last executing test programs: 5.841467274s ago: executing program 1 (id=936): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x4, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x18292, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) read$FUSE(r0, &(0x7f0000006580)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000043c0)="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", 0x2000, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x78, 0x0, 0x401, {0x1, 0x1, 0x0, {0xffffffffffffffff, 0x0, 0x8, 0x0, 0x7, 0x200000000001, 0x1000, 0x0, 0x7fff, 0x8000, 0x0, r2, 0xee00, 0xb099, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETINFO(0x2, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, r2, &(0x7f00000001c0)) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x18420, &(0x7f00000000c0)={[{@mode={'mode', 0x3d, 0x101}}], [{@subj_role={'subj_role', 0x3d, '\x80*^\']:u\xb9,'}}]}) 5.762231757s ago: executing program 1 (id=937): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1e8, r1, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x900}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NODE={0x17c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xe8, 0x3, "47600212d4b51c101f39e422423f7ee2df0d6a2e3d54d732ba572e4fb109052fedc1df24309c1e7345291cbe20c8762dc80b6b787691c5213d0a30b394b1ec6787b2bdf1e07c26b975e29348551a7c9fce18360fdac515e8d96b6861439f138d5281edf358cd5de1e4c2452445acaf38950cdaf5bc10fb9277ba577d2170e2c618db9e4e013caab4774f9ea5ffcfba511390913a1dcd2f059859baba4e2e1636ca24ae5551694d8307d1384fa80ffef71877749ff4ebcb6384ea2de721e498160e9c36cdbb065630cd573a0b379ff517facdbadfd8822d62e3b857bfc2f1c3d22c0cb60c"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "88e7298841c28fd2047b1819a2a516a890bd78346e2f16a81ab5551d"}}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "6868372ec05e3585f7b2f709a72599cd1d7d88c7492ebdad161201"}}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x810}, 0x4) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x346008}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r2, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "664aaec22a96a32ea4a18b4cb9"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x8041}, 0x40002) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000004c0), &(0x7f0000000500)=0xc) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl2\x00', r5, 0x29, 0x80, 0x8, 0x1000, 0x1e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x7, 0x800, 0xa}}) (async) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r2, 0x8ddf757158283c2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x8c, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gre0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:etc_runtime_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bond\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x20000020) r7 = socket$inet_sctp(0x2, 0x5, 0x84) (async) pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) newfstatat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setreuid(r10, 0xffffffffffffffff) sendmsg$netlink(r8, &(0x7f0000001080)={&(0x7f0000000a00)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001000)=[{&(0x7f0000000a40)={0x114, 0x14, 0x200, 0x70bd25, 0x25dfdbfd, "", [@typed={0x4, 0x33}, @generic="45403e2da005bdb3fbf9f87633cd1682dce7eb6f550c2f38c6d873610472931f2c6369aeab8e2ddf5a97aad79a2d77937b8fbb7d2e6a4d0d82c8aaf5c77e092291406eb03c0dc5676bf2a1d1aa614cb0638fbe56bf86f2f289b1f649a531b4a96431c4889c72ef74b4f4fda7289186a3bdb6a2910596720c596f444940cdc65d5c2575b711803438b11c66d36ccc69f705fc965692998cd3aac986e2fa0837ac5dd5f82691f304a77b7c0f231a3701138b460e33d010c9ce862037214a057d0368963c86e9eae9207e3294965ff0b0068e34b787f6c34c071ae15c42f1317273630544170a69e7d6a15a8f3e30e7591c6182c9c2e43ee85dc4bc7f929a07f0"]}, 0x114}, {&(0x7f0000000b80)={0x84, 0x42, 0x100, 0x70bd25, 0x25dfdbfe, "", [@generic="633923ec03247a04b51eeeb77411cf68d2251b044a1b56e0e51d547d59d187d231b9b29e76105fafb0f072d939d21642ecc5a4673ef1ad0bc844cfcdde08ff2753027d77ed12ebfb20daa43e3e68786ffac58f0fb2b2229f712002d1e529f4b86169a274aa44504d4bc101", @typed={0x5, 0xac, 0x0, 0x0, @str='\x00'}]}, 0x84}, {&(0x7f0000000c40)={0x24, 0x2b, 0x1, 0x70bd28, 0x25dfdbfc, "", [@nested={0x14, 0x54, 0x0, 0x1, [@nested={0x4, 0x65}, @typed={0xc, 0x97, 0x0, 0x0, @u64=0x6e}]}]}, 0x24}, {&(0x7f0000000c80)={0x370, 0x1e, 0x1, 0x70bd25, 0x25dfdbff, "", [@nested={0xb0, 0x83, 0x0, 0x1, [@generic="8a1b929efd8a003531d4334003dcc6368d3229dc8f8bb9fe7de2d28e2c7dda06e80b167199b90544b8430d4585990d1be4bd1585b38c3634b3c4c69faaaa3846544b", @generic="446b0ccb8a4f0873ca984c106e998548d97f1254708dcb621a39eba581fb12e54fbbf0ea97a80facb0b4eb5e5d254d385e6acce21da654bcef0c4acd760c4e7a6461b9af3590d3ef812c0cfb43123f0a73d3e338e4ee", @typed={0x11, 0x36, 0x0, 0x0, @str='team_slave_0\x00'}]}, @generic='(', @generic="d7be7d410cf378124ad6d9d84b653c801f7006cb103fb30dc6ef5f806e19dda03a114ae985e1703f3b8cd71147c03f886e2dd3ebe649d545f51c37560bcc606487502b13f695a0fd5580cc3a79061b784d463d433c5310f518fd8154b31d7aab65971c01f29672b7bd1d29245af8cb2491198c9519eeb604d995da3398bc632afd47e40c1d0b88d04e762c5b3b67ab23eefdded0eeb8fd75a80587086ef5c6e6e5e01ee76d51e9e159298a0812d214f5", @nested={0x74, 0x3c, 0x0, 0x1, [@generic="69e08e23623cce89265324ba9512d02ab8a17c4bddc14a2dd29f0839ab9ed845ed30eaca8aa74beb34ea69e82e4a00e1dbbdebb5ec79dd8915d0fd89563dd55ef91af7ea317293e95e7a75a74db681ed2493105516fce6b97bee3ea15a898cfbebd75d82", @nested={0x4, 0x5}, @nested={0x4, 0xac}, @nested={0x4, 0x57}]}, @generic="ba6018c104bbf99572feec2c1ff8eec7814304e6ba173c7951fefaf87498c654b81469e18c112bed0a17be2ff0c0d8fc7ac07e5b96b3cdfc0ffa2b8f85fadad4085138af5cf6dd0d1949ab1f64e1a4b5f3cf1498e174b667909aba5f1eaeecd2b000ea2d2f32834bf8105885e36b1e1c9e251c225d05503ea0043dd1042b32967d14bfae851f3dce4c74f6ffbc1c4212416a6169402f20ec0f75b602ff69f7", @nested={0x8, 0x13f, 0x0, 0x1, [@nested={0x4, 0x9c}]}, @generic="4df1495771fec5f8efdd855dc8eb7177c1047b1509d0802d84d4f5228453fd6b6d4b81b95d8d7567b29c9994925d4995d6c861e3abfd54b8e86ffd31f09fbcc6afccff77ddacfe26d0eb9d82624237fc8ad5abde065193389111e435e12f05e36ccb22d6aaaa6005e240948edac09263a2b6d11d6bfe40a80508c6da58400d8045caab52d07ad946b96db9fb0b33a7fb8e3b9769586270e123aa4d4654e6b302a96d7dd0fc4b77d73955f12595641cedbd8208e7019c61eb40e2a518e7ae84e5a0c5a475efa2e55eb58e56e33a4b8160490ac596575e9a45214c82ed5589b9b7f932"]}, 0x370}], 0x4, &(0x7f0000001040)=[@rights={{0x20, 0x1, 0x1, [r4, r0, r0, r7]}}], 0x20, 0x4000}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x58, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@key_params=[@NL80211_ATTR_KEY_SEQ={0x4}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "8e4e7913540dc12d0071a625"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d018801a6bca8c08ad5e125acd"}]]}, 0x58}, 0x1, 0x0, 0x0, 0x20004005}, 0x4000) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001240), r0) sendmsg$DEVLINK_CMD_PORT_GET(r9, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x14, r11, 0x300, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8800) (async) r12 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000001340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x65, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x10, 0x170, 0x3, [{{0x9, 0x4, 0x0, 0xa, 0x1, 0x3, 0x1, 0x2, 0x6b, {0x9, 0x21, 0x4, 0xd4, 0x1, {0x22, 0xfc0}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x5, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x240, 0xf5, 0x1, 0x2}}]}}}]}}]}}, &(0x7f0000001440)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x310, 0x81, 0x4, 0x9, 0x20, 0xfc}, 0x3b, &(0x7f00000013c0)={0x5, 0xf, 0x3b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x15, 0xa, 0x5, 0x6, 0x8}, @ssp_cap={0x20, 0x10, 0xa, 0xb, 0x5, 0x3, 0xf00f, 0x7ff, [0xff3f00, 0x3fcf, 0xf, 0xffc0c0, 0xffc0de]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x23, 0xa1, 0x8, 0x8000, 0x81}]}, 0x1, [{0x1b, &(0x7f0000001400)=@string={0x1b, 0x3, "fc4bf10e6cace66a7becff23f498e4005fbd6065e6a92d9cb4"}}]}) syz_usb_control_io$hid(r12, &(0x7f0000001680)={0x24, &(0x7f0000001480)={0x20, 0x2, 0x8a, {0x8a, 0x23, "4feb76b06665bfe8849ccee0dca903e9f745c2b88ef902cf1b8d503f2ef723f2b04d77c7030465ed9199f262cf346d470c64720b8337b9dc23c98b81c1e2e788207439dce3c46b484fcfb4affdf7773c9ce6a8a493309ef6ffa2fdf5fc07125c47914c61fafb7edc783d6176385d81bd2cdc17b276b1dd4d5a7c5355434b37da954b0e8aef2f70dd"}}, &(0x7f0000001540)={0x0, 0x3, 0x87, @string={0x87, 0x3, "0f071c4448414d14c069c7a5b5e6b97aac2fcc5c14dfbff3d123506e32891b4ba6a43a4c1ee93839d62b08793c9a10f59398906da3fe46c58ea3adedfcca48d812d6f3ea4ce97d54433488d3ff72b798b5eabd3e0e8186042b13cfbb2921965110b626920857101a1fb74923430b23e7f9f5154f3f3df1e9ebe1c6c3f04593525205a94a45"}}, &(0x7f0000001600)={0x0, 0x22, 0x17, {[@main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0xa, "4e51c937"}, @main=@item_012={0x2, 0x0, 0xa, "88a0"}, @main=@item_012={0x0, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x6, "fad35719"}, @local=@item_012={0x0, 0x2, 0x4}, @global=@item_4={0x3, 0x1, 0x2, "f7b76d12"}, @global=@item_012={0x0, 0x1, 0x1}, @local=@item_012={0x0, 0x2, 0x3}]}}, &(0x7f0000001640)={0x0, 0x21, 0x9, {0x9, 0x21, 0xcca, 0xd, 0x1, {0x22, 0x7fff}}}}, &(0x7f00000018c0)={0x2c, &(0x7f00000016c0)={0x0, 0x0, 0x7b, "4526f3a6fcdb15eb378d967d0243318aa5bd1e9bbc49bc6d7dbea93405622d6c2148952258941332da838144212bd265db3ff33ff375f280a3ec9c68532dead6ef9c13e2c7168c86603823ce40bcf57e59ee66653c87dd5483f0d404bd7c84f65480e60f3262ede53252ec882b54781f49ab84aa40a1e16e88642b"}, &(0x7f0000001780)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000017c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001800)={0x20, 0x1, 0x41, "aa86a54d6759d8bbd796da8d4b67a43f34bc45230c613ffc749762b1f9ee8694319de4093b3cd50aa7b077f445f600513ec7c9d939c8e30d16f4e87894a5495a00"}, &(0x7f0000001880)={0x20, 0x3, 0x1, 0x2}}) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000001900)=0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000001940)={0x0, 0x90, "0bb4e136309472ff4b44e7ec4f6afdb6443a4af5fb0aaa3dc0ae294d25add5ce45f08035ffd59a64760940718b02cae2a4635ed362ce22453df1f334e4552fdbd7f64e06ee0988ba68254bb50246242f5900a5f2235d2009222931a19fd0486b3919eeac8e869921e710afb74f82f10530841c7661f592a3b92eef0fc4e0d4333bb1181aa9f95ce61d4495fae6176092"}, &(0x7f0000001a00)=0x98) setsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000001a40)={r13, 0x7}, 0x8) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r9, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x4c, r14, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x343}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x8010) (async) syz_open_dev$hiddev(&(0x7f0000001c00), 0x8, 0x4c980) (async, rerun: 32) lstat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)) (rerun: 32) 4.91443445s ago: executing program 1 (id=946): ptrace$poke(0x4, 0xffffffffffffffff, &(0x7f0000000000), 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x2, &(0x7f0000000080)={0x0, 0xacf, 0x2, 0x3, 0x2d8}, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a5c000000060a0104000000000000000002000000300004802c0001800c00010062697477697365001c0002800800034040000000080001400000000008000240000000000900010073797a30000000000900020073797a32"], 0x84}}, 0x0) 4.837173994s ago: executing program 2 (id=947): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) ioctl$EVIOCGBITSW(r0, 0x40044591, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = getpgrp(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r3, @ANYRES64=r3, @ANYRESOCT=r3, @ANYRESHEX=0x0], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x1, 0x0, &(0x7f0000000040)) r5 = syz_open_procfs(r2, &(0x7f0000000040)='net/rfcomm\x00') r6 = syz_open_dev$radio(&(0x7f0000002b40), 0x3, 0x2) ioctl$VIDIOC_QUERYMENU(r6, 0xc02c5625, &(0x7f00000000c0)={0x1, 0xfffffffe, @name="8edf9da0e31b4cc2cbbf446d2a250e9860d8ffe7f3ae38defa6a66091640ff60"}) pread64(r5, &(0x7f0000000140)=""/15, 0xf, 0x4) sendto$inet6(r1, &(0x7f0000000240)="c10e000018001f06b9409b0dffff110d0207be030205060506100a261e3e80d7dcffd200fac8388827a685a168d9a2906ec2891dca4c6acc01000000000000004565360c648dcaaf6c26c291214549932f460c89b6ecfcfe3959547f509058ba86c902fc3b10004a320c0400160012000a0000000000cc88f3987318ddfada4adbafd53276b4cf1a0a88c5923074d64ed5cfad125866772ba32082bd32a591c39afe78561b8dff9dc7f9", 0xaa, 0x10000000, 0x0, 0x0) 4.825922816s ago: executing program 3 (id=948): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000091, &(0x7f00000005c0)={0xa, 0x4e20, 0xa3, @private0, 0x9}, 0x1c) r0 = socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000280), 0x2100, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r5 = socket$igmp(0x2, 0x3, 0x2) recvfrom$inet(r5, 0x0, 0x0, 0x2000, 0x0, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000480)=""/197) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000340)=[r6], &(0x7f0000000280), 0x0, 0x0, 0x0, 0x7f}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x5, 0xe, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6b, 0x400], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e22, 0x10001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r11, 0x4b48, &(0x7f0000003d40)=""/175) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000), &(0x7f0000000100), 0x2, 0x2) r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r12, 0x40946400, &(0x7f00000002c0)={'pcl730\x00', [0x9, 0x400, 0x80000000, 0x3, 0x4e5a, 0x128b, 0x401, 0x6, 0x7, 0xc, 0x5, 0x4, 0x3, 0x7a, 0xd, 0x8, 0x2, 0x0, 0xfff, 0x7fff, 0x8, 0x20000000, 0x26c, 0x75c7, 0xfffffffe, 0x7fff, 0x8, 0xffffffff, 0x401, 0x8, 0x5, 0x67]}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a00010200000000000000000a"], 0x164}}, 0x0) 4.734623832s ago: executing program 1 (id=949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r1, 0x400, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x800, @mcast1, 0x7}, 0x1c) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="20311100000008"], 0x0, 0x0, 0x0, 0x0, 0x0}) 4.707854772s ago: executing program 2 (id=950): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000005200016d"], 0x18}}, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000080)={0x8, "695cf95fd3a48e4c830818f710906012259654968f0ade820925940df896cc62"}) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000001240)={0x0, 0x0, {0x0, 0x1, 0x20000000, 0x0, 0x1}, 0x5e}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r4, &(0x7f00000001c0)=""/4068, 0xfe4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x44) sendmsg$nl_generic(r5, &(0x7f0000000740)={&(0x7f0000000100), 0xc, &(0x7f0000000700)={&(0x7f0000000180)={0x54c, 0x3e, 0x1, 0x70bd27, 0x25dfdbfb, {0x18}, [@generic="5681e893e462e7c04a142608adbd96d74d6d5f3dead0d39497f4150bbd9e4d9cac77f67f32b0dce8d936a3741239a3fe2111ac6b5c4442aee6f668f4bf82807e511ac1e2f00240c97905527d064b22c41741dbd80e95c45baf7082372ee56fefe0f21a53b01a52ab128faa48", @nested={0xa7, 0x30b1, 0x0, 0x1, [@generic="447b4d9382c353cc0c21d31dd0409e73fb880c4d1a2c7a61d82b3ba0e7f1cd8430f5e9fd9f5e080cd1a5846fca27ec62a47a355e149329f7a2eadad18827af9e333ffd092b68da3aae56e2913993d9b95ce7c2936334df3fe786bd74661e5507d8e5453668f17e700ff1c2315090e64cba200e619098e45516cb826f12d766ee84dcc28f522cc0bde32a684d3474113989c8baf100c9c998bfdec7d294b95ee4b1f8a6"]}, @nested={0x1af, 0xb3, 0x0, 0x1, [@nested={0x4, 0x21}, @nested={0x4, 0x43}, @typed={0xe7, 0x25, 0x0, 0x0, @binary="f806f8a5c0132cfe783d5b8f5e095e8aeb2711ae4e87eb6842ddadff72e0fdf608b24ccc87affd9daf5acc563761512d83230f55147f2d255119a2faf135cc4f917ea4ef26cb5bd0eabb5c527d2ddda61181f9eaa71d166f85306d1fa70fd7e9ad053bda7863cb2d50236811caacdacc1efd8fdca35fe2abb4776ffaf86ca1d1416e9072fcba6549e6353d382ee76fcc7e76942f8e99047795833bb2495b14cb081d35b2756a03d1940f4784b37af5f1619eff350b52c26a992a2611e0065dc7bb6c717ef8acb15667fb8519106c6962cabfa6f27a2a1786eb974eabaec5d8e91569c2"}, @typed={0x14, 0xc2, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @typed={0x8, 0x99, 0x0, 0x0, @fd=r8}, @generic="36d759874e991e5b7f0037f3b8bd102d9aa280a9ccfe388ce677e5fe416971044f4e94cf7ab258c1db0c478197b973b54ba1ac3f87e0280c244af00ed958c950a2bd535dd2f83ce2721ff5b2a54d8d7fc6ca9f1f8f8b92b5763fdfceb1feba8e945881e8df883a75f567fa8171d2ef2b4415bcbb24f5c00d315608085a086f86e2c70682e24aba14654fc1bfdb9a3b2898fbfe073352d3730fa33a94b74edb"]}, @nested={0x75, 0x357c, 0x0, 0x1, [@generic="7aa96187ec05bede1753a34523beb1813955af09566d7254c311cd1bdfc2fbaff9a5cf49e3a6210e4bae9850c17dba0b2f8e4be270518310bd52e15e841c42a82ca0980ce893b45d12f263df63860234e08c53ec93ac265336f9f67a83e7cfff1656c4e5bfd8f8f39a", @typed={0x8, 0xd1, 0x0, 0x0, @fd=r0}]}, @typed={0x8, 0x12f, 0x0, 0x0, @fd}, @nested={0x1ec, 0x12f, 0x0, 0x1, [@generic="62a6806ce3b7533bcace01ac5ae4a5244fccf525854b838879176ca73e893065d00c36051250e712b868d6fd5fb560c60e09f572a69e3ebdc2baace2ef5090f8edb25a8688e6159764c1f129ff602a9996bde166ea7125d69e37d97f961d01c3330b4b5f6329a8865625b877bd2d4a31317c7efc633bd9f76a8b6d66340fab6e2142f60d", @generic="c49953e010d35a269fd9a9249e1e269824fdf8ae2463a8a1def3eea5c2c6a38ab2607cf0178250b57b9a7795f0c4b0a819f18dc0a1d951ef74e419ce6d7e5bc6a9222cf5af0ba4d9d82bfad202fcd1df90edaa0ddde2c95b140af355fb04bd7696227669dd71d52d4e77122bfa4d5d", @generic="13f96e8c99b9459e87d706e31a4692284126dc2395fa7010c60bbc8883ed2b94521c9acab563a65b4385b236b2e6260823e36adfca6fa74acf4e9f77179f35a788e3885521906c0e90a1aee65ceae06902418c0afb74dbe9fc8cb34fd889d2ebc293ea66e2d3498f49622ef46938ef76bec664124c9340a301bc4a19f2be00073f0540b23222b22cb2ed50ec8f80efb325af622642400176299cff7c84a537ca1b352bcae7bf76619884bed947bf9422052b00f8d6b8451887a5f49d2dfc208e34da3ab7fe0ac2ff9f6e30f97aaca3145b086a02603ef432c3302211c47f845ba4664a5f15fb474a7fbee4cf17b1a18b9ca4b2ad2b"]}, @typed={0x8, 0xe8, 0x0, 0x0, @ipv4=@empty}]}, 0x54c}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000040)={0x0, {0x4, 0xec26}}) 4.592628721s ago: executing program 2 (id=951): socket$igmp(0x2, 0x3, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2c, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x6}}, {0x8, 0x2, @local}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) (async) syz_usb_connect(0x0, 0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000030902200001000000000904000000ef"], 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) write$FUSE_STATFS(r3, &(0x7f0000000200)={0x60, 0x0, 0x0, {{0x9, 0x5, 0x5, 0x2, 0x400069a, 0xae, 0x2400000, 0x800}}}, 0xfffffec2) (async) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) write$FUSE_STATFS(r4, &(0x7f0000000200)={0x60, 0x0, 0x0, {{0x9, 0x5, 0x40000005, 0x2, 0x400069a, 0x4, 0x2400000, 0x800}}}, 0x60) (async, rerun: 32) r5 = socket(0x2, 0x80805, 0x0) (rerun: 32) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x3}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000280)={r2, 0x82d8, 0xed, "c3aa8f6b9752177014ff46768ffb5d450ff58cf44cd71a52845ea9e211a080d178b0a2e6a8f3f212e36b930e9acfab751512029723226d066c5a55e1afbee3834b36bb6b7b1f6f20f0b1e69a2728b9c4bda458437feda28b36ec047afd0532fd3953e15ffd89170514f31d671c845bc0567df749614d7e008acff79e2cc47f104983a6b8a939c41cb92d191d09f014d61f45819aa0323ece4eb74f0ea84caa3b351290b0362f53b9388404f4453941a899697dc6972bc50e0349e7ad4ce8abafa2b64772d8b5e2a8dc23a41a4a04e67d68a084a0e1003a1334c3abaa550da035b6ce11521b9127b8aaaf2e17ee"}, 0xf5) (async) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1000000000000600100100000a000000"], 0x10}, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r10, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x448d0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6, {0x400}}, './file0\x00'}) setsockopt$bt_hci_HCI_FILTER(r11, 0x0, 0x2, &(0x7f0000000140)={0xffffffff, [0x6, 0x400], 0xe509}, 0x10) (async, rerun: 64) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') (rerun: 64) getdents(r12, &(0x7f0000001fc0)=""/184, 0xb8) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00'}) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000080)=ANY=[]) ioctl$HIDIOCGREPORTINFO(r7, 0xc00c4809, &(0x7f0000000000)={0x1, 0x100, 0x163}) 4.519071445s ago: executing program 3 (id=952): r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x44101) r1 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) fcntl$addseals(r1, 0x409, 0x4) ftruncate(r1, 0x8000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0c2100002d000b0000800000000000000200000008000300050000000c00010000000000010000000000008028ed7e12dd3a7de2eca441d236903a5f6a8fa84aae860e7fd342c6e8206ac3fa1583932f6339fdff7a3cfe111cf1f563665c3e4d46bb2cee06b442c3f045f56597ddf98211a80eb4f3772d401ee74caf6a98a5b60350517479c96878eb08b3f7616ae8f85133857d779d3ead3a36ba33505954dc37e5f06ef2d41062a03beb41ca5bdb7ec342a6f3fb7eb86502c6374f99d8534949226e91948aa6b635", @ANYRESHEX=r1], 0x210c}}, 0x8000) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_matches\x00') close(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000180)={0x9f0000, 0x0, 0x100, r3, 0x0, 0x0}) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000240)={0x40000000, 0x3, 0x8}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) unshare(0x62040200) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="44000000140001000000f670cc3700000200000004000000140004000000000600000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x800) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) bind$bt_sco(r4, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r4, 0x1) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r8, &(0x7f0000000000), 0x8) listen(r8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.926578652s ago: executing program 3 (id=957): r0 = syz_open_dev$radio(&(0x7f0000000680), 0x3, 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r2, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x20, 0x1, 0x0, r1, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000480), 0x111, 0xb}}, 0x20) r4 = eventfd(0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x50}}, 0x0) io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x8, r0, &(0x7f0000000000)="f2fb0fc83260464932198b13eeb5e29f18e05f4129754d16f31d9e85f4ed395648936371acd1a40c535fd9d69ab73e68cb25840cf926773418c22d13e1e76700cefde2e01365b5264d2a636d3d9cd595298438d9db0737c33d4f75ee60d18b2ec1ba53071b9b3e9cbb0a2a4c4662df6455eeb18f9a4563ec965b94b1ca7bd3b272c292047c4951d3a2d4a382ff9524", 0x8f, 0x9, 0x0, 0x0, r4}, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='jffs2\x00', 0x2014800, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000340)={&(0x7f0000000140)=[{0x76de, 0x0, 0x0, 0x0}, {0x36de, 0x4801, 0x0, 0x0}], 0x2}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)={0x6, 0x0, [{0xf000, 0x5f, &(0x7f0000000200)=""/95}, {0x5000, 0x14, &(0x7f0000000280)=""/20}, {0x4000, 0xa2, &(0x7f00000003c0)=""/162}, {0xd000, 0x17, &(0x7f00000002c0)=""/23}, {0x4000, 0xa6, &(0x7f0000000500)=""/166}, {0x1000, 0xa6, &(0x7f00000005c0)=""/166}]}) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000001c0)={0xfffffffe, 0x3, 0x3}) 3.309648481s ago: executing program 2 (id=959): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000208}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x17}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4) (async, rerun: 64) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd2d, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 3.194256124s ago: executing program 1 (id=960): r0 = syz_usb_connect(0x2, 0x8f, &(0x7f0000001140)={{0x12, 0x1, 0x110, 0x1e, 0x9a, 0x69, 0x8, 0x1608, 0x10, 0x4f88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x4, 0x3, 0x7a, 0x26, 0xc9, 0x5b, [@uac_control={{0xa, 0x24, 0x1, 0xa, 0x6}, [@extension_unit={0xc, 0x24, 0x8, 0x5, 0x6, 0x7, "0d0a329ce2"}]}], [{{0x9, 0x5, 0x86, 0x10, 0x400, 0xf4, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2f, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x81, 0x3, 0xff}}, {{0x9, 0x5, 0x9, 0x1b, 0x8, 0xc, 0x7, 0x80}}]}}, {{0x9, 0x4, 0xd1, 0x1, 0x4, 0xff, 0x1, 0x12, 0x3, [], [{{0x9, 0x5, 0x9, 0x0, 0x0, 0x3, 0x0, 0x4}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0xf7, 0x81, 0x6}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x40, 0x4, [@generic={0x7, 0x5, "a6c6415a9f"}]}}, {{0x9, 0x5, 0x85, 0x3, 0x40, 0xb, 0x2, 0xb}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000c80)={0x14, 0x0, &(0x7f0000000c00)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async) syz_usb_control_io$uac1(r0, &(0x7f0000000c80)={0x14, 0x0, &(0x7f0000000c00)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x27, @string={0x27, 0x3, "7b8c9576ccd127a7211a6dd77413be7a102a2ecc29d39c0a8a20e4025f21002516fb378f3e"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000100)={0x40, 0x6, 0x34, {0x34, 0x5, "7a3cea1e9ba6ee65001518fc142551a5096870ead28c6253d6270cd09115fbd8c2f42b25db8ed86e5a5e19bac87fa9500ce5"}}, &(0x7f0000000200)={0x0, 0x3, 0x8d, @string={0x8d, 0x3, "dfbb26aec0c561b60ea6e71741bc6e6993ed24c6bc58f6defbd5da86120464a1956901630ac2e336a734942a29d8175eea3e39d8cd51b6f4cba4e6279158209d68ba5395abc8f4cedb2a589325eeb873546fb52214c36246c8770db1569c289860a9982188898a038a1a3ec74fc950a481386df6a7d426b8c4630be649fe7d95d0ca9b11270e1cfddb25ab"}}}, &(0x7f0000000540)={0x44, &(0x7f0000000300)={0x20, 0x12, 0x47, "f9a690f9ae72724a44cd0e5f88636fb143e6a15fa9f061c0a25f5dda7ae7fb92fd316bffe5dcd2e6d2be58797e375d19917b5148a9242fff9cc662d39ffc0eea64718acf36634d"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xa5}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000400)={0x20, 0x81, 0x2, "9a95"}, &(0x7f0000000440)={0x20, 0x82, 0x1, "1d"}, &(0x7f0000000480)={0x20, 0x83, 0x1, 'L'}, &(0x7f00000004c0)={0x20, 0x84, 0x3, "07d1db"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "f73486"}}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x2, 0x3, 0x44b}}}, 0x0) (async) syz_usb_control_io$printer(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x2, 0x3, 0x44b}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f0000000700)={0x40, 0x15, 0x18, "b20c9e58a948ab959525376ab31ea91ba6502416daeef10c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f0000000700)={0x40, 0x15, 0x18, "b20c9e58a948ab959525376ab31ea91ba6502416daeef10c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.06915545s ago: executing program 2 (id=962): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x20, 0x30, 0x2c, {0x2c, 0xc, "1d85a12277461a6238daf55ed2ae1cc69419379d28b2502c02faa0e81d48a5a4e202599801d989d3fe20"}}, &(0x7f00000002c0)={0x0, 0x3, 0xc5, @string={0xc5, 0x3, "c8e6c3858bdc0919a3ec808aba40dad4898036f227eab27e4e99bece99cb61f3276d041cec485333339bf4054b9494d66e9fadb2c723ec28d8c82bfe573b5bf606c3efe6c6f89d5d997bd72ba97393cf3f1102ec2000526977f6d5087eb1179419fbcdeab0ea2cb01061fe6dd2425a8f6f42d7b642e98ee481c24567407b7b6e38ce4be2042746656b5395c3911fbe6134ae3d94ea6a7d7871ebbc8b63c8d5f74bbb88f51d012d401e9f1c4472f174bfe962971a213f9b767075f0302b35b6578f5616"}}, &(0x7f00000003c0)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x3, 0xeef}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x2, 0x3, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1, 0x2}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x18, 0x40, 0x1, "b3404fd7", "a3745ae9"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x1, 0x1, 0x1, 0x4c, 0x9}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000500)={0x40, 0x17, 0x74, "42953927caa7045398f484ac69fdf932d2d8e473ed212f60fbfdaac70a97aace7b55d0e062b8b9de9fed44a572b4c31901f19fd56e3eb034f337ebbb8a011d207377569927bddd9d4800ca6640b39e67d8f1e33d3de47e562ecb19bba926ee7651db42a346cbd3c6f0d5724b1c0926d450363734"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xf}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x400, 0x24}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000740)={0x40, 0xb, 0x2, "3fbf"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000880)={0x40, 0x13, 0x6}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "f159"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x40, 0x15, 0xc, "71aeec20b3b55a5c83ffbb0e"}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f000021f000/0x4000)=nil, 0x4000, 0x4) r3 = dup(r2) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000b00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc09b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xff, 0x80, 0xfa, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x7ff, 0xa3, 0x1, {0x22, 0xd99}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x40, 0x81, 0x4f}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x8, 0xe, 0x80}}]}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x250, 0xbb, 0x2, 0x7f, 0x10, 0x1}, 0x5, &(0x7f0000000b80)={0x5, 0xf, 0x5}, 0x1, [{0x86, &(0x7f0000000bc0)=@string={0x86, 0x3, "7969861f892bc021f2c8bc5592b28528b18b6d4e736321e55a7e5dc434923927a0ab6dc55f0e7b3b45fe259c7a773a269da34026547ac1f285bb2092c7c77f4d4be74e49ae34b5e28d4ccdcfaed214447e8943b01e5fc5bb07e08acc7bd8580228e21498a3ce3164e03b43887c54f782b392023d144c4f449ca69ed371c68aeed7511965"}}]}) mmap(&(0x7f0000617000/0x2000)=nil, 0x2000, 0x7, 0x10, r3, 0x0) syz_io_uring_setup(0x70ca, 0x0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="201020000000202d11e0138deeafcec5d687ef98fb005850000060a3dfffffffffffff7f121e"], &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000180)={0x40, 0x6, 0x9a, "8f6f3a9d279afc7fd1492270da76a1aac7a0f1b926f3842109c64cb810689fe63c4aa6d1a262a14b6d5dadad5cdc444e804fff44f956d11f83a5af88bacb355fe7e5518d77d4483f855e4938d59fca4b6fbf6dcb33ff9a698a7805dcea127710157c3699be657d705aea25b90699213535280868c9e25cc71ad0e740127296eacdda1da11a9278c58fa470ea6d5ad4bf922bdf30917afcfd454f"}, &(0x7f00000000c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000100)={0x0, 0x8, 0x1, 0x6}}) 2.570939114s ago: executing program 3 (id=963): write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff"], 0xfdef) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x827}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x0}, 0x0) 2.154531993s ago: executing program 0 (id=967): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4, &(0x7f0000000600)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x1, 0x5000003a, r1, 0x0) (async) open(&(0x7f0000000140)='.\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000f40)={0x2020}, 0x2020) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5c00000010006bcc9e3be35c6e17aa0b006b876c1d0000007ea60864160af36531001ac008000200070002000600020003a9e99fd8dc7add954664bc24eab556a705251e6182942259e65f0151f60a84c9f4d4938037e786a6d00010", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.15103723s ago: executing program 0 (id=968): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x731, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x200408a1}, 0x80) r2 = fsopen(&(0x7f0000000300)='befs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000040)='-/\x00', 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810220000000000905820220000000000905030208fb84a9acfaa95fa16f04bff9fbbad4df18806d6f7680105358747ff08b9b38e0505cd4ca877d1736ed1c9f20c4c162e1db81a5d663a53e618d2bbd8a6f3d55ca07296209d45e5f525373219416a00a01e6b254cc286708c490dbbad981295ec7ca29b31c367a49dc4391540b20d695fe956062a2514ea1a724e78598d1a1eebfabde655412655bfe4e", @ANYRESOCT=0x0, @ANYRESOCT=0x0], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x2010, r3, 0xa3e0f000) 1.501160355s ago: executing program 0 (id=969): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eef76c20c80a01c3650d0102030109021200010000100009048d0000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) setns(r1, 0x0) (async) syz_usb_connect(0x0, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240108000b020102082407010500070e11240606060509000600040007000300390c2402050302060254df000a092402050001031f04092403", @ANYRESOCT], 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r5) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r7, &(0x7f0000000280)={@val={0x0, 0x6}, @val={0x0, 0x1, 0x11, 0x7, 0x300, 0xca6}, @ipv6=@tipc_packet={0xf, 0x6, "e9e018", 0x130, 0x6, 0x7f, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@srh={0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x7f}, @hopopts={0x73, 0x3, '\x00', [@hao={0xc9, 0x10, @private0}, @jumbo={0xc2, 0x4, 0x1}, @pad1]}, @routing={0x2c, 0x6, 0x2, 0x0, 0x0, [@empty, @dev={0xfe, 0x80, '\x00', 0x19}, @dev={0xfe, 0x80, '\x00', 0x3f}]}, @srh={0x1, 0x4, 0x4, 0x2, 0x9, 0x8, 0x4, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote]}, @fragment={0x4, 0x0, 0x3, 0x1, 0x0, 0x1, 0x67}, @routing={0x87, 0x0, 0x2, 0x2}, @srh={0x6c, 0xc, 0x4, 0x6, 0x4, 0x50, 0x3, [@loopback, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x19}, @local, @remote]}, @fragment={0x33, 0x0, 0x40, 0x0, 0x0, 0x7, 0x66}], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x2, 0x1ff, 0x0, 0x2, 0x4, 0x1, 0x3, 0x9, 0xf, 0x3, 0x4e21, 0x4e20}, 0x3, 0x6}}}}}}, 0x166) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x44, r6, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}]}, 0x44}, 0x1, 0xffffffff00000003}, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0x90) (async) write$tun(r2, &(0x7f0000001780)={@void, @void, @ipv6=@dccp_packet={0xf, 0x6, "38b177", 0x1a3, 0x21, 0x0, @mcast1, @private2, {[@srh={0x6, 0x2, 0x4, 0x1, 0x0, 0x18, 0x6, [@rand_addr=' \x01\x00']}, @hopopts={0x2e}, @dstopts={0x6, 0x4, '\x00', [@ra={0x5, 0x2, 0xc8f3}, @jumbo={0xc2, 0x4, 0x80000000}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x6}]}, @srh={0x6c, 0xe, 0x4, 0x7, 0x80, 0x40, 0x7, [@mcast1, @private1, @empty, @private1, @loopback, @mcast1, @mcast1]}, @hopopts={0x67, 0x5, '\x00', [@hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @fragment={0x2f, 0x0, 0x7f, 0x1, 0x0, 0x4, 0x64}], {{0x4e22, 0x4e21, 0x4, 0x1, 0x6, 0x0, 0x0, 0x4, 0x7, "6de17e", 0x0, "00f600"}, "0d1198143f7e5b3152ca9da9dabff56658b4d3079e6cce1ab98662a450e0fc2b6c032668aab51dcde58d8c338f0123b1e2dd081fdf862d3da4e2c8cb1c59201be121b3145ce2acaabfa3ffde35ef4872f995ab49ad6b21ac3d56f9e348d77bf81175f9a9d6814c099b629902e7e91031fc7213c5f8d991ad77cd2c7005b05917ca99319130bdb6c271112b"}}}}, 0x1cb) (async) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x3) 1.330465217s ago: executing program 0 (id=970): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000300)={0x6, 0x7fff, 0x2, {0x2, @win={{0xbdc, 0xbc, 0x0, 0x8}, 0x9, 0x3ff, &(0x7f0000000100)={{0x7f, 0x0, 0x80000000, 0x8c1}, &(0x7f0000000080)={{0x7, 0xfffffffa, 0x8, 0x10000}}}, 0x80, &(0x7f0000000280)="aaf777a974135bc1ab1c926a9a24521f952b814123a9a6b7af", 0x5}}}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) 1.329819472s ago: executing program 0 (id=971): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x400000000000f01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './file1/../file0', [{0x20, '\x86\xd7\xb5r\x03z\xf5\xe42\xad\xed\x122\x9db}\xd1\xff\xff\xff\x812\xd4\xef\xcd.\x8b\xf4\xa71iQA\x8d5\x8d\xaf\xe1\xd8\xae-\n\x95\x98\x96\xe8\x0e^\x80S\x9a\xca\xbf\x0e4C\'~_\xd0X\xb9\x94[\xf5,\xe0\xcd\x89\x1c\t\xd0\xf2\xfb\xf8\xfbe\xb2\r\xeeI\x86\xca\xd0k\xb0\x1b\xe96\xedpm\xcc\xdc\x91\xb9\xbft\xfb\x98\xe2\x02!\xfeq\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x009\xf7\x81\xf4\xa9j\xc9\xbb\xf8\xf2K\"\x86\xf5h\xf5;\xd2\xaf\x9b\xea\xef-\xd7\xd6\xfa\x97-*\\\x98bE\r\xdc\x89\xd8&\x91\x1c+\x15\x89\xd7\xa7ceT\xea`5\xf9\x88\n \xdcA\xa6\x10\x93\"\xa4Y\x84\xee\xb2\xf9\xa9\x80uf\xab\xb3\xd1\x10i\x94x\x0f\xee\x94j2\xf9\x9ah\xf3b\x19P4\\\xad\xbaX]\xbc\xbbTA\x17d\a\x8fa\xe0\xc3K\x959'}]}, 0xf7) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x0) (async) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x100a, 0x2}, @flat=@weak_handle={0x73682a85, 0x100, 0x1}, @fda={0x66646185, 0x8, 0x1, 0x2000000000022}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x100a, 0x2}, @flat=@weak_handle={0x73682a85, 0x100, 0x1}, @fda={0x66646185, 0x8, 0x1, 0x2000000000022}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) write$UHID_INPUT(r1, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x0) 1.054583371s ago: executing program 3 (id=972): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @multicast2=0x80ee3600, @private=0x80ee3600}}}], 0x20}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x54, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002d00090027bd7000000000000400000008001a"], 0x1c}}, 0x8084) 1.009859916s ago: executing program 3 (id=973): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xff93, &(0x7f0000000180)={&(0x7f0000003640)={0x2c, 0x2b, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048091}, 0x8010) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x24000010) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x12, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000b000000043542c92f50c85a929e01a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef62b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d", 0xd8}], 0x1}, 0x40004000) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000180)=0x1000, 0x4) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x14) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='nv', 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r9 = getpid() process_vm_readv(r9, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x20, r6, 0x1, 0x71bd27, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x4000000) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r11, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r11, 0xc0502100, 0xfffffffffffffffe) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0xf12b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, 0x8000000}, 0x1c) 687.948473ms ago: executing program 0 (id=974): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x7) listen(r0, 0x1ad72f7) accept4(r0, 0x0, 0x0, 0x80000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x6}, 0x4) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010961b080000000000000109022400010000000109040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000c80)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0x9, "1252"}, @global=@item_4={0x3, 0x1, 0x5, "aa65274b"}]}}, 0x0}, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0xfd}}, 0x1c) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) sendto$inet6(r1, &(0x7f00000000c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 97.153697ms ago: executing program 1 (id=975): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f000000c740), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000000)=[{0x2b, 0x0, [0x81, 0x3, 0x10001, 0x6, 0x9, 0x40, 0x9, 0x3, 0xd, 0xd06, 0x0, 0x10001, 0x4, 0x100, 0x1000]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3d64b08b1134200c5c00000000109021b0001000420000904"], 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f000000ca80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f000000cb40)={0x0, 0x0, &(0x7f000000cb00)={&(0x7f000000cac0)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1080) 0s ago: executing program 2 (id=976): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000800)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000804) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r4, 0x4004e502, &(0x7f0000000180)=0x5) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@quota}], [{@audit}]}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r5, 0xffffffff80000701, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_int(r6, 0x1, 0x4a, 0x0, &(0x7f0000000080)) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d34, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0062050000000b0c4cbb47"], 0x0}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000005b00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) kernel console output (not intermixed with test programs): _dump_stack_lvl+0x10/0x10 [ 172.875454][ T7826] ? __pfx__printk+0x10/0x10 [ 172.875471][ T7826] should_fail_ex+0x414/0x560 [ 172.875488][ T7826] pages_to_xarray+0x152/0x430 [ 172.875501][ T7826] ? pin_user_pages_fast+0x4d/0xb0 [ 172.875520][ T7826] ? __pfx_pages_to_xarray+0x10/0x10 [ 172.875536][ T7826] ? interval_tree_span_iter_first+0xea/0xd70 [ 172.875552][ T7826] iopt_pages_fill_xarray+0x955/0xe90 [ 172.875572][ T7826] ? __pfx_iopt_pages_fill_xarray+0x10/0x10 [ 172.875609][ T7826] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 172.875632][ T7826] iopt_area_add_access+0x210/0x4c0 [ 172.875660][ T7826] iommufd_access_pin_pages+0x6d6/0xc30 [ 172.875686][ T7826] ? __pfx_iommufd_access_pin_pages+0x10/0x10 [ 172.875700][ T7826] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 172.875710][ T7826] ? iommufd_test+0x3ca8/0x5180 [ 172.875723][ T7826] iommufd_test+0x3cf9/0x5180 [ 172.875739][ T7826] ? __pfx_iommufd_test+0x10/0x10 [ 172.875750][ T7826] ? __lock_acquire+0xab9/0xd20 [ 172.875768][ T7826] ? __might_fault+0xb0/0x130 [ 172.875790][ T7826] iommufd_fops_ioctl+0x45e/0x580 [ 172.875805][ T7826] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 172.875824][ T7826] ? __fget_files+0x3a0/0x420 [ 172.875835][ T7826] ? __fget_files+0x2a/0x420 [ 172.875847][ T7826] ? bpf_lsm_file_ioctl+0x9/0x20 [ 172.875860][ T7826] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 172.875871][ T7826] __se_sys_ioctl+0xfc/0x170 [ 172.875886][ T7826] do_syscall_64+0xfa/0xfa0 [ 172.875897][ T7826] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.875907][ T7826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.875916][ T7826] ? clear_bhb_loop+0x60/0xb0 [ 172.875928][ T7826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.875937][ T7826] RIP: 0033:0x7fcaaf78eec9 [ 172.875947][ T7826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.875955][ T7826] RSP: 002b:00007fcab0695038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 172.875966][ T7826] RAX: ffffffffffffffda RBX: 00007fcaaf9e5fa0 RCX: 00007fcaaf78eec9 [ 172.875973][ T7826] RDX: 00002000000002c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 172.875979][ T7826] RBP: 00007fcab0695090 R08: 0000000000000000 R09: 0000000000000000 [ 172.875985][ T7826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 172.875991][ T7826] R13: 00007fcaaf9e6038 R14: 00007fcaaf9e5fa0 R15: 00007ffe25677418 [ 172.876007][ T7826] [ 172.877721][ T5826] usb 4-1: device descriptor read/8, error -71 [ 172.884109][ T5872] usb 3-1: device descriptor read/64, error -71 [ 173.006639][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'. [ 173.124331][ T5872] usb usb3-port1: attempt power cycle [ 173.160088][ T30] kauditd_printk_skb: 350 callbacks suppressed [ 173.160103][ T30] audit: type=1326 audit(1760341440.978:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7823 comm="syz.0.570" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e2a98eec9 code=0x0 [ 173.211257][ T5826] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 173.234191][ T5826] usb 4-1: device descriptor read/8, error -71 [ 173.344229][ T5826] usb usb4-port1: unable to enumerate USB device [ 173.404106][ T5916] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 173.495151][ T5872] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 173.524660][ T5872] usb 3-1: device descriptor read/8, error -71 [ 173.565448][ T5916] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.576401][ T5916] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.589286][ T5916] usb 2-1: config 0 interface 0 has no altsetting 0 [ 173.595966][ T5916] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 173.605058][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.615244][ T5916] usb 2-1: config 0 descriptor?? [ 173.784000][ T5872] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 173.814232][ T5872] usb 3-1: device descriptor read/8, error -71 [ 173.924169][ T5872] usb usb3-port1: unable to enumerate USB device [ 174.024293][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.033045][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.044179][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.053044][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.061830][ T5838] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 174.072541][ T5916] usbhid 2-1:0.0: can't add hid device: -71 [ 174.079176][ T5916] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 174.092942][ T5916] usb 2-1: USB disconnect, device number 45 [ 174.655153][ T7842] openvswitch: netlink: nsh attr 0 has unexpected len 49149 expected 0 [ 174.664281][ T7842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.683427][ T7842] netlink: 28 bytes leftover after parsing attributes in process `syz.1.573'. [ 174.829471][ T7851] serio: Serial port pty22 [ 175.033795][ T1072] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 175.157337][ T7857] FAULT_INJECTION: forcing a failure. [ 175.157337][ T7857] name fail_iommufd, interval 1, probability 0, space 0, times 0 [ 175.171963][ T7857] CPU: 1 UID: 0 PID: 7857 Comm: syz.2.579 Not tainted syzkaller #0 PREEMPT(full) [ 175.171987][ T7857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 175.171997][ T7857] Call Trace: [ 175.172004][ T7857] [ 175.172011][ T7857] dump_stack_lvl+0x189/0x250 [ 175.172034][ T7857] ? __pfx____ratelimit+0x10/0x10 [ 175.172061][ T7857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.172078][ T7857] ? __pfx__printk+0x10/0x10 [ 175.172098][ T7857] ? __pfx_pages_to_xarray+0x10/0x10 [ 175.172132][ T7857] should_fail_ex+0x414/0x560 [ 175.172160][ T7857] iopt_pages_fill_xarray+0xc14/0xe90 [ 175.172197][ T7857] ? __pfx_iopt_pages_fill_xarray+0x10/0x10 [ 175.172255][ T7857] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 175.172283][ T7857] iopt_area_add_access+0x210/0x4c0 [ 175.172314][ T7857] iommufd_access_pin_pages+0x6d6/0xc30 [ 175.172355][ T7857] ? __pfx_iommufd_access_pin_pages+0x10/0x10 [ 175.172380][ T7857] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 175.172400][ T7857] ? iommufd_test+0x3ca8/0x5180 [ 175.172424][ T7857] iommufd_test+0x3cf9/0x5180 [ 175.172454][ T7857] ? __pfx_iommufd_test+0x10/0x10 [ 175.172475][ T7857] ? __lock_acquire+0xab9/0xd20 [ 175.172507][ T7857] ? __might_fault+0xb0/0x130 [ 175.172548][ T7857] iommufd_fops_ioctl+0x45e/0x580 [ 175.172576][ T7857] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 175.172612][ T7857] ? __fget_files+0x3a0/0x420 [ 175.172637][ T7857] ? __fget_files+0x2a/0x420 [ 175.172659][ T7857] ? bpf_lsm_file_ioctl+0x9/0x20 [ 175.172681][ T7857] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 175.172702][ T7857] __se_sys_ioctl+0xfc/0x170 [ 175.172729][ T7857] do_syscall_64+0xfa/0xfa0 [ 175.172746][ T7857] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.172765][ T7857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.172781][ T7857] ? clear_bhb_loop+0x60/0xb0 [ 175.172803][ T7857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.172819][ T7857] RIP: 0033:0x7f41bf58eec9 [ 175.172835][ T7857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.172849][ T7857] RSP: 002b:00007f41c0497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.172868][ T7857] RAX: ffffffffffffffda RBX: 00007f41bf7e5fa0 RCX: 00007f41bf58eec9 [ 175.172887][ T7857] RDX: 00002000000002c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 175.172898][ T7857] RBP: 00007f41c0497090 R08: 0000000000000000 R09: 0000000000000000 [ 175.172909][ T7857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 175.172919][ T7857] R13: 00007f41bf7e6038 R14: 00007f41bf7e5fa0 R15: 00007ffea7ba0c68 [ 175.172952][ T7857] [ 175.443875][ T1072] usb 4-1: Using ep0 maxpacket: 8 [ 175.452504][ T1072] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 175.461742][ T1072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.468341][ T7859] netlink: 24 bytes leftover after parsing attributes in process `syz.2.580'. [ 175.479658][ T1072] pvrusb2: Hardware description: Terratec Grabster AV400 [ 175.487138][ T1072] pvrusb2: ********** [ 175.491134][ T1072] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 175.494152][ T5872] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 175.501267][ T1072] pvrusb2: Important functionality might not be entirely working. [ 175.517159][ T1072] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 175.528960][ T1072] pvrusb2: ********** [ 175.633826][ T5872] usb 2-1: device descriptor read/64, error -71 [ 175.681313][ T7845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.690248][ T7845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.702347][ T2346] pvrusb2: Invalid write control endpoint [ 175.711797][ T1072] usb 4-1: USB disconnect, device number 50 [ 175.753240][ T2346] pvrusb2: Invalid write control endpoint [ 175.759997][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 175.771058][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 175.779087][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 175.790277][ T2346] pvrusb2: Device being rendered inoperable [ 175.797641][ T2346] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 175.806546][ T2346] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 175.816442][ T2346] pvrusb2: Attached sub-driver cx25840 [ 175.822087][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 175.832552][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 175.863905][ T5916] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 175.883898][ T5872] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 176.013845][ T5872] usb 2-1: device descriptor read/64, error -71 [ 176.020189][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 176.028438][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.040046][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.040342][ T7874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.050415][ T5916] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 176.062279][ T7874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.068694][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.082933][ T7874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.087703][ T5916] usb 3-1: config 0 descriptor?? [ 176.099972][ T7874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.134375][ T5872] usb usb2-port1: attempt power cycle [ 176.503964][ T5872] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 176.524320][ T5872] usb 2-1: device descriptor read/8, error -71 [ 176.534289][ T1072] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 176.609531][ T5916] hid-multitouch 0003:1FD2:6007.0016: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 176.673812][ T1072] usb 4-1: device descriptor read/64, error -71 [ 176.722642][ T7867] Set syz1 is full, maxelem 6117 reached [ 176.724251][ T7882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.739081][ T7882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.764030][ T5872] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 176.792969][ T5916] usb 3-1: USB disconnect, device number 46 [ 176.808922][ T5872] usb 2-1: device descriptor read/8, error -71 [ 176.837420][ T7887] FAULT_INJECTION: forcing a failure. [ 176.837420][ T7887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.850900][ T7887] CPU: 0 UID: 0 PID: 7887 Comm: syz.0.588 Not tainted syzkaller #0 PREEMPT(full) [ 176.850923][ T7887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 176.850929][ T7887] Call Trace: [ 176.850935][ T7887] [ 176.850939][ T7887] dump_stack_lvl+0x189/0x250 [ 176.850954][ T7887] ? __pfx____ratelimit+0x10/0x10 [ 176.850966][ T7887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.850975][ T7887] ? __pfx__printk+0x10/0x10 [ 176.850991][ T7887] should_fail_ex+0x414/0x560 [ 176.851007][ T7887] _copy_to_user+0x31/0xb0 [ 176.851021][ T7887] simple_read_from_buffer+0xe1/0x170 [ 176.851034][ T7887] proc_fail_nth_read+0x1b3/0x220 [ 176.851049][ T7887] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.851064][ T7887] ? rw_verify_area+0x2a6/0x4d0 [ 176.851073][ T7887] ? __lock_acquire+0xab9/0xd20 [ 176.851084][ T7887] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.851098][ T7887] vfs_read+0x200/0xa30 [ 176.851107][ T7887] ? fdget_pos+0x247/0x320 [ 176.851127][ T7887] ? __pfx___mutex_lock+0x10/0x10 [ 176.851139][ T7887] ? __pfx_vfs_read+0x10/0x10 [ 176.851149][ T7887] ? __fget_files+0x2a/0x420 [ 176.851162][ T7887] ? __fget_files+0x3a0/0x420 [ 176.851171][ T7887] ? __fget_files+0x2a/0x420 [ 176.851186][ T7887] ksys_read+0x145/0x250 [ 176.851195][ T7887] ? __fget_files+0x2a/0x420 [ 176.851206][ T7887] ? __pfx_ksys_read+0x10/0x10 [ 176.851217][ T7887] ? do_syscall_64+0xbe/0xfa0 [ 176.851230][ T7887] do_syscall_64+0xfa/0xfa0 [ 176.851240][ T7887] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.851250][ T7887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.851259][ T7887] ? clear_bhb_loop+0x60/0xb0 [ 176.851271][ T7887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.851280][ T7887] RIP: 0033:0x7f6e2a98d8dc [ 176.851290][ T7887] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 176.851298][ T7887] RSP: 002b:00007f6e2b8d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 176.851309][ T7887] RAX: ffffffffffffffda RBX: 00007f6e2abe5fa0 RCX: 00007f6e2a98d8dc [ 176.851317][ T7887] RDX: 000000000000000f RSI: 00007f6e2b8d70a0 RDI: 0000000000000005 [ 176.851323][ T7887] RBP: 00007f6e2b8d7090 R08: 0000000000000000 R09: 0000000000000000 [ 176.851328][ T7887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 176.851334][ T7887] R13: 00007f6e2abe6038 R14: 00007f6e2abe5fa0 R15: 00007ffd9b6beb58 [ 176.851350][ T7887] [ 177.127129][ T5872] usb usb2-port1: unable to enumerate USB device [ 177.145135][ T1072] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 177.283892][ T1072] usb 4-1: device descriptor read/64, error -71 [ 177.351105][ T7895] dlm: no locking on control device [ 177.356570][ T7895] dlm: no locking on control device [ 177.394112][ T1072] usb usb4-port1: attempt power cycle [ 177.535105][ T7902] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 177.593072][ T7902] overlayfs: missing 'lowerdir' [ 177.624111][ T7908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.635757][ T7908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.736728][ T1072] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 177.764817][ T1072] usb 4-1: device descriptor read/8, error -71 [ 177.853955][ T5885] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 178.006270][ T5885] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 178.014794][ T60] nci: nci_ntf_packet: unknown ntf opcode 0x27 [ 178.015572][ T1072] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 178.029412][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.040496][ T5885] usb 3-1: config 0 descriptor?? [ 178.050340][ T5885] cp210x 3-1:0.0: cp210x converter detected [ 178.071711][ T1072] usb 4-1: device descriptor read/8, error -71 [ 178.184669][ T1072] usb usb4-port1: unable to enumerate USB device [ 178.473782][ T5826] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 178.563995][ T5885] usb 3-1: cp210x converter now attached to ttyUSB0 [ 178.623900][ T5826] usb 2-1: Using ep0 maxpacket: 8 [ 178.630880][ T5826] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 178.640099][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.652013][ T5826] usb 2-1: config 0 descriptor?? [ 178.861890][ T5826] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 178.918690][ T7927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.928834][ T7927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.042877][ T7932] netlink: 16 bytes leftover after parsing attributes in process `syz.0.600'. [ 179.070793][ T5826] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 179.082044][ T5826] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 179.093111][ T5826] asix 2-1:0.0: probe with driver asix failed with error -71 [ 179.113872][ T5826] usb 2-1: USB disconnect, device number 50 [ 179.351412][ T7947] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.605'. [ 179.382612][ T7949] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 179.396061][ T7949] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 179.409243][ T7944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.422445][ T7944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.438685][ T7944] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 179.654237][ T5885] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 179.806154][ T5885] usb 4-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 179.818469][ T5885] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=eb.f1 [ 179.827633][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.835672][ T5885] usb 4-1: Product: syz [ 179.839846][ T5885] usb 4-1: Manufacturer: syz [ 179.845301][ T5885] usb 4-1: SerialNumber: syz [ 179.852890][ T5885] usb 4-1: config 0 descriptor?? [ 179.860815][ T5885] pcwd_usb: The device isn't a Human Interface Device [ 179.867692][ T5826] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 180.007275][ T5826] usb 2-1: device descriptor read/64, error -71 [ 180.070453][ T7952] comedi comedi3: dt2815: I/O port conflict (0x4,2) [ 180.243837][ T5826] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 180.373821][ T5826] usb 2-1: device descriptor read/64, error -71 [ 180.484562][ T5826] usb usb2-port1: attempt power cycle [ 180.648527][ T5885] usb 3-1: USB disconnect, device number 47 [ 180.679330][ T5885] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 180.748278][ T5885] cp210x 3-1:0.0: device disconnected [ 180.797724][ T7975] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 180.806843][ T7975] syzkaller1: linktype set to 768 [ 180.813253][ T7975] sctp: [Deprecated]: syz.0.613 (pid 7975) Use of int in max_burst socket option. [ 180.813253][ T7975] Use struct sctp_assoc_value instead [ 180.833974][ T5826] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 180.854679][ T5826] usb 2-1: device descriptor read/8, error -71 [ 181.093807][ T5826] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 181.114224][ T5826] usb 2-1: device descriptor read/8, error -71 [ 181.213848][ T5885] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 181.224102][ T5826] usb usb2-port1: unable to enumerate USB device [ 181.363823][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 181.370848][ T5885] usb 3-1: unable to get BOS descriptor or descriptor too short [ 181.379845][ T5885] usb 3-1: config 11 has an invalid interface number: 158 but max is 1 [ 181.389088][ T5885] usb 3-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 181.399323][ T5885] usb 3-1: config 11 has 1 interface, different from the descriptor's value: 2 [ 181.408350][ T5885] usb 3-1: config 11 has no interface number 0 [ 181.414650][ T5885] usb 3-1: config 11 interface 158 altsetting 81 endpoint 0x1 has invalid wMaxPacketSize 0 [ 181.424762][ T5885] usb 3-1: config 11 interface 158 altsetting 81 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 181.438004][ T5885] usb 3-1: config 11 interface 158 has no altsetting 0 [ 181.447105][ T5885] usb 3-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=3b.0d [ 181.456437][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.464555][ T5885] usb 3-1: Product: syz [ 181.468743][ T5885] usb 3-1: Manufacturer: syz [ 181.473376][ T5885] usb 3-1: SerialNumber: syz [ 181.564874][ T7985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.573584][ T7985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.586466][ T7985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.596681][ T7985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.607733][ T5838] Bluetooth: hci2: Unknown advertising packet type: 0x35 [ 181.607803][ T5838] Bluetooth: hci2: Malformed LE Event: 0x0d [ 181.683642][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.615'. [ 181.692670][ T7980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.615'. [ 181.701558][ T7980] netlink: 33 bytes leftover after parsing attributes in process `syz.2.615'. [ 181.711200][ T7980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.615'. [ 181.720061][ T7980] netlink: 33 bytes leftover after parsing attributes in process `syz.2.615'. [ 181.742099][ T5885] peak_usb 3-1:11.158 can0: unable to request usb[type=0 value=1] err=-71 [ 181.750762][ T5885] peak_usb 3-1:11.158: unable to read PCAN-USB Pro FD firmware info (err -71) [ 181.795978][ T5885] peak_usb 3-1:11.158: probe with driver peak_usb failed with error -71 [ 181.808051][ T5885] usb 3-1: USB disconnect, device number 48 [ 182.378196][ T7987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.389822][ T7987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.411933][ T7996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.422931][ T7996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.443575][ T10] usb 4-1: USB disconnect, device number 55 [ 188.618153][ T5196] udevd[5196]: worker [5956] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 194.247935][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.255585][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 213.321196][ T8002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.330037][ T8002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.583844][ T5872] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 213.623883][ T5885] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 213.735502][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.745485][ T5872] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 213.754622][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.764652][ T5872] usb 4-1: config 0 descriptor?? [ 213.776042][ T5885] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 213.790461][ T5885] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.799759][ T5826] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 213.807683][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 213.816140][ T5885] usb 3-1: SerialNumber: syz [ 213.952756][ T8016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.962545][ T8016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.181043][ T5872] lenovo 0003:17EF:6047.0017: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 214.240119][ T5885] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 214.581965][ T8027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.595534][ T8027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.792687][ T5872] lenovo 0003:17EF:6047.0017: Fn-lock setting failed: -71 [ 214.818168][ T5872] lenovo 0003:17EF:6047.0017: Sensitivity setting failed: -71 [ 214.934932][ T5872] usb 4-1: USB disconnect, device number 56 [ 215.077752][ T5928] usb 3-1: USB disconnect, device number 49 [ 215.131654][ T5928] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 215.597868][ T8052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.607942][ T8052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.177193][ T30] audit: type=1326 audit(1760341483.998:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8081 comm="syz.3.641" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a79d8eec9 code=0x0 [ 216.249125][ T8089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.279011][ T8089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.361876][ T5826] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 216.369755][ T5826] usb 2-1: can't read configurations, error -71 [ 216.524413][ T5916] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 216.693782][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 216.700757][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.712046][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.733318][ T5916] usb 3-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 216.742733][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.754248][ T5916] usb 3-1: config 0 descriptor?? [ 216.793867][ T5826] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 216.947359][ T5826] usb 2-1: Using ep0 maxpacket: 16 [ 216.958389][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.968349][ T8120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.978901][ T5826] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 216.981793][ T8120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.011593][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.042251][ T5826] usb 2-1: config 0 descriptor?? [ 217.121318][ T8126] 9pnet_fd: Insufficient options for proto=fd [ 217.402108][ T8093] Unsupported ieee802154 address type: 0 [ 217.426826][ T5916] betop 0003:20BC:5500.0018: hidraw0: USB HID v0.07 Device [HID 20bc:5500] on usb-dummy_hcd.2-1/input0 [ 217.456300][ T5916] betop 0003:20BC:5500.0018: no inputs found [ 217.473327][ T5826] mcp2221 0003:04D8:00DD.0019: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 217.516802][ T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 217.624654][ T5916] usb 3-1: USB disconnect, device number 50 [ 217.676710][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 217.691212][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 254, changing to 7 [ 217.707012][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 217.723761][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.740943][ T10] usb 4-1: Product: syz [ 217.745926][ T10] usb 4-1: Manufacturer: syz [ 217.750543][ T10] usb 4-1: SerialNumber: syz [ 217.751246][ T8143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.764699][ T8143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.870681][ T5916] usb 2-1: USB disconnect, device number 56 [ 217.961149][ T8132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.969969][ T8132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.327389][ T8147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.338902][ T8147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.423854][ T5872] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 218.525703][ T10] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 218.565665][ T10] usb 4-1: USB disconnect, device number 57 [ 218.577847][ T5872] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 218.589449][ T5872] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 218.601378][ T5872] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 218.610597][ T5872] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 218.622643][ T5872] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 218.636956][ T5872] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 218.647766][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 218.655985][ T5872] usb 3-1: Product: syz [ 218.661305][ T5872] usb 3-1: Manufacturer: syz [ 218.683094][ T5872] cdc_wdm 3-1:1.0: skipping garbage [ 218.691636][ T5872] cdc_wdm 3-1:1.0: skipping garbage [ 218.700185][ T5872] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 218.706364][ T5872] cdc_wdm 3-1:1.0: Unknown control protocol [ 219.251921][ T8178] tipc: Started in network mode [ 219.257145][ T8178] tipc: Node identity , cluster identity 4711 [ 219.263271][ T8178] tipc: Failed to obtain node identity [ 219.268884][ T8178] tipc: Enabling of bearer rejected, failed to enable media [ 219.289405][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE [ 219.383846][ T5872] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 219.490455][ T8145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.499294][ T8145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.534020][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 219.540596][ T5872] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 219.548952][ T5872] usb 2-1: config 0 has no interface number 0 [ 219.560798][ T5872] usb 2-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=79.9a [ 219.569971][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.571382][ T5826] usb 3-1: USB disconnect, device number 51 [ 219.578121][ T5872] usb 2-1: Product: syz [ 219.578141][ T5872] usb 2-1: Manufacturer: syz [ 219.578161][ T5872] usb 2-1: SerialNumber: syz [ 219.585116][ T5872] usb 2-1: config 0 descriptor?? [ 219.813954][ T8173] sctp: [Deprecated]: syz.1.660 (pid 8173) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.813954][ T8173] Use struct sctp_sack_info instead [ 219.836235][ T8173] sctp: [Deprecated]: syz.1.660 (pid 8173) Use of int in maxseg socket option. [ 219.836235][ T8173] Use struct sctp_assoc_value instead [ 219.865485][ T5872] quatech2 2-1:0.188: Quatech 2nd gen USB to Serial Driver converter detected [ 219.877019][ T5872] usb 2-1: qt2_attach - failed to power on unit: -71 [ 219.884041][ T5872] quatech2 2-1:0.188: probe with driver quatech2 failed with error -71 [ 219.901493][ T5872] usb 2-1: USB disconnect, device number 57 [ 220.025859][ T8189] netlink: 'syz.3.665': attribute type 10 has an invalid length. [ 220.033914][ T8189] netlink: 55 bytes leftover after parsing attributes in process `syz.3.665'. [ 220.045353][ T5826] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 220.203806][ T5826] usb 3-1: Using ep0 maxpacket: 16 [ 220.205601][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.221012][ T5826] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 220.230154][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.242053][ T5826] usb 3-1: config 0 descriptor?? [ 220.664824][ T5826] mcp2221 0003:04D8:00DD.001A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 220.693932][ T5928] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 220.734673][ T5872] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 220.835716][ T8201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.844636][ T8201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.852985][ T8200] netlink: 'syz.0.670': attribute type 3 has an invalid length. [ 220.861205][ T8200] netlink: 3 bytes leftover after parsing attributes in process `syz.0.670'. [ 220.873763][ T5928] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.885137][ T5928] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 220.887476][ T5872] usb 4-1: New USB device found, idVendor=0572, idProduct=c688, bcdDevice=d5.02 [ 220.894535][ T5928] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 220.905965][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.922826][ T5872] usb 4-1: Product: syz [ 220.927312][ T5872] usb 4-1: Manufacturer: syz [ 220.931917][ T5872] usb 4-1: SerialNumber: syz [ 220.933814][ T5928] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 220.948315][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.957816][ T5872] usb 4-1: config 0 descriptor?? [ 220.966770][ T8194] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 220.969612][ T5872] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 221.001829][ T5928] hub 2-1:1.0: bad descriptor, ignoring hub [ 221.011541][ T5928] hub 2-1:1.0: probe with driver hub failed with error -5 [ 221.023778][ T5872] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 221.030666][ T5872] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 221.032897][ T5928] cdc_wdm 2-1:1.0: skipping garbage [ 221.043074][ T5928] cdc_wdm 2-1:1.0: skipping garbage [ 221.060954][ T5928] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 221.067567][ T5928] cdc_wdm 2-1:1.0: Unknown control protocol [ 221.070103][ T8185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.084783][ T8185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.101271][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 221.108117][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 221.114613][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 221.121224][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 221.127765][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 221.134372][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 221.140507][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 221.163462][ T8209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.172812][ T8209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.176065][ T5872] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 221.196522][ T5872] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 221.254683][ T5872] usb 4-1: dvb_usb_v2: found a 'MyGica Mini DVB-(T/T2/C) USB Stick T230' in warm state [ 221.269330][ T5826] usb 3-1: USB disconnect, device number 52 [ 221.276549][ T5872] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 221.286212][ T5929] usb 2-1: USB disconnect, device number 58 [ 221.288133][ T5872] dvbdev: DVB: registering new adapter (MyGica Mini DVB-(T/T2/C) USB Stick T230) [ 221.296113][ T8194] cdc_wdm 2-1:1.0: Error autopm - -16 [ 221.308757][ T5872] usb 4-1: media controller created [ 221.342064][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.410702][ T5872] usb 4-1: USB disconnect, device number 58 [ 221.766193][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.673'. [ 221.814153][ T8213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.855382][ T8213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.925929][ T5826] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 222.087007][ T5826] usb 2-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 222.097504][ T5826] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 222.106498][ T5929] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 222.114133][ T5826] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 222.127165][ T5826] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 222.136313][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.148654][ T8194] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 222.157744][ T5826] hub 2-1:1.0: bad descriptor, ignoring hub [ 222.163823][ T5826] hub 2-1:1.0: probe with driver hub failed with error -5 [ 222.171277][ T5826] cdc_wdm 2-1:1.0: skipping garbage [ 222.176610][ T5826] cdc_wdm 2-1:1.0: skipping garbage [ 222.181827][ T5826] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 222.223822][ T5872] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 222.295439][ T5929] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 222.304702][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.314956][ T5929] usb 3-1: config 0 descriptor?? [ 222.326880][ T5929] cp210x 3-1:0.0: cp210x converter detected [ 222.374167][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 222.385883][ T5872] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 222.395040][ T5872] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 222.404307][ T5872] usb 4-1: config 1 has no interface number 1 [ 222.410446][ T5872] usb 4-1: config 1 interface 2 altsetting 3 endpoint 0x82 has an invalid bInterval 247, changing to 7 [ 222.422014][ T5872] usb 4-1: config 1 interface 2 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 222.435119][ T5872] usb 4-1: config 1 interface 2 has no altsetting 0 [ 222.445527][ T5872] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 222.454683][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.462691][ T5872] usb 4-1: Product: Ⰹ [ 222.466950][ T5872] usb 4-1: Manufacturer: ࠬ [ 222.471547][ T5872] usb 4-1: SerialNumber: syz [ 222.484400][ T5826] usb 2-1: USB disconnect, device number 59 [ 222.525808][ T5929] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 222.552604][ T5929] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 222.572921][ T5929] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 222.593826][ T5929] usb 3-1: cp210x converter now attached to ttyUSB0 [ 222.613808][ T5929] usb 3-1: USB disconnect, device number 53 [ 222.635132][ T5929] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 222.650896][ T5929] cp210x 3-1:0.0: device disconnected [ 222.677801][ T8229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.695190][ T8229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.736997][ T5826] IPVS: starting estimator thread 0... [ 222.739348][ T8229] overlayfs: overlapping lowerdir path [ 222.755104][ T8231] netlink: 72 bytes leftover after parsing attributes in process `syz.2.679'. [ 222.761513][ T8229] overlayfs: failed to verify upper root origin [ 222.833924][ T8232] IPVS: using max 28 ests per chain, 67200 per kthread [ 222.957438][ T8237] x_tables: duplicate underflow at hook 4 [ 222.965378][ T5872] usb 4-1: USB disconnect, device number 59 [ 223.283822][ T5929] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 223.328136][ T8252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.686'. [ 223.393792][ T10] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 223.435851][ T5929] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 223.454402][ T5929] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 223.466129][ T5929] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 223.480028][ T5929] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 223.491612][ T5929] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 223.504782][ T5929] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 223.514061][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 223.522064][ T5929] usb 3-1: Product: syz [ 223.526506][ T5929] usb 3-1: Manufacturer: syz [ 223.537811][ T10] usb 2-1: device descriptor read/64, error -71 [ 223.555610][ T5929] cdc_wdm 3-1:1.0: skipping garbage [ 223.560852][ T5929] cdc_wdm 3-1:1.0: skipping garbage [ 223.587112][ T5929] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 223.593119][ T5929] cdc_wdm 3-1:1.0: Unknown control protocol [ 223.814092][ T10] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 223.835066][ T5929] usb 3-1: USB disconnect, device number 54 [ 223.993880][ T10] usb 2-1: device descriptor read/64, error -71 [ 224.106771][ T10] usb usb2-port1: attempt power cycle [ 224.146616][ T8284] tmpfs: Bad value for 'mpol' [ 224.277467][ T8288] netlink: 32 bytes leftover after parsing attributes in process `syz.0.697'. [ 224.287479][ T5929] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 224.302317][ T8288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.312331][ T8288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.325441][ T8288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.335238][ T8288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.451194][ T5929] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 224.460733][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.470829][ T10] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 224.487565][ T5929] usb 3-1: config 0 descriptor?? [ 224.493432][ T8296] vxcan1: entered allmulticast mode [ 224.499982][ T10] usb 2-1: device descriptor read/8, error -71 [ 224.763856][ T10] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 224.804386][ T10] usb 2-1: device descriptor read/8, error -71 [ 224.843794][ T5872] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 224.923967][ T10] usb usb2-port1: unable to enumerate USB device [ 224.983064][ T8307] sctp: [Deprecated]: syz.0.703 (pid 8307) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.983064][ T8307] Use struct sctp_sack_info instead [ 224.999890][ T8307] sctp: [Deprecated]: syz.0.703 (pid 8307) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.999890][ T8307] Use struct sctp_sack_info instead [ 225.017551][ T8307] sctp: [Deprecated]: syz.0.703 (pid 8307) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.017551][ T8307] Use struct sctp_sack_info instead [ 225.035254][ T8307] sctp: [Deprecated]: syz.0.703 (pid 8307) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.035254][ T8307] Use struct sctp_sack_info instead [ 225.052511][ T8307] sctp: [Deprecated]: syz.0.703 (pid 8307) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.052511][ T8307] Use struct sctp_sack_info instead [ 225.068952][ T5872] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 225.081548][ T5872] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 225.091829][ T8307] sctp: [Deprecated]: syz.0.703 (pid 8307) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.091829][ T8307] Use struct sctp_sack_info instead [ 225.108604][ T5872] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 225.120851][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 225.130824][ T8307] sctp: [Deprecated]: syz.0.703 (pid 8307) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.130824][ T8307] Use struct sctp_sack_info instead [ 225.148988][ T8307] sctp: [Deprecated]: syz.0.703 (pid 8307) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.148988][ T8307] Use struct sctp_sack_info instead [ 225.166032][ T8307] sctp: [Deprecated]: syz.0.703 (pid 8307) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.166032][ T8307] Use struct sctp_sack_info instead [ 225.182666][ T8307] sctp: [Deprecated]: syz.0.703 (pid 8307) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.182666][ T8307] Use struct sctp_sack_info instead [ 225.201608][ T5872] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 225.210849][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.233750][ T5872] usb 4-1: Product: syz [ 225.237949][ T5872] usb 4-1: Manufacturer: syz [ 225.242576][ T5872] usb 4-1: SerialNumber: syz [ 225.254237][ T5872] usb 4-1: config 0 descriptor?? [ 225.259998][ T8304] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 225.275951][ T5872] usb 4-1: ucan: probing device on interface #0 [ 225.282256][ T5872] usb 4-1: ucan: invalid endpoint configuration [ 225.292437][ T5872] usb 4-1: ucan: probe failed; try to update the device firmware [ 225.385208][ T8311] netlink: 'syz.0.705': attribute type 2 has an invalid length. [ 225.395760][ T8311] netlink: 'syz.0.705': attribute type 1 has an invalid length. [ 225.466731][ T8314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.482930][ T8304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.491812][ T8314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.502825][ T8304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.513310][ T1072] usb 4-1: USB disconnect, device number 60 [ 225.739066][ T5929] usb 3-1: Cannot set autoneg [ 225.756217][ T5929] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 225.789612][ T5929] usb 3-1: USB disconnect, device number 55 [ 226.250746][ T8328] bridge0: port 3(veth0_vlan) entered blocking state [ 226.258874][ T8328] bridge0: port 3(veth0_vlan) entered disabled state [ 226.267207][ T8328] veth0_vlan: entered allmulticast mode [ 226.276668][ T8328] veth0_vlan: left allmulticast mode [ 226.359422][ T8333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.372315][ T8333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.673829][ T5872] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 226.823882][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 226.829793][ T5872] usb 4-1: too many configurations: 114, using maximum allowed: 8 [ 226.839393][ T5872] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 226.847017][ T5872] usb 4-1: can't read configurations, error -61 [ 226.984419][ T5872] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 227.003850][ T1072] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 227.153807][ T1072] usb 2-1: Using ep0 maxpacket: 32 [ 227.163625][ T1072] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 227.171418][ T1072] usb 2-1: can't read configurations, error -61 [ 227.174408][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 227.183559][ T5872] usb 4-1: too many configurations: 114, using maximum allowed: 8 [ 227.195080][ T5872] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 227.202673][ T5872] usb 4-1: can't read configurations, error -61 [ 227.209459][ T5872] usb usb4-port1: attempt power cycle [ 227.303865][ T1072] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 227.453833][ T1072] usb 2-1: Using ep0 maxpacket: 32 [ 227.461473][ T1072] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 227.469737][ T1072] usb 2-1: can't read configurations, error -61 [ 227.476925][ T1072] usb usb2-port1: attempt power cycle [ 227.553839][ T5872] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 227.586513][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 227.592767][ T5872] usb 4-1: too many configurations: 114, using maximum allowed: 8 [ 227.604199][ T5872] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 227.611858][ T5872] usb 4-1: can't read configurations, error -61 [ 227.743918][ T5872] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 227.774439][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 227.780288][ T5872] usb 4-1: too many configurations: 114, using maximum allowed: 8 [ 227.789743][ T5872] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 227.797412][ T5872] usb 4-1: can't read configurations, error -61 [ 227.804125][ T5872] usb usb4-port1: unable to enumerate USB device [ 227.813843][ T1072] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 227.823849][ T5826] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 227.834588][ T1072] usb 2-1: Using ep0 maxpacket: 32 [ 227.841726][ T1072] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 227.859862][ T1072] usb 2-1: can't read configurations, error -61 [ 227.876577][ T8359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.895784][ T8359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.975487][ T5826] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 227.989348][ T5826] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 228.001471][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 228.012754][ T1072] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 228.021195][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 228.037177][ T5826] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 228.049566][ T8364] dvmrp1: entered allmulticast mode [ 228.053975][ T5826] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 228.064510][ T1072] usb 2-1: Using ep0 maxpacket: 32 [ 228.070950][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.082192][ T1072] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 228.090472][ T1072] usb 2-1: can't read configurations, error -61 [ 228.097388][ T1072] usb usb2-port1: unable to enumerate USB device [ 228.108511][ T5826] usb 3-1: config 0 descriptor?? [ 228.116484][ T8357] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 228.302569][ T8373] overlayfs: missing 'workdir' [ 228.358189][ T8376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.368759][ T8376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.549498][ T5826] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 228.741634][ T10] usb 3-1: USB disconnect, device number 56 [ 228.934500][ T8379] sctp: [Deprecated]: syz.0.728 (pid 8379) Use of struct sctp_assoc_value in delayed_ack socket option. [ 228.934500][ T8379] Use struct sctp_sack_info instead [ 229.457717][ T8391] sp0: Synchronizing with TNC [ 229.813930][ T1072] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 229.984231][ T1072] usb 4-1: Using ep0 maxpacket: 32 [ 229.991300][ T1072] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.007790][ T1072] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 230.017204][ T1072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.027852][ T1072] usb 4-1: Product: syz [ 230.032142][ T1072] usb 4-1: Manufacturer: syz [ 230.037326][ T1072] usb 4-1: SerialNumber: syz [ 230.046431][ T1072] usb 4-1: config 0 descriptor?? [ 230.193925][ T5826] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 230.201733][ T5885] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 230.353825][ T5826] usb 2-1: Using ep0 maxpacket: 8 [ 230.361445][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.377020][ T5826] usb 2-1: config 12 has an invalid interface number: 84 but max is 1 [ 230.386274][ T5885] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 230.395963][ T5826] usb 2-1: config 12 has an invalid interface number: 110 but max is 1 [ 230.405644][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.414239][ T5826] usb 2-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 230.426921][ T5826] usb 2-1: config 12 has no interface number 0 [ 230.433612][ T5826] usb 2-1: config 12 has no interface number 1 [ 230.442862][ T5885] usb 3-1: config 0 descriptor?? [ 230.448022][ T5826] usb 2-1: config 12 interface 110 altsetting 223 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 230.462427][ T5826] usb 2-1: config 12 interface 84 has no altsetting 0 [ 230.475594][ T5826] usb 2-1: config 12 interface 110 has no altsetting 0 [ 230.488135][ T5826] usb 2-1: string descriptor 0 read error: -22 [ 230.495369][ T5826] usb 2-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=f6.1b [ 230.505327][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.524562][ T5826] belkin_sa 2-1:12.84: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 230.544096][ T5826] usb 2-1: bcdDevice: f61b, bfc: 0 [ 230.554571][ T5826] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 230.569966][ T5826] cdc_ether 2-1:12.110: skipping garbage [ 230.579325][ T5826] cdc_ether 2-1:12.110: skipping garbage [ 230.586467][ T5826] usb 2-1: bad CDC descriptors [ 230.593313][ T5826] belkin_sa 2-1:12.110: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 230.605300][ T5826] usb 2-1: bcdDevice: f61b, bfc: 0 [ 230.616384][ T5826] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB1 [ 230.824289][ T1072] ums_eneub6250 4-1:0.0: USB Mass Storage device detected [ 230.873628][ T856] usb 2-1: USB disconnect, device number 68 [ 230.885698][ T5885] usbhid 3-1:0.0: can't add hid device: -71 [ 230.892578][ T856] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 230.902869][ T5885] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 230.914851][ T856] belkin_sa 2-1:12.84: device disconnected [ 230.936607][ T5885] usb 3-1: USB disconnect, device number 57 [ 230.944478][ T856] belkin ttyUSB1: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB1 [ 230.958128][ T856] belkin_sa 2-1:12.110: device disconnected [ 230.968309][ T1072] usb 4-1: USB disconnect, device number 65 [ 231.043917][ T5838] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 231.044136][ T52] Bluetooth: hci4: command 0x1003 tx timeout [ 231.112640][ T8403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.121402][ T8403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.134130][ T8403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.144018][ T8403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.323840][ T1072] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 231.373946][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 231.473794][ T1072] usb 4-1: Using ep0 maxpacket: 32 [ 231.495207][ T1072] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 231.511041][ T1072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.530402][ T1072] usb 4-1: config 0 descriptor?? [ 231.548846][ T1072] gspca_main: sunplus-2.14.0 probing 041e:400b [ 231.647939][ T8425] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 231.824212][ T856] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 231.940492][ T8437] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 231.947154][ T8437] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 231.956154][ T8437] comedi comedi3: 8255: I/O port conflict (0x21,4) [ 231.962772][ T8437] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 231.971044][ T8437] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 231.978683][ T8437] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 231.996433][ T856] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.007361][ T856] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 232.019755][ T856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 232.027173][ T8437] netlink: 'syz.0.747': attribute type 6 has an invalid length. [ 232.031050][ T856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 232.050160][ T856] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 232.061903][ T856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 232.071814][ T856] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.091129][ T856] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 232.100572][ T856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=8 [ 232.109554][ T10] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 232.117500][ T856] usb 2-1: Product: syz [ 232.122388][ T856] usb 2-1: Manufacturer: syz [ 232.127216][ T856] usb 2-1: SerialNumber: syz [ 232.134216][ T856] usb 2-1: config 0 descriptor?? [ 232.139973][ T8420] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 232.149832][ T856] ati_remote 2-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 232.217740][ T8440] netlink: 'syz.0.748': attribute type 39 has an invalid length. [ 232.266367][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 134, changing to 11 [ 232.278187][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 26337, setting to 1024 [ 232.293517][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 232.302880][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.314838][ T10] usb 3-1: config 0 descriptor?? [ 232.322620][ T8433] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 232.357681][ T8420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.385038][ T8420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.405670][ T856] usb 2-1: USB disconnect, device number 69 [ 232.433243][ T8445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.443526][ T8445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.581342][ T1072] gspca_sunplus: reg_w_riv err -71 [ 232.591806][ T1072] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 232.603293][ T1072] usb 4-1: USB disconnect, device number 66 [ 232.636268][ T10] ath6kl: Failed to submit usb control message: -71 [ 232.644604][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 232.651659][ T10] ath6kl: Unable to send get target info: -71 [ 232.659550][ T10] ath6kl: Failed to init ath6kl core: -71 [ 232.682413][ T10] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 232.704575][ T10] usb 3-1: USB disconnect, device number 58 [ 233.368310][ T8457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.406192][ T8457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.467204][ T8462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.477207][ T8462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.553807][ T1072] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 233.603960][ T5885] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 233.704269][ T1072] usb 4-1: Using ep0 maxpacket: 16 [ 233.716780][ T1072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 233.741250][ T1072] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 233.761102][ T1072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.769873][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 233.782560][ T5885] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 233.793788][ T1072] usb 4-1: Product: syz [ 233.797987][ T1072] usb 4-1: Manufacturer: syz [ 233.813018][ T5885] usb 3-1: can't read configurations, error -22 [ 233.833294][ T1072] usb 4-1: SerialNumber: syz [ 233.844447][ T1072] usb 4-1: config 0 descriptor?? [ 233.861529][ T1072] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 233.881599][ T1072] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 233.944105][ T5885] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 234.056163][ T8460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.075084][ T8460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.114114][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 234.123231][ T5885] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 234.131616][ T5885] usb 3-1: can't read configurations, error -22 [ 234.138455][ T5885] usb usb3-port1: attempt power cycle [ 234.328715][ T8474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.337872][ T8474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.483850][ T5885] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 234.492615][ T1072] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 234.506356][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 234.515966][ T5885] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 234.527392][ T5885] usb 3-1: can't read configurations, error -22 [ 234.663898][ T5885] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 234.684372][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 234.692563][ T5885] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 234.700626][ T5885] usb 3-1: can't read configurations, error -22 [ 234.707391][ T5885] usb usb3-port1: unable to enumerate USB device [ 234.767291][ T8479] (syz.1.759,8479,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 234.776257][ T8479] (syz.1.759,8479,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 234.825580][ T8482] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 234.861901][ T8481] IPVS: stopping backup sync thread 8482 ... [ 235.313817][ T10] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 235.365416][ T1072] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 235.373589][ T1072] em28xx 4-1:0.0: board has no eeprom [ 235.434056][ T1072] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 235.442145][ T1072] em28xx 4-1:0.0: dvb set to bulk mode. [ 235.448006][ T5885] em28xx 4-1:0.0: Binding DVB extension [ 235.460662][ T1072] usb 4-1: USB disconnect, device number 67 [ 235.468008][ T1072] em28xx 4-1:0.0: Disconnecting em28xx [ 235.479874][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 235.496279][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 235.499409][ T5885] em28xx 4-1:0.0: Registering input extension [ 235.504249][ T10] usb 2-1: can't read configurations, error -71 [ 235.511763][ T1072] em28xx 4-1:0.0: Closing input extension [ 235.533270][ T1072] em28xx 4-1:0.0: Freeing device [ 235.844148][ T8501] netlink: 'syz.0.765': attribute type 1 has an invalid length. [ 235.853626][ T8501] netlink: 232 bytes leftover after parsing attributes in process `syz.0.765'. [ 235.864894][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'. [ 236.254006][ T1072] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 236.403970][ T1072] usb 4-1: Using ep0 maxpacket: 8 [ 236.419578][ T1072] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 236.428489][ T1072] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.439018][ T1072] usb 4-1: config 0 has no interface number 0 [ 236.447561][ T1072] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 236.457082][ T1072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.465429][ T1072] usb 4-1: Product: syz [ 236.469606][ T1072] usb 4-1: Manufacturer: syz [ 236.474484][ T1072] usb 4-1: SerialNumber: syz [ 236.485197][ T1072] usb 4-1: config 0 descriptor?? [ 236.564134][ T10] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 236.699464][ T8512] syzkaller1: entered promiscuous mode [ 236.705227][ T8512] syzkaller1: entered allmulticast mode [ 236.715915][ T10] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 236.718572][ T8512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.729022][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 236.738186][ T8512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.743107][ T10] usb 2-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 236.753670][ T8512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.760747][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.769321][ T8540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.779261][ T10] usb 2-1: config 0 descriptor?? [ 236.786690][ T5826] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 236.790791][ T8524] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 236.811159][ T8512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.819114][ T8540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.827913][ T1072] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 236.836337][ T1072] uvcvideo 4-1:0.31: No valid video chain found. [ 236.953974][ T5826] usb 3-1: Using ep0 maxpacket: 16 [ 236.965301][ T5826] usb 3-1: config 0 has an invalid interface number: 140 but max is 0 [ 236.973632][ T5826] usb 3-1: config 0 has no interface number 0 [ 236.980237][ T5826] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=7e.fc [ 236.991505][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.008970][ T5826] usb 3-1: config 0 descriptor?? [ 237.180406][ T8512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.190855][ T8512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.222675][ T10] saitek 0003:0738:1709.001C: unknown main item tag 0x0 [ 237.226804][ T5826] usb 3-1: USB disconnect, device number 63 [ 237.229832][ T10] saitek 0003:0738:1709.001C: item fetching failed at offset 3/5 [ 237.244174][ T10] saitek 0003:0738:1709.001C: parse failed [ 237.250081][ T10] saitek 0003:0738:1709.001C: probe with driver saitek failed with error -22 [ 237.426368][ T8524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.435174][ T8524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.444261][ T5826] usb 2-1: USB disconnect, device number 71 [ 238.123847][ T5826] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 238.275239][ T5826] usb 3-1: device descriptor read/64, error -71 [ 238.524925][ T5826] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 238.673820][ T5826] usb 3-1: device descriptor read/64, error -71 [ 238.794129][ T5826] usb usb3-port1: attempt power cycle [ 238.794680][ T10] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 238.963907][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 238.982295][ T10] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 239.001591][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.023042][ T10] usb 2-1: config 0 descriptor?? [ 239.046835][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 239.143807][ T5826] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 239.184488][ T5826] usb 3-1: device descriptor read/8, error -71 [ 239.217387][ T1072] usb 4-1: USB disconnect, device number 68 [ 239.426047][ T5826] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 239.475668][ T5826] usb 3-1: device descriptor read/8, error -71 [ 239.617801][ T5826] usb usb3-port1: unable to enumerate USB device [ 239.689935][ T8603] netlink: 'syz.0.789': attribute type 1 has an invalid length. [ 239.701478][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.789'. [ 239.716350][ T8603] openvswitch: netlink: Flow key attr not present in new flow. [ 239.888207][ T8605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.944352][ T8605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.414091][ T10] gspca_vc032x: reg_w err -110 [ 240.418965][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 240.424587][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 240.429928][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 240.435460][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 240.440771][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 240.446439][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 240.451752][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 240.457288][ T5872] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 240.464958][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 240.470592][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 240.476049][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 240.482107][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 240.487567][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 240.492957][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 240.498308][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 240.503625][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 240.509046][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 240.523765][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 240.529120][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 240.535109][ T10] gspca_vc032x: Unknown sensor... [ 240.540249][ T10] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 240.623783][ T5872] usb 4-1: Using ep0 maxpacket: 32 [ 240.635504][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.663766][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.673661][ T5872] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 240.703819][ T5872] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 240.712896][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.735266][ T5872] usb 4-1: config 0 descriptor?? [ 241.146702][ T5872] steelseries 0003:1038:1410.001D: unknown main item tag 0x0 [ 241.154334][ T5872] steelseries 0003:1038:1410.001D: unbalanced collection at end of report description [ 241.164565][ T5872] steelseries 0003:1038:1410.001D: parse failed [ 241.170892][ T5872] steelseries 0003:1038:1410.001D: probe with driver steelseries failed with error -22 [ 241.358334][ T8607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.375092][ T8607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.383220][ T8582] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 241.409997][ T5872] usb 4-1: USB disconnect, device number 69 [ 241.475418][ T5826] usb 2-1: USB disconnect, device number 72 [ 241.598486][ T8621] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 241.725821][ T8633] netlink: 348 bytes leftover after parsing attributes in process `syz.2.799'. [ 241.840376][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.801'. [ 241.853808][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.801'. [ 241.914687][ T856] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 241.999200][ T8646] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 242.032235][ T8648] netlink: 104 bytes leftover after parsing attributes in process `syz.2.803'. [ 242.098203][ T856] usb 2-1: unable to get BOS descriptor or descriptor too short [ 242.111872][ T856] usb 2-1: not running at top speed; connect to a high speed hub [ 242.133514][ T856] usb 2-1: config 140 has an invalid interface number: 70 but max is 0 [ 242.149044][ T856] usb 2-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 242.188779][ T856] usb 2-1: config 140 has no interface number 0 [ 242.200070][ T856] usb 2-1: config 140 interface 70 altsetting 6 has an endpoint descriptor with address 0x91, changing to 0x81 [ 242.212864][ T856] usb 2-1: config 140 interface 70 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.226908][ T856] usb 2-1: config 140 interface 70 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.279268][ T856] usb 2-1: config 140 interface 70 has no altsetting 0 [ 242.291801][ T856] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=19.a5 [ 242.301706][ T856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.310192][ T856] usb 2-1: Product: syz [ 242.315427][ T856] usb 2-1: Manufacturer: syz [ 242.320139][ T856] usb 2-1: SerialNumber: syz [ 242.378724][ T8657] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 242.413354][ T8657] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 242.430929][ T8657] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 242.516803][ T8664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.531717][ T8664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.546985][ T8664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.811'. [ 242.556407][ T856] peak_usb 2-1:140.70 can0: unable to request usb[type=0 value=1] err=-71 [ 242.561234][ T8666] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.587453][ T856] peak_usb 2-1:140.70: unable to read PCAN-USB Pro firmware info (err -71) [ 242.589945][ T8666] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.603383][ T8666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.635046][ T8666] cgroup: No subsys list or none specified [ 242.641422][ T8666] netdevsim netdevsim3: Firmware load for 'nel/address_bits0/../file0' refused, path contains '..' component [ 242.655922][ T856] peak_usb 2-1:140.70: probe with driver peak_usb failed with error -71 [ 242.673902][ T856] usb 2-1: USB disconnect, device number 73 [ 242.843863][ T5872] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 242.953954][ T1072] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 242.983810][ T5872] usb 3-1: device descriptor read/64, error -71 [ 243.105489][ T1072] usb 4-1: config 0 has an invalid interface number: 182 but max is 0 [ 243.113813][ T1072] usb 4-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config [ 243.125027][ T1072] usb 4-1: config 0 has no interface number 0 [ 243.132680][ T1072] usb 4-1: too many endpoints for config 0 interface 182 altsetting 96: 185, using maximum allowed: 30 [ 243.147945][ T1072] usb 4-1: config 0 interface 182 altsetting 96 has 0 endpoint descriptors, different from the interface descriptor's value: 185 [ 243.162154][ T1072] usb 4-1: config 0 interface 182 has no altsetting 0 [ 243.181566][ T1072] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 243.192638][ T1072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.201282][ T1072] usb 4-1: Product: syz [ 243.206090][ T1072] usb 4-1: Manufacturer: syz [ 243.210896][ T1072] usb 4-1: SerialNumber: syz [ 243.218328][ T1072] usb 4-1: config 0 descriptor?? [ 243.243874][ T5872] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 243.383889][ T5872] usb 3-1: device descriptor read/64, error -71 [ 243.437515][ T1072] imon 4-1:0.182: unable to register, err -19 [ 243.449617][ T1072] usb 4-1: USB disconnect, device number 70 [ 243.494175][ T5872] usb usb3-port1: attempt power cycle [ 243.535085][ T8681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.817'. [ 243.629435][ T8686] binder: 8684:8686 ioctl 400448c9 200000000040 returned -22 [ 243.653177][ T8686] binder: 8684:8686 ioctl 8933 200000000180 returned -22 [ 243.833807][ T5872] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 243.857051][ T5872] usb 3-1: device descriptor read/8, error -71 [ 244.093809][ T5872] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 244.114527][ T5872] usb 3-1: device descriptor read/8, error -71 [ 244.213802][ T1072] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 244.234190][ T5872] usb usb3-port1: unable to enumerate USB device [ 244.363795][ T1072] usb 4-1: Using ep0 maxpacket: 8 [ 244.370997][ T1072] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 244.381033][ T1072] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 244.390875][ T1072] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 244.400950][ T1072] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.415416][ T1072] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 244.424675][ T1072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.640959][ T1072] usb 4-1: GET_CAPABILITIES returned 0 [ 244.647790][ T1072] usbtmc 4-1:16.0: can't read capabilities [ 244.847208][ T5872] usb 4-1: USB disconnect, device number 71 [ 245.546907][ T8699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.555664][ T8700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.561666][ T8699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.567615][ T8700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.592956][ T8699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.605469][ T8699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.662760][ T8702] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 245.693790][ T856] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 245.833797][ T856] usb 4-1: device descriptor read/64, error -71 [ 246.083871][ T856] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 246.213541][ T8711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.223427][ T856] usb 4-1: device descriptor read/64, error -71 [ 246.231155][ T8711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.334082][ T856] usb usb4-port1: attempt power cycle [ 246.683800][ T856] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 246.714426][ T856] usb 4-1: device descriptor read/8, error -71 [ 246.753501][ T8715] bpf: Bad value for 'mode' [ 246.798229][ T8717] tap0: tun_chr_ioctl cmd 1074025675 [ 246.803539][ T8717] tap0: persist enabled [ 246.811304][ T8717] PM: Enabling pm_trace changes system date and time during resume. [ 246.811304][ T8717] PM: Correct system time has to be restored manually after resume. [ 246.964042][ T856] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 246.985294][ T856] usb 4-1: device descriptor read/8, error -71 [ 247.013865][ T5929] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 247.094165][ T856] usb usb4-port1: unable to enumerate USB device [ 247.163842][ T5929] usb 2-1: Using ep0 maxpacket: 8 [ 247.170448][ T5929] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.180858][ T5929] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 247.191975][ T5929] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 247.201364][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.209419][ T5929] usb 2-1: Product: syz [ 247.213789][ T5929] usb 2-1: Manufacturer: ࡃ [ 247.218470][ T5929] usb 2-1: SerialNumber: syz [ 248.019312][ T8729] overlayfs: failed to resolve './file0': -2 [ 248.077103][ T8731] netlink: 'syz.0.834': attribute type 2 has an invalid length. [ 248.087922][ T8731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.097220][ T8731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.486337][ T8734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.496162][ T8734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.507447][ T8734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.517089][ T8734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.780621][ T8740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.791989][ T8740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.854157][ T856] usb 4-1: new low-speed USB device number 76 using dummy_hcd [ 249.015853][ T856] usb 4-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 249.025214][ T856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.036621][ T856] usb 4-1: config 0 descriptor?? [ 249.046056][ T856] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 249.244980][ T856] pwc: Failed to set LED on/off time (-71) [ 249.252092][ T856] pwc: send_video_command error -71 [ 249.257520][ T856] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 249.265245][ T856] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 249.276425][ T856] usb 4-1: USB disconnect, device number 76 [ 249.360936][ T8742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.371782][ T8742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.708151][ T5929] usb 2-1: 0:2 : does not exist [ 249.730740][ T5929] usb 2-1: USB disconnect, device number 75 [ 250.695452][ T1072] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 250.713801][ T5929] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 250.833940][ T1072] usb 4-1: device descriptor read/64, error -71 [ 250.865462][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.876828][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.888249][ T5929] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 250.897391][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.907338][ T5929] usb 3-1: config 0 descriptor?? [ 251.073807][ T1072] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 251.203838][ T1072] usb 4-1: device descriptor read/64, error -71 [ 251.314058][ T1072] usb usb4-port1: attempt power cycle [ 251.322928][ T5929] stadia 0003:18D1:9400.001E: unknown main item tag 0x0 [ 251.333411][ T5929] stadia 0003:18D1:9400.001E: unknown main item tag 0x0 [ 251.340502][ T5929] stadia 0003:18D1:9400.001E: unknown main item tag 0x0 [ 251.347662][ T5929] stadia 0003:18D1:9400.001E: unknown main item tag 0x0 [ 251.354717][ T5929] stadia 0003:18D1:9400.001E: unknown main item tag 0x0 [ 251.364488][ T5929] stadia 0003:18D1:9400.001E: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.2-1/input0 [ 251.375929][ T5929] stadia 0003:18D1:9400.001E: no inputs found [ 251.382008][ T5929] stadia 0003:18D1:9400.001E: force feedback init failed [ 251.663867][ T1072] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 251.692491][ T1072] usb 4-1: device descriptor read/8, error -71 [ 251.864657][ T5885] usb 3-1: USB disconnect, device number 72 [ 251.933935][ T1072] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 251.954631][ T1072] usb 4-1: device descriptor read/8, error -71 [ 252.064122][ T1072] usb usb4-port1: unable to enumerate USB device [ 252.509274][ T8765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.843'. [ 252.545253][ T8767] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.532944][ T8783] netlink: 40 bytes leftover after parsing attributes in process `syz.0.849'. [ 253.545968][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.850'. [ 253.649146][ T8792] netlink: 128 bytes leftover after parsing attributes in process `syz.2.852'. [ 253.659600][ T8792] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 253.877897][ T8804] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 254.123983][ T5885] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 254.132064][ T8806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.143105][ T8806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.325816][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.337201][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.347397][ T5885] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 254.356626][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.368493][ T5885] usb 3-1: config 0 descriptor?? [ 254.711433][ T8808] netlink: 'syz.0.857': attribute type 13 has an invalid length. [ 254.719912][ T8808] macvtap0: entered promiscuous mode [ 254.730886][ T8808] macvtap0: refused to change device tx_queue_len [ 254.786461][ T5885] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 254.810879][ T5885] cp2112 0003:10C4:EA90.001F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 254.815164][ T8812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.833096][ T8812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.885613][ T5885] cp2112 0003:10C4:EA90.001F: Part Number: 0x82 Device Version: 0xFE [ 255.059073][ T8812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.067967][ T8812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.080029][ T8812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.089471][ T5885] cp2112 0003:10C4:EA90.001F: error requesting SMBus config [ 255.089486][ T8812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.102064][ T5885] cp2112 0003:10C4:EA90.001F: probe with driver cp2112 failed with error -71 [ 255.121555][ T5885] usb 3-1: USB disconnect, device number 73 [ 255.194158][ T5872] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 255.364013][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 255.373516][ T5872] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 255.382797][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.390929][ T5872] usb 4-1: Product: syz [ 255.395408][ T5872] usb 4-1: Manufacturer: syz [ 255.400270][ T5872] usb 4-1: SerialNumber: syz [ 255.407181][ T5872] usb 4-1: config 0 descriptor?? [ 255.414784][ T5872] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 255.690325][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.699792][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.815866][ T5872] usb 4-1: clie_3_5_startup: get interface number bad return length: 0 [ 255.825476][ T5872] visor 4-1:0.0: probe with driver visor failed with error -5 [ 255.933887][ T10] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 256.038782][ T8818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.049378][ T8818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.058920][ T8818] overlayfs: failed to resolve '/@0]z@vC<_!Qnu];^*pB]7e>I{Gd5˖&& [ 256.058920][ T8818] _ initial count (68745806752 ns). Using initial count to start timer. [ 262.164664][ T8895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.275215][ T8895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.289232][ T8895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.544234][ T5929] pwc: recv_control_msg error -71 req 04 val 1200 [ 262.564397][ T5929] pwc: Registered as video103. [ 262.576460][ T5929] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 262.606717][ T5929] usb 4-1: USB disconnect, device number 84 [ 263.013845][ T5885] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 263.030770][ T8931] usb usb8: usbfs: process 8931 (syz.3.896) did not claim interface 46 before use [ 263.031523][ T8932] netlink: 'syz.3.896': attribute type 10 has an invalid length. [ 263.057952][ T8932] batman_adv: batadv0: Adding interface: netdevsim0 [ 263.065047][ T5838] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 263.066267][ T8932] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.097613][ T8932] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 263.163942][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 263.171174][ T5885] usb 3-1: config 249 has an invalid interface number: 212 but max is 0 [ 263.180463][ T5885] usb 3-1: config 249 has no interface number 0 [ 263.188502][ T5885] usb 3-1: config 249 interface 212 altsetting 32 endpoint 0xB has invalid maxpacket 19266, setting to 64 [ 263.200334][ T5885] usb 3-1: config 249 interface 212 has no altsetting 0 [ 263.212037][ T5885] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=96.8f [ 263.223217][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.231668][ T5885] usb 3-1: Product: syz [ 263.236400][ T5885] usb 3-1: Manufacturer: syz [ 263.241109][ T5885] usb 3-1: SerialNumber: syz [ 263.314930][ T5929] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 263.455501][ T5929] usb 2-1: device descriptor read/64, error -71 [ 263.473402][ T5885] usb 3-1: USB disconnect, device number 82 [ 263.573855][ T1072] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 263.715547][ T5929] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 263.723913][ T1072] usb 4-1: Using ep0 maxpacket: 32 [ 263.730676][ T1072] usb 4-1: config 0 has an invalid interface number: 145 but max is 1 [ 263.739027][ T1072] usb 4-1: config 0 has an invalid interface number: 43 but max is 1 [ 263.747233][ T1072] usb 4-1: config 0 has no interface number 0 [ 263.753303][ T1072] usb 4-1: config 0 has no interface number 1 [ 263.759485][ T1072] usb 4-1: config 0 interface 43 altsetting 250 bulk endpoint 0xF has invalid maxpacket 1023 [ 263.769725][ T1072] usb 4-1: config 0 interface 43 altsetting 250 has a duplicate endpoint with address 0x2, skipping [ 263.780579][ T1072] usb 4-1: config 0 interface 43 altsetting 250 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 263.792359][ T1072] usb 4-1: config 0 interface 43 altsetting 250 endpoint 0x8E has an invalid bInterval 180, changing to 11 [ 263.804369][ T1072] usb 4-1: config 0 interface 43 altsetting 250 endpoint 0x8E has invalid maxpacket 16902, setting to 1024 [ 263.815884][ T1072] usb 4-1: config 0 interface 43 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 263.830314][ T1072] usb 4-1: config 0 interface 145 has no altsetting 0 [ 263.838167][ T1072] usb 4-1: config 0 interface 43 has no altsetting 0 [ 263.847210][ T1072] usb 4-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a [ 263.858361][ T1072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.866518][ T5929] usb 2-1: device descriptor read/64, error -71 [ 263.883074][ T1072] usb 4-1: Product: syz [ 263.887866][ T1072] usb 4-1: Manufacturer: syz [ 263.892510][ T1072] usb 4-1: SerialNumber: syz [ 263.900768][ T1072] usb 4-1: config 0 descriptor?? [ 263.974286][ T5929] usb usb2-port1: attempt power cycle [ 264.012567][ T8952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.025010][ T8952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.042776][ T8951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.059838][ T8951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.069077][ T8951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.082298][ T8951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.098425][ T8951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.112205][ T8951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.116945][ T1072] keyspan_pda 4-1:0.145: required endpoints missing [ 264.121012][ T8954] hfsplus: unable to find HFS+ superblock [ 264.139741][ T8951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.140497][ T1072] keyspan_pda 4-1:0.43: Keyspan PDA converter detected [ 264.150624][ T8951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.157039][ T8955] 9pnet_fd: Insufficient options for proto=fd [ 264.167894][ T8951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.189122][ T8951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.204165][ T1072] usb 4-1: Keyspan PDA converter now attached to ttyUSB0 [ 264.227086][ T1072] usb 4-1: USB disconnect, device number 85 [ 264.242617][ T1072] keyspan_pda ttyUSB0: Keyspan PDA converter now disconnected from ttyUSB0 [ 264.256887][ T1072] keyspan_pda 4-1:0.43: device disconnected [ 264.313890][ T5929] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 264.334243][ T5929] usb 2-1: device descriptor read/8, error -71 [ 264.513808][ T856] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 264.573829][ T5929] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 264.594966][ T5929] usb 2-1: device descriptor read/8, error -71 [ 264.682992][ T8962] netlink: 168 bytes leftover after parsing attributes in process `syz.3.907'. [ 264.685378][ T856] usb 3-1: config 0 has an invalid interface number: 165 but max is 0 [ 264.701244][ T856] usb 3-1: config 0 has no interface number 0 [ 264.704412][ T5929] usb usb2-port1: unable to enumerate USB device [ 264.711244][ T856] usb 3-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice=c3.93 [ 264.743068][ T856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.773447][ T856] usb 3-1: Product: syz [ 264.783576][ T856] usb 3-1: Manufacturer: syz [ 264.795783][ T856] usb 3-1: SerialNumber: syz [ 264.815231][ T856] usb 3-1: config 0 descriptor?? [ 264.833152][ T856] usb 3-1: unsupported MDLM descriptors [ 264.912049][ T1142] Bluetooth: hci4: Frame reassembly failed (-84) [ 264.924685][ T8974] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 264.956510][ T8977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.966845][ T8977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.999590][ T30] audit: type=1400 audit(1760341532.818:371): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8973 comm="syz.3.909" [ 265.035552][ T856] usb 3-1: USB disconnect, device number 83 [ 265.529972][ T8979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.542180][ T8979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.552653][ T8979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.564255][ T8979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.843871][ T5929] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 265.995370][ T5929] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.024135][ T5929] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 266.033202][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.056903][ T5929] usb 3-1: config 0 descriptor?? [ 266.076591][ T5929] pwc: Askey VC010 type 2 USB webcam detected. [ 266.193277][ T30] audit: type=1326 audit(1760341534.008:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8985 comm="syz.0.914" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e2a98eec9 code=0x0 [ 266.431709][ T8994] PKCS8: Unsupported PKCS#8 version [ 266.482120][ T5929] pwc: recv_control_msg error -32 req 02 val 2b00 [ 266.499353][ T8987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.508158][ T8987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.568214][ T8997] raw_sendmsg: syz.1.917 forgot to set AF_INET. Fix it! [ 266.692414][ T8981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.704282][ T8981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.712102][ T9001] comedi comedi3: no devices specified [ 266.720858][ T5929] pwc: recv_control_msg error -71 req 02 val 2c00 [ 266.729309][ T5929] pwc: recv_control_msg error -71 req 04 val 1000 [ 266.736402][ T5929] pwc: recv_control_msg error -71 req 04 val 1300 [ 266.743460][ T5929] pwc: recv_control_msg error -71 req 04 val 1400 [ 266.750662][ T5929] pwc: recv_control_msg error -71 req 02 val 2000 [ 266.757680][ T5929] pwc: recv_control_msg error -71 req 02 val 2100 [ 266.764654][ T5929] pwc: recv_control_msg error -71 req 04 val 1500 [ 266.771505][ T5929] pwc: recv_control_msg error -71 req 02 val 2500 [ 266.778506][ T5929] pwc: recv_control_msg error -71 req 02 val 2400 [ 266.785444][ T5929] pwc: recv_control_msg error -71 req 02 val 2600 [ 266.794771][ T5929] pwc: recv_control_msg error -71 req 02 val 2900 [ 266.801765][ T5929] pwc: recv_control_msg error -71 req 02 val 2800 [ 266.809918][ T5929] pwc: recv_control_msg error -71 req 04 val 1100 [ 266.817034][ T5929] pwc: recv_control_msg error -71 req 04 val 1200 [ 266.827597][ T5929] pwc: Registered as video103. [ 266.836291][ T5929] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input31 [ 266.849704][ T5929] usb 3-1: USB disconnect, device number 84 [ 266.963835][ T52] Bluetooth: hci4: command 0x1003 tx timeout [ 266.963850][ T5838] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 267.071604][ T9017] netlink: 'syz.3.922': attribute type 25 has an invalid length. [ 267.333802][ T856] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 267.463848][ T856] usb 4-1: device descriptor read/64, error -71 [ 267.563796][ T5872] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 267.723884][ T5872] usb 3-1: Using ep0 maxpacket: 16 [ 267.729255][ T856] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 267.740170][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.752241][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.762430][ T5872] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 267.777399][ T5872] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 267.786602][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.796568][ T5872] usb 3-1: config 0 descriptor?? [ 267.873797][ T856] usb 4-1: device descriptor read/64, error -71 [ 267.984192][ T856] usb usb4-port1: attempt power cycle [ 268.016921][ T5872] usbhid 3-1:0.0: can't add hid device: -71 [ 268.022937][ T5872] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 268.034952][ T5872] usb 3-1: USB disconnect, device number 85 [ 268.334142][ T856] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 268.354482][ T856] usb 4-1: device descriptor read/8, error -71 [ 268.463841][ T5872] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 268.603880][ T856] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 268.633859][ T5872] usb 3-1: Using ep0 maxpacket: 16 [ 268.639831][ T856] usb 4-1: device descriptor read/8, error -71 [ 268.646939][ T5872] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.657254][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 268.668345][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 268.678055][ T5872] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 268.687738][ T5872] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.701752][ T5872] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 268.710913][ T5872] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 268.718987][ T5872] usb 3-1: Manufacturer: syz [ 268.726813][ T5872] usb 3-1: config 0 descriptor?? [ 268.754101][ T856] usb usb4-port1: unable to enumerate USB device [ 268.983857][ T5872] rc_core: IR keymap rc-hauppauge not found [ 268.989901][ T5872] Registered IR keymap rc-empty [ 268.994936][ T5872] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 269.013942][ T5872] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 269.034670][ T5872] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 269.047991][ T5872] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input32 [ 269.062356][ T5872] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 269.083866][ T5872] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 269.104030][ T5872] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 269.124049][ T5872] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 269.141421][ T9033] netlink: 60 bytes leftover after parsing attributes in process `syz.1.927'. [ 269.151999][ T9033] netlink: 60 bytes leftover after parsing attributes in process `syz.1.927'. [ 269.152895][ T5872] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 269.183961][ T5872] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 269.205373][ T5872] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 269.235074][ T5872] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 269.264007][ T5872] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 269.292960][ T5872] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 269.317688][ T9039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.326540][ T5872] mceusb 3-1:0.0: Registered І with mce emulator interface version 1 [ 269.326565][ T5872] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 269.345783][ T9039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.426134][ T5929] usb 3-1: USB disconnect, device number 86 [ 269.892548][ T9044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.901428][ T9044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.926076][ T9044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.935999][ T9044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.137485][ T9052] overlayfs: invalid origin (000000ca67081e5f112bed8ab4416592a5356da96db48150eae0040000006fe65c239a40022f00000000000000000000) [ 270.235155][ T5929] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 270.405499][ T5929] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 270.417744][ T5929] usb 3-1: config 0 has no interface number 0 [ 270.427123][ T5929] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 270.436590][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.444956][ T5929] usb 3-1: Product: syz [ 270.450414][ T5929] usb 3-1: Manufacturer: syz [ 270.456552][ T5929] usb 3-1: SerialNumber: syz [ 270.465103][ T5929] usb 3-1: config 0 descriptor?? [ 270.603839][ T5872] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 270.702534][ T5929] usb 3-1: Firmware version (0.0) predates our first public release. [ 270.725977][ T5929] usb 3-1: Please update to version 0.2 or newer [ 270.785232][ T5872] usb 2-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.802268][ T5929] usb 3-1: USB disconnect, device number 87 [ 270.813898][ T5872] usb 2-1: config 1 interface 0 has no altsetting 0 [ 270.831750][ T9074] netlink: 'syz.0.939': attribute type 1 has an invalid length. [ 270.832239][ T5872] usb 2-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.40 [ 270.854314][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.862469][ T5872] usb 2-1: Product: syz [ 270.867006][ T5872] usb 2-1: Manufacturer: syz [ 270.871626][ T5872] usb 2-1: SerialNumber: syz [ 270.882818][ T9065] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 270.921507][ T9079] tmpfs: Bad value for 'mpol' [ 270.980166][ T9081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.991479][ T9081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.149297][ T5872] usbhid 2-1:1.0: can't add hid device: -71 [ 271.165965][ T5872] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 271.172035][ T9094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.196565][ T5872] usb 2-1: USB disconnect, device number 80 [ 271.197279][ T9094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.230031][ T9094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.245072][ T9094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.554058][ T9115] netlink: 'syz.3.952': attribute type 11 has an invalid length. [ 271.561911][ T9115] netlink: 8420 bytes leftover after parsing attributes in process `syz.3.952'. [ 271.625004][ T9115] netlink: 'syz.3.952': attribute type 4 has an invalid length. [ 271.632769][ T9115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.952'. [ 271.695048][ T5872] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 271.763824][ T856] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 271.848457][ T9118] kvm: kvm [9117]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 271.857605][ T9118] kvm: kvm [9117]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 271.881675][ T5872] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 271.891221][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.899488][ T5872] usb 2-1: Product: syz [ 271.904475][ T5872] usb 2-1: Manufacturer: syz [ 271.909147][ T5872] usb 2-1: SerialNumber: syz [ 271.915891][ T5872] usb 2-1: config 0 descriptor?? [ 271.936181][ T856] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.948021][ T856] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.959303][ T856] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.970394][ T856] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 271.979524][ T856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.990816][ T856] usb 3-1: config 0 descriptor?? [ 272.123307][ T5872] hso 2-1:0.0: Failed to find INT IN ep [ 272.129955][ T5872] usb-storage 2-1:0.0: USB Mass Storage device detected [ 272.131021][ T9127] dns_resolver: Unsupported content type (254) [ 272.252178][ T856] usb 3-1: string descriptor 0 read error: -71 [ 272.267838][ T9131] No source specified [ 272.269222][ T856] usb 3-1: USB disconnect, device number 88 [ 272.332964][ T1072] usb 2-1: USB disconnect, device number 81 [ 272.346521][ T9136] binder: Bad value for 'stats' [ 272.354542][ T9137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.366802][ T9137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.378005][ T9137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.958'. [ 272.513838][ T5929] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 272.663912][ T5929] usb 4-1: Using ep0 maxpacket: 8 [ 272.670632][ T5929] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 272.680864][ T5929] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 272.689974][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.698064][ T5929] usb 4-1: Product: syz [ 272.702249][ T5929] usb 4-1: Manufacturer: syz [ 272.706979][ T5929] usb 4-1: SerialNumber: syz [ 272.713481][ T5929] usb 4-1: config 0 descriptor?? [ 272.721381][ T5929] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 272.730624][ T5929] usb 4-1: setting power ON [ 272.735994][ T5929] dvb-usb: bulk message failed: -22 (2/0) [ 272.744842][ T5929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 272.755886][ T5929] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 272.764483][ T5929] usb 4-1: media controller created [ 272.789905][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 272.826714][ T5929] usb 4-1: selecting invalid altsetting 6 [ 272.835380][ T5929] usb 4-1: digital interface selection failed (-22) [ 272.842046][ T5929] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 272.851749][ T5929] usb 4-1: setting power OFF [ 272.858708][ T5929] dvb-usb: bulk message failed: -22 (2/0) [ 272.865761][ T5929] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 272.875401][ T5929] (NULL device *): no alternate interface [ 272.951100][ T5929] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 272.979807][ T5929] usb 4-1: USB disconnect, device number 90 [ 273.012109][ T9145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.044167][ T9145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.213854][ T1072] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 273.293809][ T5928] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 273.367132][ T1072] usb 2-1: config 162 has an invalid interface number: 251 but max is 1 [ 273.375604][ T1072] usb 2-1: config 162 has an invalid interface number: 209 but max is 1 [ 273.384174][ T1072] usb 2-1: config 162 has no interface number 0 [ 273.390443][ T1072] usb 2-1: config 162 has no interface number 1 [ 273.396798][ T1072] usb 2-1: config 162 interface 251 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 273.410048][ T1072] usb 2-1: config 162 interface 209 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 273.420994][ T1072] usb 2-1: config 162 interface 209 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 273.432294][ T1072] usb 2-1: config 162 interface 209 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 273.444870][ T1072] usb 2-1: config 162 interface 209 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 273.456807][ T1072] usb 2-1: config 162 interface 209 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 273.468511][ T1072] usb 2-1: config 162 interface 209 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 273.482051][ T1072] usb 2-1: config 162 interface 251 has no altsetting 0 [ 273.489376][ T1072] usb 2-1: config 162 interface 209 has no altsetting 0 [ 273.499580][ T5928] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 273.509263][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 273.517920][ T5928] usb 3-1: Product: syz [ 273.522351][ T5928] usb 3-1: Manufacturer: syz [ 273.528186][ T5928] usb 3-1: SerialNumber: syz [ 273.528342][ T1072] usb 2-1: New USB device found, idVendor=1608, idProduct=0010, bcdDevice=4f.88 [ 273.543923][ T1072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.558945][ T5928] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 273.570189][ T1072] usb 2-1: Product: syz [ 273.576125][ T1072] usb 2-1: Manufacturer: syz [ 273.580795][ T1072] usb 2-1: SerialNumber: syz [ 273.729821][ T9155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.741691][ T9155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.803927][ T5872] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 273.815196][ T1072] io_edgeport 2-1:162.251: required endpoints missing [ 273.827642][ T1072] io_edgeport 2-1:162.209: Edgeport 2 port adapter converter detected [ 273.965319][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 273.977628][ T5872] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 273.978898][ T5928] vp7045: USB control message 'in' went wrong. [ 273.999084][ T5928] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 274.000475][ T9167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.015478][ T5928] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 274.018960][ T5872] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.030871][ T9167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.039999][ T5872] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.056506][ T5872] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 274.069733][ T5872] usb 4-1: config 7 interface 0 has no altsetting 0 [ 274.076491][ T5872] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 274.085967][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.266706][ T1072] usb 2-1: 豻皕퇌ꜧᨡ흭፴窾⨐찮팩જ₊ˤ⅟─ﬖ輷 믟긦엀В detected [ 274.331697][ T9168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.340785][ T9168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.428736][ T9168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.438338][ T9168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.467491][ T9143] netlink: 14 bytes leftover after parsing attributes in process `syz.1.960'. [ 274.485495][ T9143] bridge0: port 3(dummy0) entered disabled state [ 274.504476][ T5872] usbhid 4-1:7.0: can't add hid device: -71 [ 274.508469][ T9143] dummy0 (unregistering): left allmulticast mode [ 274.510496][ T5872] usbhid 4-1:7.0: probe with driver usbhid failed with error -71 [ 274.530969][ T5872] usb 4-1: USB disconnect, device number 91 [ 274.538487][ T9143] bridge0: port 3(dummy0) entered disabled state [ 274.545673][ T1072] usb 2-1: error in getting manufacturer descriptor: -32 [ 274.553463][ T1072] usb 2-1: error in getting boot descriptor: -32 [ 274.560562][ T1072] usb 2-1: Device Reported 0 serial ports vs. core thinking we have 2 ports, email greg@kroah.com this information. [ 274.590076][ T1072] usb 2-1: Direct firmware load for edgeport/down.fw failed with error -2 [ 274.598724][ T1072] usb 2-1: Falling back to sysfs fallback for: edgeport/down.fw [ 274.631407][ T9171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.640507][ T9171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.788356][ T9179] loop2: detected capacity change from 0 to 8 [ 274.796823][ T9179] Dev loop2: unable to read RDB block 8 [ 274.802391][ T9179] loop2: unable to read partition table [ 274.808675][ T9179] loop2: partition table beyond EOD, truncated [ 274.815170][ T9179] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 274.828049][ T9179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.837082][ T9179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.056544][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'. [ 275.099430][ T9184] netlink: 'syz.3.973': attribute type 1 has an invalid length. [ 275.107405][ T9184] netlink: 'syz.3.973': attribute type 1 has an invalid length. [ 275.117497][ T9184] netlink: 'syz.3.973': attribute type 11 has an invalid length. [ 275.125338][ T9184] netlink: 168 bytes leftover after parsing attributes in process `syz.3.973'. [ 275.394104][ T9187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.403177][ T9187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.082718][ T5872] usb 3-1: USB disconnect, device number 89 [ 276.130131][ T9191] tmpfs: Unknown parameter 'audit' [ 276.163933][ T31] INFO: task kworker/0:7:5935 blocked for more than 143 seconds. [ 276.171683][ T31] Not tainted syzkaller #0 [ 276.176694][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.185709][ T31] task:kworker/0:7 state:D stack:21032 pid:5935 tgid:5935 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 276.198025][ T31] Workqueue: usb_hub_wq hub_event [ 276.203135][ T31] Call Trace: [ 276.206538][ T31] [ 276.209601][ T31] __schedule+0x1798/0x4cc0 [ 276.214274][ T31] ? worker_thread+0x8a0/0xda0 [ 276.219096][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 276.224216][ T31] ? __lock_acquire+0xab9/0xd20 [ 276.229083][ T31] ? __pfx___schedule+0x10/0x10 [ 276.234424][ T31] ? schedule+0x91/0x360 [ 276.238773][ T31] schedule+0x165/0x360 [ 276.243046][ T31] schedule_timeout+0x9a/0x270 [ 276.247966][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 276.253383][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 276.258843][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.264165][ T31] ? wait_for_completion+0x267/0x5d0 [ 276.269464][ T31] wait_for_completion+0x2bf/0x5d0 [ 276.274709][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 276.280368][ T31] i2c_del_adapter+0x581/0x6e0 [ 276.285243][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 276.290564][ T31] ? dvb_usbv2_exit+0x85a/0x9e0 [ 276.295530][ T31] dvb_usbv2_probe+0x4ae/0x41a0 [ 276.300451][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 276.306531][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 276.313001][ T31] usb_probe_interface+0x668/0xc30 [ 276.318302][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 276.324038][ T31] really_probe+0x26d/0x9e0 [ 276.328563][ T31] __driver_probe_device+0x18c/0x2f0 [ 276.333978][ T31] driver_probe_device+0x4f/0x430 [ 276.339042][ T31] __device_attach_driver+0x2ce/0x530 [ 276.344675][ T31] bus_for_each_drv+0x251/0x2e0 [ 276.349559][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 276.355610][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 276.361008][ T31] __device_attach+0x2b8/0x400 [ 276.365973][ T31] ? __pfx___device_attach+0x10/0x10 [ 276.371306][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 276.376659][ T31] bus_probe_device+0x185/0x260 [ 276.381524][ T31] device_add+0x7b6/0xb50 [ 276.385974][ T31] usb_set_configuration+0x1a87/0x20e0 [ 276.391477][ T31] usb_generic_driver_probe+0x8d/0x150 [ 276.397320][ T31] usb_probe_device+0x1c4/0x390 [ 276.402189][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 276.407878][ T31] really_probe+0x26d/0x9e0 [ 276.413413][ T31] __driver_probe_device+0x18c/0x2f0 [ 276.418877][ T31] driver_probe_device+0x4f/0x430 [ 276.424045][ T31] __device_attach_driver+0x2ce/0x530 [ 276.429894][ T31] bus_for_each_drv+0x251/0x2e0 [ 276.434911][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 276.440853][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 276.446303][ T31] __device_attach+0x2b8/0x400 [ 276.451080][ T31] ? __pfx___device_attach+0x10/0x10 [ 276.456509][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 276.461718][ T31] bus_probe_device+0x185/0x260 [ 276.463828][ T5872] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 276.466723][ T31] device_add+0x7b6/0xb50 [ 276.478659][ T31] usb_new_device+0xa39/0x16f0 [ 276.483435][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 276.489316][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 276.494604][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.499815][ T31] hub_event+0x2958/0x4a20 [ 276.504461][ T31] ? __pfx_hub_event+0x10/0x10 [ 276.509237][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 276.515653][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 276.521051][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 276.526851][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 276.532600][ T31] process_scheduled_works+0xae1/0x17b0 [ 276.538246][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 276.544374][ T31] worker_thread+0x8a0/0xda0 [ 276.548990][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 276.555397][ T31] ? __kthread_parkme+0x7b/0x200 [ 276.560364][ T31] kthread+0x711/0x8a0 [ 276.564503][ T31] ? __pfx_worker_thread+0x10/0x10 [ 276.569633][ T31] ? __pfx_kthread+0x10/0x10 [ 276.574425][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 276.579633][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.585085][ T31] ? __pfx_kthread+0x10/0x10 [ 276.589690][ T31] ret_from_fork+0x4bc/0x870 [ 276.594362][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 276.599485][ T31] ? __switch_to_asm+0x39/0x70 [ 276.604356][ T31] ? __switch_to_asm+0x33/0x70 [ 276.609139][ T31] ? __pfx_kthread+0x10/0x10 [ 276.613783][ T31] ret_from_fork_asm+0x1a/0x30 [ 276.619605][ T31] [ 276.622670][ T31] [ 276.622670][ T31] Showing all locks held in the system: [ 276.630624][ T31] 1 lock held by khungtaskd/31: [ 276.633847][ T5872] usb 3-1: Using ep0 maxpacket: 16 [ 276.636284][ T31] #0: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 276.644030][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.653816][ T31] 6 locks held by kworker/1:2/1072: [ 276.662702][ T5872] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 276.667192][ T31] #0: ffff8880216e6948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 276.687975][ T31] #1: ffffc90003dffba0 ((work_completion)(&hub->events)){+.+.}-{0:0} [ 276.688028][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.688029][ T31] , at: process_scheduled_works+0x9ef/0x17b0 [ 276.688056][ T31] #2: [ 276.700327][ T5872] usb 3-1: config 0 descriptor?? [ 276.705091][ T31] ffff88802846c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 276.727867][ T31] #3: ffff888027802198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 276.737259][ T31] #4: ffff888053a7f160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 276.746715][ T31] #5: ffffffff8dfe26f0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0 [ 276.757255][ T31] 2 locks held by getty/5588: [ 276.761946][ T31] #0: ffff8880339dd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 276.771789][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 276.781978][ T31] 5 locks held by kworker/0:3/5872: [ 276.787421][ T31] #0: ffff8880216e6948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 276.798800][ T31] #1: ffffc9000438fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 276.810832][ T31] #2: ffff888144f34198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 276.820074][ T31] #3: ffff8880326e1198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 276.830615][ T31] #4: ffff88807af7c160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 276.839945][ T31] 5 locks held by kworker/0:7/5935: [ 276.845190][ T31] #0: ffff8880216e6948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 276.856567][ T31] #1: ffffc9000464fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 276.868553][ T31] #2: ffff888028444198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 276.877529][ T31] #3: ffff888025389198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 276.886838][ T31] #4: ffff888032998160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 276.896142][ T31] 4 locks held by udevd/5956: [ 276.900821][ T31] #0: ffff88807b0361c8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 276.909750][ T31] #1: ffff888058968888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 276.919209][ T31] #2: ffff888030b88788 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 276.930297][ T31] #3: ffff888025389198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 276.939725][ T31] [ 276.942053][ T31] ============================================= [ 276.942053][ T31] [ 276.950563][ T31] NMI backtrace for cpu 1 [ 276.950581][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 276.950599][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 276.950608][ T31] Call Trace: [ 276.950615][ T31] [ 276.950621][ T31] dump_stack_lvl+0x189/0x250 [ 276.950646][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.950662][ T31] ? __pfx__printk+0x10/0x10 [ 276.950687][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 276.950710][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 276.950734][ T31] ? __pfx__printk+0x10/0x10 [ 276.950750][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 276.950772][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 276.950797][ T31] watchdog+0xf60/0xfa0 [ 276.950822][ T31] ? watchdog+0x1e2/0xfa0 [ 276.950846][ T31] kthread+0x711/0x8a0 [ 276.950867][ T31] ? __pfx_watchdog+0x10/0x10 [ 276.950886][ T31] ? __pfx_kthread+0x10/0x10 [ 276.950903][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 276.950919][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.950935][ T31] ? __pfx_kthread+0x10/0x10 [ 276.950952][ T31] ret_from_fork+0x4bc/0x870 [ 276.950976][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 276.951001][ T31] ? __switch_to_asm+0x39/0x70 [ 276.951017][ T31] ? __switch_to_asm+0x33/0x70 [ 276.951033][ T31] ? __pfx_kthread+0x10/0x10 [ 276.951051][ T31] ret_from_fork_asm+0x1a/0x30 [ 276.951084][ T31] [ 276.951091][ T31] Sending NMI from CPU 1 to CPUs 0: [ 277.097560][ C0] NMI backtrace for cpu 0 [ 277.097577][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 277.097595][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 277.097604][ C0] RIP: 0010:seqcount_lockdep_reader_access+0x0/0x1c0 [ 277.097633][ C0] Code: 00 90 0f 0b 90 e9 01 fd ff ff e8 0b 9d 96 09 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 [ 277.097646][ C0] RSP: 0018:ffffc90000007ba8 EFLAGS: 00000006 [ 277.097660][ C0] RAX: ffffffff81ae25ef RBX: 0000000000000000 RCX: ffffffff8de95200 [ 277.097671][ C0] RDX: 0000000000010100 RSI: 0000000000000000 RDI: ffffffff999ed3c0 [ 277.097682][ C0] RBP: 0000000000000000 R08: ffffffff8de95200 R09: 0000000000000002 [ 277.097692][ C0] R10: 0000000000000003 R11: 0000000000010100 R12: 0000000000000003 [ 277.097702][ C0] R13: dffffc0000000000 R14: 00000040824e30d2 R15: dffffc0000000000 [ 277.097713][ C0] FS: 0000000000000000(0000) GS:ffff888125d2b000(0000) knlGS:0000000000000000 [ 277.097726][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 277.097736][ C0] CR2: 000000110c38272a CR3: 0000000075278000 CR4: 00000000003526f0 [ 277.097750][ C0] DR0: fffffffffffffff1 DR1: 0000000000000000 DR2: 0000000000000000 [ 277.097760][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 277.097770][ C0] Call Trace: [ 277.097777][ C0] [ 277.097782][ C0] ktime_get+0x45/0x200 [ 277.097805][ C0] clockevents_program_event+0xea/0x360 [ 277.097825][ C0] hrtimer_interrupt+0x620/0xaa0 [ 277.097855][ C0] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 277.097877][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 277.097894][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 277.097910][ C0] RIP: 0010:handle_softirqs+0x1b0/0x870 [ 277.097929][ C0] Code: 89 64 24 30 0f b7 db 48 c7 c7 e0 b3 69 8b e8 77 e8 bf 09 65 66 c7 05 45 5c 0a 11 00 00 e8 98 ff 42 00 fb 49 c7 c7 c0 c0 e0 8d ff ff ff ff 0f bc c3 41 89 c5 41 ff c5 0f 84 c2 03 00 00 89 5c [ 277.097940][ C0] RSP: 0018:ffffc90000007e40 EFLAGS: 00000286 [ 277.097953][ C0] RAX: 642b471ced36c900 RBX: 0000000000000080 RCX: 642b471ced36c900 [ 277.097963][ C0] RDX: 0000000000000000 RSI: ffffffff8d7f179a RDI: ffffffff8bc0d460 [ 277.097974][ C0] RBP: ffffc90000007f50 R08: ffffffff8f9dbe77 R09: 1ffffffff1f3b7ce [ 277.097985][ C0] R10: dffffc0000000000 R11: fffffbfff1f3b7cf R12: 000000000000000a [ 277.097996][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8de0c0c0 [ 277.098017][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 277.098038][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 277.098055][ C0] ? sched_clock_cpu+0x74/0x430 [ 277.098075][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 277.098091][ C0] __irq_exit_rcu+0xca/0x1f0 [ 277.098109][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 277.098129][ C0] ? rcu_is_watching+0x15/0xb0 [ 277.098152][ C0] irq_exit_rcu+0x9/0x30 [ 277.098169][ C0] sysvec_call_function_single+0xa3/0xc0 [ 277.098184][ C0] [ 277.098189][ C0] [ 277.098195][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 277.098210][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 277.098225][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 71 23 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 277.098237][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 277.098249][ C0] RAX: 642b471ced36c900 RBX: ffffffff8196ac07 RCX: 642b471ced36c900 [ 277.098261][ C0] RDX: 0000000000000001 RSI: ffffffff8d7f179a RDI: ffffffff8bc0d460 [ 277.098272][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632fdb R09: 1ffff110170c65fb [ 277.098284][ C0] R10: dffffc0000000000 R11: ffffed10170c65fc R12: ffffffff8f9dbe70 [ 277.098295][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a40 [ 277.098307][ C0] ? do_idle+0x1e7/0x510 [ 277.098330][ C0] default_idle+0x13/0x20 [ 277.098346][ C0] default_idle_call+0x73/0xb0 [ 277.098363][ C0] do_idle+0x1e7/0x510 [ 277.098383][ C0] ? __pfx_do_idle+0x10/0x10 [ 277.098408][ C0] cpu_startup_entry+0x44/0x60 [ 277.098426][ C0] rest_init+0x2de/0x300 [ 277.098445][ C0] start_kernel+0x3ae/0x410 [ 277.098464][ C0] x86_64_start_reservations+0x24/0x30 [ 277.098491][ C0] x86_64_start_kernel+0x143/0x1c0 [ 277.098510][ C0] common_startup_64+0x13e/0x147 [ 277.098532][ C0] [ 277.098739][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 277.530533][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 277.539645][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 277.549697][ T31] Call Trace: [ 277.553059][ T31] [ 277.556328][ T31] dump_stack_lvl+0x99/0x250 [ 277.560918][ T31] ? __asan_memcpy+0x40/0x70 [ 277.565496][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.570683][ T31] ? __pfx__printk+0x10/0x10 [ 277.575268][ T31] vpanic+0x237/0x6d0 [ 277.579262][ T31] ? __pfx_vpanic+0x10/0x10 [ 277.583756][ T31] ? preempt_schedule_common+0x83/0xd0 [ 277.589225][ T31] panic+0xb9/0xc0 [ 277.592938][ T31] ? __pfx_panic+0x10/0x10 [ 277.597353][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 277.602720][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 277.608871][ T31] watchdog+0xf9f/0xfa0 [ 277.613026][ T31] ? watchdog+0x1e2/0xfa0 [ 277.617362][ T31] kthread+0x711/0x8a0 [ 277.621425][ T31] ? __pfx_watchdog+0x10/0x10 [ 277.626091][ T31] ? __pfx_kthread+0x10/0x10 [ 277.630669][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 277.635860][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.641045][ T31] ? __pfx_kthread+0x10/0x10 [ 277.645621][ T31] ret_from_fork+0x4bc/0x870 [ 277.650281][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 277.655386][ T31] ? __switch_to_asm+0x39/0x70 [ 277.660136][ T31] ? __switch_to_asm+0x33/0x70 [ 277.664885][ T31] ? __pfx_kthread+0x10/0x10 [ 277.669464][ T31] ret_from_fork_asm+0x1a/0x30 [ 277.674228][ T31] [ 277.677563][ T31] Kernel Offset: disabled [ 277.681873][ T31] Rebooting in 86400 seconds..