0x0) 39.091023813s ago: executing program 1 (id=585): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12014000000000102f17340000000000000109022400010000000009040010020300010002000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 36.001984932s ago: executing program 1 (id=605): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x90, 0x0, 0x1000, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000003, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x20, 0x121, 0x6000, 0xfffd, 0x0, r3, 0x902, 0x80000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r4, 0x80140912, 0x200000000005) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000000)={0x0, "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"}) ptrace(0x10, r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r5, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) ioctl$KDDELIO(r0, 0x4b34, 0x3bf) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x40, 0x4, 0x400, 0x6, 0x8, "9a1be0cd6d8f79ba7b4db33fd5201e44c885c7"}) ioctl$KDDISABIO(r0, 0x4b37) 35.782966708s ago: executing program 1 (id=606): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000004, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x10, 0x1, 0x0, "0d3d4a3b5b7bc69a21cfb7f5eaac46dbe89b1347050000000000000002249341"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x28000000, 0x4, 0x3, 0x400000, 0x14, "3eccd800001f0000001f001000000004010100"}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000000)) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x1d4) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x1d4) syz_open_dev$vim2m(&(0x7f0000000000), 0x118, 0x2) (async) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x118, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000040)={0x68f, 0x48574653, 0x2, @discrete={0xfff, 0x5}}) r6 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) close(r6) getdents64(r4, 0x0, 0x0) read$alg(r2, &(0x7f0000000200)=""/96, 0x60) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) write(r7, &(0x7f0000000700)="f5", 0x1) splice(r7, &(0x7f0000000040), r3, 0x0, 0x6, 0x5) (async) splice(r7, &(0x7f0000000040), r3, 0x0, 0x6, 0x5) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r9) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000200", @ANYRES16=r10, @ANYBLOB="010426bd7000fbdbdf25170000001c000680150003001d62812055fd4f3ad78e15310bc349cfb5000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) 35.498986179s ago: executing program 1 (id=607): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newsa={0x13c, 0x1a, 0x413, 0x0, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x4, 0x2, 0x20, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, {0x0, 0x6, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6, 0x2792800}, 0x70bd2a, 0x3501, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20}, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x6, 0xff, 0x200}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r2, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, 0x0}) ioctl$KDSETLED(r2, 0x4b32, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newsa={0x13c, 0x1a, 0x413, 0x0, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x4, 0x2, 0x20, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, {0x0, 0x6, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6, 0x2792800}, 0x70bd2a, 0x3501, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20}, 0x0) (async) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x6, 0xff, 0x200}) (async) syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') (async) write$vhost_msg(r2, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4}) (async) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, 0x0}) (async) ioctl$KDSETLED(r2, 0x4b32, 0x2) (async) 35.206098851s ago: executing program 32 (id=607): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newsa={0x13c, 0x1a, 0x413, 0x0, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x4, 0x2, 0x20, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, {0x0, 0x6, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6, 0x2792800}, 0x70bd2a, 0x3501, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20}, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x6, 0xff, 0x200}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r2, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, 0x0}) ioctl$KDSETLED(r2, 0x4b32, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newsa={0x13c, 0x1a, 0x413, 0x0, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x4, 0x2, 0x20, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, {0x0, 0x6, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6, 0x2792800}, 0x70bd2a, 0x3501, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20}, 0x0) (async) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x6, 0xff, 0x200}) (async) syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') (async) write$vhost_msg(r2, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4}) (async) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, 0x0}) (async) ioctl$KDSETLED(r2, 0x4b32, 0x2) (async) 11.074918171s ago: executing program 2 (id=726): r0 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x8, 0x28, 0xe4d, 0x80, 0x7ff, 0xfffd, 0x5, 0x0, 0x800, 0x3, 0x2, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x40, 0xe, 0x3, {0x3, 0x1, "b2"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x40, 0x14, 0xa8, "b66fbb136cfb7c39dcbec432cbeb9b94ba76b56d5e9bb30191fe57348719e3b3e3a2d486bf8b7c75ee4b7c5ff47cec0d1cf509dbe2c4e5630541976fc3bc0e7eea2de7631205f0b72a2bcd858e5c358179a328e213e3ad86e21c30f15e7867b41ba560401c9b7de7bfdb9cbef13c9d38e864620c8d72841f3119d5c57cff66ced10e7b91f53c0cea48327052254ab19669ed60a02a59e29e54715162956615aee6ac387dd960d090"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x5, 0x1, 0x2, 0x5, 0xfff9, 0xfffe, 0x7f, 0x5, 0x69d, 0x555, 0x5, 0x4}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000380)={0x20, 0x83, 0x2}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0xfff}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) 8.006212442s ago: executing program 2 (id=750): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x250}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) mount$cgroup(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000240), 0x8010, &(0x7f0000000380)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c010000", @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf251200000008000300", @ANYRES32=r1, @ANYBLOB="0c009900010000001f0000000a00060008021100000100000800118004000600"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) 7.698378406s ago: executing program 2 (id=752): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0xfffffff7, @private0}}, 0x24) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x408180, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000000040)) 7.60412942s ago: executing program 2 (id=753): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x258a, 0x33, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x8, 0xfa}}}}}]}}]}}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x185401, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) connect$can_j1939(r2, &(0x7f0000000000)={0x1d, r4, 0x1, {0x2, 0x1, 0x1}, 0xff}, 0x18) (async) recvmsg$unix(r1, &(0x7f0000001540)={&(0x7f00000000c0), 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/39, 0x27}, {&(0x7f0000000140)=""/47, 0x2f}, {&(0x7f0000000200)=""/126, 0x7e}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000280)=""/146, 0x92}, {&(0x7f0000001400)=""/148, 0x94}, {&(0x7f0000000340)=""/109, 0x6d}], 0x7, &(0x7f0000000180)}, 0x40002000) (async) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32) r5 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x141000) (rerun: 32) ioctl$VIDIOC_ENUMINPUT(r5, 0xc050561a, &(0x7f0000000180)={0x2, "625fa4f0bfbd34d6c45994507144bf82e69024165d61e1961ac8cbd54b3cd9ae"}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000003c0)={0x0, 0x3b, 0x5, {0x5, 0xd, "4d8188"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.446754678s ago: executing program 2 (id=768): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"5eaf61abd4e48017a5a79b2d3f964717", 0x0, 0x0, {0x1, 0x1}, {0x7, 0x4}, 0x37, [0xff, 0x7f, 0x400, 0x16db7705, 0x4, 0x70, 0x80, 0x7, 0x5f13, 0x40, 0x446, 0x500000000000, 0x1, 0xca, 0x9, 0x4f]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000200)=r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104e380102030109021b00010000100009045902019b042a00090582"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) (async) syz_usb_control_io$printer(r4, 0x0, 0x0) (async) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000132020000"], 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, 0x0, &(0x7f0000000080)=0x16) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000040)={0x55, 0xa, 0x0, "3258c546dacccfae1e008faa00000000f4ff4000"}) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000026000000080007000000000018000180140002007465616d5f736c6176655f30"], 0x34}}, 0x4004080) (async) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r9 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x1) pwrite64(r9, &(0x7f00000008c0)='/', 0x1, 0x0) (async) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r9, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') (async, rerun: 64) openat2$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x11}, 0x18) (async, rerun: 64) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xd) (async) ioctl$TIOCVHANGUP(r8, 0x5437, 0x2) 3.560866821s ago: executing program 4 (id=779): r0 = socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$P9_RGETLOCK(r2, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xad4bb693ac87f75d) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) tee(r1, r3, 0xfffffffffffffc01, 0x0) tee(r1, r3, 0x60000000000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.470970155s ago: executing program 0 (id=780): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101a02, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}, 0x76e0}) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_DO_IT(r2, 0xab03) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3.297575335s ago: executing program 3 (id=781): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYBLOB="520e8c35f8b8d5a1cdc774fcfad01a08a13fd8bdc17f6c43e40ed65545"], &(0x7f0000000180)={0xa, &(0x7f0000000040)={0x67, 0x6, 0x110, 0x81, 0x0, 0x5, 0x40, 0x8}, 0x38, &(0x7f00000000c0)={0x5, 0xf, 0x38, 0x3}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x42a}}]}) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x82, 0x55, 0x6d, 0x20, 0x2040, 0x651f, 0x2693, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0xd9, 0x10, 0x1, 0x4d, 0xce, 0x2, 0x8, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000001c0)={0x0, 0x8, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006140)="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", 0x2000, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000100)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, '#SP', "d54a1ea6e2b95d3efd47dcdbb5fb1f112aaf0064d79486cdf50f6206540890b35529e047d3829c53d46ee13c92479127dca6a93a8e4c9c21560c97c06c9cbd9f48aa4308e58a1f9a85a0172b8f9f4ad82d37a0f0158b4af6b1021fbd9de91f63ccd448e294d8ebc0a223dc070c8b065b875d1d8603ba1a62599c9119f09f6879de151b90226df149cae7217a7c43ddc0d68a3d40616fdb186a18cdd5faacaa55875d5640df0b9a89eddad750b037dc480c92603e121562927a598e5c7121dc9934a8497eb43f25962094ad4e8da38859d6f1f0d12630e17a2f1bb4ead33879ef51c26a506f8b3d08882bf06b3f269c403172bd61186a0217a93d47e8798f6f2b"}}, 0x110) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000540)={0x0, 0x9, 0x4, "fd980000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.218869981s ago: executing program 0 (id=782): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) tkill(r0, 0x18) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000000)={0xfffffffffffffee0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0xff, 0x2070, 0x1000, 0x9, 0x4, 0x8000, 0xfffd, 0xec, 0x3906, 0xfffc, 0x3, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f00000001c0)) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r4, 0x3b87, &(0x7f0000000100)={0x18, 0x1, 0x18, 0x0, r5}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000680)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x87, 0x2}, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 3.090795248s ago: executing program 2 (id=783): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xa34e]}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x2) read(r0, &(0x7f0000000740)=""/384, 0x200008c0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = gettid() r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000003, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r3, 0x16) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r5, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ptrace$peeksig(0x4209, r3, &(0x7f0000000300)={0x5, 0x0, 0x3}, &(0x7f0000000440)=[{}, {}, {}]) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)={0x30, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x84d}, @NL80211_ATTR_CQM_TXE_PKTS={0x5, 0x6, 0x2}]}]}, 0x30}}, 0x0) r11 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32=r11], 0x0) 2.734898607s ago: executing program 4 (id=784): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc4e08000007094f2927ea6c1f", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="080008000084040008"], 0x53) (async) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5309, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r6, 0x6) (async) accept4$inet6(r6, 0x0, 0x0, 0x0) (async) shutdown(r6, 0x0) (async) read$dsp(r5, &(0x7f0000000400)=""/98, 0x62) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2.538402151s ago: executing program 4 (id=785): pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) socket$inet6_sctp(0xa, 0xa, 0x84) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000140)={0x9, 0x9, {0x53, 0xfffe, 0x7, {0x1, 0x2}, {0x4, 0x4}, @rumble={0x5, 0x2}}, {0x51, 0x3, 0x1, {0x0, 0x4}, {0x3}, @cond=[{0xfffe, 0x81, 0xa000, 0x2, 0x1, 0x1}, {0x2, 0x0, 0x8, 0x1, 0x8, 0x3ff}]}}) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x1) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000900)={0x2}) accept4$packet(r1, 0x0, &(0x7f0000000080), 0x80000) syz_usb_connect(0x5, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000f52d8b20218e288b86690102030609021200010000d00009045d00000202ff"], 0x0) r3 = getpgid(0x0) sched_setattr(r3, &(0x7f00000001c0)={0x38, 0x0, 0x4d, 0x200, 0x3, 0xffffffff, 0x3, 0x0, 0x9, 0x74}, 0x0) pipe2(&(0x7f00000000c0), 0x0) (async) socket$inet6_sctp(0xa, 0xa, 0x84) (async) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000140)={0x9, 0x9, {0x53, 0xfffe, 0x7, {0x1, 0x2}, {0x4, 0x4}, @rumble={0x5, 0x2}}, {0x51, 0x3, 0x1, {0x0, 0x4}, {0x3}, @cond=[{0xfffe, 0x81, 0xa000, 0x2, 0x1, 0x1}, {0x2, 0x0, 0x8, 0x1, 0x8, 0x3ff}]}}) (async) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x1) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000900)={0x2}) (async) accept4$packet(r1, 0x0, &(0x7f0000000080), 0x80000) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000f52d8b20218e288b86690102030609021200010000d00009045d00000202ff"], 0x0) (async) getpgid(0x0) (async) sched_setattr(r3, &(0x7f00000001c0)={0x38, 0x0, 0x4d, 0x200, 0x3, 0xffffffff, 0x3, 0x0, 0x9, 0x74}, 0x0) (async) 2.450759363s ago: executing program 0 (id=786): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) gettid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000980), 0xfdef) splice(r0, 0x0, r3, 0x0, 0x80, 0x4) (async) splice(r0, 0x0, r3, 0x0, 0x80, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000800)=""/217, 0xd9) read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$cgroup_pid(r4, &(0x7f00000001c0)=r5, 0x12) (async) write$cgroup_pid(r4, &(0x7f00000001c0)=r5, 0x12) openat2$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x40002, 0x14f}, 0x18) (async) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x40002, 0x14f}, 0x18) socket$key(0xf, 0x3, 0x2) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4f5bc2fdf1202e0c188c31dd07b3a22f8b01b0ef4f", @ANYRES64=r6], 0x50}}, 0x0) (async) sendmsg$key(r7, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4f5bc2fdf1202e0c188c31dd07b3a22f8b01b0ef4f", @ANYRES64=r6], 0x50}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) gettid() r9 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r9, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r9, 0x5411, &(0x7f0000000080)) mknodat$loop(r6, 0x0, 0x800, 0x1) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r6, &(0x7f0000000040)='./file0\x00', 0x70) (async) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r6, &(0x7f0000000040)='./file0\x00', 0x70) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='pstore\x00', 0x4000, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='pstore\x00', 0x4000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x280031, 0x0) 2.390964554s ago: executing program 0 (id=787): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpid() r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0x80184132, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r2 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r2, 0x0, 0x0) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080006000300010006000a00eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x5c, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x40, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xce}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3d}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xd90}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0xffffff7f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40014}, 0x40000) 2.38819337s ago: executing program 3 (id=788): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x40, 0x7, 0x60, {0x60, 0x22, "a5b227399462915be46504894e15a148f1e850d46f340cbb154a12a0b21bb5937c6367bee71d76f8e231ca350f0f8abdd856e80321317778d90854e2beeb8ffd5372738eb66893b5c0f4a07606eb7ea3f2b1d3d1265aaf2e5f5c58fbc919"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000200)={0x40, 0xe, 0x85, "36e8d8b4d5a3d315ee8a662f1cbfdbf21cc9dc8afb276eb058dbfca2db847f0da32e9b5d83872b809784ee388de667782d9db5281f6c4a40e53145d3228aa172daa3d59f798ea42250ad80ee4737c175fd9116c2643f575f2f073d4e21dbef35b4d54b93f7c2c9dccac00d7b5dee03e5572334ca72d4ccb25c14a22d2eba2ea15beb17e79d"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}}) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)="b0") 2.317137358s ago: executing program 0 (id=789): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) (async) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, 0x0, 0x0) setreuid(0xee01, 0x0) (async) setns(r1, 0x24020000) (async, rerun: 64) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 1.738734769s ago: executing program 3 (id=790): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)=@req={0x28, &(0x7f0000000000)={'geneve1\x00', @ifru_addrs=@in={0x2, 0x4e22, @multicast2}}}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) recvfrom$phonet(r1, &(0x7f0000000140)=""/88, 0x58, 0x1, &(0x7f00000001c0)={0x23, 0x9, 0x6, 0x44}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000900)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) 1.584486182s ago: executing program 3 (id=791): keyctl$join(0x1, 0x0) (async) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, &(0x7f0000000100)) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e21, 0xfff, @empty, 0x9}}, 0x87f, 0x4}, &(0x7f00000004c0)=0x90) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @empty}, 0x1c) (async, rerun: 64) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) (rerun: 64) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) (async, rerun: 64) setsockopt$inet6_udp_int(r3, 0x88, 0x1, &(0x7f0000000080), 0x4) (rerun: 64) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000380)) (async) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x4040, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000240)={0xfffffffd, 0x7f2f, 0x8, 0x6, 0x7, "d9da3de7d9e9a98f81a0ac1db6f520588364aa"}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0xc4) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20080a0, &(0x7f00000003c0)=ANY=[@ANYRES8=r2]) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000314230c2abd7000ffdbdf250900020073797a3100000000080041007369770014003300766972745f77696669300000000000000900020073797a31000000000800410073697700140002"], 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x4010, r0, 0xffffd000) (async) creat(&(0x7f0000000080)='./bus\x00', 0x0) (async) syz_usb_connect$cdc_ecm(0x2, 0x63, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109025100010100000309040000ff02020000052406000005240000000d240f0100000000000000000004241305052401020804241300090581062000000000090582020004000000090503"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0'}, 0xb) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="bdbd39c78a9a73f986a9812ae24aab66977ddadab37a4a9002d70ac188fee2754bd7595eb2e5719afe407c2ebab8c687034ddd390d69e829302e1813c05d634893f86876042fe9964a706f43d7763ddedee9e3ef9b1e5cbaa58c8327613ac20b61ca8fd3d4ac5b6875c0989beba47084e248c7fd9b06d6b07cea137845194338923b2ca1", 0x84, 0xffffffffffffffff) 1.46267068s ago: executing program 3 (id=792): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc70, 0xf003, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x80, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x100, 0x9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc, 0x8, 0x5}}}}}]}}]}}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="20091600000016235e1ab7451ea0b9939ffe674ac71406e3cb2ea33724de6f9b41ee1dcc5d911b091bdcd8da634ad3eb5414771aa1ac7e5d88c7f292486691a39efdbcb98a66010fb451134314445a62d30ba50c58aadcb3e7b9d4729f1e64158d06f694b5d0c62257e2cbad14acb22c03d59f"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 970.777342ms ago: executing program 4 (id=793): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x608802, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000140)={0x0, 0x0, {0x6, 0x12, 0xa, 0x17, 0xb, 0x80000001, 0xbe3, 0x1c, 0x1}}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x6c, r3, 0x1, 0x0, 0x3, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x44, @local, 0xff8}}, {0x20, 0x2, @in6={0xa, 0x0, 0xfffffffc, @mcast2}}}}]}]}, 0x6c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x2d, 0xb, 0x0, 0x0, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}}, 0x8000) r5 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000017010000020000000000000070778efbba7fe2e5f9a9b9e2ac501a9379ac7362b53e07d2486dbe8593df1154ffd8ae2166a40e7ce7fbf14d0c24b8570534d5176856ba545791bf5e9a84ecc9e12619197609bdf0c45d43511d835af1fcdc2e1cf9cf4599a29b35361df4028524bd3f9d25552d6d3fda76f66f70ecce6bad2f104597498d94777a9fef0bb067353b83edb01766404910c3d58fbc2b42eac6a966a2ee7b32f3eea7b7e36ef318eaf1ca2ce9862026cef8390fbf96a5295b580e9419c1cf0000000000"], 0x3, 0x880}], 0x1, 0x80001) recvmmsg(r5, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x2, 0x102, 0x0) 850.318194ms ago: executing program 3 (id=794): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x28801, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000003090408000302020000052406000005240004000d240f0100000000000000000309058103200000000009058202200008000009050302"], 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d0001000000000904"], 0x0) close(r4) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x80304d65, 0xffffffffffffffff) ioctl$KVM_CHECK_EXTENSION(r3, 0xae01, 0x1) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000000)={0x100000, 0x308000, 0x8}) syz_kvm_add_vcpu$x86(r5, &(0x7f00000001c0)={0x0, &(0x7f0000000500)=[@rdmsr={0x32, 0x18, {0x94d}}, @set_irq_handler={0xbe, 0x20, {0x99, 0x2}}, @uexit={0x0, 0x18, 0x8}, @wrmsr={0x1e, 0x20, {0x37e, 0xfaf4}}, @wr_crn={0x46, 0x20, {0x2, 0x3}}, @wr_drn={0x6e, 0x20, {0x1, 0x1}}, @in_dx={0x82, 0x20, {0x8be9, 0x2}}, @code={0xa, 0x56, {"c482c528a800000000c4e2791c186566f24e0faef041e909000000470f015a00450f354f0fc71d08000000c4c2f93181656b7eec66baa10066b8df9d66ef66b81f010f00d8"}}, @cpuid={0x14, 0x18, {0x5}}, @rdmsr={0x32, 0x18, {0x8a3}}, @set_irq_handler={0xbe, 0x20, {0x7c}}, @out_dx={0xaa, 0x28, {0xa6f9, 0x7, 0xb0b}}, @wr_drn={0x6e, 0x20, {0x7, 0xfffffffffffffffb}}, @code={0xa, 0x57, {"67f30f0fa4cb7cc272d5aac42225b72ac74424006a000000c744240292000000ff1c240f794000450f8c00800000c4831d6d3995450f01f83e660f3830f2400f090d00680000"}}, @uexit={0x0, 0x18, 0xce2}, @wr_crn={0x46, 0x20, {0x8, 0x800}}, @out_dx={0xaa, 0x28, {0x213d, 0x1, 0x5}}, @out_dx={0xaa, 0x28, {0x8492, 0x3, 0xfe}}, @cpuid={0x14, 0x18, {0x6, 0x3}}, @in_dx={0x82, 0x20, {0x1714, 0x4}}, @out_dx={0xaa, 0x28, {0x431d, 0x4}}, @out_dx={0xaa, 0x28, {0xd061, 0x4, 0x6}}, @wr_drn={0x6e, 0x20, {0x0, 0x2e47}}, @uexit={0x0, 0x18, 0x9}, @cpuid={0x14, 0x18, {0xc6b}}], 0x375}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x6, r7}, 0x14) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x200, 0x70bd2d, 0x7f, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) syz_usb_connect(0x5, 0x3d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb9, 0xa4, 0x8f, 0x10, 0x13b1, 0x42, 0x7c9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x1, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x13, 0x2, 0x2, 0x83, 0x67, 0x16, 0x0, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x3, 0x7f, 0x1001}]}], [{{0x9, 0x5, 0x4, 0x2, 0x200, 0x0, 0xfa}}, {{0x9, 0x5, 0x81, 0x2, 0x40, 0x0, 0x3d, 0x1}}]}}]}}]}}, 0x0) 512.421588ms ago: executing program 4 (id=795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write$tun(r1, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800a00010071756f7461000000240002800c000440000000000000000208000240000000030c000140000000000000039f0900011a73797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x8c}}, 0x0) 134.434135ms ago: executing program 4 (id=796): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d5a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) get_robust_list(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$inet6(0xa, 0x3, 0x3c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) ioctl$TCSETS(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={0xfffffff8, 0x0, 0x0, 0x7ff, 0x0, "0000005f9ed6280000000000edfc001900"}) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x578}], 0x1) r8 = landlock_create_ruleset(&(0x7f0000000040)={0x4300, 0x1}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0xfffffffffffffff5, r5, {0x7, 0x26, 0x5, 0x61000832, 0xffff, 0xffd8, 0xa, 0x5d3186cc, 0x0, 0x0, 0x80, 0xb}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x18d840, 0x100) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x1, "acba0a68"}]}}, 0x0}, 0x0) 0s ago: executing program 0 (id=797): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000180)) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0x9, 0x0, &(0x7f0000000040)) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r7, 0x0, 0x22, 0x0, &(0x7f00000000c0)=0xc) r8 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0xf6c52000) getsockopt$packet_int(r8, 0x107, 0x18, 0x0, &(0x7f0000000100)) ioctl$FBIOPAN_DISPLAY(r6, 0x4606, &(0x7f0000000000)={0x0, 0x300, 0x0, 0x140, 0x6, 0x200, 0x0, 0x0, {}, {}, {0x0, 0x3, 0x1}, {}, 0x3, 0x0, 0x80, 0x0, 0x0, 0x13, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x30, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x66646185, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) fsetxattr$security_capability(r9, &(0x7f0000000000), &(0x7f0000000040)=@v2={0x2000000, [{0x3, 0x3}, {0x3, 0x10001}]}, 0x14, 0x2) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r9, 0xc02064b9, &(0x7f0000000dc0)={0x0, 0x0}) kernel console output (not intermixed with test programs): sb 2-1: SerialNumber: syz [ 140.932598][ T6893] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 140.953078][ T43] cdc_mbim 2-1:1.0: skipping garbage [ 141.049791][ T6912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.072814][ T6912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.138477][ T6914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.166124][ T6893] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 141.173708][ T6893] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 141.277578][ T6914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.314679][ T6917] virtio-fs: tag not found [ 141.376056][ T6919] 8021q: VLANs not supported on ip_vti0 [ 141.445665][ T6924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.456026][ T6924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.525604][ T6924] netlink: 16 bytes leftover after parsing attributes in process `syz.3.276'. [ 141.790877][ T6893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.799721][ T6893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.812469][ T6893] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 141.819979][ T6893] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 141.828144][ T43] cdc_mbim 2-1:1.0: setting tx_max = 48 [ 141.839099][ T43] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 141.851593][ T43] wwan wwan0: port wwan0mbim0 attached [ 141.864959][ T43] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 96:0c:57:69:2a:2e [ 142.038022][ T6893] vxfs: unable to read disk superblock at 1 [ 142.044785][ T6893] vxfs: unable to read disk superblock at 8 [ 142.052382][ T6893] vxfs: can't find superblock. [ 142.228053][ T6938] capability: warning: `syz.3.277' uses 32-bit capabilities (legacy support in use) [ 142.326604][ T6941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.337445][ T6941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.351942][ T6941] netlink: 104 bytes leftover after parsing attributes in process `syz.3.278'. [ 142.449647][ T5490] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 143.347918][ T5921] usb 2-1: USB disconnect, device number 30 [ 143.379571][ T5921] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 143.417671][ T6962] sctp: [Deprecated]: syz.3.279 (pid 6962) Use of struct sctp_assoc_value in delayed_ack socket option. [ 143.417671][ T6962] Use struct sctp_sack_info instead [ 143.453639][ T10] usb 3-1: USB disconnect, device number 27 [ 143.468945][ T6966] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 143.486609][ T6963] QAT: failed to copy from user cfg_data. [ 143.742606][ T5921] wwan wwan0: port wwan0mbim0 disconnected [ 144.102237][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.284'. [ 144.130970][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.284'. [ 144.227060][ T794] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 144.307194][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 144.409230][ T794] usb 3-1: config 6 has an invalid interface number: 134 but max is 1 [ 144.425338][ T794] usb 3-1: config 6 has an invalid interface number: 203 but max is 1 [ 144.437256][ T794] usb 3-1: config 6 has no interface number 0 [ 144.443369][ T794] usb 3-1: config 6 has no interface number 1 [ 144.449621][ T794] usb 3-1: config 6 interface 134 has no altsetting 0 [ 144.456420][ T794] usb 3-1: config 6 interface 203 has no altsetting 0 [ 144.480465][ T794] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=46.8f [ 144.498074][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.498948][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 144.506260][ T794] usb 3-1: Product: syz [ 144.532275][ T794] usb 3-1: Manufacturer: syz [ 144.537099][ T794] usb 3-1: SerialNumber: syz [ 144.537502][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 144.566403][ T10] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 144.582129][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.591220][ T10] usb 2-1: Product: syz [ 144.595525][ T10] usb 2-1: Manufacturer: syz [ 144.605687][ T10] usb 2-1: SerialNumber: syz [ 144.617178][ T10] usb 2-1: config 0 descriptor?? [ 144.834810][ T7011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.287'. [ 144.917905][ T794] usb 3-1: USB disconnect, device number 28 [ 145.020664][ T5944] udevd[5944]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:6.203/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 145.045006][ T6997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.094037][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:6.134/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 145.099102][ T6997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.245386][ T10] gs_usb 2-1:0.0: Couldn't get device config: (err=-121) [ 145.253656][ T10] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 145.790356][ T794] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 145.992034][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.028520][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.053073][ T794] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 146.064193][ T7055] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.293'. [ 146.078598][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.132597][ T794] usb 3-1: config 0 descriptor?? [ 146.264150][ T7064] netlink: 'syz.3.296': attribute type 11 has an invalid length. [ 146.289631][ T43] libceph: connect (1)[c::]:6789 error -101 [ 146.296207][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 146.311611][ T43] libceph: connect (1)[c::]:6789 error -101 [ 146.318009][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 146.384703][ T7064] ceph: No mds server is up or the cluster is laggy [ 146.772270][ T794] usbhid 3-1:0.0: can't add hid device: -71 [ 146.790987][ T794] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 146.823997][ T794] usb 3-1: USB disconnect, device number 29 [ 147.082236][ T794] usb 2-1: USB disconnect, device number 31 [ 147.164763][ T7091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.189785][ T7091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.199893][ T7091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.215056][ T7091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.369275][ T7098] tmpfs: Unknown parameter '6lgrpquota_b/1li' [ 147.970355][ T7115] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 148.231595][ T7118] tipc: Started in network mode [ 148.237835][ T7118] tipc: Node identity ac1414aa, cluster identity 4711 [ 148.255256][ T7118] tipc: Enabled bearer , priority 10 [ 148.545353][ T794] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 148.733078][ T794] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 148.769535][ T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.792716][ T794] usb 2-1: Product: syz [ 148.807408][ T794] usb 2-1: Manufacturer: syz [ 148.818220][ T794] usb 2-1: SerialNumber: syz [ 149.208826][ T7149] overlayfs: failed to resolve './file1/file0': -2 [ 149.379720][ T9] tipc: Node number set to 2886997162 [ 149.420456][ T7153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.487735][ T7153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.532109][ T7154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.570562][ T7154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.732258][ T7158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.761684][ T7158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.952530][ T7160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.965562][ T7160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.404003][ T7162] netlink: 'syz.0.315': attribute type 26 has an invalid length. [ 150.414356][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.315'. [ 150.425293][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 150.553208][ T7164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.581790][ T7164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.599208][ T7164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.614183][ T7164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.621027][ T7167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.632255][ T7167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.645602][ T7167] netlink: 'syz.3.317': attribute type 8 has an invalid length. [ 150.656437][ T7167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.667747][ T7167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.232904][ T1209] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 151.323800][ T794] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 151.351303][ T794] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 151.385092][ T794] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 151.402212][ T794] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 151.413934][ T794] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 151.430074][ T1209] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 151.447270][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.447405][ T794] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 151.482405][ T1209] usb 3-1: config 0 descriptor?? [ 151.509335][ T794] usb 2-1: USB disconnect, device number 32 [ 151.699444][ T1209] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 151.900150][ T1209] [drm:udl_init] *ERROR* Selecting channel failed [ 151.932167][ T1209] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 151.940845][ T1209] [drm] Initialized udl on minor 2 [ 151.952915][ T1209] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 151.969176][ T1209] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 151.979355][ T10] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 151.989637][ T10] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 152.001538][ T1209] usb 3-1: USB disconnect, device number 30 [ 152.044410][ T7194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.053261][ T794] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 152.057575][ T7194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.091196][ T7194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.101415][ T7194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.209408][ T794] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 152.224169][ T794] usb 2-1: config 0 has no interface number 0 [ 152.230880][ T794] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 152.241228][ T794] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 152.263380][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.292823][ T794] usb 2-1: config 0 descriptor?? [ 152.322646][ T794] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input15 [ 152.368062][ T7206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.379057][ T7206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.512152][ T7190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.521360][ T7190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.532439][ T794] usb 2-1: USB disconnect, device number 33 [ 152.654290][ T7212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.666091][ T7212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.737214][ T9] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 152.888527][ T9] usb 3-1: config 1 interface 0 altsetting 168 endpoint 0x1 is Bulk; changing to Interrupt [ 152.899094][ T9] usb 3-1: config 1 interface 0 altsetting 168 endpoint 0x82 is Bulk; changing to Interrupt [ 152.909377][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 153.242223][ T7217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.251512][ T7217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.263777][ T7217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.274848][ T7217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.577078][ T1209] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 153.729090][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.741386][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.751704][ T1209] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 153.760899][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.771388][ T1209] usb 2-1: config 0 descriptor?? [ 153.848348][ T7221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.857626][ T7221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.981794][ T7219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.990830][ T7219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.079805][ T7219] sctp: [Deprecated]: syz.1.335 (pid 7219) Use of int in max_burst socket option deprecated. [ 154.079805][ T7219] Use struct sctp_assoc_value instead [ 154.160772][ T1209] usbhid 2-1:0.0: can't add hid device: -71 [ 154.167240][ T1209] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 154.178589][ T1209] usb 2-1: USB disconnect, device number 34 [ 154.634777][ T7232] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 154.644552][ T7232] block device autoloading is deprecated and will be removed. [ 154.876734][ T7240] netlink: 'syz.3.341': attribute type 10 has an invalid length. [ 154.886055][ T7240] netlink: 55 bytes leftover after parsing attributes in process `syz.3.341'. [ 155.197130][ T5874] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 155.258767][ T7246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.269039][ T7246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.337135][ T5874] usb 2-1: device descriptor read/64, error -71 [ 155.499845][ T9] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 155.527265][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.535618][ T9] usb 3-1: Product: 藼곪蓆ݚ竻匠ݪ썝鵟叞옎궦跸햺똅행벊퀣㘩Ⱶ刓牏뫞斿⥢쟑昈Ὺ美棨ㇻ㉷ᓢ뭶篡⦴놚㾢ꁐ悴릕쵓뛼疷⓴赚់됲θ躮ꮣ꬏鶸ꢰố᳘밈殌ꮣ㡷䙽ၴ䛡癘ꑇ賖⺶丆孺绬竸봴ⷋ▎蒇⏔釨臝把吽뵒硒饤柣舊娔ꢌꥏ᩵䓷섃秷꿌뵨⊽諸뤙攌낛碗䧊 [ 155.578535][ T5874] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 155.619346][ T9] usb 3-1: can't set config #1, error -71 [ 155.632157][ T7253] netlink: 44 bytes leftover after parsing attributes in process `syz.2.345'. [ 155.634546][ T9] usb 3-1: USB disconnect, device number 31 [ 155.667911][ T7256] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.346'. [ 155.678128][ T7256] ksmbd: Unknown IPC event: 3, ignore. [ 155.691189][ T7256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.707181][ T7256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.727086][ T5874] usb 2-1: device descriptor read/64, error -71 [ 155.837399][ T5874] usb usb2-port1: attempt power cycle [ 155.936250][ T7260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.945122][ T7260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.955404][ T7260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.964806][ T7260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.047474][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 156.198568][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 156.203880][ T5874] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 156.213373][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 156.222520][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.231179][ T5874] usb 2-1: device descriptor read/8, error -71 [ 156.239865][ T9] usb 3-1: config 0 descriptor?? [ 156.260887][ T9] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input17 [ 156.353960][ T7262] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 156.454180][ T5180] bcm5974 3-1:0.0: could not read from device [ 156.487069][ T5874] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 156.526379][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.350'. [ 156.547421][ T5874] usb 2-1: device descriptor read/8, error -71 [ 156.569816][ T7267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.609070][ T7267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.661634][ T5874] usb usb2-port1: unable to enumerate USB device [ 156.672093][ T5180] bcm5974 3-1:0.0: could not read from device [ 156.689659][ T1209] usb 3-1: USB disconnect, device number 32 [ 156.698866][ T5836] bcm5974 3-1:0.0: could not read from device [ 156.766058][ T7278] 8021q: VLANs not supported on syzkaller1 [ 156.773112][ T7277] 8021q: VLANs not supported on syzkaller1 [ 156.891490][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 157.031566][ T7286] netlink: 'syz.3.354': attribute type 21 has an invalid length. [ 157.048226][ T7286] trusted_key: encrypted_key: hex blob is missing [ 157.136455][ T7288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.147219][ T7288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.163957][ T7288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.197451][ T7288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.212123][ T7288] kAFS: unparsable volume name [ 157.313194][ T5867] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 157.335873][ T7295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.336057][ T5867] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 157.349942][ T7295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.362127][ T5867] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 157.370398][ T5867] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 157.380168][ T5867] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 157.387748][ T5867] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 157.395257][ T5867] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 157.402736][ T5867] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 157.410261][ T5867] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 157.418566][ T5867] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 157.430285][ T5867] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 157.799501][ T7303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.811303][ T7303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.962752][ T7307] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 158.082323][ T7309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.091648][ T7309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.372261][ T5867] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 158.447983][ T7314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.471438][ T7314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.532549][ T5867] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 158.551975][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.582138][ T5867] usb 2-1: config 0 descriptor?? [ 158.712973][ T7320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.724808][ T7320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.846459][ T5867] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 158.859902][ T5867] usb 2-1: USB disconnect, device number 39 [ 159.017191][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 159.167108][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 159.173667][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 159.184602][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.195707][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.205540][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 159.219511][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 159.228689][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.238868][ T9] usb 3-1: config 0 descriptor?? [ 159.360860][ T5867] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 159.433218][ T7341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.461959][ T7341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.479301][ T7341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.489314][ T7341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.549036][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.563156][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.574029][ T5867] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 159.584213][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.598036][ T5867] usb 2-1: config 0 descriptor?? [ 159.653945][ T9] redragon 0003:0C45:760B.0004: item fetching failed at offset 7/133 [ 159.663806][ T9] redragon 0003:0C45:760B.0004: probe with driver redragon failed with error -22 [ 159.852388][ T9] usb 3-1: USB disconnect, device number 33 [ 160.015397][ T5867] usbhid 2-1:0.0: can't add hid device: -71 [ 160.036458][ T5867] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 160.047811][ T5867] usb 2-1: USB disconnect, device number 40 [ 160.085190][ T7334] 9p: Bad value for 'rfdno' [ 160.110878][ T7359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.119828][ T7359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.487078][ T7365] dvmrp12: entered allmulticast mode [ 160.916247][ T7384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.958129][ T7384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.971839][ T1209] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 161.052902][ T7387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.086099][ T7387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.467893][ T5874] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 161.647127][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 161.659548][ T5874] usb 3-1: config 129 has an invalid interface number: 58 but max is 1 [ 161.669397][ T5874] usb 3-1: config 129 has no interface number 1 [ 161.675777][ T5874] usb 3-1: config 129 interface 0 has no altsetting 0 [ 161.683234][ T5874] usb 3-1: config 129 interface 58 has no altsetting 0 [ 161.695243][ T5874] usb 3-1: New USB device found, idVendor=08ca, idProduct=2022, bcdDevice=f4.af [ 161.705243][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.718514][ T5874] usb 3-1: Product: syz [ 161.727278][ T5874] usb 3-1: Manufacturer: syz [ 161.731918][ T5874] usb 3-1: SerialNumber: syz [ 161.962402][ T5874] gspca_main: sunplus-2.14.0 probing 08ca:2022 [ 161.971037][ T5874] gspca_sunplus: reg_r err -71 [ 161.975936][ T5874] sunplus 3-1:129.0: probe with driver sunplus failed with error -71 [ 161.990243][ T5874] usb 3-1: USB disconnect, device number 34 [ 162.137834][ T7436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.146639][ T7436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.154930][ T1209] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 162.317116][ T1209] usb 2-1: Using ep0 maxpacket: 8 [ 162.330445][ T1209] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 162.340877][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.350934][ T1209] usb 2-1: Product: syz [ 162.355151][ T1209] usb 2-1: Manufacturer: syz [ 162.361799][ T1209] usb 2-1: SerialNumber: syz [ 162.369207][ T1209] usb 2-1: config 0 descriptor?? [ 162.379419][ T1209] gspca_main: se401-2.14.0 probing 047d:5003 [ 162.425451][ T7444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.435323][ T7444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.448404][ T7444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.459313][ T7444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.777113][ T43] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 162.796120][ T1209] gspca_se401: ExtraFeatures: 49 [ 162.917487][ T43] usb 3-1: device descriptor read/64, error -71 [ 162.931782][ T7453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.943729][ T7453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.010379][ T7458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.019409][ T7458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.066566][ T1209] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18 [ 163.125824][ T1209] usb 2-1: USB disconnect, device number 42 [ 163.157105][ T43] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 163.297803][ T43] usb 3-1: device descriptor read/64, error -71 [ 163.321464][ T7472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.331248][ T7472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.417622][ T43] usb usb3-port1: attempt power cycle [ 163.505416][ T7480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.515478][ T7480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.529675][ T5145] Bluetooth: hci3: unexpected event 0x34 length: 10 > 6 [ 163.757051][ T43] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 163.787816][ T43] usb 3-1: device descriptor read/8, error -71 [ 163.857997][ T1209] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 164.021422][ T1209] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 164.030844][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.038170][ T43] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 164.039242][ T1209] usb 2-1: Product: syz [ 164.067007][ T1209] usb 2-1: Manufacturer: syz [ 164.071674][ T1209] usb 2-1: SerialNumber: syz [ 164.078045][ T43] usb 3-1: device descriptor read/8, error -71 [ 164.087700][ T1209] usb 2-1: config 0 descriptor?? [ 164.121256][ T1209] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 164.187667][ T43] usb usb3-port1: unable to enumerate USB device [ 164.212892][ T7486] syzkaller1: entered promiscuous mode [ 164.218787][ T7486] syzkaller1: entered allmulticast mode [ 164.362861][ T7493] capability: warning: `syz.0.418' uses deprecated v2 capabilities in a way that may be insecure [ 164.376386][ T7491] kvm: kvm [7490]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5054 [ 164.387921][ T7491] kvm: kvm [7490]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xb6f2 [ 164.397444][ T7493] program syz.0.418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.408836][ T7491] kvm: kvm [7490]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5c5b [ 164.418568][ T7491] kvm: kvm [7490]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x78a9 [ 164.436789][ T7491] kvm: kvm [7490]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xa1e5 [ 164.445646][ T7491] kvm: kvm [7490]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xa18d [ 164.631236][ T7502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.646076][ T7502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.741116][ T7507] kvm: vcpu 0: requested 3072 ns lapic timer period limited to 200000 ns [ 164.749954][ T7507] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 164.827744][ T30] audit: type=1400 audit(1762795228.597:9): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=7512 comm="syz.3.423" [ 164.902129][ T7515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.920063][ T7515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.188342][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.425'. [ 165.481555][ T7522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.491431][ T7522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.635023][ T7529] syzkaller1: left promiscuous mode [ 165.641507][ T7529] syzkaller1: left allmulticast mode [ 165.763077][ T7536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.772034][ T7536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.281515][ T7544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.291256][ T7544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.300936][ T7544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.310758][ T7544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.376909][ T7548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.386702][ T7548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.673344][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.438'. [ 167.090294][ T7566] syzkaller1: entered promiscuous mode [ 167.095848][ T7566] syzkaller1: entered allmulticast mode [ 167.236660][ T7569] program syz.0.442 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.336705][ T1209] gspca_stk1135: reg_w 0x353 err -71 [ 167.347739][ T1209] gspca_stk1135: serial bus timeout: status=0x00 [ 167.355786][ T1209] gspca_stk1135: Sensor write failed [ 167.361687][ T1209] gspca_stk1135: serial bus timeout: status=0x00 [ 167.368252][ T1209] gspca_stk1135: Sensor write failed [ 167.373583][ T1209] gspca_stk1135: serial bus timeout: status=0x00 [ 167.381807][ T1209] gspca_stk1135: Sensor read failed [ 167.397055][ T1209] gspca_stk1135: serial bus timeout: status=0x00 [ 167.409362][ T1209] gspca_stk1135: Sensor read failed [ 167.433387][ T1209] gspca_stk1135: Detected sensor type unknown (0x0) [ 167.449761][ T1209] gspca_stk1135: serial bus timeout: status=0x00 [ 167.459543][ T1209] gspca_stk1135: Sensor read failed [ 167.464946][ T1209] gspca_stk1135: serial bus timeout: status=0x00 [ 167.471833][ T1209] gspca_stk1135: Sensor read failed [ 167.481496][ T1209] gspca_stk1135: serial bus timeout: status=0x00 [ 167.488550][ T1209] gspca_stk1135: Sensor write failed [ 167.493980][ T1209] gspca_stk1135: serial bus timeout: status=0x00 [ 167.501230][ T1209] gspca_stk1135: Sensor write failed [ 167.506694][ T1209] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 167.527371][ T1209] usb 2-1: USB disconnect, device number 43 [ 167.668767][ T7583] binder: 7577:7583 ioctl c0306201 200000000240 returned -14 [ 167.834025][ T7578] binder: 7577:7578 ioctl c0306201 200000000240 returned -14 [ 168.019482][ T7599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.032301][ T7599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.307065][ T1209] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 168.337191][ T5874] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 168.457125][ T1209] usb 2-1: Using ep0 maxpacket: 32 [ 168.464387][ T1209] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.475554][ T1209] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.486463][ T1209] usb 2-1: config 0 interface 0 has no altsetting 0 [ 168.493185][ T1209] usb 2-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 168.503094][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.513632][ T5874] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 168.522983][ T1209] usb 2-1: config 0 descriptor?? [ 168.528353][ T5874] usb 3-1: config 0 has no interface number 0 [ 168.540423][ T5874] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 168.549584][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.557804][ T5874] usb 3-1: Product: syz [ 168.562011][ T5874] usb 3-1: Manufacturer: syz [ 168.566638][ T5874] usb 3-1: SerialNumber: syz [ 168.574094][ T5874] usb 3-1: config 0 descriptor?? [ 168.842488][ T5874] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 168.865853][ T5874] usb 3-1: USB disconnect, device number 39 [ 168.902638][ T7613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.914743][ T7613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.942649][ T1209] hid_parser_main: 23 callbacks suppressed [ 168.942672][ T1209] hid-steam 0003:28DE:1205.0005: unknown main item tag 0x0 [ 168.955989][ T1209] hid-steam 0003:28DE:1205.0005: unknown main item tag 0x0 [ 168.964297][ T1209] hid-steam 0003:28DE:1205.0005: : USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.1-1/input0 [ 169.037858][ T1209] hid-steam 0003:28DE:1205.0005: Steam Controller 'XXXXXXXXXX' connected [ 169.049288][ T1209] input: Steam Deck as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1205.0005/input/input19 [ 169.088305][ T1209] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1205.0005/input/input20 [ 169.134070][ T1209] hid-steam 0003:28DE:1205.0006: unknown main item tag 0x0 [ 169.143699][ T1209] hid-steam 0003:28DE:1205.0006: unknown main item tag 0x0 [ 169.178520][ T1209] hid-steam 0003:28DE:1205.0006: hidraw0: USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.1-1/input0 [ 169.647077][ T5867] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 169.764711][ T7626] netlink: 'syz.0.461': attribute type 64 has an invalid length. [ 169.773436][ T7626] netlink: 'syz.0.461': attribute type 4 has an invalid length. [ 169.781520][ T7626] netlink: 152 bytes leftover after parsing attributes in process `syz.0.461'. [ 169.797027][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 169.812470][ T5867] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 169.823117][ T5867] usb 3-1: config 0 has no interface number 0 [ 169.829623][ T5867] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 169.843138][ T5867] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 169.852473][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.860657][ T5867] usb 3-1: Product: syz [ 169.865034][ T5867] usb 3-1: Manufacturer: syz [ 169.869780][ T5867] usb 3-1: SerialNumber: syz [ 169.880724][ T5867] usb 3-1: config 0 descriptor?? [ 169.897650][ T7616] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 169.934006][ T7631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.943033][ T7631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.113692][ T7616] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 170.120603][ T7633] sctp: [Deprecated]: syz.2.458 (pid 7633) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.120603][ T7633] Use struct sctp_sack_info instead [ 170.137869][ T1209] usb 2-1: reset high-speed USB device number 44 using dummy_hcd [ 170.169473][ T5867] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 170.187513][ T5867] asix 3-1:0.188: probe with driver asix failed with error -71 [ 170.210620][ T5867] usb 3-1: USB disconnect, device number 40 [ 170.289478][ T9] IPVS: starting estimator thread 0... [ 170.378321][ T7637] IPVS: using max 26 ests per chain, 62400 per kthread [ 170.566476][ T7647] raw_sendmsg: syz.3.467 forgot to set AF_INET. Fix it! [ 170.577150][ T7649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.581393][ T7647] input: syz0 as /devices/virtual/input/input21 [ 170.604931][ T7649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.706729][ T7658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.721536][ T7658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.736854][ T7659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.747095][ T5867] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 170.752403][ T7659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.769602][ T7660] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 170.909102][ T5867] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 170.923683][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.947731][ T5867] usb 3-1: config 0 descriptor?? [ 170.961109][ T5867] cp210x 3-1:0.0: cp210x converter detected [ 170.964243][ T7665] netlink: 'syz.0.471': attribute type 10 has an invalid length. [ 171.383611][ T5867] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 171.408234][ T5867] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 171.409039][ T7684] netlink: 'syz.3.476': attribute type 2 has an invalid length. [ 171.419683][ T7683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.437540][ T5867] usb 3-1: cp210x converter now attached to ttyUSB0 [ 171.449730][ T5867] usb 3-1: USB disconnect, device number 41 [ 171.457953][ T7684] netlink: 'syz.3.476': attribute type 1 has an invalid length. [ 171.465991][ T7684] netlink: 'syz.3.476': attribute type 1 has an invalid length. [ 171.474202][ T7686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.500359][ T7683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.509281][ T7686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.519109][ T5867] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 171.529216][ T5867] cp210x 3-1:0.0: device disconnected [ 171.538657][ T7683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.549942][ T7690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.559470][ T7683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.570283][ T7690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.603301][ T7692] netlink: 28 bytes leftover after parsing attributes in process `syz.3.478'. [ 171.612455][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.478'. [ 171.781495][ T7683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.792173][ T7683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.792285][ T7690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.809392][ T7690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.847197][ T1209] usb 2-1: device descriptor read/64, error -71 [ 172.097263][ T1209] usb 2-1: reset high-speed USB device number 44 using dummy_hcd [ 172.123960][ T7701] netlink: 22 bytes leftover after parsing attributes in process `syz.0.481'. [ 172.143096][ T7701] netlink: 'syz.0.481': attribute type 3 has an invalid length. [ 172.152169][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.481'. [ 172.167421][ T7701] netlink: 22 bytes leftover after parsing attributes in process `syz.0.481'. [ 172.257749][ T1209] usb 2-1: device descriptor read/64, error -71 [ 172.388849][ T7713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.412409][ T7717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.421108][ T7713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.433251][ T7713] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.484'. [ 172.438805][ T7716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.462148][ T7717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.473425][ T7716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.537131][ T1209] usb 2-1: reset high-speed USB device number 44 using dummy_hcd [ 172.567686][ T1209] usb 2-1: device descriptor read/8, error -71 [ 172.817254][ T1209] usb 2-1: reset high-speed USB device number 44 using dummy_hcd [ 172.847865][ T1209] usb 2-1: device descriptor read/8, error -71 [ 172.939099][ T7720] overlayfs: upper fs does not support tmpfile. [ 172.961192][ T5874] usb 2-1: USB disconnect, device number 44 [ 173.069360][ T5874] hid-steam 0003:28DE:1205.0005: Steam Controller 'XXXXXXXXXX' disconnected [ 173.121626][ T7724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.144644][ T7724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.175570][ T7729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.185486][ T7729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.238211][ T5874] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 173.302252][ T7731] loop5: detected capacity change from 0 to 7 [ 173.315034][ T7731] Dev loop5: unable to read RDB block 7 [ 173.321937][ T7731] loop5: AHDI p1 p2 [ 173.325903][ T7731] loop5: partition table partially beyond EOD, truncated [ 173.333500][ T7731] loop5: p1 start 1668641394 is beyond EOD, truncated [ 173.378916][ T5874] usb 2-1: device descriptor read/64, error -71 [ 173.587081][ T1209] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 173.627072][ T5874] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 173.762004][ T7735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.771613][ T1209] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 173.775483][ T7735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.782370][ T5874] usb 2-1: device descriptor read/64, error -71 [ 173.819676][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 173.842963][ T1209] usb 3-1: Product: syz [ 173.847516][ T1209] usb 3-1: SerialNumber: syz [ 173.858841][ T1209] usb 3-1: config 0 descriptor?? [ 173.953750][ T5874] usb usb2-port1: attempt power cycle [ 174.043711][ T7747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.054852][ T7747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.069810][ T7747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.078808][ T7747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.278071][ T7731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.290202][ T7731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.304002][ T5867] usb 3-1: USB disconnect, device number 42 [ 174.317211][ T5874] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 174.357881][ T5874] usb 2-1: device descriptor read/8, error -71 [ 174.627334][ T7773] block nbd1: NBD_DISCONNECT [ 174.632828][ T7773] block nbd1: Send disconnect failed -32 [ 174.649559][ T7773] block nbd1: Send disconnect failed -32 [ 174.692796][ T7777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.693940][ T7773] pim6reg9: entered allmulticast mode [ 174.713228][ T7772] block nbd1: Disconnected due to user request. [ 174.720990][ T7772] block nbd1: shutting down sockets [ 174.748700][ T7777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.277053][ T5867] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 175.307093][ T5874] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 175.337516][ T5874] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 175.362023][ T5874] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.390025][ T5874] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 175.412872][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 175.422973][ T5874] usb 2-1: Product: syz [ 175.427804][ T5874] usb 2-1: Manufacturer: syz [ 175.432692][ T5874] usb 2-1: SerialNumber: syz [ 175.437086][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 175.444989][ T5874] usb 2-1: config 0 descriptor?? [ 175.452536][ T5874] hub 2-1:0.0: bad descriptor, ignoring hub [ 175.455022][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 175.463294][ T5874] hub 2-1:0.0: probe with driver hub failed with error -5 [ 175.478036][ T7787] __vm_enough_memory: pid: 7787, comm: syz.0.507, bytes: 4503599627366400 not enough memory for the allocation [ 175.481419][ T5867] usb 3-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 175.499750][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.509941][ T7787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.522096][ T7787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.546808][ T7787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.553665][ T5874] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 175.557086][ T5867] usb 3-1: config 0 descriptor?? [ 175.578290][ T7787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.623778][ T7787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.636663][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 175.654556][ T7787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.675771][ T7783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.687719][ T7783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.760959][ T7789] syzkaller1: left promiscuous mode [ 175.766244][ T7789] syzkaller1: left allmulticast mode [ 175.818192][ T7791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.830334][ T7791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.976750][ T5867] smartjoyplus 0003:0B43:0003.0007: item fetching failed at offset 4/5 [ 175.986088][ T5867] smartjoyplus 0003:0B43:0003.0007: parse failed [ 175.988126][ T5913] usb 2-1: USB disconnect, device number 48 [ 175.992796][ T5867] smartjoyplus 0003:0B43:0003.0007: probe with driver smartjoyplus failed with error -22 [ 176.175551][ T7785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.188944][ T7785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.225740][ T5874] usb 3-1: USB disconnect, device number 43 [ 176.301462][ T5913] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 176.414564][ T30] audit: type=1326 audit(1762795240.177:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.513" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ced38f6c9 code=0x0 [ 176.462795][ T5913] usb 2-1: config 0 has no interfaces? [ 176.470252][ T5913] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 176.480850][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.498099][ T5913] usb 2-1: config 0 descriptor?? [ 176.526822][ T7809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.538607][ T7809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.548653][ T7809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.560170][ T7809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.570758][ T7809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.580431][ T7809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.592401][ T7809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.601445][ T7809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.617219][ T5874] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 176.710499][ T5913] usb 2-1: USB disconnect, device number 49 [ 176.777247][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 176.786403][ T5874] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 176.795592][ T5874] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 176.803833][ T5874] usb 3-1: Product: syz [ 176.808046][ T5874] usb 3-1: Manufacturer: syz [ 176.812689][ T5874] usb 3-1: SerialNumber: syz [ 176.820332][ T5874] usb 3-1: config 0 descriptor?? [ 176.828428][ T5874] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 177.031430][ T7799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.040485][ T7799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.050323][ T7799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.060627][ T7799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.070569][ T7799] xt_l2tp: invalid flags combination: 8 [ 177.183325][ T7811] syzkaller1: entered promiscuous mode [ 177.188944][ T7811] syzkaller1: entered allmulticast mode [ 177.330520][ T7816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.340645][ T7816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.452703][ T7818] 9p: Bad value for 'wfdno' [ 177.492660][ T5874] gspca_zc3xx: reg_w_i err -71 [ 177.504332][ T5874] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 177.518236][ T5874] usb 3-1: USB disconnect, device number 44 [ 177.527285][ T5913] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 177.564090][ T7823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.576755][ T7823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.689108][ T5913] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 177.704459][ T5913] usb 2-1: config 0 has no interface number 0 [ 177.715316][ T7829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.724494][ T7832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.726061][ T5913] usb 2-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 177.735577][ T7829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.746095][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.758641][ T7832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.770616][ T5913] usb 2-1: config 0 descriptor?? [ 177.997160][ T5913] usb 2-1: string descriptor 0 read error: -71 [ 178.012548][ T5913] usb-storage 2-1:0.168: USB Mass Storage device detected [ 178.045643][ T5913] usb-storage 2-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 178.084240][ T5913] usb 2-1: USB disconnect, device number 50 [ 178.307156][ T5867] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 178.340299][ T7838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.350631][ T7838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.427301][ T7842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.457601][ T7842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.477605][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 178.485450][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.497435][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.509949][ T5867] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 178.520240][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.538288][ T5867] usb 3-1: config 0 descriptor?? [ 178.843804][ T7849] veth0_vlan: left promiscuous mode [ 178.976074][ T5867] apple 0003:05AC:024B.0008: unknown global tag 0xe [ 178.987116][ T5867] apple 0003:05AC:024B.0008: item 0 1 1 14 parsing failed [ 178.995081][ T5867] apple 0003:05AC:024B.0008: parse failed [ 179.001300][ T5867] apple 0003:05AC:024B.0008: probe with driver apple failed with error -22 [ 179.092251][ T7852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.146704][ T7852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.170726][ T7852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.186110][ T5874] usb 3-1: USB disconnect, device number 45 [ 179.201328][ T7857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.213644][ T7852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.223906][ T7857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.365806][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'. [ 179.447252][ T5913] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 179.616714][ T5913] usb 2-1: unable to get BOS descriptor or descriptor too short [ 179.627198][ T5913] usb 2-1: not running at top speed; connect to a high speed hub [ 179.647793][ T5913] usb 2-1: config 106 has an invalid interface number: 8 but max is 0 [ 179.656277][ T5913] usb 2-1: config 106 has no interface number 0 [ 179.663200][ T5913] usb 2-1: config 106 interface 8 has no altsetting 0 [ 179.674396][ T5913] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 179.685170][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.693582][ T5913] usb 2-1: Product: syz [ 179.698855][ T5913] usb 2-1: Manufacturer: syz [ 179.703584][ T5913] usb 2-1: SerialNumber: syz [ 180.053645][ T7841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.062687][ T7841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.099455][ T5874] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 180.261315][ T5874] usb 3-1: config index 0 descriptor too short (expected 38445, got 45) [ 180.280396][ T5874] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.303508][ T5874] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 180.323225][ T5874] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 180.334522][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.348312][ T5874] usb 3-1: config 0 descriptor?? [ 180.439392][ T7874] binder: 7873:7874 ioctl 40046205 0 returned -22 [ 180.577373][ T24] usb 3-1: USB disconnect, device number 46 [ 181.304433][ T7882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.315380][ T7882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.375691][ T7884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.386652][ T7884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.420599][ T7884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.538'. [ 181.504012][ T7890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.512932][ T7889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.514857][ T7890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.521991][ T7889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.688055][ T794] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 181.847048][ T794] usb 3-1: Using ep0 maxpacket: 16 [ 181.853974][ T794] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.865203][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 181.876230][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 181.885987][ T794] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 181.896524][ T794] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.911599][ T794] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 181.920868][ T794] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 181.929024][ T794] usb 3-1: Manufacturer: syz [ 181.936779][ T794] usb 3-1: config 0 descriptor?? [ 182.056697][ T7895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.069328][ T7895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.109208][ T7898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.118511][ T7898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.193105][ T5913] kalmia 2-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 182.223161][ T794] rc_core: IR keymap rc-hauppauge not found [ 182.229537][ T5913] kalmia 2-1:106.8: probe with driver kalmia failed with error -22 [ 182.239212][ T794] Registered IR keymap rc-empty [ 182.252277][ T5913] usb 2-1: USB disconnect, device number 51 [ 182.259230][ T794] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 182.289394][ T7904] binder: 7903:7904 ioctl c0306201 200000000040 returned -22 [ 182.292865][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.545'. [ 182.308188][ T794] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 182.342944][ T794] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 182.370623][ T794] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input22 [ 182.404441][ T794] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 182.448828][ T794] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 182.468236][ T794] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 182.487135][ T794] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 182.507690][ T794] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 182.527246][ T794] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 182.547379][ T794] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 182.567147][ T794] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 182.588448][ T794] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 182.607304][ T794] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 182.631234][ T794] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 182.642638][ T794] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 182.687280][ T5913] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 182.857676][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 182.871364][ T5913] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 7.00 [ 182.880584][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.890414][ T5913] usb 2-1: Product: syz [ 182.894690][ T5913] usb 2-1: Manufacturer: syz [ 182.899394][ T5913] usb 2-1: SerialNumber: syz [ 182.908444][ T5913] usb 2-1: config 0 descriptor?? [ 182.923769][ T5913] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 182.926270][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.551'. [ 182.933842][ T5913] usb 2-1: Detected FT2232H [ 183.053641][ T7931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.062981][ T7931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.071473][ T7932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.087387][ T7932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.124841][ T5913] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 183.140716][ T5913] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 183.163319][ T5913] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 183.179659][ T5913] usb 2-1: USB disconnect, device number 52 [ 183.206913][ T5913] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 183.231772][ T5913] ftdi_sio 2-1:0.0: device disconnected [ 183.305098][ T7940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.317503][ T7940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.366465][ T7945] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 183.377480][ T7945] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 183.384356][ T7945] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 183.391936][ T7945] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 183.399882][ T7945] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 183.406739][ T7945] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 183.413835][ T7945] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 183.422357][ T7945] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 183.430644][ T7945] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 183.439185][ T7945] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 183.445883][ T7945] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 183.455452][ T7945] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 183.464190][ T7945] comedi comedi3: 8255: I/O port conflict (0x400,4) [ 183.485635][ T7945] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 183.627963][ T7959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.642954][ T7958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.646852][ T7959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.653129][ T7958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.977085][ T5913] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 184.128788][ T5913] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 184.140047][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.151787][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.162261][ T5913] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 184.188058][ T5913] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 184.197190][ T5913] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 184.205291][ T5913] usb 2-1: Manufacturer: syz [ 184.213310][ T5913] usb 2-1: config 0 descriptor?? [ 184.621287][ T7976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.630722][ T7976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.634426][ T5913] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 184.655178][ T5913] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 184.751562][ T794] usb 3-1: USB disconnect, device number 47 [ 184.931146][ T5874] usb 2-1: USB disconnect, device number 53 [ 185.159246][ T7990] loop9: detected capacity change from 0 to 7 [ 185.173840][ T7990] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.182356][ T7990] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.190944][ T7990] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.199293][ T7990] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.208594][ T7990] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.219650][ T7990] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.228833][ T7993] x_tables: duplicate underflow at hook 1 [ 185.235191][ T7990] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.248865][ T7990] ldm_validate_partition_table(): Disk read failed. [ 185.255748][ T7990] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.264200][ T7990] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.273828][ T7990] Buffer I/O error on dev loop9, logical block 0, async page read [ 185.283256][ T7990] Dev loop9: unable to read RDB block 0 [ 185.289592][ T7990] loop9: unable to read partition table [ 185.295647][ T7990] loop9: partition table beyond EOD, truncated [ 185.302676][ T7990] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 185.302676][ T7990] ) failed (rc=-5) [ 185.409663][ T8000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.423051][ T8000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.013201][ T8032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.577'. [ 186.324583][ T5874] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 186.507068][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 186.514191][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 186.526316][ T5874] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 186.544551][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.570180][ T5874] usb 3-1: config 0 descriptor?? [ 186.649349][ T8061] netlink: 48 bytes leftover after parsing attributes in process `syz.3.586'. [ 186.785553][ T5874] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 186.837094][ T1209] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 186.892640][ T8068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.916565][ T8068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.018249][ T1209] usb 2-1: Using ep0 maxpacket: 16 [ 187.028785][ T1209] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.040463][ T1209] usb 2-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 187.084420][ T1209] usb 2-1: config 0 interface 0 has no altsetting 0 [ 187.100072][ T1209] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 187.112687][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.132893][ T1209] usb 2-1: config 0 descriptor?? [ 187.148581][ T1209] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 187.223637][ T8081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.233959][ T8081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.734807][ T8105] netlink: 'syz.3.592': attribute type 2 has an invalid length. [ 187.745033][ T8105] netlink: 'syz.3.592': attribute type 1 has an invalid length. [ 187.898552][ T8113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.922603][ T8113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.950782][ T8113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.968625][ T8113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.024984][ T8117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.041422][ T8117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.549475][ T8121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.560778][ T8121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.694708][ T8125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.703748][ T8125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.716625][ T8125] netlink: 'syz.0.598': attribute type 1 has an invalid length. [ 188.725677][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'. [ 189.104348][ T24] usb 3-1: USB disconnect, device number 48 [ 189.348612][ T8134] fuse: Bad value for 'user_id' [ 189.353536][ T8134] fuse: Bad value for 'user_id' [ 189.398686][ T8138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.409421][ T8138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.588904][ T8142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.618169][ T24] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 189.624906][ T8142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.634623][ T5867] usb 2-1: USB disconnect, device number 54 [ 189.754333][ T8147] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 189.763932][ T8147] block device autoloading is deprecated and will be removed. [ 189.797076][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 189.805722][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.818875][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.829929][ T24] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 189.839703][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.858333][ T24] usb 3-1: config 0 descriptor?? [ 190.161843][ T3547] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.251871][ T3547] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.284098][ T8134] veth1_to_hsr: entered allmulticast mode [ 190.327079][ T30] audit: type=1326 audit(1762795254.087:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8133 comm="syz.2.601" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0da7b8f6c9 code=0x0 [ 190.384646][ T3547] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.472297][ T3547] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.576023][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 190.586916][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 190.595266][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 190.607666][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 190.616038][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 190.728808][ T3547] bridge_slave_1: left allmulticast mode [ 190.734694][ T3547] bridge_slave_1: left promiscuous mode [ 190.742807][ T3547] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.756283][ T3547] bridge_slave_0: left allmulticast mode [ 190.763396][ T3547] bridge_slave_0: left promiscuous mode [ 190.769407][ T3547] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.168468][ T3547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.185227][ T3547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.198216][ T3547] bond0 (unregistering): Released all slaves [ 191.255214][ T8161] ./file0: Can't lookup blockdev [ 191.320950][ T3547] tipc: Disabling bearer [ 191.335908][ T3547] tipc: Left network mode [ 191.805571][ T3547] hsr_slave_0: left promiscuous mode [ 191.814759][ T3547] hsr_slave_1: left promiscuous mode [ 191.834436][ T3547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.851867][ T3547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.870205][ T3547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.888412][ T3547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.963753][ T3547] veth1_macvtap: left promiscuous mode [ 191.977373][ T3547] veth0_macvtap: left promiscuous mode [ 191.983202][ T3547] veth1_vlan: left promiscuous mode [ 192.243407][ T3547] pim6reg9 (unregistering): left allmulticast mode [ 192.306063][ T8197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.318648][ T8197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.422022][ T8200] sg_write: data in/out 755597578/152 bytes for SCSI command 0x11-- guessing data in; [ 192.422022][ T8200] program syz.0.616 not setting count and/or reply_len properly [ 192.664065][ T5145] Bluetooth: hci1: command tx timeout [ 192.718313][ T3547] team0 (unregistering): Port device team_slave_1 removed [ 192.769434][ T3547] team0 (unregistering): Port device team_slave_0 removed [ 193.274153][ T8153] chnl_net:caif_netlink_parms(): no params data found [ 193.346441][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 193.364408][ T8202] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 193.371997][ T8202] IPv6: NLM_F_CREATE should be set when creating new route [ 193.379338][ T8202] IPv6: NLM_F_CREATE should be set when creating new route [ 193.386586][ T8202] IPv6: NLM_F_CREATE should be set when creating new route [ 193.407672][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 193.426323][ T5145] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 193.440003][ T24] usb 3-1: USB disconnect, device number 49 [ 193.615058][ T8203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.628791][ T8203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.701292][ T8153] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.708783][ T8153] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.716188][ T8153] bridge_slave_0: entered allmulticast mode [ 193.727867][ T8153] bridge_slave_0: entered promiscuous mode [ 193.750184][ T8153] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.766675][ T8213] netlink: 'syz.0.620': attribute type 64 has an invalid length. [ 193.766682][ T8153] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.767016][ T8153] bridge_slave_1: entered allmulticast mode [ 193.791649][ T8153] bridge_slave_1: entered promiscuous mode [ 193.809918][ T8213] netlink: 5 bytes leftover after parsing attributes in process `syz.0.620'. [ 193.847557][ T24] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 193.926879][ T8153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.942485][ T8153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.997271][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 194.013502][ T24] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 194.026195][ T8153] team0: Port device team_slave_0 added [ 194.030016][ T24] usb 3-1: config 1 has no interface number 0 [ 194.041257][ T8153] team0: Port device team_slave_1 added [ 194.050560][ T24] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 194.065652][ T24] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 194.079693][ T24] usb 3-1: config 1 interface 105 has no altsetting 0 [ 194.091629][ T24] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 194.101072][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.117134][ T24] usb 3-1: Product: syz [ 194.125888][ T24] usb 3-1: Manufacturer: syz [ 194.134353][ T8153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.135264][ T24] usb 3-1: SerialNumber: syz [ 194.147383][ T8153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.188261][ T8153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.208015][ T8205] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 194.217785][ T8205] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 194.225392][ T8153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.235028][ T8153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.267225][ T8153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.415143][ T8153] hsr_slave_0: entered promiscuous mode [ 194.436548][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.454287][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.459327][ T8153] hsr_slave_1: entered promiscuous mode [ 194.469976][ T8227] nfs4: Unknown parameter '&--sUj2Yq' [ 194.481572][ T8153] debugfs: 'hsr0' already exists in 'hsr' [ 194.499133][ T8233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.513935][ T8153] Cannot create hsr debugfs directory [ 194.535411][ T8233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.637545][ T8205] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 194.646092][ T8205] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 194.696222][ T8241] x_tables: ip_tables: TPROXY.0 target: invalid size 16 (kernel) != (user) 24 [ 194.737107][ T5145] Bluetooth: hci1: command tx timeout [ 194.869374][ T8244] kvm: user requested TSC rate below hardware speed [ 194.938418][ T8246] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3510134640 (7020269280 ns) > initial count (5369474572 ns). Using initial count to start timer. [ 194.958754][ T8153] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 194.976554][ T8153] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 194.996148][ T8153] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 195.027616][ T8153] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 195.064822][ T24] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 195.077253][ T8246] netlink: 40 bytes leftover after parsing attributes in process `syz.0.624'. [ 195.095249][ T24] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 195.136427][ T24] aqc111 3-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 1e:c3:ab:e2:71:11 [ 195.199757][ T8153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.234423][ T8153] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.263822][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.271146][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.313726][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.320990][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.338709][ T10] usb 3-1: USB disconnect, device number 50 [ 195.353667][ T10] aqc111 3-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 195.423917][ T10] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 195.440644][ T10] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 195.452492][ T10] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 195.584086][ T8271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.610518][ T8271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.635710][ T8271] netlink: 'syz.3.626': attribute type 13 has an invalid length. [ 195.854570][ T8283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.865818][ T8283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.919473][ T8153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.257443][ T24] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 196.427258][ T24] usb 3-1: device descriptor read/64, error -71 [ 196.459413][ T8310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.487824][ T8310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.544172][ T8317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.553260][ T8317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.687469][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 196.725979][ T8153] veth0_vlan: entered promiscuous mode [ 196.748940][ T8153] veth1_vlan: entered promiscuous mode [ 196.806617][ T8153] veth0_macvtap: entered promiscuous mode [ 196.817344][ T5145] Bluetooth: hci1: command tx timeout [ 196.827415][ T24] usb 3-1: device descriptor read/64, error -71 [ 196.840906][ T8153] veth1_macvtap: entered promiscuous mode [ 196.868427][ T8153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.891748][ T8153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.912705][ T192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.921825][ T192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.933214][ T192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.947498][ T24] usb usb3-port1: attempt power cycle [ 196.952864][ T192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.044912][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.064854][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.105233][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.127199][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.264765][ T8336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.287547][ T8336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.288309][ T24] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 197.315232][ T8336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.325300][ T8336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.335180][ T8338] netlink: 16 bytes leftover after parsing attributes in process `syz.4.608'. [ 197.347595][ T24] usb 3-1: device descriptor read/8, error -71 [ 197.457412][ T5145] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 197.466110][ T5145] Bluetooth: hci3: Injecting HCI hardware error event [ 197.475511][ T52] Bluetooth: hci3: hardware error 0x00 [ 197.511017][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'. [ 197.617298][ T24] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 197.637551][ T24] usb 3-1: device descriptor read/8, error -71 [ 197.747408][ T24] usb usb3-port1: unable to enumerate USB device [ 198.038632][ T8345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.049050][ T8345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.598364][ T8361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.608015][ T8361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.897337][ T5145] Bluetooth: hci1: command tx timeout [ 199.365507][ T8374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.374819][ T8374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.417078][ T43] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 199.537892][ T52] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 199.569766][ T43] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.581019][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 199.587730][ T43] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 199.596776][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.597235][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 199.609774][ T43] usb 3-1: config 0 descriptor?? [ 199.747073][ T10] usb 5-1: device descriptor read/64, error -71 [ 199.997506][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 200.032102][ T8366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.042819][ T8366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.147133][ T10] usb 5-1: device descriptor read/64, error -71 [ 200.216201][ T8385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.230073][ T8384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.234822][ T8385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.239979][ T8384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.256059][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 200.268756][ T10] usb usb5-port1: attempt power cycle [ 200.271095][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 200.286337][ T43] usb 3-1: USB disconnect, device number 55 [ 200.617126][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 200.637616][ T10] usb 5-1: device descriptor read/8, error -71 [ 200.877079][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 200.899197][ T10] usb 5-1: device descriptor read/8, error -71 [ 201.007772][ T10] usb usb5-port1: unable to enumerate USB device [ 201.011561][ T8402] netlink: 212 bytes leftover after parsing attributes in process `syz.3.651'. [ 201.062176][ T8404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.073207][ T8404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.157110][ T43] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 201.308345][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 201.319841][ T43] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 201.330712][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.339194][ T43] usb 3-1: Product: syz [ 201.343749][ T43] usb 3-1: Manufacturer: syz [ 201.349575][ T43] usb 3-1: SerialNumber: syz [ 201.359914][ T43] usb 3-1: config 0 descriptor?? [ 201.370160][ T43] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 201.665295][ T8421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.675181][ T8422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.680395][ T8421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.684795][ T8422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.710300][ T8422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.719503][ T8422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.346445][ T8429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.372545][ T8429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.448009][ T8431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.462532][ T8431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.463266][ T8435] gfs2: error -5 reading superblock [ 202.472223][ T8431] netlink: 132 bytes leftover after parsing attributes in process `syz.3.662'. [ 202.487116][ T8432] netlink: 132 bytes leftover after parsing attributes in process `syz.3.662'. [ 202.747121][ T1209] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 202.909325][ T1209] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 102, changing to 10 [ 202.921148][ T1209] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24624, setting to 1024 [ 202.933571][ T1209] usb 5-1: config 0 interface 0 has no altsetting 0 [ 202.944146][ T1209] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 202.953645][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.962043][ T1209] usb 5-1: Product: syz [ 202.966431][ T1209] usb 5-1: Manufacturer: syz [ 202.971398][ T1209] usb 5-1: SerialNumber: syz [ 202.988023][ T1209] usb 5-1: config 0 descriptor?? [ 203.000347][ T8439] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 203.000659][ T1209] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 203.017053][ T1209] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 203.035447][ T1209] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 203.043727][ T1209] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 203.052306][ T1209] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 203.060715][ T1209] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 203.068933][ T1209] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 203.081689][ T1209] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 203.096411][ T1209] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 203.105454][ T1209] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 203.106328][ T8442] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 203.113206][ T1209] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 203.113312][ T1209] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 203.140979][ T8442] CIFS mount error: No usable UNC path provided in device string! [ 203.140979][ T8442] [ 203.151011][ T1209] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 203.157771][ T8442] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 203.187781][ T1209] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 203.204824][ T8435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.257749][ T8435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.309976][ T5921] usb 5-1: USB disconnect, device number 6 [ 203.342148][ T5921] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 203.342273][ T8445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.360547][ T5921] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 203.363818][ T5921] keyspan 5-1:0.0: device disconnected [ 203.392778][ T8445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.410156][ T43] gspca_sonixj: reg_w1 err -71 [ 203.419576][ T43] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 203.447436][ T43] usb 3-1: USB disconnect, device number 56 [ 203.488488][ T8446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.504290][ T8446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.172284][ T8457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.181782][ T8457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.195596][ T8457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.204287][ T8443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.209255][ T8457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.213772][ T8443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.237414][ T1209] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 204.247220][ T5921] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 204.401026][ T1209] usb 5-1: not running at top speed; connect to a high speed hub [ 204.410101][ T5921] usb 3-1: config 4 has an invalid interface number: 231 but max is 0 [ 204.420148][ T5921] usb 3-1: config 4 has no interface number 0 [ 204.423133][ T1209] usb 5-1: config 9 has an invalid interface number: 197 but max is 0 [ 204.426291][ T5921] usb 3-1: config 4 interface 231 has no altsetting 0 [ 204.437047][ T1209] usb 5-1: config 9 has no interface number 0 [ 204.446624][ T5921] usb 3-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=82.e7 [ 204.457096][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.462218][ T1209] usb 5-1: config 9 interface 197 has no altsetting 0 [ 204.465102][ T5921] usb 3-1: Product: syz [ 204.476314][ T5921] usb 3-1: Manufacturer: syz [ 204.480064][ T1209] usb 5-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=93.80 [ 204.481026][ T5921] usb 3-1: SerialNumber: syz [ 204.490091][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.504112][ T1209] usb 5-1: Product: syz [ 204.508733][ T1209] usb 5-1: Manufacturer: syz [ 204.509859][ T5921] usb 3-1: bad CDC descriptors [ 204.513432][ T1209] usb 5-1: SerialNumber: syz [ 204.713042][ T8454] netlink: 'syz.2.668': attribute type 41 has an invalid length. [ 204.723262][ T10] usb 3-1: USB disconnect, device number 57 [ 204.752369][ T1209] pegasus 5-1:9.197: probe with driver pegasus failed with error -71 [ 204.769438][ T1209] usb 5-1: USB disconnect, device number 7 [ 204.990119][ T8469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.002977][ T8469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.437024][ T8478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.446346][ T8478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.607088][ T5921] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 205.627535][ T24] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 205.761896][ T5921] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 205.771215][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.784755][ T5921] usb 5-1: Product: syz [ 205.790626][ T5921] usb 5-1: Manufacturer: syz [ 205.795419][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.805406][ T5921] usb 5-1: SerialNumber: syz [ 205.812591][ T24] usb 3-1: New USB device found, idVendor=2087, idProduct=0f01, bcdDevice= 0.00 [ 205.829367][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.845768][ T24] usb 3-1: config 0 descriptor?? [ 206.034098][ T5921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 206.048128][ T5921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 206.071448][ T5921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 206.087633][ T5921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 206.098076][ T5921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 206.108605][ T8502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.118911][ T8502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.124520][ T5921] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 206.143846][ T5921] usb 5-1: USB disconnect, device number 8 [ 206.229580][ T8504] sd 0:0:1:0: PR command failed: 1026 [ 206.235066][ T8504] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 206.242256][ T8504] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 206.465550][ T8483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.475426][ T8483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.627094][ T5921] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 206.675507][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 206.689063][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 206.711369][ T24] usb 3-1: USB disconnect, device number 58 [ 206.785250][ T5921] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 206.794703][ T8515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.794799][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.808160][ T8515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.823024][ T5921] usb 5-1: config 0 descriptor?? [ 207.045269][ T5921] kaweth 5-1:0.0: Firmware present in device. [ 207.230077][ T8518] random: crng reseeded on system resumption [ 207.239604][ T5921] kaweth 5-1:0.0: Statistics collection: 0 [ 207.245658][ T5921] kaweth 5-1:0.0: Multicast filter limit: 0 [ 207.251904][ T5921] kaweth 5-1:0.0: MTU: 0 [ 207.251924][ T5921] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 207.567097][ T5867] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 207.720090][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 207.729975][ T5867] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 207.739770][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 207.749846][ T5867] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 207.761777][ T5867] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 207.771003][ T5867] usb 3-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 207.779265][ T5867] usb 3-1: Product: syz [ 207.783695][ T5867] usb 3-1: Manufacturer: syz [ 207.788363][ T5867] usb 3-1: SerialNumber: syz [ 207.795551][ T5867] usb 3-1: config 0 descriptor?? [ 207.804961][ T5867] kvaser_usb 3-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 207.812387][ T5867] kvaser_usb 3-1:0.0: error -EMSGSIZE: Failed to initialize card [ 207.820385][ T5867] kvaser_usb 3-1:0.0: probe with driver kvaser_usb failed with error -90 [ 207.848827][ T5921] kaweth 5-1:0.0: Error setting receive filter [ 207.858376][ T5921] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 207.878743][ T5921] usb 5-1: USB disconnect, device number 9 [ 208.115918][ T8519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.128538][ T8519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.145022][ T8530] 9p: Could not find request transport: fd9fdno=0xffffffffffffffff [ 208.877136][ T5874] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 208.990726][ T8568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.003301][ T8568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.027145][ T5874] usb 5-1: device descriptor read/64, error -71 [ 209.096069][ T8572] 9pnet_fd: Insufficient options for proto=fd [ 209.252441][ T8579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.262913][ T8579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.281144][ T8579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.294893][ T8579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.310187][ T5874] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 209.453630][ T61] nci: nci_rsp_packet: unsupported rsp opcode 0xf06 [ 209.467080][ T5874] usb 5-1: device descriptor read/64, error -71 [ 209.578455][ T5874] usb usb5-port1: attempt power cycle [ 209.592226][ T8600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.610742][ T8600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.700469][ T8607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.710671][ T8607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.937160][ T5874] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 209.959425][ T5874] usb 5-1: device descriptor read/8, error -71 [ 210.209658][ T5874] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 210.237089][ T30] audit: type=1326 audit(1762795273.997:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8517 comm="syz.2.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0da7b8f6c9 code=0x7fc00000 [ 210.285614][ T5874] usb 5-1: device descriptor read/8, error -71 [ 210.311687][ T24] usb 3-1: USB disconnect, device number 59 [ 210.401081][ T8619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.412924][ T5874] usb usb5-port1: unable to enumerate USB device [ 210.424795][ T8619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.499794][ T8623] netlink: 'syz.2.700': attribute type 10 has an invalid length. [ 210.536036][ T8623] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 210.592984][ T8622] netlink: 763 bytes leftover after parsing attributes in process `syz.0.698'. [ 210.602603][ T8622] qrtr: Invalid version 48 [ 210.609176][ T8622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.618471][ T8622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.014757][ T8626] netlink: 'syz.3.702': attribute type 2 has an invalid length. [ 211.022557][ T8626] netlink: 'syz.3.702': attribute type 1 has an invalid length. [ 211.136177][ T8629] fuse: Bad value for 'fd' [ 211.136195][ T8630] fuse: Bad value for 'fd' [ 211.146635][ T8629] netlink: 80 bytes leftover after parsing attributes in process `syz.3.703'. [ 211.415079][ T8639] netlink: 60 bytes leftover after parsing attributes in process `syz.3.706'. [ 211.425267][ T8639] netlink: 60 bytes leftover after parsing attributes in process `syz.3.706'. [ 211.684818][ T8647] ufs: You didn't specify the type of your ufs filesystem [ 211.684818][ T8647] [ 211.684818][ T8647] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 211.684818][ T8647] [ 211.684818][ T8647] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 211.721066][ T8647] ufs: ufs_fill_super(): bad magic number [ 211.727067][ T5874] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 211.857585][ T5145] Bluetooth: hci2: command 0x0406 tx timeout [ 211.877612][ T5874] usb 3-1: device descriptor read/64, error -71 [ 212.127223][ T5874] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 212.207109][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 212.257020][ T5874] usb 3-1: device descriptor read/64, error -71 [ 212.359430][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 212.366779][ T8658] netlink: zone id is out of range [ 212.367570][ T5874] usb usb3-port1: attempt power cycle [ 212.377380][ T8658] netlink: zone id is out of range [ 212.377395][ T8658] netlink: zone id is out of range [ 212.377430][ T8658] netlink: zone id is out of range [ 212.377440][ T8658] netlink: zone id is out of range [ 212.398335][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.398697][ T8658] netlink: zone id is out of range [ 212.409679][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 212.409709][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.413137][ T24] usb 5-1: config 0 descriptor?? [ 212.418252][ T8658] netlink: zone id is out of range [ 212.442873][ T8658] netlink: zone id is out of range [ 212.449132][ T8658] netlink: zone id is out of range [ 212.454891][ T8658] netlink: zone id is out of range [ 212.514254][ T8660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.524586][ T8660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.717096][ T5874] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 212.739653][ T5874] usb 3-1: device descriptor read/8, error -71 [ 212.851516][ T8656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.860508][ T8656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.874123][ T24] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 212.977780][ T5874] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 212.999468][ T5874] usb 3-1: device descriptor read/8, error -71 [ 213.117858][ T5874] usb usb3-port1: unable to enumerate USB device [ 213.152210][ T8664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.162825][ T8664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.277198][ T5874] usb 5-1: USB disconnect, device number 14 [ 213.419233][ T8671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.428440][ T8671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.720735][ T8673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.729647][ T8673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.742747][ T8675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.751605][ T8675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.988757][ T8682] netlink: 'syz.0.723': attribute type 1 has an invalid length. [ 213.996427][ T8682] netlink: 224 bytes leftover after parsing attributes in process `syz.0.723'. [ 214.036551][ T8682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.046813][ T8682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.055852][ T8682] netlink: 'syz.0.723': attribute type 21 has an invalid length. [ 214.063884][ T8682] netlink: 132 bytes leftover after parsing attributes in process `syz.0.723'. [ 214.076228][ T8682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.085250][ T8682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.137161][ T5874] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 214.147817][ T8685] netlink: 28 bytes leftover after parsing attributes in process `syz.0.723'. [ 214.156748][ T8685] netlink: 24 bytes leftover after parsing attributes in process `syz.0.723'. [ 214.166805][ T8685] netlink: 28 bytes leftover after parsing attributes in process `syz.0.723'. [ 214.297482][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 214.306674][ T5874] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 214.317613][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.325674][ T5874] usb 5-1: Product: syz [ 214.330832][ T5874] usb 5-1: Manufacturer: syz [ 214.335462][ T5874] usb 5-1: SerialNumber: syz [ 214.344808][ T5874] usb 5-1: config 0 descriptor?? [ 214.361434][ T5874] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 214.369641][ T5874] pctv452e: pctv452e_power_ctrl: 1 [ 214.369641][ T5874] [ 214.377027][ T5874] usb 5-1: selecting invalid altsetting 3 [ 214.382782][ T5874] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 214.382782][ T5874] [ 214.393105][ T5874] dvb-usb: bulk message failed: -22 (5/0) [ 214.402802][ T5874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 214.407235][ T8689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.421206][ T5874] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 214.423136][ T8689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.437370][ T5874] usb 5-1: media controller created [ 214.443140][ T5874] dvb-usb: bulk message failed: -22 (8/0) [ 214.452883][ T5874] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 214.463388][ T5874] dvb-usb: MAC address reading failed. [ 214.479208][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.562159][ T5874] DVB: Unable to find symbol stb0899_attach() [ 214.571033][ T5874] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 214.623071][ T8680] program syz.4.722 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.651128][ T5874] rc_core: IR keymap rc-tt-1500 not found [ 214.658863][ T5874] Registered IR keymap rc-empty [ 214.665998][ T5874] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 214.680465][ T5874] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input25 [ 214.693776][ T5874] dvb-usb: schedule remote query interval to 100 msecs. [ 214.700822][ T5874] pctv452e: pctv452e_power_ctrl: 0 [ 214.700822][ T5874] [ 214.708194][ T5874] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 214.723203][ T5874] usb 5-1: USB disconnect, device number 15 [ 214.792816][ T5874] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 214.907060][ T24] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 215.006176][ T8696] netlink: 60 bytes leftover after parsing attributes in process `syz.3.727'. [ 215.015801][ T8696] unsupported nlmsg_type 40 [ 215.062247][ T8698] dlm: plock device version mismatch: kernel (1.2.0), user (1.6.16) [ 215.071964][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 215.083964][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 215.095123][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 215.107784][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 215.121180][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 215.130727][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.139237][ T24] usb 3-1: Product: syz [ 215.143539][ T24] usb 3-1: Manufacturer: syz [ 215.148269][ T24] usb 3-1: SerialNumber: syz [ 215.179027][ T8692] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 215.196283][ T24] cdc_mbim 3-1:1.0: skipping garbage [ 215.408632][ T8692] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 215.417516][ T8692] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 215.476207][ T8715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.490005][ T8715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.737077][ T5874] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 215.889931][ T5874] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 215.898386][ T5874] usb 5-1: config 8 has an invalid descriptor of length 124, skipping remainder of the config [ 215.908712][ T5874] usb 5-1: config 8 has no interface number 0 [ 215.914848][ T5874] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 215.925960][ T5874] usb 5-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.942846][ T5874] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 215.952026][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.960096][ T5874] usb 5-1: Product: syz [ 215.964279][ T5874] usb 5-1: Manufacturer: syz [ 215.968957][ T5874] usb 5-1: SerialNumber: syz [ 216.036494][ T8692] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 216.043950][ T8692] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 216.051818][ T24] cdc_mbim 3-1:1.0: setting tx_max = 48 [ 216.062308][ T24] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 216.074071][ T24] wwan wwan0: port wwan0mbim0 attached [ 216.091146][ T24] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 6e:96:8f:94:c8:89 [ 216.209165][ T5874] usb 5-1: USB disconnect, device number 16 [ 216.758306][ T8741] overlayfs: failed to resolve './bus': -2 [ 216.785357][ T8746] 9p: Bad value for 'wfdno' [ 216.830236][ T5490] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 217.437160][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 217.610983][ T5874] usb 3-1: USB disconnect, device number 64 [ 217.619752][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 217.627157][ T8785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.639026][ T5874] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 217.658578][ T8785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.667373][ T24] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 217.681524][ T24] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 217.703735][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.720276][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 217.748420][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.762563][ T24] usb 5-1: Product: 禚ᆳᬅ폌Ý攸⥬ⱓ䘸놚罵꾹需寱࠭嵡롖디∫ᮕ㣥☼겈膽Ứ෴ퟮ✒榧㔷毕簗ҙ瘃⎺该帢荥腓渦첧맺蜅鸩甜팱樌ಁڤ࿇炮郣៴ߓ᤺銠幾吢귈꯸谑鋱鹯 [ 217.808741][ T8788] cgroup: release_agent respecified [ 217.814180][ T24] usb 5-1: Manufacturer: ꖆ騿斂耰唱￟垡兆䰃懒哤胍媃⪽畴飗᷑썃窋猡켋冈ӫ锩䣵큘֘빕氵幈ᴬ挜⇍柟◭丧眧藽䢜脷⧃濡᳆홧ᶫꛢ簝ᵽ⥁᥎앳榷ㄘ㡣ᐁ൉蓼చ䠓蟝㐄귿鲗ꫩ⮢蝙飞쥿ⵒ氆力짰叙싆⧙Ƒ쭛呻뻯諜폰鹳院휌Ӯ兕⚗ⷔ䥲쏒䈵 [ 217.881890][ T24] usb 5-1: SerialNumber: щ [ 217.998914][ T5874] wwan wwan0: port wwan0mbim0 disconnected [ 218.016533][ T8795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.068800][ T8795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.133358][ T8766] tipc: Started in network mode [ 218.150254][ T8766] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 218.169712][ T8766] tipc: Enabled bearer , priority 10 [ 218.176201][ T8803] tipc: Enabling of bearer rejected, already enabled [ 218.228734][ T8807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.239832][ T8807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.331977][ T8811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.350630][ T8811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.400501][ T24] usb 5-1: 0:2 : does not exist [ 218.447129][ T5874] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 218.453454][ T24] usb 5-1: USB disconnect, device number 17 [ 218.618697][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 218.625950][ T5874] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.643030][ T5874] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.654549][ T5874] usb 3-1: config 0 interface 0 has no altsetting 0 [ 218.661313][ T5874] usb 3-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 218.670684][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.688790][ T5874] usb 3-1: config 0 descriptor?? [ 218.959211][ T5874] glorious 0003:258A:0033.000B: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.2-1/input0 [ 219.195940][ T8848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.220550][ T8848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.287288][ T24] tipc: Node number set to 4269801642 [ 219.937045][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 220.110311][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.124438][ T10] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 220.138256][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.183603][ T10] usb 5-1: config 0 descriptor?? [ 220.352816][ T8902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.366442][ T8902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.609194][ T10] hid_mf 0003:0079:1846.000C: unknown main item tag 0x4 [ 220.616268][ T10] hid_mf 0003:0079:1846.000C: unknown main item tag 0x4 [ 220.623681][ T10] hid_mf 0003:0079:1846.000C: unknown main item tag 0x2 [ 220.632070][ T10] hid_mf 0003:0079:1846.000C: item fetching failed at offset 5/7 [ 220.640675][ T10] hid_mf 0003:0079:1846.000C: HID parse failed. [ 220.647102][ T10] hid_mf 0003:0079:1846.000C: probe with driver hid_mf failed with error -22 [ 220.809266][ T10] usb 5-1: USB disconnect, device number 18 [ 220.939369][ T8909] kvm: user requested TSC rate below hardware speed [ 220.947597][ T8909] kvm: user requested TSC rate below hardware speed [ 220.955125][ T8909] kvm: user requested TSC rate below hardware speed [ 220.962785][ T8909] kvm: user requested TSC rate below hardware speed [ 220.971851][ T8909] kvm: user requested TSC rate below hardware speed [ 220.980801][ T8909] kvm: user requested TSC rate below hardware speed [ 220.988432][ T8909] kvm: user requested TSC rate below hardware speed [ 220.996019][ T8909] kvm: user requested TSC rate below hardware speed [ 221.003727][ T8909] kvm: user requested TSC rate below hardware speed [ 221.012335][ T8909] kvm: user requested TSC rate below hardware speed [ 221.131023][ T10] usb 3-1: USB disconnect, device number 65 [ 221.221568][ T8914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.231682][ T8914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.448803][ T8921] IPv6: syztnl0: Disabled Multicast RS [ 221.486671][ T8923] tmpfs: Unknown parameter 'noinode32' [ 221.537586][ T10] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 221.555488][ T8929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.564735][ T8929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.707037][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 221.713617][ T10] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 221.721843][ T10] usb 3-1: config 0 has no interface number 0 [ 221.728831][ T10] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 221.738823][ T10] usb 3-1: config 0 interface 89 has no altsetting 0 [ 221.747863][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 221.756999][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.765013][ T10] usb 3-1: Product: syz [ 221.769602][ T10] usb 3-1: Manufacturer: syz [ 221.774224][ T10] usb 3-1: SerialNumber: syz [ 221.782122][ T10] usb 3-1: config 0 descriptor?? [ 221.792602][ T10] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 221.802521][ T10] em28xx 3-1:0.89: Video interface 89 found: [ 222.050411][ T10] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 222.141601][ T8938] mkiss: ax0: crc mode is auto. [ 222.290869][ T8942] block nbd0: shutting down sockets [ 222.382087][ T8948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.391604][ T8948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.394873][ T8913] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 222.453638][ T8948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.473896][ T8949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.493170][ T8949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.525270][ T8948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.530876][ T10] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 222.550414][ T8952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.560663][ T8952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.578638][ T10] em28xx 3-1:0.89: board has no eeprom [ 222.647937][ T10] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 222.657019][ T10] em28xx 3-1:0.89: analog set to bulk mode. [ 222.663369][ T5874] em28xx 3-1:0.89: Registering V4L2 extension [ 222.698370][ T10] usb 3-1: USB disconnect, device number 66 [ 222.731293][ T10] em28xx 3-1:0.89: Disconnecting em28xx [ 222.741788][ T8960] kernel profiling enabled (shift: 7) [ 222.750287][ T5874] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 222.766680][ T5874] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 222.781722][ T8960] netlink: 'syz.2.783': attribute type 6 has an invalid length. [ 222.805679][ T5874] em28xx 3-1:0.89: No AC97 audio processor [ 222.818739][ T5874] usb 3-1: Decoder not found [ 222.823383][ T5874] em28xx 3-1:0.89: failed to create media graph [ 222.829744][ T5874] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 222.842210][ T5874] em28xx 3-1:0.89: Registering snapshot button... [ 222.854097][ T5874] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input27 [ 222.871031][ T5874] em28xx 3-1:0.89: Remote control support is not available for this card. [ 222.880587][ T10] em28xx 3-1:0.89: Closing input extension [ 222.888440][ T10] em28xx 3-1:0.89: Deregistering snapshot button [ 222.924535][ T10] em28xx 3-1:0.89: Freeing device [ 222.983937][ T8965] syzkaller1: entered promiscuous mode [ 223.008056][ T8965] syzkaller1: entered allmulticast mode [ 223.281289][ T8983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.290130][ T10] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 223.305070][ T8983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.407200][ T5867] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 223.448041][ T10] usb 3-1: device descriptor read/64, error -71 [ 223.557061][ T5867] usb 5-1: Using ep0 maxpacket: 32 [ 223.567589][ T5867] usb 5-1: config 0 has an invalid interface number: 93 but max is 0 [ 223.660311][ T5867] usb 5-1: config 0 has no interface number 0 [ 223.697243][ T10] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 223.697583][ T5867] usb 5-1: config 0 has an invalid interface number: 93 but max is 0 [ 223.716414][ T5867] usb 5-1: config 0 has no interface number 0 [ 223.728955][ T5867] usb 5-1: config 0 has an invalid interface number: 93 but max is 0 [ 223.737249][ T5867] usb 5-1: config 0 has no interface number 0 [ 223.827073][ T10] usb 3-1: device descriptor read/64, error -71 [ 223.938006][ T10] usb usb3-port1: attempt power cycle [ 224.213180][ T9004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.224333][ T9004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.227963][ T5867] usb 5-1: config 0 has an invalid interface number: 93 but max is 0 [ 224.247105][ T5867] usb 5-1: config 0 has no interface number 0 [ 224.264849][ T5867] usb 5-1: config 0 has an invalid interface number: 93 but max is 0 [ 224.273260][ T5867] usb 5-1: config 0 has no interface number 0 [ 224.288369][ T5867] usb 5-1: config 0 has an invalid interface number: 93 but max is 0 [ 224.296680][ T5867] usb 5-1: config 0 has no interface number 0 [ 224.297074][ T10] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 224.309703][ T5867] usb 5-1: New USB device found, idVendor=8e21, idProduct=8b28, bcdDevice=69.86 [ 224.327088][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.335151][ T5867] usb 5-1: Product: syz [ 224.347780][ T10] usb 3-1: device descriptor read/8, error -71 [ 224.358247][ T5867] usb 5-1: Manufacturer: syz [ 224.362940][ T5867] usb 5-1: SerialNumber: syz [ 224.380028][ T5867] usb 5-1: config 0 descriptor?? [ 224.397939][ T5867] usb 5-1: bad CDC descriptors [ 224.603423][ T10] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 224.624597][ T5867] usb 5-1: USB disconnect, device number 19 [ 224.644094][ T10] usb 3-1: device descriptor read/8, error -71 [ 224.715176][ T9011] tipc: Enabling of bearer rejected, already enabled [ 224.727764][ T9011] netlink: 'syz.4.793': attribute type 1 has an invalid length. [ 224.767445][ T10] usb usb3-port1: unable to enumerate USB device [ 224.893367][ T9015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.916496][ T9015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.936802][ T9015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.965418][ T9015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.179626][ T9015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.196673][ T9015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.230536][ T9020] syzkaller1: entered promiscuous mode [ 225.246425][ T9020] syzkaller1: entered allmulticast mode [ 225.640045][ C0] ------------[ cut here ]------------ [ 225.645927][ C0] WARNING: ./include/linux/ns_common.h:255 at put_cred_rcu+0x2c5/0x340, CPU#0: syz.2.783/8958 [ 225.656356][ C0] Modules linked in: [ 225.660786][ C0] CPU: 0 UID: 0 PID: 8958 Comm: syz.2.783 Not tainted syzkaller #0 PREEMPT(full) [ 225.670056][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 225.680187][ C0] RIP: 0010:put_cred_rcu+0x2c5/0x340 [ 225.685524][ C0] Code: 5c 41 5d 41 5e 41 5f 5d e9 78 8c 8d 00 e8 03 8c 32 00 4c 89 e7 be 03 00 00 00 e8 b6 d6 08 03 e9 b8 fe ff ff e8 ec 8b 32 00 90 <0f> 0b 90 eb 9f e8 e1 8b 32 00 4c 89 ff be 03 00 00 00 e8 94 d6 08 [ 225.705209][ C0] RSP: 0018:ffffc90000007ba8 EFLAGS: 00010246 [ 225.711388][ C0] RAX: ffffffff818ed124 RBX: ffff888027c3b4a0 RCX: ffff88802c929e80 [ 225.719419][ C0] RDX: 0000000000000100 RSI: 0000000000000004 RDI: 0000000000000000 [ 225.727467][ C0] RBP: 0000000000000004 R08: ffff888078db85bb R09: 1ffff1100f1b70b7 [ 225.735484][ C0] R10: dffffc0000000000 R11: ffffed100f1b70b8 R12: dffffc0000000000 [ 225.737411][ T5867] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 225.743522][ C0] R13: ffff888027c3b400 R14: ffff888078db8428 R15: ffff888078db85b8 [ 225.759098][ C0] FS: 0000000000000000(0000) GS:ffff888125a83000(0000) knlGS:0000000000000000 [ 225.768098][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.774706][ C0] CR2: 00007fc0d79e7dac CR3: 000000006a8f0000 CR4: 00000000003526f0 [ 225.782760][ C0] Call Trace: [ 225.786087][ C0] [ 225.789103][ C0] ? __pfx_put_cred_rcu+0x10/0x10 [ 225.794166][ C0] ? rcu_core+0xc37/0x1770 [ 225.798678][ C0] rcu_core+0xcab/0x1770 [ 225.802988][ C0] ? __pfx_rcu_core+0x10/0x10 [ 225.807755][ C0] ? sched_balance_domains+0x121/0x9e0 [ 225.813249][ C0] ? sched_balance_domains+0x8be/0x9e0 [ 225.818798][ C0] handle_softirqs+0x286/0x870 [ 225.823693][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 225.828540][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 225.833873][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 225.839167][ C0] __irq_exit_rcu+0xca/0x1f0 [ 225.843798][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 225.849089][ C0] irq_exit_rcu+0x9/0x30 [ 225.853364][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 225.859097][ C0] [ 225.862058][ C0] [ 225.865021][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 225.871083][ C0] RIP: 0010:rcu_is_watching+0x4e/0xb0 [ 225.876588][ C0] Code: ff df 4c 8d 34 dd d0 ad ca 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 8c 3f 80 00 48 c7 c3 98 01 bb 92 49 03 1e <48> 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d 69 [ 225.896371][ C0] RSP: 0018:ffffc9000e0375f0 EFLAGS: 00000283 [ 225.897075][ T5867] usb 5-1: Using ep0 maxpacket: 16 [ 225.902498][ C0] RAX: 1ffffffff1b955ba RBX: ffff8880b8633198 RCX: ead6315380948300 [ 225.914730][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.915736][ C0] RDX: 0000000000000000 RSI: ffffffff8be11140 RDI: ffffffff8be11100 [ 225.915760][ C0] RBP: ffffffff8263d2cc R08: 0000000000000000 R09: 0000000000000000 [ 225.933208][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.934790][ C0] R10: dffffc0000000000 R11: ffffed100b6b5e79 R12: 0000000000000002 [ 225.953898][ T5867] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 225.960570][ C0] R13: ffffffff8e33d860 R14: ffffffff8dcaadd0 R15: dffffc0000000000 [ 225.960600][ C0] ? kernfs_root+0x1c/0x230 [ 225.982211][ C0] lock_acquire+0x5f/0x360 [ 225.986679][ C0] ? kernfs_root+0x1c/0x230 [ 225.987297][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.991252][ C0] kernfs_root+0x38/0x230 [ 226.003803][ C0] ? kernfs_root+0x1c/0x230 [ 226.008467][ C0] kernfs_drain+0x8a/0x5e0 [ 226.012922][ C0] ? kernfs_root+0x1c/0x230 [ 226.017507][ C0] ? __pfx_kernfs_drain+0x10/0x10 [ 226.022587][ C0] __kernfs_remove+0x33b/0x5a0 [ 226.027421][ C0] kernfs_remove+0x38/0x60 [ 226.031880][ C0] __kobject_del+0xe1/0x330 [ 226.036428][ C0] ? kobject_put+0x237/0x570 [ 226.041176][ C0] kobject_put+0x243/0x570 [ 226.045650][ C0] bus_remove_driver+0x245/0x320 [ 226.050772][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 226.056548][ C0] raw_release+0xd7/0x260 [ 226.060961][ C0] ? __pfx_raw_release+0x10/0x10 [ 226.065948][ C0] __fput+0x44c/0xa70 [ 226.070028][ C0] task_work_run+0x1d4/0x260 [ 226.074683][ C0] ? __pfx_task_work_run+0x10/0x10 [ 226.079874][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 226.085130][ C0] do_exit+0x6bd/0x2300 [ 226.089366][ C0] ? do_raw_spin_lock+0x121/0x290 [ 226.094178][ T9026] binder: 9023:9026 ioctl c0306201 200000000240 returned -22 [ 226.094451][ C0] ? __pfx_do_exit+0x10/0x10 [ 226.106577][ C0] do_group_exit+0x21c/0x2d0 [ 226.111250][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.116508][ C0] get_signal+0x1285/0x1340 [ 226.121135][ C0] arch_do_signal_or_restart+0x9a/0x7a0 [ 226.126734][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 226.133009][ C0] ? exit_to_user_mode_loop+0x55/0x4f0 [ 226.138539][ C0] exit_to_user_mode_loop+0x87/0x4f0 [ 226.144039][ C0] ? rcu_is_watching+0x15/0xb0 [ 226.148882][ C0] do_syscall_64+0x2e9/0xfa0 [ 226.153524][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.159658][ C0] ? clear_bhb_loop+0x60/0xb0 [ 226.164384][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.170340][ C0] RIP: 0033:0x7f0da7b8f6c9 [ 226.174818][ C0] Code: Unable to access opcode bytes at 0x7f0da7b8f69f. [ 226.181980][ C0] RSP: 002b:00007f0da8971038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 226.190456][ C0] RAX: fffffffffffffe00 RBX: 00007f0da7de5fa0 RCX: 00007f0da7b8f6c9 [ 226.198509][ C0] RDX: 00000000200008c0 RSI: 0000200000000740 RDI: 0000000000000003 [ 226.206517][ C0] RBP: 00007f0da7c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 226.214556][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.222609][ C0] R13: 00007f0da7de6038 R14: 00007f0da7de5fa0 R15: 00007fff456b8df8 [ 226.230668][ C0] [ 226.233739][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 226.241148][ C0] CPU: 0 UID: 0 PID: 8958 Comm: syz.2.783 Not tainted syzkaller #0 PREEMPT(full) [ 226.250473][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 226.260574][ C0] Call Trace: [ 226.263880][ C0] [ 226.266758][ C0] dump_stack_lvl+0x99/0x250 [ 226.271401][ C0] ? __asan_memcpy+0x40/0x70 [ 226.276034][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.281288][ C0] ? __pfx__printk+0x10/0x10 [ 226.285932][ C0] vpanic+0x237/0x6d0 [ 226.289968][ C0] ? __pfx_vpanic+0x10/0x10 [ 226.294506][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 226.299855][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 226.305196][ C0] panic+0xb9/0xc0 [ 226.308952][ C0] ? __pfx_panic+0x10/0x10 [ 226.313427][ C0] __warn+0x334/0x4c0 [ 226.317528][ C0] ? put_cred_rcu+0x2c5/0x340 [ 226.322263][ C0] ? put_cred_rcu+0x2c5/0x340 [ 226.326984][ C0] report_bug+0x2be/0x4f0 [ 226.331373][ C0] ? put_cred_rcu+0x2c5/0x340 [ 226.336106][ C0] ? put_cred_rcu+0x2c5/0x340 [ 226.340820][ C0] ? put_cred_rcu+0x2c7/0x340 [ 226.345545][ C0] handle_bug+0x84/0x160 [ 226.349829][ C0] exc_invalid_op+0x1a/0x50 [ 226.354411][ C0] asm_exc_invalid_op+0x1a/0x20 [ 226.359303][ C0] RIP: 0010:put_cred_rcu+0x2c5/0x340 [ 226.364636][ C0] Code: 5c 41 5d 41 5e 41 5f 5d e9 78 8c 8d 00 e8 03 8c 32 00 4c 89 e7 be 03 00 00 00 e8 b6 d6 08 03 e9 b8 fe ff ff e8 ec 8b 32 00 90 <0f> 0b 90 eb 9f e8 e1 8b 32 00 4c 89 ff be 03 00 00 00 e8 94 d6 08 [ 226.384284][ C0] RSP: 0018:ffffc90000007ba8 EFLAGS: 00010246 [ 226.390404][ C0] RAX: ffffffff818ed124 RBX: ffff888027c3b4a0 RCX: ffff88802c929e80 [ 226.398412][ C0] RDX: 0000000000000100 RSI: 0000000000000004 RDI: 0000000000000000 [ 226.406415][ C0] RBP: 0000000000000004 R08: ffff888078db85bb R09: 1ffff1100f1b70b7 [ 226.414438][ C0] R10: dffffc0000000000 R11: ffffed100f1b70b8 R12: dffffc0000000000 [ 226.422449][ C0] R13: ffff888027c3b400 R14: ffff888078db8428 R15: ffff888078db85b8 [ 226.430470][ C0] ? put_cred_rcu+0x2c4/0x340 [ 226.435221][ C0] ? put_cred_rcu+0x2c4/0x340 [ 226.440034][ C0] ? __pfx_put_cred_rcu+0x10/0x10 [ 226.445114][ C0] ? rcu_core+0xc37/0x1770 [ 226.449577][ C0] rcu_core+0xcab/0x1770 [ 226.453888][ C0] ? __pfx_rcu_core+0x10/0x10 [ 226.458618][ C0] ? sched_balance_domains+0x121/0x9e0 [ 226.464134][ C0] ? sched_balance_domains+0x8be/0x9e0 [ 226.469645][ C0] handle_softirqs+0x286/0x870 [ 226.474475][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 226.479300][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 226.484640][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 226.489895][ C0] __irq_exit_rcu+0xca/0x1f0 [ 226.494522][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 226.499765][ C0] irq_exit_rcu+0x9/0x30 [ 226.504060][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 226.509739][ C0] [ 226.512695][ C0] [ 226.515654][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 226.521773][ C0] RIP: 0010:rcu_is_watching+0x4e/0xb0 [ 226.527204][ C0] Code: ff df 4c 8d 34 dd d0 ad ca 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 8c 3f 80 00 48 c7 c3 98 01 bb 92 49 03 1e <48> 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d 69 [ 226.547016][ C0] RSP: 0018:ffffc9000e0375f0 EFLAGS: 00000283 [ 226.553218][ C0] RAX: 1ffffffff1b955ba RBX: ffff8880b8633198 RCX: ead6315380948300 [ 226.561270][ C0] RDX: 0000000000000000 RSI: ffffffff8be11140 RDI: ffffffff8be11100 [ 226.569271][ C0] RBP: ffffffff8263d2cc R08: 0000000000000000 R09: 0000000000000000 [ 226.577270][ C0] R10: dffffc0000000000 R11: ffffed100b6b5e79 R12: 0000000000000002 [ 226.585275][ C0] R13: ffffffff8e33d860 R14: ffffffff8dcaadd0 R15: dffffc0000000000 [ 226.593287][ C0] ? kernfs_root+0x1c/0x230 [ 226.597951][ C0] lock_acquire+0x5f/0x360 [ 226.602415][ C0] ? kernfs_root+0x1c/0x230 [ 226.606966][ C0] kernfs_root+0x38/0x230 [ 226.611339][ C0] ? kernfs_root+0x1c/0x230 [ 226.615939][ C0] kernfs_drain+0x8a/0x5e0 [ 226.620394][ C0] ? kernfs_root+0x1c/0x230 [ 226.624944][ C0] ? __pfx_kernfs_drain+0x10/0x10 [ 226.630022][ C0] __kernfs_remove+0x33b/0x5a0 [ 226.634826][ C0] kernfs_remove+0x38/0x60 [ 226.639286][ C0] __kobject_del+0xe1/0x330 [ 226.643845][ C0] ? kobject_put+0x237/0x570 [ 226.648517][ C0] kobject_put+0x243/0x570 [ 226.652983][ C0] bus_remove_driver+0x245/0x320 [ 226.657965][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 226.663722][ C0] raw_release+0xd7/0x260 [ 226.668090][ C0] ? __pfx_raw_release+0x10/0x10 [ 226.673075][ C0] __fput+0x44c/0xa70 [ 226.677112][ C0] task_work_run+0x1d4/0x260 [ 226.681755][ C0] ? __pfx_task_work_run+0x10/0x10 [ 226.686917][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 226.692168][ C0] do_exit+0x6bd/0x2300 [ 226.696400][ C0] ? do_raw_spin_lock+0x121/0x290 [ 226.701482][ C0] ? __pfx_do_exit+0x10/0x10 [ 226.706128][ C0] do_group_exit+0x21c/0x2d0 [ 226.710784][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.716316][ C0] get_signal+0x1285/0x1340 [ 226.720886][ C0] arch_do_signal_or_restart+0x9a/0x7a0 [ 226.726480][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 226.732701][ C0] ? exit_to_user_mode_loop+0x55/0x4f0 [ 226.738205][ C0] exit_to_user_mode_loop+0x87/0x4f0 [ 226.743529][ C0] ? rcu_is_watching+0x15/0xb0 [ 226.748431][ C0] do_syscall_64+0x2e9/0xfa0 [ 226.753157][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.759263][ C0] ? clear_bhb_loop+0x60/0xb0 [ 226.763979][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.769911][ C0] RIP: 0033:0x7f0da7b8f6c9 [ 226.774361][ C0] Code: Unable to access opcode bytes at 0x7f0da7b8f69f. [ 226.781416][ C0] RSP: 002b:00007f0da8971038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 226.789870][ C0] RAX: fffffffffffffe00 RBX: 00007f0da7de5fa0 RCX: 00007f0da7b8f6c9 [ 226.797877][ C0] RDX: 00000000200008c0 RSI: 0000200000000740 RDI: 0000000000000003 [ 226.805899][ C0] RBP: 00007f0da7c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 226.813895][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.821886][ C0] R13: 00007f0da7de6038 R14: 00007f0da7de5fa0 R15: 00007fff456b8df8 [ 226.829906][ C0] [ 226.833359][ C0] Kernel Offset: disabled [ 226.837690][ C0] Rebooting in 86400 seconds..