last executing test programs: 8m21.405392694s ago: executing program 1 (id=60): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_4={0x3, 0x1, 0x2}, @main=@item_4={0x3, 0x0, 0xb, "813e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_4={0x3, 0x2, 0x3, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 8m19.73965098s ago: executing program 1 (id=62): r0 = syz_usb_connect(0x3, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009b6cec20ca08602058c60102030109024b0001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0x3e, &(0x7f0000000a00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3bd5, [{{0x9, 0x2, 0x7f}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000000f40)={0x40, 0x9, 0x1, "b9"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x3, 0x36, 0x0, 0x0) 8m16.561959006s ago: executing program 1 (id=66): r0 = syz_usb_connect(0x3, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009b6cec20ca08602058c60102030109024b0001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000040)={0x14, &(0x7f0000000680)={0x20, 0x22, 0x19, {0x19, 0x2, "f8c11f23a1be1b1b82baac321aa944506ac4327bf1cdd5"}}, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_connect_ath9k(0x3, 0x3e, &(0x7f0000000a00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3bd5, [{{0x9, 0x2, 0x7f}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000000f40)={0x40, 0x9, 0x1, "b9"}, 0x0, 0x0}) syz_usb_connect(0x3, 0x36, 0x0, 0x0) 8m13.468300006s ago: executing program 1 (id=73): timerfd_create(0x1, 0x800) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x141342, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 8m12.405368161s ago: executing program 1 (id=75): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 8m9.245389024s ago: executing program 1 (id=80): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x18d) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) splice(r1, 0x0, r3, 0x0, 0x1fffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, &(0x7f0000000080), 0x0, 0x24020804, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10) (async) dup(r4) 7m54.103441811s ago: executing program 32 (id=80): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x18d) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) splice(r1, 0x0, r3, 0x0, 0x1fffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, &(0x7f0000000080), 0x0, 0x24020804, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10) (async) dup(r4) 2m10.841417725s ago: executing program 3 (id=1478): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000280)={0x0, 0x10, 0x1, "fd"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\n'], 0x0, 0x0, 0x0, 0x0}) 2m8.785140988s ago: executing program 0 (id=1484): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x5, @empty, 0x3}, 0x1c) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) r2 = socket$igmp6(0xa, 0x3, 0x2) mmap(&(0x7f0000210000/0x3000)=nil, 0x3000, 0x2000002, 0x4000010, r2, 0xf5ba6000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x80, 0x0}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a00", 0x36}], 0x1}, 0x20000880) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfe33) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f00000023c0)={0x2c, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) r8 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x101000) ioctl$int_in(r8, 0x5452, &(0x7f00000001c0)=0x1) close(0x3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100000086dd6c44700e005006ff3a800000000000000000000000002dfc02000000000000000000000000000000000000000000499561d2c62563"], 0x62) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r9, r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x4, 0x4) 2m5.672608881s ago: executing program 3 (id=1491): r0 = inotify_init1(0x80800) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000000)={0x9, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1f, "c857052e3693a0"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001000)={r1, 0x0, "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", "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"}) ftruncate(r0, 0x8) (async) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000002000)={0x3d, 0x6f, 0x2, {0x4, [{0x40, 0x1, 0x3}, {0x40, 0x4, 0x4}, {0x40, 0x0, 0x2}, {0x2, 0x4}]}}, 0x3d) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x48, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xa, 0x41}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20004081) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000021c0), 0x28000, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000002200)={'vlan0\x00', 0xd2446b4a705c1c49}) bind$tipc(r3, &(0x7f0000002240)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x1, 0x2}}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), r3) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x2c, r4, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) (async) r5 = inotify_init() inotify_add_watch(r5, &(0x7f00000023c0)='./file0\x00', 0x1500021d) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000002400)={0x0, @in6={{0xa, 0x4e21, 0x5, @loopback, 0x2}}, 0x6, 0xa, 0x0, 0x6, 0x3c, 0x9, 0x50}, 0x9c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x20, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xd982d0c, 0x4}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8000) write$P9_RSYMLINK(r3, &(0x7f00000025c0)={0x14, 0x11, 0x2, {0x40, 0x2, 0x1}}, 0x14) write$P9_RRENAMEAT(r3, &(0x7f0000002600)={0x7, 0x4b, 0x2}, 0x7) (async, rerun: 32) execve(&(0x7f0000002640)='./file0\x00', &(0x7f00000026c0)={[&(0x7f0000002680)='\x00']}, &(0x7f00000027c0)={[&(0x7f0000002700)='\x00', &(0x7f0000002740)='vlan0\x00', &(0x7f0000002780)=',\x00']}) (async, rerun: 32) getpeername$packet(r3, &(0x7f0000002800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002840)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000002900)={'syztnl0\x00', &(0x7f0000002880)={'syztnl2\x00', r8, 0x4, 0x0, 0x8, 0x8, 0x0, @mcast1, @private1, 0x7800, 0x7, 0x4, 0xe98f}}) (async) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f00000029c0), 0x2, 0x0) r11 = geteuid() (async) stat(&(0x7f0000002a00)='./file0\x00', &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000002940)='./file0\x00', &(0x7f0000002980), 0x110000, &(0x7f0000002ac0)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r11}, 0x2c, {'group_id', 0x3d, r12}, 0x2c, {[{}, {@max_read={'max_read', 0x3d, 0x1}}, {@allow_other}, {@blksize}, {@allow_other}, {@default_permissions}, {@allow_other}], [{@fsmagic={'fsmagic', 0x3d, 0x80000000}}, {@audit}, {@obj_user}, {@dont_appraise}, {@dont_hash}, {@appraise_type}]}}) (async, rerun: 64) r13 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) bind$can_j1939(r13, &(0x7f0000002c40)={0x1d, r9, 0x3, {0x2, 0x1, 0x1}}, 0x18) 2m5.52390697s ago: executing program 0 (id=1492): ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000500)={0x7, 0x1, 0xd, 0x5, 0x14, "12b8b8fd70bae0eed6b9003a2336fc367d6a4d"}) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000480)={0x311000, 0x18, 0x2}, 0x18) mknodat$null(r0, &(0x7f00000004c0)='./file0\x00', 0x8000, 0x103) execveat(r0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000600)={[&(0x7f0000000580)='{-[;&!+\x00', &(0x7f00000005c0)='+(\x00']}, &(0x7f0000000840)={[&(0x7f0000000640)=':$^0(]\x00', &(0x7f0000000680)='\'\x00', &(0x7f00000006c0)='$\\#{\x00', &(0x7f0000000700)=')$}{*\'.\xa1[\x00', &(0x7f0000000740)='\x00', &(0x7f0000000780)='$-\x00', &(0x7f00000007c0)='&\\\xec\x00', &(0x7f0000000800)='{(\x00']}, 0x1000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xd, 0x200, &(0x7f0000000080)="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"}) 2m5.226017765s ago: executing program 0 (id=1494): r0 = gettid() r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0xa6b}, &(0x7f00000000c0)=0x8) tkill(r0, 0x12) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000820}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32], 0x100, 0x40004010}}], 0x2, 0x8048) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009593d1044062180b738010203010902120001000000000904", @ANYRES8, @ANYRES64=r0, @ANYRES64=r0, @ANYRES8=r0, @ANYRESDEC=r0], 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000540)={0x2020}, 0x2020) syz_usb_connect$uac1(0x2, 0xc4, &(0x7f0000002580)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb2, 0x3, 0x1, 0xf0, 0x40, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x9}, [@processing_unit={0xb, 0x24, 0x7, 0x5, 0x2, 0xf7, "4ecd7ed5"}, @processing_unit={0xa, 0x24, 0x7, 0x2, 0x2, 0x40, "6a03f1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x208, 0x5, 0x1, 0x6, {0x7, 0x25, 0x1, 0x83, 0x2, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xdc, 0x2, 0x2}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xc, 0x1, 0x3, 0x4c, "90d1", "148c"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x1, 0x5}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x2, 0xb, 0x10, "05f07a"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x3, 0x8, 0x7, "7b5f9223c569014049"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x20}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x2, 0xb5, 0x80, {0x7, 0x25, 0x1, 0x0, 0xb9, 0x4}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x16, 0x81, 0xc, 0x20, 0x4c}, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="050f37000303100b24100a0406020000000000803000ff00003f00000000000000bf09000000ff00c00000000b1001005b00090c0f0003"], 0x5, [{0xd7, &(0x7f00000001c0)=ANY=[@ANYBLOB="d70328a74fad40a98d568662ded8e760c88a98cb6858aca3c243767d5c600a4dc2df3e72301764133b0a33c585a1ce9c201983feab1d8d258c50e206d371b2c14dcd04037ed562ec1656910c2d74b44d799dc7fe05f7bd3430da46a0404ce2010a5eccc25d74adad0be094ed28b5c1743d42b302267ed34107740698498c62e2759d6577d81509caf73972724f2964780f5fdda205cb374abc34810fcbce02dfcfceab7147e34893117659393e25470a04532efa26fe6786adc655f7eee5b610d3040324ef85df92441c4b87c9f7df3b6891a962154b55"]}, {0x27, &(0x7f00000002c0)=@string={0x27, 0x3, "353cf066b27dae17e27af41a3fdffaa9b4ee007b1d98310463f86752048e0be00c6e63d3aa"}}, {0x56, &(0x7f0000000300)=@string={0x56, 0x3, "03a7dc795d44dd74c8856131d7fb944b075d1ce2871ade1fc9b88f0be890999b3ce24f62f05df8afaae4f5e411b285c5359f16d93fad3a4bb9887f267b012950e9a75afbe0b391aa90c74d5e4b36ded244a0379a"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x812}}]}) 2m5.06932098s ago: executing program 3 (id=1495): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup2(r0, r0) ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, &(0x7f0000000100)={0x0, 0x7000}) creat(&(0x7f0000001380)='./file0\x00', 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) 2m0.976059486s ago: executing program 0 (id=1497): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000280)={0x0, 0x10, 0x1, "fd"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m0.945818528s ago: executing program 3 (id=1498): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="000a0200"], 0x0, 0x0, 0x0, 0x0}) 1m56.885788938s ago: executing program 0 (id=1502): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="18010000120001"], 0x118}}, 0x4048850) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x60, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m55.375262401s ago: executing program 3 (id=1503): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x23}, @empty}}}], 0x20}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0x3ff) sendfile(r1, r2, 0x0, 0x110003) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x768, 0x2, 0x100002, 0xf36, 0x8, "f494bfeba3160200160000000000006d004000"}) 1m55.097472569s ago: executing program 3 (id=1504): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0xfffffffe) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4) timer_create(0x3, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000300)="00214717a70700000000030600710a5e31163ceb9d04", 0x16}], 0x1, 0x8, 0x1) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xe8) 1m53.716937474s ago: executing program 0 (id=1505): creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@void, @void, @eth={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x6}}, {@mpls_mc={0x8848, {[], @ipv4=@gre={{0x5, 0x4, 0x2, 0x1d, 0x58, 0x66, 0x0, 0x5, 0x2f, 0x0, @multicast1, @local}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x9, 0x1, 0x1f, 0x1, 0x1, 0x2, 0x1, 0xd4}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x3, {{0x5, 0x2, 0xf, 0x3, 0x0, 0x0, 0x3}, 0x2, {0xc9, 0x1fe, 0x2, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1}}}}}}}}}}, 0x6e) fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) 1m39.077442794s ago: executing program 33 (id=1504): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0xfffffffe) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4) timer_create(0x3, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000300)="00214717a70700000000030600710a5e31163ceb9d04", 0x16}], 0x1, 0x8, 0x1) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="0c000000e2009f2ffa32b1241babbe45cfed52d18c43b417c6334085cfd4aa337da5c5668b3c2cb33db07b0e17229f44d1dfaa7ccd786d5d96c37fd3d5f9b4fa8583503ac0f87d7b31ad56a7210ecfe435e031a2e224bd3ea021c28547490f00b532a22ce04dc9d074ea6b322560f0517d3a5ce3edb2b300e304321739df85c44c43c289cdf95d95c7f2b9b7d711a47258c5ec201ea26a5a5521052ea8a398f6eb04b48e9e538ca855bf70df2b20bcaa81273b3f0267f33a4443cea3544b33f8a2d814f912fa91d306af884db19afeae043d53f6fee4c1f8d5f281ec115961fe0150cc5bd428a81bf8da85596076e0fa5b3f80d319bfea4a2cc5239527207277d3f1282e213d8ddae5f3c3b4a22fc3b871b9bc16dde3d9c2b514688f715f77653af240a760c2f0f9eed0e48ee6a331525fae2809f1fdb33bb2e3d6ee5a1bd662feaf49882ddb931e99bc14c0e982486da82051853425631ebe1023206182d2071c98f62ae21c3d07fd37380fadaa52c6b040e0d49ade883a98b3b38360a56a1d98"], 0xe8) 1m38.53618094s ago: executing program 34 (id=1505): creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@void, @void, @eth={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x6}}, {@mpls_mc={0x8848, {[], @ipv4=@gre={{0x5, 0x4, 0x2, 0x1d, 0x58, 0x66, 0x0, 0x5, 0x2f, 0x0, @multicast1, @local}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x9, 0x1, 0x1f, 0x1, 0x1, 0x2, 0x1, 0xd4}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x3, {{0x5, 0x2, 0xf, 0x3, 0x0, 0x0, 0x3}, 0x2, {0xc9, 0x1fe, 0x2, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1}}}}}}}}}}, 0x6e) fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) 39.731997988s ago: executing program 6 (id=1645): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101000, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000200)={0x1f, 0x2}, 0x6) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x2, @pix_mp={0x4fc94c3d, 0x9, 0x34424752, 0x5, 0x8, [{0x10000, 0x100}, {0x1, 0x6}, {0x4, 0x7}, {0x2, 0x53}, {0xb88, 0xaec6}, {0xca2, 0x5}, {0xa, 0xac2}, {0xfffffff9}], 0x1, 0x10, 0x1, 0x2, 0x6}}) write$bt_hci(r3, &(0x7f0000000000)=ANY=[], 0x6) close_range(r2, r0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x20) mmap(&(0x7f00007ff000/0x1000)=nil, 0x1000, 0x4, 0x13, r2, 0x1000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x54, &(0x7f0000000640)=[@in6={0xa, 0x4e23, 0x8, @private1, 0x7}, @in6={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, @in6={0xa, 0x4e24, 0xe, @mcast1, 0xffff0001}]}, &(0x7f00000004c0)=0x10) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r7 = socket(0x29, 0x5, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f00000000c0)={{r0}, "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"}) munlockall() recvfrom(r3, &(0x7f0000001180)=""/200, 0xc8, 0x2100, &(0x7f00000010c0)=@pptp={0x18, 0x2, {0x2, @multicast1}}, 0x80) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r10 = dup(r5) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) 39.584989354s ago: executing program 5 (id=1646): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x23}, @empty}}}], 0x20}, 0x0) (async, rerun: 32) syz_usb_connect(0x2, 0x36, 0x0, 0x0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @remote, @private}}}}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="02c1c00c0009000000060004000b000e00ffc03d1290ae5eb066d7df43eaf94d358bb77eee792ee37e62fde45d6cb3e6cba6e6e6fa1c917b6c8cbe1198373eadcb87a72d2e85ebabaa0194fbe342a4d3ae31850b0b0000000000008a9175a811126c247c5661b83e6d0fa275e9de0c3ddc97fc8355b2886406b292d5783dd61a9d959accd7a9a8772600"/150], 0x11) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) (async, rerun: 32) io_setup(0x9, &(0x7f0000000080)) (rerun: 32) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x82, 0x0, 0x2}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800100, 0x3, 0x22, 0xe1d9, 0x1101, 0xff}) (async) r4 = socket(0xa, 0x3, 0x3a) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x80, 0x7, 0x2, @empty, @empty, 0x8000, 0x8, 0x3, 0xe}}) (async) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, 0x0) (async, rerun: 64) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) (rerun: 64) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000007f1d19f545886ace7e57e42ff57f5225dc225c26a36398c063853dce392397d5b7e39320a22eddb7736018d2b3cd78a3e51c39a32b3c6513e8d8efb70e4d2c1791ab3286c4944fed6d8792439239c7aeefb609329be18d1c0953c1e20c04000000170edf7ca052646d60f35aae64d13bc9ae5e2cd0d7ab88bed480ca27cc96646f8dc25b7d093bb535daec8cec03bcf58756f0c1", @ANYRES16=r7, @ANYBLOB="020026bd7000fbdbdf2501000000080008000100000008000100", @ANYRES32=r2, @ANYBLOB="0c00030004000000000000000800020000000000"], 0x38}}, 0x8000) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000000800)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="090047005d23215c000000000d05a521311e01339db40b90b90e992c8bfb3d2c154b24046f929e7c49fbb7a32690b25c74eb71a5fd93982b8d01cfb91ad6277034fe6398a7b063c667015c9f3121a7667465307b55dde863ee085e5cf8f28483b8d91c8db6a278de79d10e0b53550794bf70eed6871412161ddec7d8df88060d4ba76ab940bee2cac44e6683d190479a4c7bae25d53de9eccea37dc12fd5274884017d27a84204cf71999c8ba8b5227916ced33714a306400400138008001a00", @ANYRES32, @ANYBLOB="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"], 0x310}, 0x1, 0x0, 0x0, 0x4089}, 0x40000) statfs(&(0x7f0000000380)='./cgroup\x00', &(0x7f0000000480)=""/246) (async, rerun: 64) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000900)={0x35, 0x4, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x2, 0x8}) (rerun: 64) ptrace$poke(0x4, r9, &(0x7f0000000940), 0x80000001) r10 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r10, 0xc0205647, &(0x7f00000001c0)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000100)=0x1c, 0x800) 37.446942224s ago: executing program 6 (id=1650): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 37.437417994s ago: executing program 5 (id=1651): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000840)=[&(0x7f0000000540)={0x2000000, 0x0, 0x0, 0x1, 0x2, r0, &(0x7f0000000a00)="1c73de19da4e24a4be5c3011d88efffbb251589a5bef61f451a747474f315938cc426a841b78d07b04cc6f2d276323ea48a6fd1c0ba66f5055239df5a21b234315694fd58fe32aeaa543e5fe08ccdf3e689caa8cedec8010f8bb8c59eaa1ecbf0f6f66afde88c010b3138095b6a0116af9c9011f03cc24e087286f2553198568c0aea639920383723c52ce2839b5dcb5ecf2eb92eeb24271354e1719e92347b792d0402fb04bbbf78fbebbf4b4832385561e1010dd612da55e8f738b13288b548d333c1d174ade527cafb3fc6576c16cd2e71f68286e28d5d8a17ef63d253bc56ce36b8d4aef6c0a34d8b9463ce4535f9c1700a5bf7b0f217ae63d3d377ddbcf7d4dd2f3f8f08de60c87b1e07487cae176e2f76ea307fa1693d84328c7f751d6d997555964813b103ea44b6e2e8bcc09609c25e5d1e0f174c44dfed19aa2fc6e6a60c589909709ff6b1a8e3c7462427d11469f81fa4d9a69ee39b8f3824889f3ee0c5838a22832193d9f42bfcff8f1990746da71c109c82f51aaffbc9b33b03fe4993f4bfb59461c5a2e13514072283677447793cfe1e7bf5b48416b80a7e18e22cb13e0370f7bb9bf952c4c5355dbb8fe0d912f88d743c536db4b306075c2dcd59d602e75bb159f71e4f11192631fc338203c136c9efc5f05bf94d2fee1a6ad20f2c7e834e5be49ebedde2d9735f46eb08c6537d24f3f06589a4597f2d9378f", 0x200, 0x200}]) 36.719938106s ago: executing program 5 (id=1654): mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 36.197408274s ago: executing program 5 (id=1656): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = dup(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000000)={0x200000, 0x200000, 0x7}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r8, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xb}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) r10 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r11, 0xc0145b0e, &(0x7f0000000040)) 33.880406991s ago: executing program 2 (id=1660): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="a001000010000100000000000000000064010102000000000000000000000000ff01000000000000000000000000000100000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000002a6de5ea00000000000000000001feffffffffffffff0000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400af0000000000000048000200656362286369706865725f6e756c6c29000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000e1"], 0x1a0}}, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r3, &(0x7f0000000000)=""/80, 0x50) getdents(r3, &(0x7f0000000200)=""/251, 0xfb) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x0, 0x2}, 0x6, [0x3, 0x3, 0x3ff, 0x8, 0x0, 0x0, 0x200, 0x0, 0x1, 0x7fffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x4, 0x0, 0x8, 0x0, 0x3, 0x0, 0x6, 0x3, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0xffffffff, 0x8000edc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa0000000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xa, 0x8, 0x0, 0x2000079, 0x0, 0x0, 0x0, 0x10000, 0x40000, 0x8, 0xc0000001, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4], [0xffffffff, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffe, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x3, 0x5, 0x20000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x4000400, 0x0, 0x0, 0xfffffffd], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x2000000, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x10000, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4050}, 0x40) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x5}, 0x1c) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x8d], 0x100000, 0x2011c0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) 32.413799316s ago: executing program 2 (id=1661): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) (async) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) symlink(&(0x7f0000000700)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000780)='./file0\x00') (async) unlink(&(0x7f00000000c0)='./file0\x00') r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r0) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 32.298463267s ago: executing program 6 (id=1662): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1020}}, 0x375) 31.905345171s ago: executing program 5 (id=1663): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x391c40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x0}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000100)={0xe, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="18000000400007010000000001000000037c000004004580da5c78a78e16f959d526defebd04ef56307ab5d006d776fff2caa896f229ee4753f67a6be27d0f86aa50d8838747953a791797"], 0x18}}, 0x4040040) r5 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) r6 = syz_open_dev$sndctrl(&(0x7f0000001780), 0xb, 0x101001) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f0000000080)={{0x4, 0x4, 0x58e, 0x8, 'syz0\x00', 0xfffffffc}, 0x0, [0xd, 0x100000000, 0x100000001, 0xda1, 0x7ff, 0x10001, 0xf8, 0xa, 0x8, 0x100000000, 0x7, 0x7, 0x7, 0x2, 0x9, 0xb0a1, 0x81, 0xe799, 0x8, 0x5, 0x3, 0x7, 0x0, 0x7, 0x7fff, 0x9, 0x80000001, 0x8, 0x0, 0x5, 0x4, 0x5, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x81, 0x0, 0x5, 0x599, 0x1000, 0xe07, 0x5, 0xc, 0x1000, 0x8, 0x3, 0xf4d, 0x262, 0xd, 0xcf6, 0xf, 0x7, 0xbed1, 0x9, 0x9, 0x5f, 0x1, 0x5bf, 0x0, 0x8, 0x0, 0x7, 0xffffffffffffff8d, 0x9, 0x1000000, 0x1, 0xfffffffffffffffc, 0x0, 0x8000000000000001, 0x4, 0xfffffffffffffffb, 0x45, 0x9028, 0x3, 0x10001, 0x8, 0x1000001, 0x10001, 0x2, 0x8, 0x3, 0x2, 0x3ff, 0x8, 0x6, 0x81, 0x4, 0x1, 0x5, 0x3, 0xbd4b, 0x9, 0x2, 0xfffffffffffffc00, 0x0, 0x0, 0x12, 0xbf, 0x10001, 0x40000000009, 0x17a, 0x2, 0x8, 0x8, 0x5, 0x800000000400, 0x3, 0x6, 0x7, 0x9, 0xb5, 0x7a, 0x1000, 0x6, 0x9, 0x3, 0x100000000, 0x4, 0x8000000000000001, 0x6, 0x3, 0x0, 0xdc6, 0x2, 0x4]}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000002a80)=""/120) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000600)=[{0x10c, 0x0, 0x0, 0x7fff8000}]}) close_range(r9, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x121101, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) clock_settime(0xfffffffb, &(0x7f0000000140)) fadvise64(r7, 0x18, 0x0, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000240)) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='exfat\x00', 0x808000, &(0x7f00000006c0)='discard') 31.800116616s ago: executing program 2 (id=1664): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) r1 = syz_io_uring_setup(0x38e, &(0x7f0000000540)={0x0, 0x7316, 0x400, 0x2, 0x283}, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x3b45, &(0x7f0000000000)={0x0, 0xc5f8, 0x1, 0x1, 0xc3, 0x0, r1}, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) (async) setrlimit(0xc, &(0x7f0000000640)={0x80000000, 0x3}) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="18a600007200911fdabcf8b30771a54a07"], 0xfe33) (async) r3 = gettid() clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r3, 0x21, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r5}}, 0x30) (async, rerun: 32) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r5}}, 0x10) (rerun: 32) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r7) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x20, 0xe, 0x7e, {0x7e, 0x30, "c13d566cf86f2f92aae94bc52f32b113216593142e9e2d247c9863f2b8259e06623ac1657a3832405fe92d331bd5b7367ed59d9fc9177901fdc552120824d1fa53045485db4efaf3b60e07d6bd58c0ae17b9cdc635608a64efac85871f014605bce9b1d89b9248a9d587afdba5a5ef4d1ccb41540683316331760f15"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x44, &(0x7f00000002c0)={0x20, 0xb, 0x11, "b0ee60697d7888fc98aec6e3eab93fa1c6"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x6, 0xfff8, 0x6, 0xc4, 0x5, 0x10, 0xfffe, 0x2, 0xe000, 0xfa, 0x5d4, 0x9}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000400)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0xffff}, &(0x7f0000000480)={0x20, 0x89, 0x2, 0x1}}) (async) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) 31.544233099s ago: executing program 6 (id=1665): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x66017, 0x3, 0x0, 0x0, 0x9835}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(0x0, 0x4) r3 = openat$cgroup(r2, &(0x7f00000003c0)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000440)={0x10008a80, 0x0, &(0x7f0000000380), &(0x7f0000000280)=0x0, {0x1}, &(0x7f0000000b00)=""/69, 0x45, &(0x7f0000000b80)=""/105, &(0x7f00000004c0)=[0x0], 0x1, {r3}}, 0x58) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005140)={0x0, 0x0, 0x0}, &(0x7f0000005180)=0xc) mount$tmpfs(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000007c0), 0x10004, &(0x7f0000000c80)=ANY=[@ANYBLOB="6700003de7e9abc344cb0ed4b5b47f03d747443bc18f69c2d4b68c1bf1d4d803ef7835a0f7535c3189e8c39a3276698db72021b77088ff82c421b13623f79a1d5fd5bb476a196accb83e09469f11c42802a27bdbd82e3e93aa1ac6e342b1c76f0f93df4ca3df3ca6f6d965712e6015b099f466a972037b5515f5e8b855777f44dc47d75baaf3f524e94aa30ec9f45f11d193ea6f7febad8d", @ANYRESHEX=r6, @ANYBLOB=',\x00']) setresuid(0xee01, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private2}}, &(0x7f00000000c0)=0xf8) mount$fuseblk(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1108300, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC, @ANYBLOB=',grouM_id', @ANYRESDEC=r6, @ANYBLOB=',default_permissions,allow_other,default_permissions,blksize', @ANYRESDEC, @ANYBLOB=',subj_user=[\\/,fowner<', @ANYRESDEC=r7, @ANYBLOB=',uid<', @ANYRESDEC, @ANYBLOB=',']) bind$netlink(0xffffffffffffffff, 0x0, 0x0) timer_create(0x3, &(0x7f0000000040)={0x0, 0x10000041, 0x5, @tid=r4}, &(0x7f0000000080)) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000ac0)='./file0\x00', 0x0) timer_create(0x2, 0x0, &(0x7f0000000300)) r8 = msgget$private(0x0, 0x790) msgrcv(r8, 0x0, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) msgsnd(r8, &(0x7f0000000d00)=ANY=[], 0x401, 0x0) msgrcv(r8, 0x0, 0x0, 0x1, 0x3000) msgsnd(r8, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x401, 0x0) msgctl$IPC_RMID(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) 30.920384601s ago: executing program 4 (id=1666): creat(&(0x7f0000000040)='./file0\x00', 0x175) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000540)=0x2) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x77) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10) truncate(&(0x7f00000000c0)='./bus\x00', 0x9471) lsetxattr$security_ima(&(0x7f0000000080)='./bus\x00', &(0x7f0000000300), &(0x7f0000000240)=@ng={0x4, 0xc}, 0x2, 0x1) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) 30.489256315s ago: executing program 4 (id=1667): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x900, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='vuto_da_alloc', 0x0) 30.304168253s ago: executing program 6 (id=1668): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000040)=0xffffffff) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 30.244533484s ago: executing program 4 (id=1669): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, '\x00', "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 30.081453508s ago: executing program 2 (id=1670): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000080)={0x0, 0x14, 0x1, '|'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000100)={0x14, &(0x7f0000000580)={0x20, 0x21, 0xa1, {0xa1, 0x23, "3a8ac49640b6db1c141a0c4d4d97804deb9a931a24bb0c4df61c4120d7f5cb60a295185f242d0ff6ec5fedf23f6084be954d5cc08838e50e5a7e8095a0613fe666262f173fa5d8e5a505c472f6986df6bb7f670bb2fdd21f0284e2d3d32d2e3e72be7e643d9ebc0cc0af126a2e3304fea06bc4bb7894ffdba4d9c86cff2379b762f02cd2c18d9ac2037079690b009837e20a129063f9898d14cced260410b4"}}, &(0x7f0000000000)={0x0, 0x3, 0xb, @string={0xb, 0x3, "f5da316ffca403ea57"}}}, &(0x7f0000000400)={0x34, &(0x7f0000000140)={0x0, 0x31, 0x17, "0eea932bccf8d288a3eb16497ebbe72bec80d680545469"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x38}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xfb}, &(0x7f00000002c0)={0x20, 0x0, 0x8e, {0x8c, "1489ae31e7c96ae2f63eba5f1f3ef3471f9a0537b241d6ae71628b708b8f77b11bb57cd9ada2987c8c5fe5d2e40f887379e87a34bdf24afad0fc5847a92cc85def0f4031f03c6102b0e189cdfc8ba99935b6ce9b96964e50b8b270ab088a8b4db0ebbbd627ffa8d600ece4a425f4ac8a9eea272b5e6f72822b0aa697bc8b321f643b9f3657ddc7261942628c"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0xf7}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0xe}}) 29.989814229s ago: executing program 4 (id=1671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4804) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000000c0)={r4, 0x2}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={r4, 0x6}, &(0x7f0000000040)=0x8) 29.694948288s ago: executing program 5 (id=1672): syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) timer_create(0x0, &(0x7f0000000000)={0x0, 0xd, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) preadv2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/125, 0x7d}], 0x1, 0x8, 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000200)={{}, {0x0, 0x989680}}, &(0x7f0000000240)) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000290000003b0000000000000000000000280000000000000029000000050000000002020100000000fe8000000000000000000000000000bb1800000000000000290000000400000002ab"], 0x58}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$BLKREPORTZONE(r4, 0xc0101282, &(0x7f0000000280)={0x3, 0x6, 0x0, [{0x4, 0x6, 0x9, 0x3, 0xb4, 0x6, 0x1, '\x00', 0x40}, {0x401, 0x6, 0xe87, 0x6, 0xc0, 0x0, 0x0, '\x00', 0x5}, {0x1000, 0xffffffffffff3a95, 0x7ff, 0x9, 0x90, 0x7f, 0x5, '\x00', 0x18}, {0xa, 0x1c00000, 0x8000000000000001, 0x38, 0xff, 0x2, 0xb, '\x00', 0x10000}, {0x9, 0x7048, 0x4, 0x1, 0x2, 0x4, 0xc, '\x00', 0x6}, {0x6, 0x7ff, 0x9abd, 0xff, 0x40, 0x4, 0x9, '\x00', 0xe5}]}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r6, &(0x7f0000000180)='1\x00', 0x2) mmap(&(0x7f0000cfc000/0x2000)=nil, 0x2000, 0x2, 0x810, r2, 0x21dfd000) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000000c0)={0x9fd8, 0x8000000000000001}) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x6000, 0x100000b, 0x8012, r8, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETIFF(r9, 0x800454d2, &(0x7f0000000080)={'pimreg0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000001c0)={0x1fe, 0x1, 0xeeee8000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x7, r7}) 29.541446717s ago: executing program 4 (id=1673): creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x402, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) read(r0, &(0x7f0000000080)=""/195, 0xc3) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x402, @loopback}], 0x1c) (async) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) read(r0, &(0x7f0000000080)=""/195, 0xc3) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) (async) 29.179600884s ago: executing program 2 (id=1674): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40400) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x0, 0x1, {0x400e802, 0x1, 0xa, 0xfff}}) (fail_nth: 4) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 29.130163162s ago: executing program 6 (id=1675): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="00000400000092101ef7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) 29.057110492s ago: executing program 4 (id=1676): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f0000002a80)={{0x3, 0x2, 0x5, 0x9, 0x7, 0x6}, 0x355, [0x3, 0x5, 0x6, 0xd5a, 0x81, 0x0, 0xff, 0x7, 0x80000000, 0x6, 0x455, 0xcbc, 0x1, 0x40, 0x0, 0xbe0, 0xffffffff, 0x400, 0x7, 0xda016b81, 0x0, 0x81, 0x5, 0x10000, 0xfffffff7, 0x2, 0x7, 0x9, 0x8, 0x40, 0xf, 0x2, 0xff2, 0x401, 0xa, 0x6, 0x828, 0x1, 0x4, 0x6, 0x9688, 0x6000, 0x200, 0x9, 0x40, 0x1, 0x1, 0x1, 0x4, 0x5, 0x3, 0x6, 0x9, 0x10001, 0x8, 0x51, 0x5, 0x7fff, 0x7, 0x1, 0x5, 0xfffffffd, 0xbde, 0x8, 0x6, 0x1, 0x0, 0x3, 0x20000, 0x4e9b, 0x2, 0x2, 0x4, 0x2, 0x5, 0xffff8000, 0x5, 0x1b1, 0x80, 0x81, 0x401, 0x4, 0x2, 0x100, 0x9, 0x0, 0xfe, 0x80000001, 0x7, 0x6, 0x4, 0x8, 0x1, 0x81, 0x0, 0xc0e, 0x7, 0x82c, 0x8, 0x1, 0x260, 0x6, 0x7, 0x6, 0x3, 0x3, 0x0, 0xfff, 0x3, 0x7, 0x7, 0x3, 0xfffffff8, 0x5, 0x4, 0xff, 0x4, 0xfffffffd, 0x1, 0x401, 0xb, 0x2, 0x80000000, 0x7, 0x4, 0x7, 0x7, 0x3, 0x2, 0x1, 0x8001, 0x6, 0x800, 0x7fff, 0xfffffffd, 0xfff, 0x1ff, 0x4, 0x5, 0x6, 0x7, 0x2, 0x8, 0xfffffffa, 0xc, 0x9, 0x1ff, 0xf56, 0xffffffff, 0xee1, 0xcb0, 0x81, 0xfdf, 0x1c0c, 0x5, 0x0, 0x8, 0x2, 0xfffffffa, 0x9, 0x6, 0x4, 0x813, 0x0, 0x7f, 0x7f, 0x0, 0xf, 0x2, 0x1, 0x6, 0x2, 0x38, 0x3ff, 0x3826, 0x5, 0x9, 0x6, 0x2, 0x0, 0x1, 0x1, 0x3ff, 0x9, 0x4, 0x7, 0x7f, 0x4, 0x92f, 0x7, 0x9, 0x5, 0x9, 0xa14, 0x2, 0x9, 0x4, 0x16db, 0x4, 0xc, 0x3, 0x80000000, 0xffffff38, 0x13406d50, 0x7, 0x7fff, 0x7, 0x7, 0x3, 0x2, 0x8b7, 0xd1, 0x7fffffff, 0x2, 0x400, 0x10000, 0x80000001, 0x5, 0x8001, 0x0, 0x7f, 0x10001, 0x8, 0x1, 0x80000000, 0x2, 0x5, 0xfffffff0, 0x7, 0xe0, 0x1, 0x101, 0x8, 0x1, 0x1f9, 0x5, 0x0, 0x9, 0x5, 0x200, 0x800, 0x1, 0x80000000, 0xc, 0x3, 0x7, 0x43fd, 0x4, 0xd6a3, 0xb7, 0x0, 0x1, 0x4, 0x497, 0xb71, 0x1, 0xf, 0x4, 0x4, 0x2, 0x4, 0x9, 0x8, 0x5, 0x2, 0xfffffff8, 0xc54, 0x1000, 0x400, 0x8, 0x2a72, 0x0, 0x5, 0x8, 0x6, 0x56363a8c, 0xe2, 0x2, 0xfff, 0x2, 0x10, 0x3, 0x42, 0x8, 0x8001, 0x2, 0x0, 0x7fff, 0x30a, 0xfffffffb, 0xa6, 0xfffffffe, 0x100, 0x6, 0x6, 0x6, 0x3, 0x80, 0x2, 0x6, 0x5, 0xffffffff, 0x0, 0x5, 0x81, 0x1, 0x9, 0x6, 0x3, 0x5, 0x4, 0x3, 0x2, 0x4d, 0x9, 0x200000, 0x48f, 0x6, 0x1, 0x7, 0x2, 0x6, 0xffffffff, 0xb, 0x2, 0x8, 0x7fff, 0x8, 0x8, 0x10000, 0xff, 0x3, 0x2, 0xb78a, 0x0, 0xfffffffb, 0x4, 0xee0, 0x512, 0x0, 0x8, 0x1, 0x7d, 0x3, 0x6, 0x6, 0x9, 0x8, 0x3, 0xd, 0x400, 0x101, 0x95, 0xd59d, 0x897, 0x101, 0x4, 0x1000, 0xf3, 0x528ca5e3, 0x401, 0x8, 0xdc, 0x4, 0x6, 0x9, 0x3, 0x401, 0x2, 0x800, 0x0, 0x1, 0x8, 0x80000000, 0x8, 0xb, 0x8001, 0x800, 0x7, 0x95, 0x553e, 0x0, 0x5, 0x3, 0xb, 0x40, 0x18140809, 0x2, 0x9, 0x9, 0x2, 0x9, 0x9, 0x1, 0x8, 0x6efa, 0x0, 0xdb, 0x4, 0x0, 0x2, 0x5, 0xffffffff, 0x1, 0x81, 0x3, 0x7fff, 0x4000, 0xfffffffc, 0x4, 0x200, 0x8, 0x9, 0x0, 0x8, 0x3, 0x6, 0x401, 0x8, 0x7, 0x2, 0x3, 0x7, 0x4, 0x6, 0xa, 0x7, 0x200, 0x59, 0x1, 0x7ff, 0xfffffff9, 0x7cb, 0x3, 0x101, 0x4a54, 0x30e1, 0x6, 0x2, 0x7, 0x34546093, 0xfffff2bd, 0x2, 0x400, 0x4, 0x0, 0xff, 0x5, 0x2, 0x6, 0x0, 0x4, 0x7fff, 0x81, 0x3ff, 0x4, 0x5, 0xff, 0x5, 0xa, 0x877f, 0x5, 0xfffffff4, 0x8, 0x9, 0xffffff6b, 0x9, 0x2, 0x3, 0x6, 0x3, 0x9, 0xfffffffb, 0x5, 0xe, 0x9a3, 0x2, 0x8, 0x1, 0xff, 0x2, 0x7fab, 0x8, 0x0, 0x1, 0x7, 0x9, 0x4, 0x7, 0x5, 0x46c, 0x7fffffff, 0x7, 0x7ff, 0xe, 0xff, 0x5, 0x6, 0x63, 0x80000001, 0x5, 0xb8a, 0xb, 0xc50, 0x4, 0xc, 0x9, 0x2, 0x0, 0x0, 0x6, 0x3, 0x1, 0x9, 0x6, 0xa, 0x5, 0x0, 0x4, 0x2, 0x57, 0x90e, 0x3, 0x0, 0xffff, 0x1, 0x2, 0x6, 0x7, 0x81, 0x1, 0x310e, 0x7f2cf3b7, 0x1, 0x6, 0x101, 0x81, 0x80, 0xfffc0000, 0x33c2, 0x7f, 0x6, 0x0, 0x6, 0x8000, 0x7, 0x9d5, 0x2, 0x3, 0x5, 0x3, 0x7, 0x3, 0x7, 0xfff, 0x10001, 0x401, 0x7, 0x5, 0x44, 0x2, 0x6, 0x5e, 0x7, 0x100, 0x80000001, 0x9d, 0x5, 0x9, 0xff, 0x61e, 0x200, 0x80, 0x0, 0x3, 0x7, 0xffffffc1, 0x5, 0x100, 0xfffffff1, 0x1ff, 0x0, 0x9, 0x273389be, 0x7, 0x5, 0xa, 0x4, 0x7, 0x3, 0x1000, 0x6, 0xfffffffe, 0x1, 0x10001, 0x3ff, 0x5, 0x0, 0x80, 0x7, 0xf6, 0x3, 0x0, 0x6, 0x2, 0x81, 0x40d1, 0x4, 0x9, 0x6, 0x8, 0x7fff, 0x4, 0x6, 0x1, 0xe0, 0xfffffffa, 0xf5, 0x3ff, 0x7, 0xd3, 0xffffffff, 0x3, 0x65e2, 0x5, 0x3, 0x15, 0x3, 0x72e, 0xb, 0x5, 0x8001, 0x3, 0x7, 0xffffffff, 0xc, 0x800, 0x28e, 0x5, 0x2, 0x2, 0x3, 0x8, 0x2, 0x7, 0x8, 0x6, 0x80, 0xa, 0xd, 0x7f, 0x3, 0x5, 0x9, 0x9, 0x7fe, 0x4, 0x7, 0x7f, 0xcc6c, 0x100, 0x3, 0x6, 0x7, 0x8, 0x44, 0xf2a7, 0x9, 0xdf, 0x6, 0x3, 0x2cbd, 0x60, 0xd, 0x7, 0x2, 0x26, 0x9, 0xc, 0x40, 0x0, 0x7, 0x0, 0x8001, 0x2, 0x8, 0x4, 0x2, 0x0, 0x0, 0x7, 0xffff0000, 0xb4, 0x1, 0xcc6, 0x6d, 0x2, 0x6, 0xb8, 0x6, 0x3, 0x6, 0x3, 0x6, 0x9, 0x7, 0x1, 0x5e, 0x7, 0x81, 0x6, 0x5, 0x74, 0x8001, 0x8, 0x7, 0x1, 0x6, 0x9, 0x10001, 0xffffffff, 0x6, 0x7dfe, 0x0, 0x6, 0x1, 0x9, 0x989, 0x7, 0x6, 0xfffffffe, 0xd7, 0x700000, 0x6, 0xd44, 0x9, 0x96d, 0xc9, 0xd9, 0x7, 0x8, 0x5, 0xfffffff9, 0x2, 0xa8a9, 0x1, 0x8d1, 0x0, 0x8, 0x8, 0x8, 0x5, 0xea3, 0x10100, 0x48b, 0x73ea, 0x1, 0x6, 0xd9, 0x9, 0x7, 0x6, 0x5, 0x9, 0x2, 0x6, 0x96b, 0x4, 0x7ff, 0x7f, 0x4ec, 0x8, 0x4, 0x47b0, 0x4, 0xa, 0x4, 0x6c0, 0x7, 0x5, 0x0, 0x4, 0x1, 0xffffffff, 0x745, 0x9, 0x6, 0xfffff257, 0x4, 0x6, 0x0, 0x8, 0x26dc, 0x6, 0x6, 0x6, 0xeb, 0x4, 0x7f, 0x8001, 0xd, 0x0, 0x9, 0x7, 0x5, 0xb, 0x1, 0x7, 0x6, 0x7, 0x8, 0xdf2c, 0x2, 0x40, 0x9, 0x81, 0x8, 0x40, 0x632, 0x9, 0x60, 0x5, 0x3, 0x7d4, 0x9, 0x3, 0x610, 0x7, 0x30, 0x6, 0x2, 0xfffffe01, 0x9, 0x2, 0xd5, 0x6, 0x16b, 0x1, 0x9, 0x0, 0x3, 0x7, 0xfffffffa, 0x8, 0x5, 0x0, 0x7, 0x3, 0x103, 0x0, 0x3, 0x4000, 0x7, 0x118, 0x9, 0x6, 0x6, 0x40, 0xe, 0x1, 0x2, 0x7, 0x3, 0x16b1, 0x9, 0x2, 0x7, 0x7, 0x40, 0x6e76, 0x1, 0x2, 0x7ff, 0x8, 0x4, 0x800, 0xfff, 0x1, 0x9, 0x8, 0x4, 0x5, 0x6, 0x1, 0x2, 0x0, 0x99de, 0x1ff, 0x80000000, 0x1, 0x2e, 0x7, 0x6, 0x0, 0x8, 0x5, 0x9, 0x4, 0x9b, 0x3, 0x79, 0x10000, 0x0, 0x205, 0x8000, 0x6, 0x3, 0x4, 0x7, 0x4, 0xfffffe01, 0x21e, 0xf, 0x8, 0x8, 0x14b7, 0x9, 0x6, 0x8, 0x0, 0x7, 0x0, 0x802, 0x10000, 0x6, 0x8001, 0x0, 0xd, 0x0, 0x2, 0x7fffffff, 0x80000000, 0x3, 0x1000, 0x8ca, 0xfffffffd, 0x2000000, 0x1000, 0x9, 0x52, 0x10000, 0x14, 0x3, 0x9, 0x8001, 0x5, 0x96bf, 0x81, 0x1ff, 0x4, 0x80000001, 0x100000, 0x9, 0x8, 0x2, 0xca46, 0x2e5d9054, 0x2, 0x5ed2, 0x9, 0x8001, 0xd797, 0x7, 0x0, 0x3, 0x3, 0x40, 0xb, 0x8001, 0xfffffff9, 0x3, 0x10, 0x7, 0xd, 0x0, 0xfffffffa, 0x5, 0x0, 0x6, 0x4, 0x1, 0x1f23, 0x4, 0x1, 0x4, 0x1, 0x98, 0xfffffff0, 0xcca, 0xc, 0x1, 0x8dd, 0x3ff, 0x5, 0x7, 0x40, 0x6, 0x1ff, 0x3, 0x4, 0x9, 0x81, 0xa1, 0xffffffff, 0x7, 0x3, 0x7, 0x2, 0x7, 0x9, 0x7ff, 0x3, 0xb, 0x0, 0x10000, 0x6, 0x1, 0xfffffff8, 0xfffffffc, 0x34e6, 0x0, 0x0, 0x4e, 0xad13]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) write$cgroup_devices(r5, &(0x7f00000000c0)={'b', ' *:* ', 'r\x00'}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r8 = dup(r7) write$P9_RLERRORu(r8, &(0x7f0000000280)=ANY=[@ANYBLOB='S\x00\x00\x00\a'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) 27.888496649s ago: executing program 2 (id=1677): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1000, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e23, @loopback}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r2 = socket$inet(0x2, 0x4, 0x43) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r3 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='vuto_da_alloc', 0x0) sendto$inet(r2, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000180), 0xb) copy_file_range(r5, &(0x7f0000000080), r4, 0x0, 0xfffffffffffffff8, 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000040)='\x00', &(0x7f00000001c0)="89dc22321479fbdd62b131313b674b7090f9efc900552b77754b9a6bb734d1524d5ca176d456a0bc2f94c94c568f355a24311e9c4024fda6448910f89ff3733f8e5a9ec504d1be7a8f3ecad25580096adbafdea950e615f3b7bd66e07543503f3a4bfaf3004896c63c4f5bb4fb00f8cf9f6654e128af293164db982a6b84048a3a8c691ef1e68d8095ef912095ffe0c082497f06f0a765621b11fc1e369b6367a04924da21319343c63eb3e8fa51d8ca4337fa50ad5007cc487db287dd510d798a55a59817801f1467fa918ef7df9d485438d0f6a0692b16c15febdf0d840afd734e", 0xe2) syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f47"], 0x0) socket$packet(0x11, 0x2, 0x300) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r6, 0xc6c3, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r6, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r7, 0x0, 0x1, 0x0, 0x7f, 0xfffffffffffffc16}) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r8, 0x0, 0xe, 0x0, &(0x7f0000000100)) shutdown(r2, 0x1) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 0s ago: executing program 35 (id=1675): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="00000400000092101ef7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 429.498883][ T9543] syz.3.1140: attempt to access beyond end of device [ 429.498883][ T9543] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 429.518502][ T9543] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 429.527920][ T9543] syz.3.1140: attempt to access beyond end of device [ 429.527920][ T9543] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 429.549069][ T9543] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 429.556263][ T9543] syz.3.1140: attempt to access beyond end of device [ 429.556263][ T9543] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 429.582895][ T9543] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 429.589710][ T1210] usb 3-1: device descriptor read/64, error -71 [ 429.596620][ T9543] syz.3.1140: attempt to access beyond end of device [ 429.596620][ T9543] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 429.621777][ T9543] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 429.628894][ T9543] syz.3.1140: attempt to access beyond end of device [ 429.628894][ T9543] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 429.655557][ T9543] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 429.662789][ T9543] syz.3.1140: attempt to access beyond end of device [ 429.662789][ T9543] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 429.689361][ T9543] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 429.696280][ T9543] syz.3.1140: attempt to access beyond end of device [ 429.696280][ T9543] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 429.709427][ T1210] usb usb3-port1: attempt power cycle [ 429.737871][ T9543] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 429.744718][ T9543] syz.3.1140: attempt to access beyond end of device [ 429.744718][ T9543] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 429.767943][ T9543] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 429.781401][ T9543] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 429.789460][ T9543] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 429.807229][ T9543] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 429.814834][ T9543] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 429.824619][ T9543] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 429.840112][ T9543] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 429.850189][ T9543] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 429.868287][ T9543] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 429.875826][ T9543] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 429.889570][ T9543] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 429.897206][ T9543] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 429.907844][ T9543] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 429.939372][ T9543] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 429.961929][ T9543] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 429.980455][ T9543] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 429.997757][ T9543] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 430.016528][ T9543] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 430.033064][ T9543] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 430.046845][ T1210] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 430.077573][ T1210] usb 3-1: device descriptor read/8, error -71 [ 430.079774][ T9543] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 430.109524][ T9543] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 430.319583][ T1210] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 430.367614][ T1210] usb 3-1: device descriptor read/8, error -71 [ 430.477823][ T1210] usb usb3-port1: unable to enumerate USB device [ 430.561419][ T9586] gfs2: not a GFS2 filesystem [ 430.816777][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 431.001062][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.014871][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 431.026445][ T24] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 431.040871][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.055038][ T24] usb 1-1: config 0 descriptor?? [ 431.097075][ T5925] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 431.235513][ T9607] netlink: 'syz.4.1163': attribute type 4 has an invalid length. [ 431.249972][ T9607] netlink: 'syz.4.1163': attribute type 4 has an invalid length. [ 431.259235][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 431.273516][ T5925] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 431.283661][ T5925] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 431.293769][ T5925] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 431.306990][ T5925] usb 4-1: config 1 interface 0 has no altsetting 0 [ 431.320375][ T5925] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 431.329944][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.338217][ T5925] usb 4-1: Product: syz [ 431.342413][ T5925] usb 4-1: Manufacturer: syz [ 431.347085][ T5925] usb 4-1: SerialNumber: syz [ 431.564135][ T5925] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 431.819000][ T9592] usblp0:failed reading printer status (-32) [ 431.830841][ T5925] usb 4-1: USB disconnect, device number 22 [ 431.882479][ T5925] usblp0: removed [ 433.038196][ T9640] FAULT_INJECTION: forcing a failure. [ 433.038196][ T9640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.074811][ T9640] CPU: 1 UID: 0 PID: 9640 Comm: syz.2.1174 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 433.074842][ T9640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 433.074855][ T9640] Call Trace: [ 433.074862][ T9640] [ 433.074869][ T9640] dump_stack_lvl+0x189/0x250 [ 433.074898][ T9640] ? __pfx____ratelimit+0x10/0x10 [ 433.074919][ T9640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.074941][ T9640] ? __pfx__printk+0x10/0x10 [ 433.074963][ T9640] ? __might_fault+0xb0/0x130 [ 433.074994][ T9640] should_fail_ex+0x414/0x560 [ 433.075028][ T9640] _copy_from_user+0x2d/0xb0 [ 433.075049][ T9640] video_usercopy+0x354/0x14f0 [ 433.075080][ T9640] ? __pfx___video_do_ioctl+0x10/0x10 [ 433.075100][ T9640] ? __pfx_video_usercopy+0x10/0x10 [ 433.075141][ T9640] ? __fget_files+0x2a/0x420 [ 433.075169][ T9640] ? __fget_files+0x2a/0x420 [ 433.075192][ T9640] ? __fget_files+0x3a0/0x420 [ 433.075219][ T9640] v4l2_ioctl+0x18d/0x1e0 [ 433.075240][ T9640] ? __pfx_v4l2_ioctl+0x10/0x10 [ 433.075260][ T9640] __se_sys_ioctl+0xfc/0x170 [ 433.075281][ T9640] do_syscall_64+0xfa/0x3b0 [ 433.075302][ T9640] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.075323][ T9640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.075343][ T9640] ? clear_bhb_loop+0x60/0xb0 [ 433.075368][ T9640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.075386][ T9640] RIP: 0033:0x7effee78e929 [ 433.075404][ T9640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.075421][ T9640] RSP: 002b:00007effef579038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 433.075443][ T9640] RAX: ffffffffffffffda RBX: 00007effee9b5fa0 RCX: 00007effee78e929 [ 433.075458][ T9640] RDX: 0000200000000040 RSI: 00000000c040565f RDI: 0000000000000003 [ 433.075472][ T9640] RBP: 00007effef579090 R08: 0000000000000000 R09: 0000000000000000 [ 433.075485][ T9640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.075497][ T9640] R13: 0000000000000000 R14: 00007effee9b5fa0 R15: 00007ffd3c8355d8 [ 433.075528][ T9640] [ 433.283101][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.448736][ T5925] usb 1-1: USB disconnect, device number 21 [ 433.476413][ T9653] rose3: entered promiscuous mode [ 433.505104][ T9655] FAULT_INJECTION: forcing a failure. [ 433.505104][ T9655] name failslab, interval 1, probability 0, space 0, times 0 [ 433.534718][ T9655] CPU: 0 UID: 0 PID: 9655 Comm: syz.0.1179 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 433.534744][ T9655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 433.534757][ T9655] Call Trace: [ 433.534765][ T9655] [ 433.534773][ T9655] dump_stack_lvl+0x189/0x250 [ 433.534800][ T9655] ? __pfx____ratelimit+0x10/0x10 [ 433.534822][ T9655] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.534844][ T9655] ? __pfx__printk+0x10/0x10 [ 433.534871][ T9655] ? __pfx___might_resched+0x10/0x10 [ 433.534889][ T9655] ? fs_reclaim_acquire+0x7d/0x100 [ 433.534918][ T9655] should_fail_ex+0x414/0x560 [ 433.534952][ T9655] should_failslab+0xa8/0x100 [ 433.534975][ T9655] __kmalloc_noprof+0xcb/0x4f0 [ 433.534992][ T9655] ? kfree+0x4d/0x440 [ 433.535018][ T9655] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 433.535046][ T9655] tomoyo_realpath_from_path+0xe3/0x5d0 [ 433.535072][ T9655] ? tomoyo_domain+0xd9/0x130 [ 433.535099][ T9655] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 433.535117][ T9655] tomoyo_path_number_perm+0x1e8/0x5a0 [ 433.535140][ T9655] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 433.535177][ T9655] ? __lock_acquire+0xab9/0xd20 [ 433.535218][ T9655] ? __fget_files+0x2a/0x420 [ 433.535244][ T9655] ? __fget_files+0x2a/0x420 [ 433.535265][ T9655] ? __fget_files+0x3a0/0x420 [ 433.535287][ T9655] ? __fget_files+0x2a/0x420 [ 433.535312][ T9655] security_file_ioctl+0xcb/0x2d0 [ 433.535352][ T9655] __se_sys_ioctl+0x47/0x170 [ 433.535373][ T9655] do_syscall_64+0xfa/0x3b0 [ 433.535393][ T9655] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.535412][ T9655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.535431][ T9655] ? clear_bhb_loop+0x60/0xb0 [ 433.535454][ T9655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.535473][ T9655] RIP: 0033:0x7fd02198e929 [ 433.535492][ T9655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.535508][ T9655] RSP: 002b:00007fd022884038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 433.535529][ T9655] RAX: ffffffffffffffda RBX: 00007fd021bb5fa0 RCX: 00007fd02198e929 [ 433.535544][ T9655] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 433.535556][ T9655] RBP: 00007fd022884090 R08: 0000000000000000 R09: 0000000000000000 [ 433.535566][ T9655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.535577][ T9655] R13: 0000000000000000 R14: 00007fd021bb5fa0 R15: 00007ffc6eac9ac8 [ 433.535608][ T9655] [ 433.535618][ T9655] ERROR: Out of memory at tomoyo_realpath_from_path. [ 433.800182][ T9655] rose0: entered promiscuous mode [ 434.090727][ T9674] 9pnet_fd: Insufficient options for proto=fd [ 434.160399][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1187'. [ 434.169524][ T30] audit: type=1326 audit(1750947672.345:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9677 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa18d8e929 code=0x7ffc0000 [ 434.192818][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1187'. [ 434.197053][ T5931] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 434.207524][ T30] audit: type=1326 audit(1750947672.345:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9677 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7faa18d8e929 code=0x7ffc0000 [ 434.260815][ T30] audit: type=1326 audit(1750947672.345:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9677 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa18d8e929 code=0x7ffc0000 [ 434.284705][ T30] audit: type=1326 audit(1750947672.345:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9677 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7faa18d8e929 code=0x7ffc0000 [ 434.380004][ T30] audit: type=1326 audit(1750947672.345:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9677 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa18d8e929 code=0x7ffc0000 [ 434.430120][ T5931] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 434.436831][ T30] audit: type=1326 audit(1750947672.345:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9677 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7faa18d8e929 code=0x7ffc0000 [ 434.449395][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.475946][ T30] audit: type=1326 audit(1750947672.345:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9677 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa18d8e929 code=0x7ffc0000 [ 434.505718][ T5931] usb 1-1: config 0 descriptor?? [ 434.548021][ T30] audit: type=1326 audit(1750947672.345:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9677 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7faa18d8e929 code=0x7ffc0000 [ 434.571541][ T30] audit: type=1326 audit(1750947672.355:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9677 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faa18d858e7 code=0x7ffc0000 [ 434.599912][ T30] audit: type=1326 audit(1750947672.355:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9677 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faa18d2ab19 code=0x7ffc0000 [ 434.632565][ T9692] netlink: 696 bytes leftover after parsing attributes in process `syz.3.1192'. [ 434.708107][ T9694] netlink: 'syz.3.1192': attribute type 10 has an invalid length. [ 434.871167][ T9698] gfs2: not a GFS2 filesystem [ 436.503386][ T9743] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1204'. [ 436.696913][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 436.744175][ T5931] pegasus 1-1:0.0: setup Pegasus II specific registers [ 436.866806][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 436.874305][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 436.883489][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.910250][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 436.919062][ T10] pvrusb2: ********** [ 436.923105][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 436.934268][ T10] pvrusb2: Important functionality might not be entirely working. [ 436.942209][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 436.955471][ T10] pvrusb2: ********** [ 437.122136][ T2344] pvrusb2: Invalid write control endpoint [ 437.184277][ T2344] pvrusb2: Invalid write control endpoint [ 437.190164][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 437.202830][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 437.210479][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 437.221497][ T2344] pvrusb2: Device being rendered inoperable [ 437.227541][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 437.235620][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 437.247850][ T2344] pvrusb2: Attached sub-driver cx25840 [ 437.256127][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 437.282032][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 437.328703][ T9741] pvrusb2: Attempted to execute control transfer when device not ok [ 437.342732][ T2153] usb 3-1: USB disconnect, device number 11 [ 437.502912][ T9755] loop6: detected capacity change from 0 to 2560 [ 437.512905][ T9755] buffer_io_error: 11 callbacks suppressed [ 437.512922][ T9755] Buffer I/O error on dev loop6, logical block 0, async page read [ 437.527759][ T9755] Buffer I/O error on dev loop6, logical block 0, async page read [ 437.535701][ T9755] Buffer I/O error on dev loop6, logical block 0, async page read [ 437.544332][ T9755] Buffer I/O error on dev loop6, logical block 0, async page read [ 437.552331][ T9755] Buffer I/O error on dev loop6, logical block 0, async page read [ 437.563479][ T9755] Buffer I/O error on dev loop6, logical block 0, async page read [ 437.580304][ T9755] Buffer I/O error on dev loop6, logical block 0, async page read [ 437.588320][ T9755] Buffer I/O error on dev loop6, logical block 0, async page read [ 437.596218][ T9755] ldm_validate_partition_table(): Disk read failed. [ 437.609861][ T9755] Buffer I/O error on dev loop6, logical block 0, async page read [ 437.622545][ T9755] Buffer I/O error on dev loop6, logical block 0, async page read [ 437.632056][ T9755] Dev loop6: unable to read RDB block 0 [ 437.638381][ T9755] loop6: unable to read partition table [ 437.645589][ T9755] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 438.382850][ T5931] pegasus 1-1:0.0: can't locate MII phy, using default [ 438.399023][ T5931] pegasus 1-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, a2:0a:c3:67:97:2e [ 438.411932][ T5931] usb 1-1: USB disconnect, device number 22 [ 438.631743][ T9767] XFS (rnullb0): Invalid superblock magic number [ 439.063592][ T9783] binder: 9782:9783 unknown command 0 [ 439.069443][ T9783] binder: 9782:9783 ioctl c0306201 2000000003c0 returned -22 [ 439.154511][ T9786] /dev/rnullb0: Can't lookup blockdev [ 439.206953][ T5931] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 439.390272][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.416411][ T5931] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 439.446345][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.484778][ T5931] usb 4-1: config 0 descriptor?? [ 439.796899][ T5925] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 439.859068][ T5892] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 439.907891][ T5931] keytouch 0003:0926:3333.0041: fixing up Keytouch IEC report descriptor [ 439.925313][ T5931] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0041/input/input75 [ 439.967268][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 439.974807][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.987480][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.997440][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 440.012310][ T5925] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 440.024244][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.026713][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 440.045424][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 440.050587][ T5925] usb 1-1: config 0 descriptor?? [ 440.074830][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 440.089843][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.097958][ T5931] keytouch 0003:0926:3333.0041: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 440.103615][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.139505][ T5892] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 440.190323][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.227846][ T5892] usb 3-1: Product: syz [ 440.242585][ T5892] usb 3-1: Manufacturer: syz [ 440.252693][ T5892] usb 3-1: SerialNumber: syz [ 440.268261][ T5892] usb 3-1: config 0 descriptor?? [ 440.292575][ T5892] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 440.373046][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 440.373063][ T30] audit: type=1326 audit(1750947678.555:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.4.1224" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa18d8e929 code=0x0 [ 440.401058][ C1] vkms_vblank_simulate: vblank timer overrun [ 440.458869][ T2153] usb 4-1: USB disconnect, device number 23 [ 440.556859][ T5008] usb 3-1: Failed to submit usb control message: -71 [ 440.563944][ T5008] usb 3-1: unable to send the bmi data to the device: -71 [ 440.571877][ T24] usb 3-1: USB disconnect, device number 12 [ 440.580513][ T5008] usb 3-1: unable to get target info from device [ 440.587012][ T5008] usb 3-1: could not get target info (-71) [ 440.596266][ T5008] usb 3-1: could not probe fw (-71) [ 440.625411][ T9819] PKCS8: Unsupported PKCS#8 version [ 440.695367][ T5925] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 440.704649][ T5925] microsoft 0003:045E:07DA.0042: ignoring exceeding usage max [ 440.896153][ T5925] microsoft 0003:045E:07DA.0042: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 440.908996][ T5925] microsoft 0003:045E:07DA.0042: no inputs found [ 440.915372][ T5925] microsoft 0003:045E:07DA.0042: could not initialize ff, continuing anyway [ 440.933475][ T5925] usb 1-1: USB disconnect, device number 23 [ 440.972195][ T9824] fido_id[9824]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 441.220903][ T9833] process 'syz.3.1231' launched '/dev/fd/4/./file0' with NULL argv: empty string added [ 441.296180][ T9837] netlink: 'syz.4.1232': attribute type 2 has an invalid length. [ 441.315626][ T9837] overlayfs: failed to clone upperpath [ 441.402221][ T9841] /dev/rnullb0: Can't lookup blockdev [ 441.476856][ T5892] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 441.476895][ T5925] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 441.638827][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 441.646780][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 441.650124][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 441.661654][ T5925] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.669626][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 441.677235][ T5925] usb 4-1: config 0 interface 0 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 441.694941][ T5892] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 441.701770][ T5925] usb 4-1: config 0 interface 0 has no altsetting 0 [ 441.714000][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.717907][ T5925] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 441.734490][ T5892] usb 3-1: Product: syz [ 441.734897][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.746772][ T5892] usb 3-1: Manufacturer: syz [ 441.746793][ T5892] usb 3-1: SerialNumber: syz [ 441.757024][ T1210] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 441.760201][ T5925] usb 4-1: config 0 descriptor?? [ 441.781271][ T5892] usb 3-1: config 0 descriptor?? [ 441.783265][ T5925] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 441.787434][ T9835] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 441.806269][ T9835] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 441.815810][ T5892] usb 3-1: ucan: probing device on interface #0 [ 441.919027][ T1210] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 441.928324][ T1210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.941621][ T1210] usb 1-1: config 0 descriptor?? [ 442.222109][ T5892] usb 3-1: ucan: device reported invalid tx-fifo size [ 442.229036][ T5892] usb 3-1: ucan: probe failed; try to update the device firmware [ 442.441828][ T5892] usb 3-1: USB disconnect, device number 13 [ 442.535410][ T9856] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1239'. [ 442.545378][ T9854] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1239'. [ 442.557376][ T9855] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1239'. [ 442.765698][ T9860] vxfs: WRONG superblock magic 00000000 at 1 [ 442.773971][ T9860] vxfs: WRONG superblock magic 00000000 at 8 [ 442.781353][ T9860] vxfs: can't find superblock. [ 442.876815][ T9866] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1242'. [ 442.888498][ T9864] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1242'. [ 442.898665][ T9865] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1242'. [ 442.975896][ T1210] pegasus 1-1:0.0: probe with driver pegasus failed with error -121 [ 443.586788][ T5931] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 443.759566][ T5931] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 443.769279][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.780900][ T5931] usb 3-1: config 0 descriptor?? [ 444.301499][ T5892] usb 4-1: USB disconnect, device number 24 [ 444.482197][ T9895] netlink: 'syz.3.1252': attribute type 29 has an invalid length. [ 444.533623][ T24] usb 1-1: USB disconnect, device number 24 [ 444.691582][ T9906] tls_set_device_offload_rx: netdev not found [ 444.810663][ T9910] overlayfs: failed to clone upperpath [ 445.546931][ T5892] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 445.706948][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 445.718755][ T5892] usb 1-1: unable to get BOS descriptor or descriptor too short [ 445.729781][ T5892] usb 1-1: config 71 has an invalid interface number: 222 but max is 0 [ 445.738126][ T5892] usb 1-1: config 71 has no interface number 0 [ 445.744309][ T5892] usb 1-1: config 71 interface 222 has no altsetting 0 [ 445.755744][ T5892] usb 1-1: New USB device found, idVendor=17ef, idProduct=7205, bcdDevice=69.4b [ 445.764913][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.766854][ T5925] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 445.773178][ T5892] usb 1-1: Product: syz [ 445.785091][ T5892] usb 1-1: Manufacturer: syz [ 445.790020][ T5892] usb 1-1: SerialNumber: syz [ 445.803490][ T5892] r8152-cfgselector 1-1: Unknown version 0x0000 [ 445.939070][ T5925] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 445.950611][ T5925] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 445.961793][ T5925] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 445.971068][ T5925] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 445.982380][ T5925] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 445.995453][ T5925] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 446.004653][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 446.012961][ T5925] usb 4-1: Product: syz [ 446.017480][ T5925] usb 4-1: Manufacturer: syz [ 446.017674][ T5931] pegasus 3-1:0.0: setup Pegasus II specific registers [ 446.035683][ T5925] cdc_wdm 4-1:1.0: skipping garbage [ 446.042255][ T5925] cdc_wdm 4-1:1.0: skipping garbage [ 446.043589][ T5892] hub 1-1:71.222: bad descriptor, ignoring hub [ 446.058964][ T5892] hub 1-1:71.222: probe with driver hub failed with error -5 [ 446.072277][ T5925] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 446.080040][ T5925] cdc_wdm 4-1:1.0: Unknown control protocol [ 446.093420][ T5892] r8152-cfgselector 1-1: USB disconnect, device number 25 [ 446.362457][ T5892] usb 4-1: USB disconnect, device number 25 [ 447.079628][ T1210] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 447.262980][ T1210] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 447.274560][ T1210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.292806][ T1210] usb 1-1: config 0 descriptor?? [ 447.662252][ T5931] pegasus 3-1:0.0: can't locate MII phy, using default [ 447.706773][ T5931] pegasus 3-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 2a:7b:66:d6:d6:ed [ 447.736304][ T5931] usb 3-1: USB disconnect, device number 14 [ 448.107280][ T5925] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 448.301838][ T5925] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.322759][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 448.324391][ T1210] pegasus 1-1:0.0: probe with driver pegasus failed with error -121 [ 448.335081][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 448.353256][ T5925] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 448.371049][ T5925] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 448.382866][ T5925] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 448.405474][ T5925] usb 4-1: Manufacturer: syz [ 448.420563][ T5925] usb 4-1: config 0 descriptor?? [ 448.636938][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 448.718461][ T5925] rc_core: IR keymap rc-hauppauge not found [ 448.734392][ T5925] Registered IR keymap rc-empty [ 448.741109][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 448.769702][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 448.800385][ T5925] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 448.814641][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 448.829848][ T5925] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input76 [ 448.842277][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 448.864303][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 448.875770][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 448.889550][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 448.899420][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 448.909217][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.917509][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 448.928990][ T24] usb 3-1: config 0 descriptor?? [ 448.950602][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 448.988140][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 449.006896][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 449.026918][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 449.047160][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 449.066870][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 449.096908][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 449.130633][ T5925] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 449.163517][ T5925] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 449.175860][ T5925] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 449.191074][ T5925] usb 4-1: USB disconnect, device number 26 [ 449.355802][ T24] plantronics 0003:047F:FFFF.0043: ignoring exceeding usage max [ 449.405535][ T24] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 449.670901][T10008] binder: BINDER_SET_CONTEXT_MGR already set [ 449.680053][T10008] binder: 10007:10008 ioctl 4018620d 200000000040 returned -16 [ 449.690539][T10008] binder: 10007:10008 ioctl c0306201 200000000240 returned -11 [ 449.694623][T10009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.717291][T10009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.804655][T10013] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1287'. [ 449.882913][ T1210] usb 1-1: USB disconnect, device number 26 [ 449.970548][T10019] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 450.104367][T10026] /dev/rnullb0: Can't lookup blockdev [ 450.189315][T10028] kvm: pic: non byte write [ 450.255888][T10032] tmpfs: Bad value for 'nr_blocks' [ 450.684375][ T1210] usb 3-1: USB disconnect, device number 15 [ 450.897676][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 451.082694][ T10] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 451.091904][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.104225][ T10] usb 1-1: config 0 descriptor?? [ 451.325232][T10051] ptrace attach of "./syz-executor exec"[10057] was attempted by "./syz-executor exec"[10051] [ 451.657263][ T5925] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 451.725737][T10071] /dev/rnullb0: Can't lookup blockdev [ 451.836472][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 451.868393][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.897733][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.916806][ T5925] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 451.926497][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.929973][ T10] pegasus 1-1:0.0: probe with driver pegasus failed with error -32 [ 451.942626][ T5925] usb 3-1: config 0 descriptor?? [ 452.357731][ T5925] corsair 0003:1B1C:1B02.0044: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 452.549432][ T5925] corsair 0003:1B1C:1B02.0044: Read invalid backlight brightness: f7. [ 452.782140][ T5925] usb 3-1: USB disconnect, device number 16 [ 453.320575][ T5925] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 453.486772][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 453.494029][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 453.507714][ T5925] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 453.517428][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.527675][ T5925] usb 4-1: Product: syz [ 453.531855][ T5925] usb 4-1: Manufacturer: syz [ 453.543870][ T5925] usb 4-1: SerialNumber: syz [ 453.559400][ T5925] usb 4-1: config 0 descriptor?? [ 453.571766][ T5925] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 453.584159][ T5925] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 453.665907][ T1210] usb 1-1: USB disconnect, device number 27 [ 454.175245][ T5925] em28xx 4-1:0.0: unknown em28xx chip ID (183) [ 454.236472][T10158] syzkaller1: entered promiscuous mode [ 454.242070][T10158] syzkaller1: entered allmulticast mode [ 454.387664][ T1210] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 454.516834][ T1210] usb 3-1: device descriptor read/64, error -71 [ 454.606764][ T5931] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 454.757014][ T1210] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 454.770351][ T5931] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 454.780799][ T5931] usb 1-1: config 0 interface 0 has no altsetting 0 [ 454.789931][ T5931] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 454.799483][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 454.808104][ T5931] usb 1-1: Product: syz [ 454.812432][ T5931] usb 1-1: Manufacturer: syz [ 454.817426][ T5931] usb 1-1: SerialNumber: syz [ 454.825958][ T5931] usb 1-1: config 0 descriptor?? [ 454.838385][ T5931] usb 1-1: selecting invalid altsetting 0 [ 454.906961][ T1210] usb 3-1: device descriptor read/64, error -71 [ 455.000224][ T5925] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 455.009765][ T5925] em28xx 4-1:0.0: board has no eeprom [ 455.017229][ T1210] usb usb3-port1: attempt power cycle [ 455.045427][T10160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.066123][T10160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.075830][ T5931] usb 1-1: USB disconnect, device number 28 [ 455.087004][ T5925] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 455.096874][ T5925] em28xx 4-1:0.0: dvb set to bulk mode. [ 455.102579][ T5920] em28xx 4-1:0.0: Binding DVB extension [ 455.141692][ T5925] usb 4-1: USB disconnect, device number 27 [ 455.180517][ T5925] em28xx 4-1:0.0: Disconnecting em28xx [ 455.187521][ T5920] em28xx 4-1:0.0: Registering input extension [ 455.193795][ T5925] em28xx 4-1:0.0: Closing input extension [ 455.214913][ T5925] em28xx 4-1:0.0: Freeing device [ 455.376857][ T1210] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 455.410086][ T1210] usb 3-1: device descriptor read/8, error -71 [ 455.651709][ T1210] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 455.697507][ T1210] usb 3-1: device descriptor read/8, error -71 [ 455.702340][ T30] audit: type=1800 audit(1750947693.875:59): pid=10173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1344" name="nullb0" dev="tmpfs" ino=984 res=0 errno=0 [ 455.770179][T10176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 455.807185][ T1210] usb usb3-port1: unable to enumerate USB device [ 455.987027][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 456.106885][ T5925] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 456.136946][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 456.143753][ T10] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 456.151992][ T10] usb 1-1: config 0 has no interface number 0 [ 456.158266][ T10] usb 1-1: config 0 interface 12 has no altsetting 0 [ 456.167607][ T10] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 456.176856][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.184855][ T10] usb 1-1: Product: syz [ 456.189055][ T10] usb 1-1: Manufacturer: syz [ 456.193808][ T10] usb 1-1: SerialNumber: syz [ 456.203816][ T10] usb 1-1: config 0 descriptor?? [ 456.258620][ T5925] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 456.267811][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.282144][ T5925] usb 4-1: config 0 descriptor?? [ 456.570826][T10190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1351'. [ 457.619948][ T2153] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 457.695983][ T5925] pegasus 4-1:0.0: can't reset MAC [ 457.702053][ T5925] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 457.792506][ T2153] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 457.801683][ T2153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.814602][ T2153] usb 3-1: config 0 descriptor?? [ 458.463832][T10211] netlink: 'syz.4.1359': attribute type 29 has an invalid length. [ 458.474486][T10211] netlink: 'syz.4.1359': attribute type 29 has an invalid length. [ 458.634874][ T2153] pegasus 3-1:0.0: probe with driver pegasus failed with error -32 [ 458.890185][ T1210] usb 4-1: USB disconnect, device number 28 [ 459.416842][ T2153] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 459.580550][ T2153] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 459.590042][ T2153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.600649][ T2153] usb 4-1: config 0 descriptor?? [ 459.650591][ T10] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 459.663840][ T10] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 459.675321][ T10] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 459.685251][ T10] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 459.698517][ T10] usb 1-1: USB disconnect, device number 29 [ 460.417560][ T10] usb 3-1: USB disconnect, device number 21 [ 460.826903][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 460.988570][ T10] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 460.998191][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.012594][ T10] usb 3-1: config 0 descriptor?? [ 461.759043][T10252] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1374'. [ 461.831617][ T2153] pegasus 4-1:0.0: setup Pegasus II specific registers [ 461.901085][ T30] audit: type=1326 audit(1750947700.085:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10254 comm="syz.4.1375" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa18d8e929 code=0x0 [ 462.434567][ T10] pegasus 3-1:0.0: can't reset MAC [ 462.440588][ T10] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 463.461183][ T2153] pegasus 4-1:0.0: can't locate MII phy, using default [ 463.529246][ T24] usb 3-1: USB disconnect, device number 22 [ 463.672487][ T2153] pegasus 4-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 32:21:e6:fb:5e:06 [ 463.694844][ T2153] usb 4-1: USB disconnect, device number 29 [ 463.886985][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 464.040944][ T24] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 464.050197][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.061318][ T24] usb 3-1: config 0 descriptor?? [ 464.851879][T10277] tmpfs: Unknown parameter 'srquota_block_hardlimit' [ 464.872944][T10277] evm: overlay not supported [ 464.878527][ T24] pegasus 3-1:0.0: probe with driver pegasus failed with error -32 [ 464.889984][T10277] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 464.897848][T10277] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 465.582075][T10288] kvm: pic: non byte write [ 465.946445][T10298] netlink: 'syz.0.1392': attribute type 2 has an invalid length. [ 465.968709][T10298] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1392'. [ 466.148772][ T6838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 466.169850][ T6838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 466.184174][ T6838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 466.194367][ T6838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 466.202471][ T6838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 466.252118][ T1083] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.403378][ T1083] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.464580][ T1083] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.529765][ T1083] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.548488][ T5925] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 466.602754][ T5892] usb 3-1: USB disconnect, device number 23 [ 466.677030][ T2153] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 466.716151][ T5925] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 466.733395][ T5925] usb 1-1: config 0 has no interface number 0 [ 466.756406][ T5925] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 466.780796][ T5925] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 466.792803][T10302] chnl_net:caif_netlink_parms(): no params data found [ 466.797206][ T5925] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 466.818534][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.839783][ T5925] usb 1-1: config 0 descriptor?? [ 466.845626][T10304] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 466.869909][ T2153] usb 4-1: Using ep0 maxpacket: 16 [ 466.881430][ T2153] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.901061][ T1083] bridge_slave_1: left allmulticast mode [ 466.909400][ T2153] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.920652][ T5925] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 466.928823][ T1083] bridge_slave_1: left promiscuous mode [ 466.933170][ T2153] usb 4-1: config 0 interface 0 has no altsetting 0 [ 466.943738][ T2153] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 466.950695][ T1083] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.954103][ T2153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.991242][ T2153] usb 4-1: config 0 descriptor?? [ 467.004533][ T1083] bridge_slave_0: left allmulticast mode [ 467.021093][ T1083] bridge_slave_0: left promiscuous mode [ 467.038112][ T1083] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.133215][ C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 467.152463][ T5920] usb 1-1: USB disconnect, device number 30 [ 467.323135][T10325] fuse: Bad value for 'group_id' [ 467.332928][T10325] fuse: Bad value for 'group_id' [ 467.424807][T10308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.469954][T10308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.493298][ T2153] hid (null): report_id 0 is invalid [ 467.511561][ T2153] hid (null): unknown global tag 0xc [ 467.518462][ T2153] hid (null): unknown global tag 0xd [ 467.528502][ T2153] hid (null): unknown global tag 0xd [ 467.555915][ T2153] cougar 0003:060B:500A.0045: usage count exceeds max: fixing up report descriptor [ 467.582032][ T2153] cougar 0003:060B:500A.0045: unexpected long global item [ 467.590435][ T5925] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 467.609903][ T2153] cougar 0003:060B:500A.0045: parse failed [ 467.625366][ T2153] cougar 0003:060B:500A.0045: probe with driver cougar failed with error -22 [ 467.704357][ T24] usb 4-1: USB disconnect, device number 30 [ 467.749650][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 467.808734][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 467.853845][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 467.875040][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 467.888636][ T5925] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 467.900077][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.930885][ T5925] usb 3-1: config 0 descriptor?? [ 468.171529][T10302] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.197445][T10302] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.204699][T10302] bridge_slave_0: entered allmulticast mode [ 468.237726][T10302] bridge_slave_0: entered promiscuous mode [ 468.257058][ T5153] Bluetooth: hci4: command tx timeout [ 468.285948][T10302] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.308339][ T24] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 468.343857][ T5925] plantronics 0003:047F:FFFF.0046: ignoring exceeding usage max [ 468.344686][T10302] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.384386][T10302] bridge_slave_1: entered allmulticast mode [ 468.398909][ T5925] plantronics 0003:047F:FFFF.0046: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 468.409383][T10302] bridge_slave_1: entered promiscuous mode [ 468.499942][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 468.530977][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 468.562798][ T24] usb 1-1: config 6 has an invalid interface number: 7 but max is 0 [ 468.592034][ T24] usb 1-1: config 6 has no interface number 0 [ 468.616983][ T24] usb 1-1: config 6 interface 7 altsetting 5 endpoint 0xB has invalid maxpacket 43400, setting to 64 [ 468.645982][ T24] usb 1-1: config 6 interface 7 has no altsetting 0 [ 468.662702][ T24] usb 1-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=c9.92 [ 468.673486][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.685278][ T24] usb 1-1: Product: syz [ 468.692320][ T24] usb 1-1: Manufacturer: syz [ 468.703273][ T24] usb 1-1: SerialNumber: syz [ 468.732497][T10302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.751972][T10302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.808035][ T5925] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 468.903630][T10302] team0: Port device team_slave_0 added [ 468.934877][T10302] team0: Port device team_slave_1 added [ 468.935172][T10341] block nbd0: not configured, cannot reconfigure [ 468.951428][T10338] block nbd0: not configured, cannot reconfigure [ 469.008395][ T5925] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 469.043401][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.072849][ T5925] usb 4-1: config 0 descriptor?? [ 469.131467][ T1083] hsr_slave_0: left promiscuous mode [ 469.146176][ T1083] hsr_slave_1: left promiscuous mode [ 469.163966][ T1083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.179319][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.195339][ T1083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.208038][ T24] usb 1-1: Expected 3 endpoints, found: 4 [ 469.216374][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.238836][ T24] usb 1-1: USB disconnect, device number 31 [ 469.276662][ T1083] veth1_macvtap: left promiscuous mode [ 469.285429][ T1083] veth0_macvtap: left promiscuous mode [ 469.316383][ T1083] veth1_vlan: left promiscuous mode [ 469.322674][ T1083] veth0_vlan: left promiscuous mode [ 469.790261][ T24] usb 3-1: reset high-speed USB device number 24 using dummy_hcd [ 469.937357][ T24] usb 3-1: device descriptor read/64, error -32 [ 469.954325][ T1083] team0 (unregistering): Port device team_slave_1 removed [ 469.994000][ T1083] team0 (unregistering): Port device team_slave_0 removed [ 470.016811][ T1210] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 470.179772][ T1210] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 470.193546][ T1210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.198242][ T24] usb 3-1: reset high-speed USB device number 24 using dummy_hcd [ 470.237471][ T1210] usb 1-1: config 0 descriptor?? [ 470.312001][T10374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.325094][T10374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.333456][ T5153] Bluetooth: hci4: command tx timeout [ 470.392271][ T24] usb 3-1: device descriptor read/64, error -32 [ 470.592751][T10302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.602050][T10302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.628778][T10302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.643349][T10302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.650558][ T24] usb 3-1: reset high-speed USB device number 24 using dummy_hcd [ 470.658828][T10302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.687719][T10302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.709322][ T24] usb 3-1: device descriptor read/8, error -32 [ 470.826065][T10302] hsr_slave_0: entered promiscuous mode [ 470.833413][T10302] hsr_slave_1: entered promiscuous mode [ 470.842258][T10302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.849940][T10302] Cannot create hsr debugfs directory [ 470.957214][ T24] usb 3-1: reset high-speed USB device number 24 using dummy_hcd [ 470.997138][ T24] usb 3-1: device descriptor read/8, error -32 [ 471.038766][T10376] FAULT_INJECTION: forcing a failure. [ 471.038766][T10376] name failslab, interval 1, probability 0, space 0, times 0 [ 471.064643][T10376] CPU: 0 UID: 0 PID: 10376 Comm: syz.2.1404 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 471.064673][T10376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 471.064684][T10376] Call Trace: [ 471.064692][T10376] [ 471.064701][T10376] dump_stack_lvl+0x189/0x250 [ 471.064728][T10376] ? __pfx____ratelimit+0x10/0x10 [ 471.064749][T10376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.064769][T10376] ? __pfx__printk+0x10/0x10 [ 471.064793][T10376] ? __pfx___might_resched+0x10/0x10 [ 471.064813][T10376] ? fs_reclaim_acquire+0x7d/0x100 [ 471.064837][T10376] should_fail_ex+0x414/0x560 [ 471.064869][T10376] should_failslab+0xa8/0x100 [ 471.064891][T10376] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 471.064911][T10376] ? __alloc_skb+0x112/0x2d0 [ 471.064939][T10376] __alloc_skb+0x112/0x2d0 [ 471.064966][T10376] alloc_skb_with_frags+0xca/0x890 [ 471.064990][T10376] ? __might_fault+0xb0/0x130 [ 471.065020][T10376] sock_alloc_send_pskb+0x857/0x990 [ 471.065067][T10376] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 471.065102][T10376] ? __lock_acquire+0xab9/0xd20 [ 471.065133][T10376] ? iov_iter_advance+0x8b/0x1c0 [ 471.065162][T10376] tun_get_user+0x9c3/0x3ce0 [ 471.065199][T10376] ? aa_file_perm+0x13e/0x11b0 [ 471.065225][T10376] ? aa_file_perm+0x13e/0x11b0 [ 471.065249][T10376] ? aa_file_perm+0x3ed/0x11b0 [ 471.065275][T10376] ? __pfx_tun_get_user+0x10/0x10 [ 471.065309][T10376] ? __lock_acquire+0xab9/0xd20 [ 471.065341][T10376] ? ref_tracker_alloc+0x318/0x460 [ 471.065357][T10376] ? __lock_acquire+0xab9/0xd20 [ 471.065381][T10376] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 471.065407][T10376] ? tun_get+0x1c/0x2f0 [ 471.065475][T10376] ? tun_get+0x1c/0x2f0 [ 471.065497][T10376] ? tun_get+0x1c/0x2f0 [ 471.065525][T10376] tun_chr_write_iter+0x113/0x200 [ 471.065552][T10376] vfs_write+0x548/0xa90 [ 471.065577][T10376] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 471.065605][T10376] ? __pfx_vfs_write+0x10/0x10 [ 471.065636][T10376] ? __fget_files+0x2a/0x420 [ 471.065668][T10376] ksys_write+0x145/0x250 [ 471.065690][T10376] ? __pfx_ksys_write+0x10/0x10 [ 471.065707][T10376] ? rcu_is_watching+0x15/0xb0 [ 471.065731][T10376] ? do_syscall_64+0xbe/0x3b0 [ 471.065755][T10376] do_syscall_64+0xfa/0x3b0 [ 471.065774][T10376] ? lockdep_hardirqs_on+0x9c/0x150 [ 471.065793][T10376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.065812][T10376] ? clear_bhb_loop+0x60/0xb0 [ 471.065836][T10376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.065855][T10376] RIP: 0033:0x7effee78e929 [ 471.065873][T10376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.065890][T10376] RSP: 002b:00007effef579038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 471.065909][T10376] RAX: ffffffffffffffda RBX: 00007effee9b5fa0 RCX: 00007effee78e929 [ 471.065925][T10376] RDX: 0000000000000ffe RSI: 0000200000000040 RDI: 0000000000000005 [ 471.065938][T10376] RBP: 00007effef579090 R08: 0000000000000000 R09: 0000000000000000 [ 471.065950][T10376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.065962][T10376] R13: 0000000000000000 R14: 00007effee9b5fa0 R15: 00007ffd3c8355d8 [ 471.065991][T10376] [ 471.396137][ T24] raw-gadget.0 gadget.2: failed to queue suspend event [ 471.406295][ T1210] pegasus 1-1:0.0: probe with driver pegasus failed with error -32 [ 471.407690][ T5920] usb 3-1: USB disconnect, device number 24 [ 471.503988][ T5920] raw-gadget.0 gadget.2: failed to queue reset event [ 471.604729][ T1083] IPVS: stop unused estimator thread 0... [ 471.611557][ T5925] pegasus 4-1:0.0: setup Pegasus II specific registers [ 471.624145][ T5920] raw-gadget.0 gadget.2: failed to queue resume event [ 471.722446][ T5920] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 471.752313][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 471.760504][ T5920] raw-gadget.0 gadget.2: failed to queue reset event [ 471.837093][ T5920] raw-gadget.0 gadget.2: failed to queue resume event [ 471.908399][T10392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.920414][T10392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.937042][ T5920] usb 3-1: device descriptor read/64, error -32 [ 472.063505][ T5920] raw-gadget.0 gadget.2: failed to queue suspend event [ 472.073250][ T5920] raw-gadget.0 gadget.2: failed to queue reset event [ 472.156965][ T5920] raw-gadget.0 gadget.2: failed to queue resume event [ 472.226806][ T5920] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 472.245313][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 472.253278][ T5920] raw-gadget.0 gadget.2: failed to queue reset event [ 472.306929][T10302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 472.323396][T10302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 472.330387][ T5920] raw-gadget.0 gadget.2: failed to queue resume event [ 472.349736][T10302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 472.361734][T10302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 472.396918][ T5920] usb 3-1: device descriptor read/64, error -32 [ 472.416998][ T5153] Bluetooth: hci4: command tx timeout [ 472.528406][ T5920] raw-gadget.0 gadget.2: failed to queue suspend event [ 472.541693][ T5920] usb usb3-port1: attempt power cycle [ 472.572131][T10302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.579423][ T5920] raw-gadget.0 gadget.2: failed to queue disconnect event [ 472.592698][ T5920] raw-gadget.0 gadget.2: failed to queue reset event [ 472.641717][T10302] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.674210][ T9395] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.681477][ T9395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.698243][ T5920] raw-gadget.0 gadget.2: failed to queue resume event [ 472.709767][ T5920] raw-gadget.0 gadget.2: failed to queue reset event [ 472.738400][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.745732][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.817548][ T10] usb 1-1: USB disconnect, device number 32 [ 472.967408][ T5920] raw-gadget.0 gadget.2: failed to queue resume event [ 473.031896][ T5920] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 473.100916][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 473.110049][ T5920] usb 3-1: device descriptor read/8, error -32 [ 473.208771][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 473.217403][ T5920] raw-gadget.0 gadget.2: failed to queue suspend event [ 473.232158][ T5920] raw-gadget.0 gadget.2: failed to queue reset event [ 473.240619][ T5925] pegasus 4-1:0.0: can't locate MII phy, using default [ 473.283400][ T5925] pegasus 4-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, aa:19:7a:87:4a:c2 [ 473.326019][ T5925] usb 4-1: USB disconnect, device number 31 [ 473.332428][ T5920] raw-gadget.0 gadget.2: failed to queue resume event [ 473.377179][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 473.386360][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.414894][ T5920] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 473.424210][T10302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.431226][ T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 473.465386][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.478883][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 473.495837][ T5920] usb 3-1: device descriptor read/8, error -32 [ 473.497148][ T10] usb 1-1: config 0 descriptor?? [ 473.629076][ T5920] raw-gadget.0 gadget.2: failed to queue suspend event [ 473.661742][T10445] syzkaller1: entered promiscuous mode [ 473.667403][T10445] syzkaller1: entered allmulticast mode [ 473.690535][ T5920] usb usb3-port1: unable to enumerate USB device [ 473.742482][T10448] input: syz0 as /devices/virtual/input/input79 [ 473.954853][ T10] mcp2221 0003:04D8:00DD.0047: unknown main item tag 0x0 [ 474.003322][T10455] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 474.010076][ T10] mcp2221 0003:04D8:00DD.0047: unknown main item tag 0x0 [ 474.010112][ T10] mcp2221 0003:04D8:00DD.0047: unknown main item tag 0x0 [ 474.010139][ T10] mcp2221 0003:04D8:00DD.0047: unknown main item tag 0x0 [ 474.010172][ T10] mcp2221 0003:04D8:00DD.0047: unknown main item tag 0x0 [ 474.011928][ T10] mcp2221 0003:04D8:00DD.0047: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 474.036720][ T5920] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 474.207426][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 474.221483][ T5920] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 474.223317][ T10] usb 1-1: USB disconnect, device number 33 [ 474.253275][T10461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.269716][ T5920] usb 4-1: config 0 has no interface number 0 [ 474.294413][ T5920] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 474.306574][T10302] veth0_vlan: entered promiscuous mode [ 474.335873][T10461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.346032][ T5920] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 474.349568][T10302] veth1_vlan: entered promiscuous mode [ 474.361022][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.393066][ T5920] usb 4-1: config 0 descriptor?? [ 474.420512][ T5920] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 474.448981][T10302] veth0_macvtap: entered promiscuous mode [ 474.469509][T10302] veth1_macvtap: entered promiscuous mode [ 474.489195][ T5153] Bluetooth: hci4: command tx timeout [ 474.509844][T10302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.528390][T10302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.542593][ T5008] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.561758][ T5008] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.589682][ T5008] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.608005][ T5008] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.612927][T10448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.660479][T10448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.744626][ T10] usb 4-1: USB disconnect, device number 32 [ 474.763733][ T3548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.792848][ T3548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.853023][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.874258][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.882547][T10469] sctp: [Deprecated]: syz.0.1416 (pid 10469) Use of struct sctp_assoc_value in delayed_ack socket option. [ 474.882547][T10469] Use struct sctp_sack_info instead [ 475.151613][T10478] netdevsim netdevsim4: Direct firmware load for . [ 475.151613][T10478] failed with error -2 [ 475.170082][T10478] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 475.170082][T10478] [ 475.736818][ T5920] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 475.755126][T10506] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1421'. [ 475.832720][T10508] syzkaller1: entered promiscuous mode [ 475.843871][T10508] syzkaller1: entered allmulticast mode [ 475.897075][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 475.907748][ T5920] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 475.960471][ T5920] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 475.989149][ T5920] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 476.016773][ T30] audit: type=1326 audit(1750947714.195:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10513 comm="syz.2.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effee78e929 code=0x50000 [ 476.026717][ T5920] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 476.094023][ T30] audit: type=1326 audit(1750947714.195:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10513 comm="syz.2.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effee78e929 code=0x50000 [ 476.122028][ T5920] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 476.152360][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.192317][ T30] audit: type=1326 audit(1750947714.195:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10513 comm="syz.2.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effee78e929 code=0x50000 [ 476.225629][ T30] audit: type=1326 audit(1750947714.195:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10513 comm="syz.2.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effee78e929 code=0x50000 [ 476.226018][T10518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1425'. [ 476.261502][ T30] audit: type=1326 audit(1750947714.195:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10513 comm="syz.2.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effee78e929 code=0x50000 [ 476.303036][ T30] audit: type=1326 audit(1750947714.195:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10513 comm="syz.2.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effee78e929 code=0x50000 [ 476.326776][ T30] audit: type=1326 audit(1750947714.205:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10513 comm="syz.2.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effee78e929 code=0x50000 [ 476.349832][ T30] audit: type=1326 audit(1750947714.205:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10513 comm="syz.2.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effee78e929 code=0x50000 [ 476.373192][ T30] audit: type=1326 audit(1750947714.205:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10513 comm="syz.2.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effee78e929 code=0x50000 [ 476.406000][ T5920] usb 4-1: GET_CAPABILITIES returned aa [ 476.411924][ T24] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 476.423279][ T5920] usbtmc 4-1:16.0: can't read capabilities [ 476.446847][ T30] audit: type=1326 audit(1750947714.205:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10513 comm="syz.2.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effee78e929 code=0x50000 [ 476.578488][ T24] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 476.598973][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.642735][ T24] usb 1-1: config 0 descriptor?? [ 476.970508][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 477.181122][T10539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.190843][T10539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.211694][T10539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.224743][T10539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.467560][ T24] pegasus 1-1:0.0: probe with driver pegasus failed with error -121 [ 478.527222][ T24] usb 4-1: USB disconnect, device number 33 [ 478.583163][T10549] syzkaller1: entered promiscuous mode [ 478.606735][T10549] syzkaller1: entered allmulticast mode [ 479.114523][T10557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.150158][T10557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.169944][ T1210] usb 1-1: USB disconnect, device number 34 [ 479.171921][T10554] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/rnullb0": -EINTR [ 479.183802][T10557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.220579][T10557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.249673][T10557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.258924][T10557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.271209][T10557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.282156][T10557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.494226][T10575] FAULT_INJECTION: forcing a failure. [ 479.494226][T10575] name failslab, interval 1, probability 0, space 0, times 0 [ 479.524691][T10575] CPU: 0 UID: 0 PID: 10575 Comm: syz.0.1439 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 479.524720][T10575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 479.524732][T10575] Call Trace: [ 479.524741][T10575] [ 479.524750][T10575] dump_stack_lvl+0x189/0x250 [ 479.524777][T10575] ? __pfx____ratelimit+0x10/0x10 [ 479.524800][T10575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.524821][T10575] ? __pfx__printk+0x10/0x10 [ 479.524850][T10575] ? __pfx___might_resched+0x10/0x10 [ 479.524868][T10575] ? fs_reclaim_acquire+0x7d/0x100 [ 479.524896][T10575] should_fail_ex+0x414/0x560 [ 479.524932][T10575] should_failslab+0xa8/0x100 [ 479.524955][T10575] __kmalloc_cache_noprof+0x70/0x3d0 [ 479.524975][T10575] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 479.525001][T10575] tcp_sendmsg_fastopen+0x1de/0x5e0 [ 479.525029][T10575] mptcp_sendmsg_fastopen+0x17d/0x580 [ 479.525069][T10575] mptcp_sendmsg+0x176c/0x1970 [ 479.525092][T10575] ? __pfx___might_resched+0x10/0x10 [ 479.525129][T10575] ? aa_sk_perm+0x81e/0x950 [ 479.525156][T10575] ? __pfx_aa_sk_perm+0x10/0x10 [ 479.525177][T10575] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 479.525208][T10575] ? inet6_sendmsg+0x101/0x120 [ 479.525232][T10575] __sock_sendmsg+0xe5/0x270 [ 479.525256][T10575] __sys_sendto+0x3bd/0x520 [ 479.525283][T10575] ? __pfx___sys_sendto+0x10/0x10 [ 479.525304][T10575] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 479.525341][T10575] ? __fget_files+0x3a0/0x420 [ 479.525378][T10575] ? ksys_write+0x22a/0x250 [ 479.525401][T10575] ? __pfx_ksys_write+0x10/0x10 [ 479.525419][T10575] ? rcu_is_watching+0x15/0xb0 [ 479.525445][T10575] __x64_sys_sendto+0xde/0x100 [ 479.525473][T10575] do_syscall_64+0xfa/0x3b0 [ 479.525495][T10575] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.525515][T10575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.525535][T10575] ? clear_bhb_loop+0x60/0xb0 [ 479.525559][T10575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.525578][T10575] RIP: 0033:0x7fd02198e929 [ 479.525595][T10575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.525612][T10575] RSP: 002b:00007fd022884038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 479.525633][T10575] RAX: ffffffffffffffda RBX: 00007fd021bb5fa0 RCX: 00007fd02198e929 [ 479.525649][T10575] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 479.525661][T10575] RBP: 00007fd022884090 R08: 0000000000000000 R09: 0000000000000000 [ 479.525674][T10575] R10: bd7510c8ef46c972 R11: 0000000000000246 R12: 0000000000000001 [ 479.525687][T10575] R13: 0000000000000000 R14: 00007fd021bb5fa0 R15: 00007ffc6eac9ac8 [ 479.525719][T10575] [ 479.789238][ C0] vkms_vblank_simulate: vblank timer overrun [ 481.508434][T10582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.549799][T10582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.573652][T10586] syzkaller1: entered promiscuous mode [ 481.591294][T10586] syzkaller1: entered allmulticast mode [ 481.807107][ T24] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 481.906998][ T5892] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 481.976877][ T24] usb 1-1: device descriptor read/64, error -71 [ 482.046834][ T5892] usb 4-1: device descriptor read/64, error -71 [ 482.207935][T10603] overlayfs: missing 'lowerdir' [ 482.216829][ T24] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 482.287514][ T5892] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 482.357005][ T24] usb 1-1: device descriptor read/64, error -71 [ 482.447045][ T5892] usb 4-1: device descriptor read/64, error -71 [ 482.464148][T10609] FAULT_INJECTION: forcing a failure. [ 482.464148][T10609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.479977][ T24] usb usb1-port1: attempt power cycle [ 482.485484][T10609] CPU: 1 UID: 0 PID: 10609 Comm: syz.2.1452 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 482.485510][T10609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 482.485523][T10609] Call Trace: [ 482.485531][T10609] [ 482.485539][T10609] dump_stack_lvl+0x189/0x250 [ 482.485563][T10609] ? __pfx____ratelimit+0x10/0x10 [ 482.485575][T10609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.485587][T10609] ? __pfx__printk+0x10/0x10 [ 482.485601][T10609] ? __might_fault+0xb0/0x130 [ 482.485617][T10609] should_fail_ex+0x414/0x560 [ 482.485637][T10609] _copy_from_user+0x2d/0xb0 [ 482.485647][T10609] video_usercopy+0x354/0x14f0 [ 482.485664][T10609] ? __pfx___video_do_ioctl+0x10/0x10 [ 482.485675][T10609] ? __pfx_video_usercopy+0x10/0x10 [ 482.485691][T10609] ? __fget_files+0x2a/0x420 [ 482.485705][T10609] ? __fget_files+0x2a/0x420 [ 482.485717][T10609] ? __fget_files+0x3a0/0x420 [ 482.485731][T10609] v4l2_ioctl+0x18d/0x1e0 [ 482.485742][T10609] ? __pfx_v4l2_ioctl+0x10/0x10 [ 482.485752][T10609] __se_sys_ioctl+0xfc/0x170 [ 482.485763][T10609] do_syscall_64+0xfa/0x3b0 [ 482.485775][T10609] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.485785][T10609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.485795][T10609] ? clear_bhb_loop+0x60/0xb0 [ 482.485808][T10609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.485818][T10609] RIP: 0033:0x7effee78e929 [ 482.485828][T10609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.485838][T10609] RSP: 002b:00007effef579038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 482.485858][T10609] RAX: ffffffffffffffda RBX: 00007effee9b5fa0 RCX: 00007effee78e929 [ 482.485866][T10609] RDX: 0000200000000cc0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 482.485873][T10609] RBP: 00007effef579090 R08: 0000000000000000 R09: 0000000000000000 [ 482.485879][T10609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.485886][T10609] R13: 0000000000000000 R14: 00007effee9b5fa0 R15: 00007ffd3c8355d8 [ 482.485902][T10609] [ 482.693382][ T5892] usb usb4-port1: attempt power cycle [ 482.782230][T10613] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1454'. [ 482.958308][T10622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.971434][T10622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.996808][ T24] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 483.017515][ T24] usb 1-1: device descriptor read/8, error -71 [ 483.046828][ T5892] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 483.067177][ T5892] usb 4-1: device descriptor read/8, error -71 [ 483.269203][ T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 483.297479][ T24] usb 1-1: device descriptor read/8, error -71 [ 483.306790][ T5892] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 483.327481][ T5892] usb 4-1: device descriptor read/8, error -71 [ 483.409557][ T24] usb usb1-port1: unable to enumerate USB device [ 483.437721][ T5892] usb usb4-port1: unable to enumerate USB device [ 483.623061][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1460'. [ 483.879112][T10633] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1462'. [ 483.889296][T10633] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1462'. [ 483.901283][T10634] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1462'. [ 483.911722][T10633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1462'. [ 483.925542][T10634] gfs2: not a GFS2 filesystem [ 484.573400][T10647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.594000][T10647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.422498][T10661] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 485.659245][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1472'. [ 485.681602][T10663] netlink: 'syz.2.1472': attribute type 2 has an invalid length. [ 485.706768][T10663] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.1472'. [ 485.989677][T10666] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 487.033751][T10671] tipc: Started in network mode [ 487.052297][T10671] tipc: Node identity -, cluster identity 4711 [ 487.850558][ T5931] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 488.018801][ T5931] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 488.039152][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.073463][ T5931] usb 4-1: config 0 descriptor?? [ 488.963382][T10688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.997154][T10688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.674857][T10696] C: renamed from team_slave_0 (while UP) [ 489.701685][T10696] netlink: 'syz.0.1484': attribute type 4 has an invalid length. [ 489.713075][T10696] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1484'. [ 489.725630][T10696] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 490.357052][ T5931] pegasus 4-1:0.0: setup Pegasus II specific registers [ 491.504196][T10699] overlayfs: missing 'lowerdir' [ 491.984022][ T5931] pegasus 4-1:0.0: can't locate MII phy, using default [ 492.043646][T10708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.044623][T10708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.290377][ T5931] pegasus 4-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 6e:27:d1:06:72:fa [ 492.348835][ T5931] usb 4-1: USB disconnect, device number 38 [ 493.266017][T10730] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 493.272959][T10730] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 493.370894][T10735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.371707][T10730] vhci_hcd vhci_hcd.0: Device attached [ 493.514759][T10735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.563531][T10733] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 493.570734][ T1210] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 493.601631][T10738] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 493.698682][ T49] vhci_hcd: stop threads [ 493.710903][T10738] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 496.549762][ T49] vhci_hcd: release socket [ 496.566747][ T1210] usb 1-1: Using ep0 maxpacket: 16 [ 496.628142][ T49] vhci_hcd: disconnect device [ 497.205124][ T23] sched: DL replenish lagged too much [ 497.290428][ T1210] usb 1-1: device descriptor read/all, error -71 [ 498.186909][ T5931] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 498.361786][ T5931] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 498.387839][ T1210] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 498.396571][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.538586][ T5931] usb 4-1: config 0 descriptor?? [ 498.578683][ T1210] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 498.608561][ T1210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.635281][ T1210] usb 1-1: config 0 descriptor?? [ 500.149850][ T1210] pegasus 1-1:0.0: can't reset MAC [ 500.159490][ T1210] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 500.814502][ T5931] pegasus 4-1:0.0: setup Pegasus II specific registers [ 501.281542][T10777] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1500'. [ 501.297110][T10777] hfs: can't find a HFS filesystem on dev rnullb0 [ 501.449223][ T1210] usb 1-1: USB disconnect, device number 40 [ 501.724416][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.731420][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.177353][ T1210] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 502.336913][ T1210] usb 1-1: Using ep0 maxpacket: 8 [ 502.359984][ T1210] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 502.372932][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.385761][ T1210] usb 1-1: Product: syz [ 502.394088][ T1210] usb 1-1: Manufacturer: syz [ 502.399973][ T1210] usb 1-1: SerialNumber: syz [ 502.409289][ T1210] usb 1-1: config 0 descriptor?? [ 502.555583][ T5931] pegasus 4-1:0.0: can't locate MII phy, using default [ 502.627220][ T5931] pegasus 4-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 3e:11:0a:76:3f:0e [ 502.640668][ T1210] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 502.690981][ T5931] usb 4-1: USB disconnect, device number 39 [ 503.458538][T10783] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1502'. [ 504.125963][ T1210] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 504.152631][ T1210] usb 1-1: USB disconnect, device number 41 [ 511.616929][T10813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.640182][T10813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.578177][T10830] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 512.596246][T10830] UDF-fs: Scanning with blocksize 4096 failed [ 518.265684][T10856] sp0: Synchronizing with TNC [ 518.284474][T10855] [U] [ 520.045804][T10860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.107168][T10860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.890987][T10863] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 520.906789][T10863] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 520.924484][T10863] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 520.932899][T10863] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 520.943854][T10863] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 521.233474][T10866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.301857][T10866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.656982][ T5153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 521.675352][ T5153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 521.683837][ T5153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 521.692461][ T5153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 521.703021][ T5153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 522.237148][T10871] can0: slcan on ttyS3. [ 522.995604][T10862] chnl_net:caif_netlink_parms(): no params data found [ 523.056819][ T5153] Bluetooth: hci5: command tx timeout [ 523.180776][T10867] chnl_net:caif_netlink_parms(): no params data found [ 523.438323][T10862] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.445481][T10862] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.459131][T10862] bridge_slave_0: entered allmulticast mode [ 523.480806][T10862] bridge_slave_0: entered promiscuous mode [ 523.513580][T10862] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.523830][T10862] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.535493][T10862] bridge_slave_1: entered allmulticast mode [ 523.546060][T10862] bridge_slave_1: entered promiscuous mode [ 523.721054][T10867] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.731596][T10867] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.741893][T10867] bridge_slave_0: entered allmulticast mode [ 523.766929][ T5153] Bluetooth: hci0: command tx timeout [ 523.777453][T10867] bridge_slave_0: entered promiscuous mode [ 523.815118][T10862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.872546][T10862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.899969][T10867] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.915943][T10867] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.926342][T10867] bridge_slave_1: entered allmulticast mode [ 523.940145][T10867] bridge_slave_1: entered promiscuous mode [ 524.470173][T10872] can0 (unregistered): slcan off ttyS3. [ 524.614567][T10887] dlm: plock device version mismatch: kernel (1.2.0), user (1986356271.1769104431.1918985007) [ 524.638365][T10887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.654618][T10887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.127210][ T5153] Bluetooth: hci5: command tx timeout [ 525.369622][T10867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.442725][T10862] team0: Port device team_slave_0 added [ 525.484624][T10862] team0: Port device team_slave_1 added [ 525.613309][T10867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.847092][ T5153] Bluetooth: hci0: command tx timeout [ 525.888277][T10899] 9pnet: Could not find request transport: fΏdno=U?ך2#FK(7T}HiZ滺;'Zɹr0նb0x0000000000000004 [ 526.062187][T10862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.084964][T10862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.186879][T10862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.226327][T10862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.249028][T10904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.266708][T10862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.297749][T10904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.325552][T10904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.374836][T10862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.401906][T10904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.423615][T10867] team0: Port device team_slave_0 added [ 526.474020][T10867] team0: Port device team_slave_1 added [ 526.836985][T10867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.863124][T10867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.889059][ C0] vkms_vblank_simulate: vblank timer overrun [ 526.909541][T10867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.030915][T10867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.052700][T10867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.087378][T10867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.125634][T10862] hsr_slave_0: entered promiscuous mode [ 527.133569][T10862] hsr_slave_1: entered promiscuous mode [ 527.145557][T10862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 527.170418][T10862] Cannot create hsr debugfs directory [ 527.207116][ T5153] Bluetooth: hci5: command tx timeout [ 527.432073][T10867] hsr_slave_0: entered promiscuous mode [ 527.460460][T10867] hsr_slave_1: entered promiscuous mode [ 527.475849][T10913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.492874][T10867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 527.506319][T10913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.524495][T10867] Cannot create hsr debugfs directory [ 527.550486][T10913] hpfs: Bad magic ... probably not HPFS [ 527.585264][T10913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.601280][T10914] hpfs: Bad magic ... probably not HPFS [ 527.620284][T10913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.927873][ T5153] Bluetooth: hci0: command tx timeout [ 528.361240][T10917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.378995][T10862] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 528.415882][T10917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.465247][T10862] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 528.511359][T10862] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 528.560915][T10862] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 528.734267][T10867] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 528.774693][T10867] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 528.817902][T10867] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 528.844999][T10867] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 529.029223][T10862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.173638][T10862] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.263813][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.271044][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.290522][ T5153] Bluetooth: hci5: command tx timeout [ 529.366614][T10798] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.373815][T10798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.886504][T10867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.007579][ T5153] Bluetooth: hci0: command tx timeout [ 530.102531][T10867] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.182113][ T9395] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.189319][ T9395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.352363][ T9395] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.359552][ T9395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.110955][T10862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.397432][T10959] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 531.834327][T10867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.663061][T10862] veth0_vlan: entered promiscuous mode [ 532.763372][T10862] veth1_vlan: entered promiscuous mode [ 532.799016][T10983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.845046][T10983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.929655][T10862] veth0_macvtap: entered promiscuous mode [ 532.968150][T10862] veth1_macvtap: entered promiscuous mode [ 533.082126][T10862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.132909][T10862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.153963][T10867] veth0_vlan: entered promiscuous mode [ 533.186952][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.228452][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.244768][T10867] veth1_vlan: entered promiscuous mode [ 533.275851][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.331261][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.480720][T10867] veth0_macvtap: entered promiscuous mode [ 533.579943][T10867] veth1_macvtap: entered promiscuous mode [ 533.651881][ T5008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.704833][ T5008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.814834][T10867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.863084][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.894479][T10867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.907336][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.993971][ T5008] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.034447][ T5008] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.084119][T10989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.114493][ T5008] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.139895][T10989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.158691][ T5008] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.428755][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.463662][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.525944][ T5008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.547108][ T5008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.626784][ T5892] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 534.796845][ T5892] usb 6-1: Using ep0 maxpacket: 32 [ 534.823326][ T5892] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 534.872851][ T5892] usb 6-1: config 0 interface 0 has no altsetting 0 [ 534.898677][ T5892] usb 6-1: New USB device found, idVendor=056a, idProduct=0039, bcdDevice= 0.00 [ 534.931846][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.995986][ T5892] usb 6-1: config 0 descriptor?? [ 535.147014][ T1210] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 535.342512][T10995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.400064][ T1210] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 535.410271][T10995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.466779][ T1210] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.529091][ T1210] usb 7-1: config 0 descriptor?? [ 535.837351][ T5892] usbhid 6-1:0.0: can't add hid device: -71 [ 535.855541][ T5892] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 535.896425][ T5892] usb 6-1: USB disconnect, device number 2 [ 536.196184][T11000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.218309][T11000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.281283][T11000] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1642504120 (13140032960 ns) > initial count (744665392 ns). Using initial count to start timer. [ 536.313700][T11000] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 536.727230][ T5871] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 536.911088][ T5871] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 536.926789][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.946405][ T5871] usb 6-1: config 0 descriptor?? [ 537.375273][T11004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.411860][T11004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.831915][ T1210] pegasus 7-1:0.0: setup Pegasus II specific registers [ 538.245240][T11008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.264909][T11008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.296622][T11008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.321750][T11008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.723129][T11010] FAULT_INJECTION: forcing a failure. [ 538.723129][T11010] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 538.750378][T11010] CPU: 0 UID: 0 PID: 11010 Comm: syz.4.1550 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 538.750409][T11010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 538.750426][T11010] Call Trace: [ 538.750435][T11010] [ 538.750444][T11010] dump_stack_lvl+0x189/0x250 [ 538.750474][T11010] ? __pfx____ratelimit+0x10/0x10 [ 538.750496][T11010] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.750518][T11010] ? __pfx__printk+0x10/0x10 [ 538.750541][T11010] ? fs_reclaim_acquire+0x7d/0x100 [ 538.750573][T11010] should_fail_ex+0x414/0x560 [ 538.750609][T11010] prepare_alloc_pages+0x213/0x610 [ 538.750639][T11010] __alloc_frozen_pages_noprof+0x123/0x370 [ 538.750668][T11010] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 538.750692][T11010] ? do_raw_spin_lock+0x121/0x290 [ 538.750721][T11010] ? __lock_acquire+0xab9/0xd20 [ 538.750749][T11010] ? policy_nodemask+0x27c/0x720 [ 538.750775][T11010] alloc_pages_mpol+0x232/0x4a0 [ 538.750802][T11010] alloc_pages_noprof+0xa9/0x190 [ 538.750825][T11010] get_free_pages_noprof+0xf/0x80 [ 538.750850][T11010] __pollwait+0x27b/0x460 [ 538.750873][T11010] ? __pfx___pollwait+0x10/0x10 [ 538.750901][T11010] pipe_poll+0x16c/0x470 [ 538.750926][T11010] ? __pfx_pipe_poll+0x10/0x10 [ 538.750949][T11010] do_sys_poll+0x8c9/0x1070 [ 538.750978][T11010] ? do_sys_poll+0x3f1/0x1070 [ 538.751009][T11010] ? __pfx_do_sys_poll+0x10/0x10 [ 538.751041][T11010] ? __pfx___pollwait+0x10/0x10 [ 538.751067][T11010] ? __pfx_pollwake+0x10/0x10 [ 538.751092][T11010] ? __pfx_pollwake+0x10/0x10 [ 538.751117][T11010] ? __pfx_pollwake+0x10/0x10 [ 538.751143][T11010] ? __pfx_pollwake+0x10/0x10 [ 538.751168][T11010] ? __pfx_pollwake+0x10/0x10 [ 538.751194][T11010] ? __pfx_pollwake+0x10/0x10 [ 538.751219][T11010] ? __pfx_pollwake+0x10/0x10 [ 538.751245][T11010] ? __pfx_pollwake+0x10/0x10 [ 538.751271][T11010] ? __pfx_pollwake+0x10/0x10 [ 538.751294][T11010] ? rcu_read_lock_any_held+0xb3/0x120 [ 538.751316][T11010] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 538.751339][T11010] ? vfs_write+0x8d8/0xa90 [ 538.751385][T11010] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 538.751407][T11010] ? set_user_sigmask+0xc7/0x1b0 [ 538.751426][T11010] ? __pfx_set_user_sigmask+0x10/0x10 [ 538.751446][T11010] ? __fget_files+0x3a0/0x420 [ 538.751477][T11010] __se_sys_ppoll+0x1ff/0x260 [ 538.751503][T11010] ? __pfx___se_sys_ppoll+0x10/0x10 [ 538.751526][T11010] ? __pfx_ksys_write+0x10/0x10 [ 538.751545][T11010] ? rcu_is_watching+0x15/0xb0 [ 538.751569][T11010] ? do_syscall_64+0xbe/0x3b0 [ 538.751589][T11010] ? __x64_sys_ppoll+0x20/0xc0 [ 538.751614][T11010] do_syscall_64+0xfa/0x3b0 [ 538.751634][T11010] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.751655][T11010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.751674][T11010] ? clear_bhb_loop+0x60/0xb0 [ 538.751698][T11010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.751717][T11010] RIP: 0033:0x7f43fdb8e929 [ 538.751736][T11010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.751753][T11010] RSP: 002b:00007f43fe91c038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 538.751775][T11010] RAX: ffffffffffffffda RBX: 00007f43fddb5fa0 RCX: 00007f43fdb8e929 [ 538.751791][T11010] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 538.751805][T11010] RBP: 00007f43fe91c090 R08: 0000000000000000 R09: 0000000000000000 [ 538.751818][T11010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.751831][T11010] R13: 0000000000000000 R14: 00007f43fddb5fa0 R15: 00007ffd2b3628e8 [ 538.751861][T11010] [ 539.645263][ T5871] pegasus 6-1:0.0: setup Pegasus II specific registers [ 539.950279][ T1210] pegasus 7-1:0.0: can't locate MII phy, using default [ 540.034776][ T1210] pegasus 7-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 0a:fc:10:53:12:34 [ 540.114503][ T1210] usb 7-1: USB disconnect, device number 2 [ 541.116086][ T5871] pegasus 6-1:0.0: can't locate MII phy, using default [ 541.582968][ T5871] pegasus 6-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 56:48:6a:b1:aa:72 [ 541.687064][ T5871] usb 6-1: USB disconnect, device number 3 [ 542.107172][ T1210] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 542.312695][ T1210] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.380923][ T1210] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 542.456510][ T1210] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 542.503328][ T5871] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 542.569217][ T1210] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.621537][ T1210] usb 7-1: Product: syz [ 542.654156][ T1210] usb 7-1: Manufacturer: syz [ 542.676628][ T1210] usb 7-1: SerialNumber: syz [ 542.694615][T11046] hpfs: Bad magic ... probably not HPFS [ 542.745852][ T5871] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 542.771281][T11046] autofs: Bad value for 'fd' [ 542.786066][ T1210] cdc_mbim 7-1:1.0: skipping garbage [ 542.822789][ T5871] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.903383][ T5871] usb 6-1: config 0 interface 0 has no altsetting 0 [ 542.942608][T11027] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 542.981523][ T5871] usb 6-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 543.057107][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.172270][ T5871] usb 6-1: config 0 descriptor?? [ 543.241101][T11027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.317617][T11027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.402061][T11027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.435048][T11027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.516507][T11027] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1556'. [ 543.550890][ T10] IPVS: starting estimator thread 0... [ 543.667138][T11057] IPVS: using max 28 ests per chain, 67200 per kthread [ 543.777033][T11061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.827237][T11061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.856891][T11059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.911311][T11059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.949914][ T5871] usbhid 6-1:0.0: can't add hid device: -71 [ 543.980746][ T5871] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 543.998385][ T1210] cdc_mbim 7-1:1.0: failed GET_NTB_PARAMETERS [ 544.006236][T11059] omfs: Invalid superblock (0) [ 544.026034][ T1210] cdc_mbim 7-1:1.0: bind() failure [ 544.052427][ T5871] usb 6-1: USB disconnect, device number 4 [ 544.101406][ T1210] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 544.135798][ T1210] cdc_ncm 7-1:1.1: bind() failure [ 545.156269][ T1210] usb 7-1: USB disconnect, device number 3 [ 545.376835][ T5871] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 545.565775][ T5871] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 545.606815][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.641386][ T5871] usb 6-1: config 0 descriptor?? [ 545.927383][ T1210] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 546.100655][ T1210] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 546.118844][ T1210] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.147840][ T1210] usb 7-1: config 0 descriptor?? [ 547.989457][ T5871] pegasus 6-1:0.0: setup Pegasus II specific registers [ 548.430217][ T1210] pegasus 7-1:0.0: setup Pegasus II specific registers [ 549.368253][ T9395] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.963062][ T5871] pegasus 6-1:0.0: can't locate MII phy, using default [ 549.978494][ T1210] pegasus 7-1:0.0: can't locate MII phy, using default [ 550.051961][ T5871] pegasus 6-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, fa:51:36:23:ec:85 [ 550.125904][ T1210] pegasus 7-1:0.0: eth2, ELECOM USB Ethernet LD-USB20, 86:43:cf:05:ed:ff [ 550.171514][ T5871] usb 6-1: USB disconnect, device number 5 [ 550.251359][ T1210] usb 7-1: USB disconnect, device number 4 [ 550.575369][T11104] netlink: 4344 bytes leftover after parsing attributes in process `syz.5.1570'. [ 550.869051][ T30] kauditd_printk_skb: 6825 callbacks suppressed [ 550.869070][ T30] audit: type=1326 audit(1750947789.045:6896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11108 comm="syz.2.1572" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effee78e929 code=0x0 [ 550.973344][T11111] Mount JFS Failure: -22 [ 551.469582][T11121] raw_sendmsg: syz.5.1575 forgot to set AF_INET. Fix it! [ 555.386571][ T9395] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.075510][T11161] netlink: 'syz.6.1581': attribute type 7 has an invalid length. [ 556.089173][T11161] netlink: 'syz.6.1581': attribute type 3 has an invalid length. [ 556.099799][T11161] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1581'. [ 556.502986][T11165] trusted_key: syz.4.1583 sent an empty control message without MSG_MORE. [ 556.976076][T11167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.011141][T11167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.050772][T11169] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1585'. [ 557.156991][ T1210] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 557.343822][ T1210] usb 7-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 557.361330][ T1210] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 557.383062][ T1210] usb 7-1: SerialNumber: syz [ 557.391326][ T1210] usb 7-1: config 0 descriptor?? [ 557.506976][ T5931] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 557.707295][ T5931] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.740507][ T5931] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 557.772068][ T5931] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 557.806692][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.826082][T11175] /dev/rnullb0: Can't open blockdev [ 557.874781][ T5931] usb 6-1: config 0 descriptor?? [ 558.130251][T11173] ksmbd: Unknown IPC event: 4, ignore. [ 558.153487][ T5931] usb 6-1: string descriptor 0 read error: -71 [ 558.211796][ T5931] usb 6-1: USB disconnect, device number 6 [ 558.366688][T11179] /dev/rnullb0: Can't open blockdev [ 558.538049][T11181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.554056][T11181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.652084][ T1210] hackrf 7-1:0.0: usb_control_msg() failed -110 request 0f [ 558.659797][ T1210] hackrf 7-1:0.0: Could not detect board [ 558.665735][ T1210] hackrf 7-1:0.0: probe with driver hackrf failed with error -110 [ 558.993957][ T9395] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.344986][ T5153] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 559.350910][ T5153] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 559.630763][T11194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.690421][T11194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.157249][ T9] usb 7-1: USB disconnect, device number 5 [ 560.917416][T11206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.926243][T11206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.043944][T11208] kvm: pic: non byte write [ 561.072846][T11209] gfs2: not a GFS2 filesystem [ 561.490855][ T9395] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.566831][ T1210] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 561.743850][ T1210] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.762156][T11220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.770792][ T1210] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.783619][T11220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.811461][ T1210] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 561.841281][T11220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.879059][T11220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.889892][ T1210] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 561.933975][ T1210] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.953512][T11220] usb usb8: usbfs: process 11220 (syz.2.1606) did not claim interface 0 before use [ 562.004574][ T1210] usb 6-1: config 0 descriptor?? [ 562.449266][ T1210] plantronics 0003:047F:FFFF.0048: item fetching failed at offset 13/15 [ 562.467517][ T1210] plantronics 0003:047F:FFFF.0048: parse failed [ 562.473875][ T1210] plantronics 0003:047F:FFFF.0048: probe with driver plantronics failed with error -22 [ 562.658172][ T1210] usb 6-1: USB disconnect, device number 7 [ 562.725623][T11230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.750439][T11230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.987340][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.993845][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.415614][T11235] hpfs: Bad magic ... probably not HPFS [ 563.495919][ T5871] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 563.809854][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 563.867573][ T5871] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 563.950602][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 564.038967][ T5871] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 564.112347][ T5871] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 564.187093][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.232902][ T9395] bridge_slave_1: left allmulticast mode [ 564.249962][ T5871] usb 6-1: config 0 descriptor?? [ 564.282313][ T9395] bridge_slave_1: left promiscuous mode [ 564.314650][ T9395] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.344561][T11243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.450179][ T9395] bridge_slave_0: left allmulticast mode [ 564.456593][T11243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.517189][ T9395] bridge_slave_0: left promiscuous mode [ 564.523119][ T9395] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.680940][T11249] kvm: emulating exchange as write [ 564.736269][ T5871] hdpvr 6-1:0.0: firmware version 0x1e dated q|RC@22[7BD^jvi0 [ 564.736269][ T5871] pY [ 564.960802][T11233] netlink: 'syz.5.1610': attribute type 11 has an invalid length. [ 566.523405][T11270] gfs2: not a GFS2 filesystem [ 567.913596][ T9395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.956075][ T9395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.998921][ T9395] bond0 (unregistering): Released all slaves [ 568.687586][ T5871] hdpvr 6-1:0.0: Could not setup controls [ 568.744790][ T5871] hdpvr 6-1:0.0: registering videodev failed [ 568.870459][ T5871] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -71 [ 569.022787][ T5871] usb 6-1: USB disconnect, device number 8 [ 569.080148][T11295] overlayfs: failed to resolve './file1/file0': -2 [ 570.004959][ T9395] hsr_slave_0: left promiscuous mode [ 570.115923][ T9395] hsr_slave_1: left promiscuous mode [ 570.159312][ T9395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.234438][ T9395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.351823][ T9395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.419106][ T9395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.703427][T11327] ceph: Path missing in source [ 570.717346][ T9395] veth1_macvtap: left promiscuous mode [ 570.788401][ T9395] veth0_macvtap: left promiscuous mode [ 570.830632][ T9395] veth1_vlan: left promiscuous mode [ 570.881138][ T9395] veth0_vlan: left promiscuous mode [ 571.097252][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 571.308460][ T10] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 571.359362][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.419433][ T10] usb 7-1: config 0 descriptor?? [ 571.886476][T11330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.987210][T11330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.652800][ T10] pegasus 7-1:0.0: probe with driver pegasus failed with error -121 [ 572.674072][ T5871] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 572.746151][T11344] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 572.771769][T11344] VFS: Can't find a romfs filesystem on dev rnullb0. [ 572.771769][T11344] [ 572.858409][ T5871] usb 6-1: Using ep0 maxpacket: 32 [ 572.883196][ T5871] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 572.904539][ T5871] usb 6-1: config 0 has no interface number 0 [ 572.942130][ T5871] usb 6-1: config 0 interface 12 has no altsetting 0 [ 572.983491][ T5871] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 573.019008][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.052601][ T5871] usb 6-1: Product: syz [ 573.064443][ T5871] usb 6-1: Manufacturer: syz [ 573.082929][ T5871] usb 6-1: SerialNumber: syz [ 573.107502][ T5871] usb 6-1: config 0 descriptor?? [ 573.435441][T11349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.477546][T11349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.538850][T11349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.587165][T11349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.061955][ T5871] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 576.086928][ T5871] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 576.094259][ T5871] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 576.113981][ T5871] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 576.161992][ T5871] usb 6-1: USB disconnect, device number 9 [ 576.176333][ T9395] team0 (unregistering): Port device team_slave_1 removed [ 576.340189][ T9395] team0 (unregistering): Port device C removed [ 576.657237][T11356] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1640'. [ 576.701312][T11356] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1640'. [ 576.791057][T11357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.869249][T11357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.884580][T11359] netlink: 'syz.5.1641': attribute type 10 has an invalid length. [ 578.419760][T11359] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 578.616947][ T10] usb 7-1: USB disconnect, device number 6 [ 579.825965][T11384] netlink: 'syz.2.1647': attribute type 2 has an invalid length. [ 579.849626][T11384] netlink: 'syz.2.1647': attribute type 1 has an invalid length. [ 579.882659][T11384] netlink: 'syz.2.1647': attribute type 1 has an invalid length. [ 580.607141][T11391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.683170][T11391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.316881][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 581.513894][ T9] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 581.580351][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.642415][T11405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.668620][ T9] usb 7-1: config 0 descriptor?? [ 581.723855][T11405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.817593][T11405] trusted_key: encrypted_key: insufficient parameters specified [ 582.089881][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1655'. [ 582.257440][T11415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1655'. [ 582.331640][T11415] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1655'. [ 582.946812][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 583.221526][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 583.264004][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 583.338142][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 583.432870][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 583.538629][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 583.692098][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 583.760620][ T9395] IPVS: stop unused estimator thread 0... [ 583.801953][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.903153][ T9] pegasus 7-1:0.0: setup Pegasus II specific registers [ 583.937986][T11431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1658'. [ 584.257205][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 584.292515][ T10] usbtmc 6-1:16.0: can't read capabilities [ 584.734112][T11438] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1660'. [ 585.251297][ T9395] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.390526][ T9] pegasus 7-1:0.0: can't locate MII phy, using default [ 585.470667][ T9] pegasus 7-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, 06:17:65:ba:d6:e2 [ 585.587067][ T9] usb 7-1: USB disconnect, device number 7 [ 585.749619][ T1210] usb 6-1: USB disconnect, device number 10 [ 586.332236][T11452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.381434][ T9395] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.411250][T11452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.241165][ T9395] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.407811][T11465] /dev/nullb0: Can't open blockdev [ 587.678524][T11479] Invalid ELF header magic: != ELF [ 588.392768][T11486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.444058][T11486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.727587][ T9395] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.008863][T11495] /dev/rnullb0: Can't open blockdev [ 589.489320][T11502] FAULT_INJECTION: forcing a failure. [ 589.489320][T11502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.631388][T11502] CPU: 0 UID: 0 PID: 11502 Comm: syz.2.1674 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 589.631417][T11502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 589.631430][T11502] Call Trace: [ 589.631438][T11502] [ 589.631447][T11502] dump_stack_lvl+0x189/0x250 [ 589.631475][T11502] ? lockdep_hardirqs_on+0x9c/0x150 [ 589.631498][T11502] ? __pfx_dump_stack_lvl+0x10/0x10 [ 589.631537][T11502] should_fail_ex+0x414/0x560 [ 589.631574][T11502] _copy_to_user+0x31/0xb0 [ 589.631596][T11502] simple_read_from_buffer+0xe1/0x170 [ 589.631624][T11502] proc_fail_nth_read+0x1df/0x250 [ 589.631654][T11502] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 589.631683][T11502] ? rw_verify_area+0x258/0x650 [ 589.631703][T11502] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 589.631731][T11502] vfs_read+0x1fd/0x980 [ 589.631757][T11502] ? __pfx___mutex_lock+0x10/0x10 [ 589.631780][T11502] ? __pfx_vfs_read+0x10/0x10 [ 589.631801][T11502] ? __fget_files+0x2a/0x420 [ 589.631830][T11502] ? __fget_files+0x3a0/0x420 [ 589.631853][T11502] ? __fget_files+0x2a/0x420 [ 589.631886][T11502] ksys_read+0x145/0x250 [ 589.631904][T11502] ? __fget_files+0x3a0/0x420 [ 589.631929][T11502] ? __pfx_ksys_read+0x10/0x10 [ 589.631955][T11502] ? do_syscall_64+0xbe/0x3b0 [ 589.631982][T11502] do_syscall_64+0xfa/0x3b0 [ 589.632002][T11502] ? lockdep_hardirqs_on+0x9c/0x150 [ 589.632023][T11502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.632043][T11502] ? clear_bhb_loop+0x60/0xb0 [ 589.632066][T11502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.632085][T11502] RIP: 0033:0x7effee78d33c [ 589.632103][T11502] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 589.632120][T11502] RSP: 002b:00007effef579030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 589.632146][T11502] RAX: ffffffffffffffda RBX: 00007effee9b5fa0 RCX: 00007effee78d33c [ 589.632161][T11502] RDX: 000000000000000f RSI: 00007effef5790a0 RDI: 0000000000000004 [ 589.632175][T11502] RBP: 00007effef579090 R08: 0000000000000000 R09: 0000000000000000 [ 589.632187][T11502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.632199][T11502] R13: 0000000000000000 R14: 00007effee9b5fa0 R15: 00007ffd3c8355d8 [ 589.632230][T11502] [ 589.862392][ C0] vkms_vblank_simulate: vblank timer overrun [ 590.427030][T11503] 9pnet: p9_errstr2errno: server reported unknown error [ 590.468636][ T9395] bridge_slave_1: left allmulticast mode [ 590.514544][ T9395] bridge_slave_1: left promiscuous mode [ 590.526834][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 590.545189][ T9395] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.310997][T10863] Bluetooth: hci4: command 0x0406 tx timeout [ 592.846381][T11510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.965662][ T9395] bridge_slave_0: left allmulticast mode [ 593.958362][ T9395] bridge_slave_0: left promiscuous mode [ 595.277671][ T9395] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.149001][ T9] usb 7-1: device descriptor read/all, error -110 [ 626.208587][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.227259][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.424445][T11510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.608592][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 650.609728][ T6838] Bluetooth: hci5: command 0x0406 tx timeout [ 686.042612][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.065221][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.681176][ T9] usb 7-1: device descriptor read/64, error -32 [ 689.301525][ T9] usb usb7-port1: attempt power cycle [ 705.226218][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 716.667565][ T5153] Bluetooth: hci0: command tx timeout [ 749.235722][ T31] INFO: task kworker/0:4:5871 blocked for more than 143 seconds. [ 749.235750][ T31] Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 [ 749.235764][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 749.235776][ T31] task:kworker/0:4 state:D stack:20488 pid:5871 tgid:5871 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 749.235835][ T31] Workqueue: events switchdev_deferred_process_work [ 749.235870][ T31] Call Trace: [ 749.235879][ T31] [ 749.235895][ T31] __schedule+0x16f5/0x4d00 [ 749.235935][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 749.235961][ T31] ? schedule+0x165/0x360 [ 749.235987][ T31] ? __pfx___schedule+0x10/0x10 [ 749.236025][ T31] ? schedule+0x91/0x360 [ 749.236050][ T31] schedule+0x165/0x360 [ 749.236073][ T31] schedule_preempt_disabled+0x13/0x30 [ 749.236094][ T31] __mutex_lock+0x724/0xe80 [ 749.236120][ T31] ? __mutex_lock+0x51b/0xe80 [ 749.236149][ T31] ? switchdev_deferred_process_work+0xe/0x20 [ 749.236180][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 749.236215][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 749.236235][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 749.236265][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 749.236299][ T31] switchdev_deferred_process_work+0xe/0x20 [ 749.236324][ T31] process_scheduled_works+0xade/0x17b0 [ 749.236386][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 749.236435][ T31] worker_thread+0x8a0/0xda0 [ 749.236459][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 749.236498][ T31] ? __kthread_parkme+0x7b/0x200 [ 749.236530][ T31] kthread+0x711/0x8a0 [ 749.236559][ T31] ? __pfx_worker_thread+0x10/0x10 [ 749.236580][ T31] ? __pfx_kthread+0x10/0x10 [ 749.236607][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 749.255252][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 749.255284][ T31] ? __pfx_kthread+0x10/0x10 [ 749.255312][ T31] ret_from_fork+0x3fc/0x770 [ 749.255347][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 749.255385][ T31] ? __switch_to_asm+0x39/0x70 [ 749.255410][ T31] ? __switch_to_asm+0x33/0x70 [ 749.255441][ T31] ? __pfx_kthread+0x10/0x10 [ 749.255467][ T31] ret_from_fork_asm+0x1a/0x30 [ 749.255514][ T31] [ 749.255546][ T31] INFO: task kworker/u8:9:10798 blocked for more than 143 seconds. [ 749.255563][ T31] Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 [ 749.255577][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 749.255589][ T31] task:kworker/u8:9 state:D stack:23304 pid:10798 tgid:10798 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 749.255649][ T31] Workqueue: ipv6_addrconf addrconf_dad_work [ 749.255675][ T31] Call Trace: [ 749.255684][ T31] [ 749.255698][ T31] __schedule+0x16f5/0x4d00 [ 749.255721][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 749.255756][ T31] ? __lock_acquire+0xab9/0xd20 [ 749.255788][ T31] ? schedule+0x165/0x360 [ 749.255813][ T31] ? __pfx___schedule+0x10/0x10 [ 749.255852][ T31] ? schedule+0x91/0x360 [ 749.255876][ T31] schedule+0x165/0x360 [ 749.255900][ T31] schedule_preempt_disabled+0x13/0x30 [ 749.255921][ T31] __mutex_lock+0x724/0xe80 [ 749.255946][ T31] ? __mutex_lock+0x51b/0xe80 [ 749.255976][ T31] ? addrconf_dad_work+0x112/0x14b0 [ 749.256003][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 749.256036][ T31] ? look_up_lock_class+0x74/0x170 [ 749.256069][ T31] addrconf_dad_work+0x112/0x14b0 [ 749.256093][ T31] ? __lock_acquire+0xab9/0xd20 [ 749.256130][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 749.256154][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 749.256193][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 749.256212][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 749.256243][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 749.256277][ T31] process_scheduled_works+0xade/0x17b0 [ 749.256339][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 749.256390][ T31] worker_thread+0x8a0/0xda0 [ 749.256415][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 749.256445][ T31] ? __kthread_parkme+0x7b/0x200 [ 749.256483][ T31] kthread+0x711/0x8a0 [ 749.256512][ T31] ? __pfx_worker_thread+0x10/0x10 [ 749.256532][ T31] ? __pfx_kthread+0x10/0x10 [ 749.256560][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 749.256580][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 749.256601][ T31] ? __pfx_kthread+0x10/0x10 [ 749.275203][ T31] ret_from_fork+0x3fc/0x770 [ 749.275251][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 749.275290][ T31] ? __switch_to_asm+0x39/0x70 [ 749.275315][ T31] ? __switch_to_asm+0x33/0x70 [ 749.275339][ T31] ? __pfx_kthread+0x10/0x10 [ 749.275366][ T31] ret_from_fork_asm+0x1a/0x30 [ 749.275408][ T31] [ 749.275435][ T31] INFO: task syz.5.1672:11492 blocked for more than 143 seconds. [ 749.275451][ T31] Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 [ 749.275465][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 749.275483][ T31] task:syz.5.1672 state:D stack:25816 pid:11492 tgid:11491 ppid:10862 task_flags:0x400140 flags:0x00004004 [ 749.275547][ T31] Call Trace: [ 749.275556][ T31] [ 749.275570][ T31] __schedule+0x16f5/0x4d00 [ 749.275604][ T31] ? __lock_acquire+0xab9/0xd20 [ 749.275638][ T31] ? schedule+0x165/0x360 [ 749.275663][ T31] ? __pfx___schedule+0x10/0x10 [ 749.275700][ T31] ? schedule+0x91/0x360 [ 749.275725][ T31] schedule+0x165/0x360 [ 749.275748][ T31] schedule_preempt_disabled+0x13/0x30 [ 749.275769][ T31] __mutex_lock+0x724/0xe80 [ 749.275795][ T31] ? __mutex_lock+0x51b/0xe80 [ 749.275825][ T31] ? __tun_chr_ioctl+0x37a/0x1df0 [ 749.275858][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 749.275904][ T31] __tun_chr_ioctl+0x37a/0x1df0 [ 749.275941][ T31] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 749.275976][ T31] ? __fget_files+0x2a/0x420 [ 749.276002][ T31] ? __fget_files+0x3a0/0x420 [ 749.276025][ T31] ? __fget_files+0x2a/0x420 [ 749.276055][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 749.276085][ T31] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 749.276109][ T31] __se_sys_ioctl+0xfc/0x170 [ 749.276133][ T31] do_syscall_64+0xfa/0x3b0 [ 749.276156][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 749.276179][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.276200][ T31] ? clear_bhb_loop+0x60/0xb0 [ 749.276226][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.276248][ T31] RIP: 0033:0x7f430078e929 [ 749.276267][ T31] RSP: 002b:00007f4301609038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 749.276291][ T31] RAX: ffffffffffffffda RBX: 00007f43009b5fa0 RCX: 00007f430078e929 [ 749.276308][ T31] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 000000000000000c [ 749.276323][ T31] RBP: 00007f4300810b39 R08: 0000000000000000 R09: 0000000000000000 [ 749.276339][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 749.276352][ T31] R13: 0000000000000000 R14: 00007f43009b5fa0 R15: 00007ffce33b7dd8 [ 749.276385][ T31] [ 749.276396][ T31] INFO: task syz.5.1672:11511 blocked for more than 143 seconds. [ 749.276411][ T31] Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 [ 749.276424][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 749.276435][ T31] task:syz.5.1672 state:D stack:27240 pid:11511 tgid:11491 ppid:10862 task_flags:0x400040 flags:0x00004006 [ 749.276504][ T31] Call Trace: [ 749.276513][ T31] [ 749.276527][ T31] __schedule+0x16f5/0x4d00 [ 749.276561][ T31] ? __lock_acquire+0xab9/0xd20 [ 749.276595][ T31] ? schedule+0x165/0x360 [ 749.276620][ T31] ? __pfx___schedule+0x10/0x10 [ 749.295927][ T31] ? schedule+0x91/0x360 [ 749.295964][ T31] schedule+0x165/0x360 [ 749.295988][ T31] schedule_preempt_disabled+0x13/0x30 [ 749.296010][ T31] __mutex_lock+0x724/0xe80 [ 749.296037][ T31] ? __mutex_lock+0x51b/0xe80 [ 749.296071][ T31] ? __tun_chr_ioctl+0x37a/0x1df0 [ 749.296105][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 749.296137][ T31] ? __lock_acquire+0xab9/0xd20 [ 749.296178][ T31] __tun_chr_ioctl+0x37a/0x1df0 [ 749.296216][ T31] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 749.296255][ T31] ? __fget_files+0x2a/0x420 [ 749.296280][ T31] ? __fget_files+0x3a0/0x420 [ 749.296306][ T31] ? __fget_files+0x2a/0x420 [ 749.296335][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 749.296365][ T31] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 749.296395][ T31] __se_sys_ioctl+0xfc/0x170 [ 749.296419][ T31] do_syscall_64+0xfa/0x3b0 [ 749.296443][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 749.296465][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.296494][ T31] ? clear_bhb_loop+0x60/0xb0 [ 749.296521][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.296543][ T31] RIP: 0033:0x7f430078e929 [ 749.296562][ T31] RSP: 002b:00007f43015c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 749.296586][ T31] RAX: ffffffffffffffda RBX: 00007f43009b6160 RCX: 00007f430078e929 [ 749.296604][ T31] RDX: 0000200000000080 RSI: 00000000800454d2 RDI: 000000000000000c [ 749.296620][ T31] RBP: 00007f4300810b39 R08: 0000000000000000 R09: 0000000000000000 [ 749.315997][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 749.316019][ T31] R13: 0000000000000000 R14: 00007f43009b6160 R15: 00007ffce33b7dd8 [ 749.316054][ T31] [ 749.316077][ T31] [ 749.316077][ T31] Showing all locks held in the system: [ 749.316088][ T31] 2 locks held by kthreadd/2: [ 749.316104][ T31] 7 locks held by kworker/0:0/9: [ 749.316117][ T31] 3 locks held by kworker/0:1/10: [ 749.316129][ T31] #0: ffff88801a882148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 749.316201][ T31] #1: ffffc900000f7bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 749.316265][ T31] #2: ffffffff8f72a708 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf00 [ 749.316323][ T31] 2 locks held by kworker/u8:1/13: [ 749.316335][ T31] #0: ffff88801a889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 749.316400][ T31] #1: ffffc90000127bc0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 749.316466][ T31] 1 lock held by khungtaskd/31: [ 749.316485][ T31] #0: ffffffff8e33bf20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 749.316541][ T31] 3 locks held by kworker/u8:2/36: [ 749.316553][ T31] #0: ffff88801a889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 749.316618][ T31] #1: ffffc90000ac7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 749.334925][ T31] #2: ffffffff8f72a708 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 749.334989][ T31] 1 lock held by khugepaged/38: [ 749.335003][ T31] #0: ffffffff8e402d68 (lock#3){+.+.}-{4:4}, at: __lru_add_drain_all+0x66/0x5e0 [ 749.335071][ T31] 3 locks held by kworker/u8:3/49: [ 749.335086][ T31] 3 locks held by kworker/u8:4/59: [ 749.335105][ T31] 3 locks held by kworker/u8:5/1083: [ 749.335119][ T31] 4 locks held by kworker/0:2/1210: [ 749.335133][ T31] 2 locks held by kworker/1:2/2153: [ 749.335159][ T31] 2 locks held by kworker/R-bat_e/3400: [ 749.335173][ T31] 3 locks held by kworker/u8:7/3548: [ 749.335186][ T31] 3 locks held by kworker/u8:8/5008: [ 749.335201][ T31] 1 lock held by klogd/5192: [ 749.335213][ T31] 2 locks held by udevd/5203: [ 749.335227][ T31] 1 lock held by crond/5575: [ 749.335239][ T31] 2 locks held by getty/5594: [ 749.335252][ T31] #0: ffff888034e660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 749.335307][ T31] #1: ffffc9000331b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 749.335367][ T31] 4 locks held by syz-executor/5835: [ 749.335382][ T31] 3 locks held by kworker/0:4/5871: [ 749.335395][ T31] #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 749.335460][ T31] #1: ffffc900041f7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 749.335530][ T31] #2: ffffffff8f72a708 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 749.335593][ T31] 3 locks held by kworker/1:7/5923: [ 749.335606][ T31] #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 749.335669][ T31] #1: ffffc900044d7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 749.335731][ T31] #2: ffffffff8e341a38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 749.335790][ T31] 2 locks held by kworker/1:9/5925: [ 749.335804][ T31] 5 locks held by kworker/u9:6/6838: [ 749.335816][ T31] #0: ffff888056f65148 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 749.335885][ T31] #1: ffffc9000f857bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 749.335949][ T31] #2: ffff888031218dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 749.336011][ T31] #3: ffff8880312180b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1eb/0xdf0 [ 749.336067][ T31] #4: ffffffff8e341a38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 749.336124][ T31] 4 locks held by kworker/u8:0/9395: [ 749.336137][ T31] #0: ffff88801b6fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 749.336201][ T31] #1: ffffc9000c1cfbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 749.336265][ T31] #2: ffffffff8f71da50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 749.336323][ T31] #3: ffffffff8f72a708 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 749.336382][ T31] 3 locks held by kworker/u8:6/10739: [ 749.336397][ T31] 3 locks held by kworker/u8:9/10798: [ 749.336410][ T31] #0: ffff88814cdf0948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 749.336485][ T31] #1: ffffc90005247bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0