last executing test programs: 2m45.322770998s ago: executing program 2 (id=122): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c000300000000000200000000000000d09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) (async, rerun: 64) syz_usb_connect(0x3, 0x4a, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRESDEC=r1, @ANYBLOB="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", @ANYRESOCT=r2], 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdir(&(0x7f0000000100)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') (async) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f00000000c0)='FROZEN\x00', 0x7) (async, rerun: 32) sendfile(r4, r4, 0x0, 0x8000002) (async, rerun: 32) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'ni_at_a2150\x00', [0x0, 0x5, 0x3, 0x401, 0x1, 0xcc7, 0x0, 0x5c952399, 0x4, 0x3ff, 0x802, 0x1600, 0x8, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x2, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) (async, rerun: 64) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x7a1342) (rerun: 64) 2m45.239500523s ago: executing program 2 (id=123): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) syz_clone3(&(0x7f00000004c0)={0x80000, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000022d000/0x2000)=nil, 0x8, 0x0, 0x0, 0x1000009b, 0x0, 0x0, 0x64, 0xe4}) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000ffe000/0x2000)=nil], 0x0, 0x0, 0x2) (async, rerun: 32) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x803}, 0x1c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x7) (async) recvmmsg(r2, &(0x7f00000002c0), 0x220, 0x141, 0x0) (async) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x0, 0x2000000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) (async) keyctl$clear(0x3, 0xfffffffffffffffd) (async) keyctl$set_reqkey_keyring(0xe, 0x3) (async, rerun: 64) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000240)='(\\.\x03/\']\\\x81\xac5\x17+.-![\a\x00^\'$9\x00', 0x0) (async, rerun: 64) syz_usb_connect(0x2, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="120100006e383a10d00701415cec0102030109022400010000000009042300020070400009058a03080004030e09050e03"], 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x2, 0x3, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x1d}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x8004) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_REPLY={0x4, 0xf}]}, 0x68}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x134, &(0x7f0000000000)={{0x12, 0x1, 0x311, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x122, 0x2, 0x1, 0x8, 0x0, 0xa, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "b66f4ee4"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x63c, 0x2, 0x7, 0x5}, {0x6, 0x24, 0x1a, 0x6}, [@dmm={0x7, 0x24, 0x14, 0x9, 0x6b0}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x44}, @mdlm_detail={0xac, 0x24, 0x13, 0xff, "17e2840a5e809cbe39c1fdd7791bf143298948c0313f541a6218ddda3d436c3b6dcd294cb7849cf7495e8dadb72caa226aaaa4c88be5b587f8f531730fa2d65fa447651384a6edecd19d0617a028421c8998a1a4f3f08778d245ca5af9d25d2b9208a7d356f837b63e8dcfed86db43711860ea53fa028080ef5e7eba8d35e09fcee27750026bf435579c88370eb362db3ff74d00e07f66074b1ce946d4a7aaf5bb496441c1a3abf3"}, @country_functional={0xa, 0x24, 0x7, 0x9, 0x8, [0xfffd, 0x4]}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0xaa, 0xa9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x5, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xe6, 0xc0, 0x1}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x97, 0xd, 0xff, 0x40, 0x42}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x3, [{0x4a, &(0x7f00000001c0)=@string={0x4a, 0x3, "168c8e3ef9459b7cfb500c97282ddaa00fe16f80a84e304ad3dd44215a6cc908e73eaa684740f85a2761cb57f0288e7ef699011cd6fb7d108525f5c7b4cdf6c767f95a0ca1fefad0"}}, {0xfb, &(0x7f0000000240)=@string={0xfb, 0x3, "f0083e81789c7cf127d8298c2a85990395933d9ab398b3687a2678f248c261cd1e63c03e2b39367082990b66fe3983dcba683ba3a70affc7d7db7706b93e3220d5e363a4aeb10a25293086e6637052bb7ef0962914d4e0366745dec6daea27b57388d8586ea0c47eb3c3e01de0945c41d78132dd10d028046e3232b8d54f4032624268e7b9f1d8728b47ad8f256932bdecf45a27dbcdc531e464084f716a801350bfe9a89e7d4955f3f4c118a7a0eeb933bc988490d6ebb54523ccd5be884ece2a285828535fcf84906e3c4a4fb5c418744106d724542da5e378c9edeabfc92cb8ed65c72000a83fc15be99e50ea13182268e39959b2def613"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1c0a}}]}) 2m45.004038069s ago: executing program 2 (id=125): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x18, &(0x7f0000000000)="61fa5521b2525c0ef92f244dd7d1ff8e8587269f42d147ad") 2m42.062699483s ago: executing program 1 (id=137): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x80001, 0x900) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0xc4, r2, 0x200, 0x70bd2a, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xfffffffffffffffe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x400}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}]}, 0xc4}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) (async) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc0205647, &(0x7f0000000080)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, 0x140f, 0x400, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000842}, 0x20000080) 2m41.972147869s ago: executing program 1 (id=138): syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r0, 0x0, 0x9, 0x4) io_setup(0x3ff, &(0x7f0000000500)=0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$sock_int(r2, 0x1, 0xc, 0x0, &(0x7f0000000040)) io_submit(r1, 0x1, &(0x7f0000000180)=[0x0]) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) mbind(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000400)=0xfb, 0x8, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) 2m41.927062709s ago: executing program 2 (id=139): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x11, {{0x29, 0x0, 0x4000000, @local}}}, 0x88) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a38000000030a030000000000000000000a0000090c00024000000000000000010900030073790400000000000900010073797a31"], 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x490) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r3, &(0x7f0000006140)={0x2020}, 0x2020) 2m41.839398256s ago: executing program 2 (id=140): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = socket$inet(0x2, 0x1, 0x100) listen(r0, 0x9) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000cc0)=0x3c, 0x4) chdir(&(0x7f0000000080)='./file1\x00') syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1fc}}, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) 2m41.528011123s ago: executing program 1 (id=141): r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000200)={0x0, [0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0xa0c], 0xb}) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000360000003b000000000000001400000000000000290000000b000000000000020000000028"], 0x58}}], 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) 2m41.523427191s ago: executing program 1 (id=142): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10000030) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8890}, 0x400c0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 2m40.641276122s ago: executing program 1 (id=145): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000680)={0x8000, 0x0, 0x200, 0x9, 0x0, 0x0, 0x3, 0xfffffff8}, 0x20) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r2, 0x3b87, &(0x7f0000000140)={0x18, 0x1, 0x0, 0x0, r3, 0x1}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000200)=0x188, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x23) (async) sendto$inet(r0, &(0x7f0000000040)="f4ffff7f011f584b", 0x8, 0x804, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x25, 0x19, 0x7, 0xd1, 0x30, 0x10, 0xaa, 0x6, 0xfd, 0x8, 0x6, 0x41, 0x0, 0x7b}, 0xe) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000000)=r6, 0x4) write(0xffffffffffffffff, &(0x7f0000000140)='/', 0x1) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0xfec) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, 0xffffffffffffffff, 0x0) (async) rmdir(&(0x7f0000000100)='./control\x00') recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10020, 0x0) 2m40.385032196s ago: executing program 1 (id=146): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x202040) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000140)={{0xa, 0x15}, {0x8, 0x69}, 0x5, 0x4, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800a10005"], 0x3c}}, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x10000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000000000000030000000500000000000000000000000500002000000000ffffffff"]) 2m40.190601364s ago: executing program 32 (id=146): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x202040) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000140)={{0xa, 0x15}, {0x8, 0x69}, 0x5, 0x4, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800a10005"], 0x3c}}, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x10000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000000000000030000000500000000000000000000000500002000000000ffffffff"]) 2m38.737660175s ago: executing program 2 (id=153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0xdddd1000, 0x18000, 0x1}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5203) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000020601120000000000000000000000e6dbfad986629ee178558421a83d8c000500010007000000140007800800124000030018050015000c0000000900020073797a300000000011000300686173683a69702c6d61726b0000000005000400000000000500050002"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x800) 2m37.816253773s ago: executing program 0 (id=155): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet(0x2, 0x3, 0x6) dup3(r0, r1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='memory.swap.events\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000540)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) socket$inet6(0xa, 0x2, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000001000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f00000002c0)="6825731da919", 0x6, r5}, 0x68) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0xa, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x0, 0x0, 0x80000004000000, 0x200000000c], 0xeeee8000, 0x2010d3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01200000000000000f478ef8ed"]) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r8, 0x10e, 0xc, &(0x7f0000000100)=0x3e60, 0x48) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000), 0x8) r10 = socket$packet(0x11, 0x2, 0x300) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x6}, 0x4) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) 2m37.645687801s ago: executing program 0 (id=156): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000140)={0x11, {{0x29, 0x0, 0x4000000, @local}}}, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) flock(r1, 0x5) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r4, &(0x7f0000006140)={0x2020}, 0x2020) 2m37.539510926s ago: executing program 0 (id=157): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x1) ioctl$TIOCSETD(r3, 0x5412, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xdb) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x3) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 2m35.195955073s ago: executing program 0 (id=158): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044004}, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x2800, 0x0) fchdir(r3) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000009c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000240)={{r4, 0xd, 0x1000, 0x9, 0x6, 0xd3, 0x80000001, 0xfffff801, 0x7a, 0x3ff, 0x6, 0x0, 0x9, 0x2, 0x8}, 0x10, [0x0, 0x0]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) fsetxattr$security_evm(r5, &(0x7f0000000080), 0x0, 0x0, 0x3) r6 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRES8], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r8, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x500, 0x40) r10 = open_tree(r9, &(0x7f0000000300)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r11, 0xffffffffffffffff, 0x100000000000000) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) read$char_usb(r7, 0x0, 0x0) syz_usb_ep_write(r6, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_disconnect(r6) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) 2m33.592053709s ago: executing program 0 (id=161): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0xea241, 0x0) write$cgroup_int(r2, &(0x7f0000000180), 0x12) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89b0, &(0x7f0000000040)={'macvtap0\x00', 0x2}) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'veth1_virt_wifi\x00', @multicast}) 2m33.419599602s ago: executing program 0 (id=164): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000140)={0x11, {{0x29, 0x0, 0x4000000, @local}}}, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) flock(r1, 0x5) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r3, &(0x7f0000006140)={0x2020}, 0x2020) 2m33.271411519s ago: executing program 33 (id=164): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000140)={0x11, {{0x29, 0x0, 0x4000000, @local}}}, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) flock(r1, 0x5) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r3, &(0x7f0000006140)={0x2020}, 0x2020) 2m23.634052138s ago: executing program 34 (id=153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0xdddd1000, 0x18000, 0x1}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5203) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000020601120000000000000000000000e6dbfad986629ee178558421a83d8c000500010007000000140007800800124000030018050015000c0000000900020073797a300000000011000300686173683a69702c6d61726b0000000005000400000000000500050002"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x800) 23.756613074s ago: executing program 6 (id=873): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f00000001c0)='devpts\x00', 0xa00000, &(0x7f0000000200)='grpquota\xee\xbbR\xf1\xd2\xd4\xf0\\\xc3)\x9e\x9e[\xc7\xbc\xce@\x97\xca\xd0\xc6\x14\x0f\xb3u\x89\xfe\xd6Df\x9b\v\x8cwM\xe9\x92\xe8\xd8W#Y\xf0`\xc79\x88\xa2>\x1a\x9a\xdd(N\xc0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\xf4\xf1\x9c\xc8\xc8\xa4\xe2\xe5\x9c\xfd\n\x0e\x93.\x1a\xcfyojF\xb0\xf9L\xd7A\xca]\xb7\xe1\x8f\x9f(\x83\x95%\r\xf4\xe6P\x91\x04\xa9\xc1\xe5~\x87\x18\xb3\xcd2\x1dM\x85\x97\x83~\xc3e\x8fA\xd5\xd0P\xa3\x7f0xee00]) setregid(0x0, r1) r2 = syz_clone(0x22000000, 0x0, 0x0, 0x0, 0x0, 0x0) setresgid(0xee00, 0x0, 0x0) prlimit64(r2, 0x9, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="b458b09a7bc6afad62c3f97125bc54bad5b9f64492fb3237f80678f40515a15a9bc7f8f9c9244e7fe0c328f6457f6d457effb6e3090a2f0e0a47d7c95dddc94d4d0ca124", 0x91}], 0x1}}], 0x2, 0x20e8086) r4 = socket$rds(0x15, 0x5, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000040)="2196e80e", 0x4}, {&(0x7f00000005c0)='~', 0x1}], 0x2) close_range(r5, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r7, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r7, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x2000000}) fcntl$lock(r7, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x40000000, 0x3}) setsockopt$RDS_GET_MR(r4, 0x114, 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 17.347734087s ago: executing program 6 (id=935): r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) write$cgroup_subtree(r0, 0x0, 0x36) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0xa51, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) r3 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r3, 0x0, 0x3, 0x0, 0x0) (async) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) (async) socket$inet(0x2, 0xa, 0x400) (async) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r3) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000000380)={0xc}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x22a82, 0x0) close(r7) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) (async) write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="1b2388a8"], 0xffdd) (async) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f0000000180)) (async) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000340)={0x60, 0x3, 0x7, {0x7, 0x3e, "3d91419d09"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 14.267922449s ago: executing program 6 (id=949): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @local}, 0x3ff}, @in6={0xa, 0x4e24, 0x48, @loopback, 0x1}, @in6={0xa, 0x4e23, 0x6, @loopback, 0x80000000}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0xa4) r1 = socket(0x1f, 0xc5c30d497995f239, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0xf, 0x6, 0x0, 0x6, 0x6]}, &(0x7f0000000140)=0x78) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xfffffff8, 0x400, "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", 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x9, 0x1}, r3}}, 0x120) ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000380)) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000003c0), &(0x7f0000000400)=0xc) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000440)) writev(0xffffffffffffffff, &(0x7f0000001640)=[{&(0x7f0000000480)="5c23f038480bad816e30f106876b12191cec5271fa50c1bf8e8570d1e76ccb542ce7fa936f1094f064b3b2887a277e6a81eb112f59398bcb5739c03c6bb87546ab7d7ecc35bc7595fb72918634e1bac08555691284a5f0b9cc2c21ae8fbf825067cc951318f7b85cee2e292936dc1e4a0191cdfea34aad22a491e8d84772c16363508d10d004bd5fb967731594e6148695fb0b7401b7eebe3513c9cec94fa75973252c9c83d5275f1e661b9b82f09118fda94cc6a8eaaeb42455e2f7042befe5bf89d8c510896495f4bb25b8a8fbca06", 0xd0}, {&(0x7f0000000580)="2f0888103067dbea46de5244c94cd6713910975b77ba554f1cbffbb9692d2560bff35a3a9add03c23f1798088e9bd32d703a70f0bd2b2e3d657b017b56dccdb5559c2cc1453b6c4f6b2be5c6c7461fd78e23a238b4164f0a6b92403a675bdb8405901070cf20d5098378fa635f4a1249598da1", 0x73}, {&(0x7f0000000600)="3a6aefd47013cee2bae48100352231bee7e289cdefd979be35122f31b5c47b", 0x1f}, {&(0x7f0000000640)="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", 0x1000}], 0x4) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x40, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001780), 0x80000, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000017c0)=0xffffffffffffffff) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000001840)={0x9b0000, 0xffff, 0x0, r5, 0x0, &(0x7f0000001800)={0xa10001, 0x9, '\x00', @value=0xd8}}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r5, 0x7c80, 0x0) r6 = socket$key(0xf, 0x3, 0x2) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000001880)=0x206ff) r7 = getuid() ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f00000018c0)={0x3, @bcast, r7}) r8 = creat(&(0x7f0000001900)='./file0\x00', 0x20) ioctl$USBDEVFS_REAPURB(r8, 0x4008550c, &(0x7f0000001940)) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x34, 0x8, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c8e5}, 0x20002000) setsockopt$inet_int(r1, 0x0, 0x31, &(0x7f0000001a80), 0x4) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000001ac0)=0x1) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x30, 0x8, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040080}, 0x4004010) sendmsg$DEVLINK_CMD_SB_POOL_SET(r6, &(0x7f0000001dc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001c40)={0x108, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x1}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x67}, {0x8, 0x13, 0x5e}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xe6ea}, {0x8, 0x13, 0x2}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb}, {0x6, 0x11, 0xe1}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000001}, 0x4040000) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000001fc0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001e40)=@getsa={0x11c, 0x12, 0x100, 0x70bd26, 0x25dfdbfb, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0xa, 0x32}, [@mark={0xc, 0x15, {0x35075b, 0x1}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e22, 0x4e20, @in6=@mcast2}}, @replay_val={0x10, 0xa, {0x70bd2a, 0x70bd26, 0x745}}, @sec_ctx={0xbb, 0x8, {0xb7, 0x8, 0x0, 0x1, 0xaf, "e113f04491a01f012960a81d8a67e5db40efbc0d05946fc13a948fbea06f0674683d81b98e5c4cce611a0daf1f8d36d7d780f1c4d139b01846a4e05bab045d4dfec4de7e685dfe8950132e6e902525131772d59dc9ce37b5de220e71d4c588e0e34c4cc8c6a1b91fa43d5bee51a6e877a4422c2b718579813d9c571c1e2c6b5c28cdb612e96a22c35e88d8bc9115767f02128d71a09af5199bd67c8d0a21e9049839718527b7c3538936178fccc86b"}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x80}, 0x200400c2) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000002200)={{r1}, 0x0, 0x0, @unused=[0x5, 0xa, 0xfd2, 0xd5], @subvolid=0x7}) 4.55597444s ago: executing program 4 (id=1011): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) write(r0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4) r5 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000100)={r5, 0x7, 0x2, r5}) r6 = eventfd2(0x8, 0x80001) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000040)={r6, 0x7, 0x0, r6}) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000480)=ANY=[]) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x400, 0x2, 0xb, 0xd6}, 0x3a, [0x8000, 0xc95a, 0x100f, 0x8, 0x82, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x2, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x4, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x3, 0xb, 0x3, 0x10008, 0x4874, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x4eb, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x7d, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x802, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x9, 0x8, 0x9, 0xb, 0x2, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x4, 0x3, 0xbc45, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x2, 0x0, 0x1, 0xb, 0x4, 0x0, 0x1, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0xa, 0x3b, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x5, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x1000004, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x938, 0x10000006, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x8001, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffbfff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x7, 0x8, 0x6, 0x10000226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x1fd, 0xffff343e, 0xfff]}, 0x45c) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r8 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNADDRESOURCE(r8, 0x89e0, &(0x7f0000000140)=0x800) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x4) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000019080)=0x30) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x32) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x10010, r0, 0xa7cae000) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.862903295s ago: executing program 3 (id=1019): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r3, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7fffffff, 0x21}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x5}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2782}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x553}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) (async) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r3, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7fffffff, 0x21}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x5}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2782}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x553}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x3d, 0x2, 0xfffffff8, 0xfffe, 0x0, 0x4, 0xfc, 0xfa, 0xf9, 0x9, 0x7, 0x404, 0xfffe, 0x0, 0x0, 0x40000045}}) 2.711843928s ago: executing program 3 (id=1020): sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x248}, 0x1, 0x0, 0x0, 0x4010}, 0x800) (async, rerun: 32) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x282}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067", 0x23}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454", 0x60}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) (rerun: 32) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f00000006c0)=0xc) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e0000002000000000000000000000000000000000000000000000000000000000000000300000000020000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000e02700000000000000000000000000002d00000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c00000000000000ac14142c000000000000000000000000000000000000560000000000fdffffff01000000ac141410000000000000000000000000000000003200000000000000fe800000000000000000000000000500023500000000000000000000feffffff00000000ff010000000000000000000000000001000000003c00000002000000ff0200000000000000000000000000010000000001030000000000000000000000000000ff020000000000000000000000000001000004d33c00000002000000ffffffff00000000000000000000000000000000000000000000000003000000000000000a0101020000000000000000000000000000000032"], 0x23c}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYRESDEC=0x0], 0x84}, 0x1, 0x0, 0x0, 0x88c1}, 0x40) (async) r4 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) (async) sendmmsg$inet(r4, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="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", 0x2dc}, {&(0x7f0000000340)="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", 0x22c}, {&(0x7f0000000b00)="5be08105437c98b91b9455042f5735fc090014bde2bb01000000000000001a78380000c7f9aab8ad4a207067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409dff841e657c8df70e1607d58c863d5f323f6d5cae5f04e83895276a6cf13a21c43bbd7a61b4e6907a196d27d4b1575d84b1247108e7f213eb97a2a651f7d7edf58976b3bf0caf937560c17e021e7a93b3ea127f8409bbdb64de1cb5ec84d684ab2699326a7064f61a507ed44a47f084cd86e24f87fe08c1fa212bd42899b2", 0xc8}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r5, 0x560f, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000088945b406d04b708f0ca0000000109021200010d0000000000000000ddc54200"], 0x0) 2.224077186s ago: executing program 4 (id=1021): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="b6097db05b90ec058135e463b2e6cf07689785516a2417e87aadcd1a9a3fc36ebf17", 0x22) chdir(&(0x7f00000000c0)='./bus\x00') r2 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000f8"], 0x830200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r4 = openat$sysfs(0xffffff9c, 0x0, 0x86702, 0xf0) ioctl$FS_IOC_RESVSP(r4, 0x4030582b, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff86"], 0xfdef) 2.092039662s ago: executing program 3 (id=1023): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003a00010439e4c9a01433900a0a"], 0x14}}, 0x4000000) syz_usb_connect(0x2, 0x53, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x88, 0xee, 0x20, 0x10, 0x104f, 0x4, 0xc6c3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xb6, 0xb3, 0x3c, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "940a0207da"}]}}, {{0x9, 0x5, 0x5, 0x2}}]}}]}}]}}, 0x0) 1.834198012s ago: executing program 4 (id=1025): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb9", 0x13) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) r3 = socket$inet6(0xa, 0x3, 0x8) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = dup3(r4, r3, 0x0) sendmmsg$inet6(r5, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @local, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="14f5bb1a8a000900290000000b0023000008000000000000"], 0x18}}], 0x1, 0x810) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.754709056s ago: executing program 5 (id=1026): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000800)={&(0x7f00000001c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000440)="53e7e73f05a28d3f17b77bd66341210c45224e213ad978502ea1d2bb7e53a14243b55d7a95852ebb1ffa7443e41ea4b4d171bda1a89c30332dc0cce59403aaa1d5614284a195ca5596f2f622da5aa6e0f3df49f5dfa90e978db6fe4c4a0f697fdbe97e642ae842e850528269e00f09eea40ac9c47e2e2bd17dfda55f60a5b4ec3ffe0bcc711a413fdc93e06499263aa57c69e9d62f023c1150f82e9d13acb89a4f00e4a68ec2d46fc4ae196d2bbaf5390869f4e514f52258760fdea2963318e151b91432d0bc51d98f7b95c6fb276cc08dbbebf3ee788720c6f468afc47b119faaa8600d707c231397c0662dafa209f8068d22", 0xf3}, {&(0x7f0000000340)="a62d7c609f4ade9ef315de266ecd9a6a96d6bc6ba88d3bed5d0218158b12ee512b22bb84057e25ee368d21ac72c64bad9b6ac653931d2c0c001062d240ec8af8d085d27f1b427e15c95fadd828488cd9b9d86ecb06a2cf891df08c768f67a526f48e2cc0e21b86e62823bf1bc102e47ae0ac6c3587f323b1d548dfbf217b87c0674ecb470b4ebb4b2f33cd7ea32539a59be520bc6e2fe5a097a0d54fe886ddd407d2474719a3", 0xa6}, {&(0x7f0000000200)="c477db7de6bf956838ac2e30e91b203d1205e3fae038ecbb4121030f11cc97a6018d4f94475a", 0x26}, {&(0x7f0000000540)="dbca40af72eb72b5b132a70b73590cb859a0c9fc8cb575deb996e8699c5ea717358d2d6f431292d4aaa2e1e1bb4275e35e1be4d4a41451d0b42548ff7ebaf339d8a975ddd40cd59b829bc9664f8c90836df02f550b7874eb74b461205b39d7", 0x5f}, {&(0x7f00000002c0)="44dfcb", 0x3}, {&(0x7f0000000640)="cff412bac623465f9b7a42dbbc8721164c6c21556edb5036eda70d663b8d85ecb7d511e8724cf3daf93c67d912ff7c70d773b6950932650c46a897455da8f36e450d3cfcdc5dcb0e4d3ef00547c5f418fe3c3ab700b57c87483f8aef6c5fff00a58b204cc26ad9c9a5eca203338f416d0118d4891ca8299dc53d6af3fd9d231aa4c0d15c90cd2cf6eeab7b7bf8859f19fb834825c87bd40c94a46cf021d6854b0c5714127686ca1b5c812aa05426d7b1b4bdff1825b498e94c39056222c75bf247a26d186bd870f70f632a401cfbade2d48e4970a38fb1399278880f8f994e5a3aa90b5df4a1126948b74c0c10eded2655", 0xf1}], 0x6, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @multicast1}}}], 0x20}, 0x40000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000005c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffc, 0x8, 0x2, 0x332}, &(0x7f0000000100), &(0x7f0000ff4000)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'erspan0\x00', 0x0}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x28}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[0x0], 0x1}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000000c0), 0x3, r6}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000300)={0x8, r8, r6}) r9 = socket(0x2, 0x80805, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/123, 0x7b) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8005, &(0x7f0000000000)=0x3f, 0x9, 0x0) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) sendmmsg$inet(r9, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x300, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) 1.583970529s ago: executing program 4 (id=1027): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x4000}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x4000}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) 1.520954262s ago: executing program 5 (id=1028): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x7, 0x0, 0x8]}) (async) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) (async, rerun: 32) ioctl$RTC_AIE_ON(r1, 0x7001) (rerun: 32) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000000)={0x37, 0x20, 0x16, 0x1b, 0x3, 0x20002a, 0x3, 0xa9}) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@redirect_dir_nofollow}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_auto}]}) 1.500496574s ago: executing program 4 (id=1029): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xb, {[@main=@item_012={0x2, 0x0, 0xa, "9d10"}, @local=@item_4={0x3, 0x2, 0x0, "0500"}, @global=@item_012={0x2, 0x1, 0x6, "2fcb"}]}}, 0x0}, 0x0) 1.37993548s ago: executing program 3 (id=1030): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) timerfd_create(0x7, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000340), 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)={0x38, r4, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xe1, 0x4, 0x5, 0x5, 0x5e30, 0x6, 0x2]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYRES16=r4, @ANYRES16=r4, @ANYRES16=r2, @ANYRESOCT=r2, @ANYRES8=r5], 0xa4}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRESHEX=r5, @ANYRESOCT=r6, @ANYRES8=r8, @ANYRES64=r9, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r0], 0xb4}}, 0x0) 1.368636268s ago: executing program 3 (id=1031): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$I2C(&(0x7f0000001900), 0x0, 0x40) (rerun: 32) ioctl$I2C_RETRIES(r1, 0x701, 0xfffffffffffffff8) (async) memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f00000000c0)=ANY=[]) (async, rerun: 64) pipe2$9p(0x0, 0x80000) (rerun: 64) 1.335847585s ago: executing program 5 (id=1032): r0 = syz_usb_connect$uac1(0x3, 0xb8, &(0x7f0000000180)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020400000005060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505", @ANYBLOB="88b0862c743b3bd50d70d09de74a67943c3dfa075827eb930a0869ffc6fdc9d486123819301cfdb40e099f438e802425e79c6356606e21f0b4ebd9015b7178718fcd4e4a97acffc9249997fd5e502fcd33bcbb0abcf0317ccdd093f7d9e5d17a6c7d2608b6fbbeaae95693d34645dca7c3f487d1034bc5dbbe18167daf3b2d963f2223ec06d9104a2d62d66fec7ad3625fb1000e329ef2a5fc178c1b765df72d5c009cd44344e7bee3d046bb9bebf95a89e11ebd652bf8193d1c1567c034db035f2a6f85966d3e67f0d98edebb35ba22835d9bbcc5b902838603e94631c48e4d26d91d476fad5d0d7e5d456eaa11864156703b683c20ac"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x20, 0xe, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000002240)=ANY=[@ANYBLOB="201603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f0000002200)={0x40, 0x12, 0x2, "e50c"}, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x7}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 695.9488ms ago: executing program 3 (id=1033): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'erspan0\x00'}}, 0x1e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7c8}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r4], 0xb4}, 0x1, 0x0, 0x0, 0x890}, 0x40) bind$alg(r5, &(0x7f0000002480)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r7) sendmsg$NLBL_MGMT_C_LISTDEF(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000ac0)={0x14, r9, 0x300, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20004010}, 0x24044800) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x68, 0x0, 0x104, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00T', @ANYRES16=0x0, @ANYBLOB="01002abd7000fddbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000100000001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008081}, 0x810) sendmsg$NL802154_CMD_GET_SEC_DEV(r7, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0x54, 0x0, 0x1, 0x70bd24, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x54}, 0x1, 0x0, 0x0, 0xc011}, 0x40001) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_clone(0x21000011, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) 695.385988ms ago: executing program 5 (id=1034): r0 = syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="030000000000ffff9f000040"]) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000140)) 547.660824ms ago: executing program 5 (id=1035): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="b6097db05b90ec058135e463b2e6cf07689785516a2417e87aadcd1a9a3fc36ebf17", 0x22) chdir(&(0x7f00000000c0)='./bus\x00') r2 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000f8"], 0x830200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r4 = openat$sysfs(0xffffff9c, 0x0, 0x86702, 0xf0) ioctl$FS_IOC_RESVSP(r4, 0x4030582b, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff86"], 0xfdef) 321.449593ms ago: executing program 5 (id=1036): r0 = syz_usb_connect(0x5, 0x1b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xf4, 0x3, 0xa6, 0x10, 0x7c0, 0x1512, 0x834, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x5, 0x0, 0x80}}]}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000680)="00ee908d3cfb2aca319839a6905af459c0c0dacd956da89994774ff7a08edbb9f11c3344c1bee54831ea0d2e40afa3da1c19b205240d18e204784e48075258234ca658dc05c873c305d464c510de32536c644dccd12eecac74e0f005727c56d7314129264dad9b92104899efde318ff3327dfe120e0fe4d28b7fbcd9368cff8a8b23d8a862921d7a4b3283808809bbec", 0x90}, {&(0x7f0000000740)="15d06a793d404bf4fd9d51bfdd708479f93a3d28c0cd9a219b1cb5edcce0db8fb0c7ce4741c945c734ec03c17c8d0b797f1ab923393052f68f3a4b8d8378c97f1738d83074dcfd78c2fba2d0c219", 0x4e}, {&(0x7f00000001c0)="effa22ac496beb47", 0x8}], 0x3) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000380)="390000001300034700bb5bdc4544a5ff06000075340000004500000025000000190004000400ad000d00003132ef7c5e4b78cb325a000000481e65cb7e9670b83865296784a3a7b383e831bfeedd1ae1849acb6a60d8f1888d4378cff1d6e238b2e796d68b0a2ae719282a96989d2be7008498108c92e00aa36c589a3a513d9c27120f42a7fcab1b5e2cbc0ba97ef41e9a67e1df23771b8f224023c1527ad96a3818c875eb9b7a58d5e5b4d00f", 0x38}, {&(0x7f0000000440)="42f86beb8f7a80cfade611fb858bec7f49c926c7485ca8aca3eedf89674e007405a2d65db2f85d5407ce2006fde245f47792a360e986c478c8eb78e333e9653446191cfc5fd429c8963278414e33e8215919e8d9995ca67fdac2b4591e5be4a4b57d7ca4fc2e059002a376bf6289d9637d069ab908ebc1a44b8ee50f3aa46b84b1995ecb9608c2a6051e05f11f3f6963c43f37efacac3703f0a1a7dc1a8290ccfe58f57a403e71f02b7c3fd64b95e5dd7f2bc706f5f0f6210b63f91d9f6bbeaa9fa6c327e429840fe79473790ba3899e8daefacded6cfa22"}, {&(0x7f0000000540)="f65f51ae9322a910530fe36e420e20720a488d93486519d56862a6628c9f4a98b40e80ce6279b61d6d74fa32565cf84f3c0a5ee7de0ed6bd0788b51467541250a64d618b2cbe8df672e163bb9e089a4036809266bca8f3d0732835b8199417e37bd682634ca0c560146ea9ad3c5e8018cc40993a5d6c45b2aea57e00b48015c30d025fe7c5cd6b35a169626cf5f302186ed9c2875db42e71e04b0d8b4f594535a03b9392294920d8c85058a28dc55c170b98680aa5c07324a4d072a6f6488c4cedb2fb5bd4e406413309"}], 0x100000000000019c) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="71050507030380d80bfb03060340397df21ea7a082fcfdb4770127ebbc8eff183078b139d9aa6843722e592fe8abcc55de643f30d694575c21cf8a24cc9fa0919ba72abf7690f8d18d610876ce7977bc7411ad15b772869df9171b6d5188805e0ac10a9a37"], 0x65) r6 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) r8 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) landlock_restrict_self(r6, 0x0) fcntl$notify(r8, 0x402, 0x8000003d) creat(&(0x7f0000001380)='./file0\x00', 0x12c) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmmsg(r9, &(0x7f0000008b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000052) syz_usb_control_io$printer(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r9, {0x1ff}}, './file0\x00'}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$packet(0x11, 0x2, 0x300) r12 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$EVIOCGPHYS(r10, 0x80404507, &(0x7f0000000340)=""/46) ioctl$int_in(r10, 0x5421, &(0x7f0000000300)=0x6) write$tun(r11, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x1, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x63, 0x64, 0x0, 0xb, 0x88, 0x0, @private=0xa0100fe, @dev={0xac, 0x14, 0x14, 0x16}}, "3297e3ba004da2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec6"}}, 0x71) memfd_secret(0x80000) 0s ago: executing program 4 (id=1037): socket$inet_icmp(0x2, 0x2, 0x1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000640)={{{@in=@private=0xa010102, @in=@dev={0xac, 0x14, 0x14, 0x31}, 0x4e20, 0x5, 0x4e23, 0xf17, 0xa, 0xa0, 0x0, 0x2c}, {0x7, 0x9, 0x1, 0xb2, 0x5, 0x1, 0x3c46, 0xce}, {0x5, 0x1, 0xe, 0x6}, 0x2, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x4d5, 0x6c}, 0xa, @in6=@mcast1, 0x3507, 0x1, 0x1, 0x8, 0x4, 0x8001, 0x759}}, 0xe8) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x40, r5, 0x2, 0x70bd27, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200040d4}, 0x40004040) (async) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x40, 0x30, 0x2, "02ed"}, 0x0, 0x0, 0x0, 0x0}) (async) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000001000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f00000002c0)="6825731da919", 0x6, r6}, 0x68) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file2'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_off}], [], 0x2c}) lsetxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180), &(0x7f0000000280)=ANY=[], 0x9, 0x2) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x6, r2, 0x1}, 0xc) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0x200000000c], 0xeeee8000, 0x2010d3}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01200000000000000f478ef8ed"]) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) kernel console output (not intermixed with test programs): nterface number 0 [ 173.081673][ T24] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 173.096359][ T24] usb 4-1: config 0 has no interface number 0 [ 173.104084][ T24] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 173.112745][ T24] usb 4-1: config 0 has no interface number 0 [ 173.120181][ T24] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 173.129087][ T24] usb 4-1: config 0 has no interface number 0 [ 173.142810][ T24] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 173.152258][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.160374][ T24] usb 4-1: Product: syz [ 173.164943][ T24] usb 4-1: Manufacturer: syz [ 173.169566][ T24] usb 4-1: SerialNumber: syz [ 173.184449][ T24] usb 4-1: config 0 descriptor?? [ 173.210528][ T24] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 173.403034][ T7836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.389'. [ 173.597200][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 173.599814][ T5869] usb 6-1: USB disconnect, device number 28 [ 173.619601][ T5869] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 173.643393][ T5869] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 173.660688][ T5869] quatech2 6-1:0.51: device disconnected [ 173.764280][ T24] etas_es58x 4-1:0.2: could not parse product info: 'ࠅ' [ 173.859708][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 173.859724][ T30] audit: type=1326 audit(1762816426.029:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7837 comm="syz.4.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4583d8f6c9 code=0x7fc00000 [ 173.970554][ T7854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.984860][ T7854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.011495][ T5920] usb 4-1: USB disconnect, device number 50 [ 174.019337][ T5920] etas_es58x 4-1:0.2: Disconnecting syz syz [ 174.041172][ T5869] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 174.201076][ T1223] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 174.214177][ T5869] usb 6-1: Using ep0 maxpacket: 32 [ 174.236005][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.249993][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.260227][ T5869] usb 6-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 174.278348][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.289379][ T5869] usb 6-1: config 0 descriptor?? [ 174.372126][ T1223] usb 5-1: Using ep0 maxpacket: 8 [ 174.379540][ T1223] usb 5-1: config 1 has an invalid interface number: 4 but max is 2 [ 174.401187][ T1223] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 174.409913][ T1223] usb 5-1: config 1 has no interface number 1 [ 174.418680][ T1223] usb 5-1: too many endpoints for config 1 interface 4 altsetting 16: 195, using maximum allowed: 30 [ 174.429684][ T1223] usb 5-1: config 1 interface 4 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 195 [ 174.461970][ T1223] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 174.474449][ T1223] usb 5-1: config 1 interface 4 has no altsetting 0 [ 174.483935][ T1223] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 174.493254][ T1223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.503767][ T1223] usb 5-1: Product: syz [ 174.507951][ T1223] usb 5-1: Manufacturer: syz [ 174.521313][ T1223] usb 5-1: SerialNumber: syz [ 174.704691][ T5869] uclogic 0003:28BD:0074.0009: interface is invalid, ignoring [ 174.751136][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 174.758425][ T1223] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 174.790947][ T1223] hub 5-1:1.4: Invalid hub with more than one config or interface [ 174.806803][ T1223] hub 5-1:1.4: probe with driver hub failed with error -22 [ 174.835381][ T1223] usb 5-1: USB disconnect, device number 30 [ 174.896796][ T5925] udevd[5925]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.931853][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 174.937608][ T5920] usb 6-1: USB disconnect, device number 29 [ 174.957577][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 174.972073][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.012658][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 175.019720][ T9] pvrusb2: ********** [ 175.027508][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 175.039164][ T9] pvrusb2: Important functionality might not be entirely working. [ 175.049070][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 175.061950][ T9] pvrusb2: ********** [ 175.203471][ T7880] netlink: 'syz.3.399': attribute type 21 has an invalid length. [ 175.214366][ T2343] pvrusb2: Invalid write control endpoint [ 175.256074][ T2343] pvrusb2: Invalid write control endpoint [ 175.263453][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 175.273931][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 175.283028][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 175.293850][ T2343] pvrusb2: Device being rendered inoperable [ 175.301580][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 175.308721][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 175.318791][ T2343] pvrusb2: Attached sub-driver cx25840 [ 175.324577][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 175.334756][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 175.414842][ T7880] pvrusb2: Attempted to execute control transfer when device not ok [ 175.493286][ T5869] usb 4-1: USB disconnect, device number 51 [ 175.655475][ T5920] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 175.812869][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.823861][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.833677][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 175.846665][ T5920] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.856593][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.866419][ T5920] usb 5-1: config 0 descriptor?? [ 175.931246][ T5869] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 176.037912][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.405'. [ 176.087614][ T5869] usb 6-1: config 0 has an invalid interface number: 158 but max is 0 [ 176.096169][ T5869] usb 6-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 176.109048][ T5869] usb 6-1: config 0 has no interface number 0 [ 176.116248][ T5869] usb 6-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=be.65 [ 176.133385][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.154839][ T5869] usb 6-1: config 0 descriptor?? [ 176.169370][ T5869] usb 6-1: unknown interface protocol 0xea, assuming v1 [ 176.188406][ T5869] usb 6-1: 158:2 : does not exist [ 176.322222][ T5920] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 176.412355][ T7922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.444034][ T7922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.470831][ T7920] netlink: 48 bytes leftover after parsing attributes in process `syz.5.404'. [ 176.485579][ T7920] netlink: 48 bytes leftover after parsing attributes in process `syz.5.404'. [ 176.495476][ T7920] netlink: 48 bytes leftover after parsing attributes in process `syz.5.404'. [ 176.504797][ T7920] netlink: 48 bytes leftover after parsing attributes in process `syz.5.404'. [ 176.514584][ T7920] netlink: 48 bytes leftover after parsing attributes in process `syz.5.404'. [ 176.523938][ T7920] netlink: 48 bytes leftover after parsing attributes in process `syz.5.404'. [ 176.543421][ T7920] netlink: 48 bytes leftover after parsing attributes in process `syz.5.404'. [ 176.914259][ C0] plantronics 0003:047F:FFFF.000A: hid_field_extract() called with n (132) > 32! (syz.4.400) [ 176.926453][ T7926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.935401][ T7926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.954018][ T24] usb 5-1: USB disconnect, device number 31 [ 177.048338][ T7934] netlink: 'syz.4.409': attribute type 25 has an invalid length. [ 177.060416][ T7934] netlink: 'syz.4.409': attribute type 1 has an invalid length. [ 177.193502][ T7936] syzkaller1: entered promiscuous mode [ 177.199003][ T7936] syzkaller1: entered allmulticast mode [ 177.240489][ T7941] affs: No valid root block on device nullb0 [ 177.289487][ T7945] tipc: Started in network mode [ 177.308655][ T7945] tipc: Node identity 1f0004, cluster identity 4711 [ 177.327738][ T7945] tipc: Node number set to 2031620 [ 177.360942][ T7947] input: syz0 as /devices/virtual/input/input20 [ 177.475831][ T7949] __nla_validate_parse: 26 callbacks suppressed [ 177.475850][ T7949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.415'. [ 177.613729][ T7956] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 177.931904][ T7974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.942312][ T7974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.947536][ T7977] loop4: detected capacity change from 0 to 2560 [ 177.979007][ T5925] Buffer I/O error on dev loop4, logical block 64, async page read [ 177.979147][ T7977] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 178.009778][ T7975] netlink: 4 bytes leftover after parsing attributes in process `syz.6.425'. [ 178.023901][ T7975] overlayfs: missing 'lowerdir' [ 178.029000][ T7977] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 178.038291][ T7977] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 178.124784][ T7986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.137298][ T7986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.140269][ T7976] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 178.247374][ T7992] input: syz1 as /devices/virtual/input/input21 [ 178.499691][ T7996] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 178.551190][ T5869] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 178.702974][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 178.714205][ T5869] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.736210][ T5869] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 178.738704][ T8001] netlink: 100 bytes leftover after parsing attributes in process `syz.5.433'. [ 178.745646][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.765672][ T5869] usb 5-1: config 0 descriptor?? [ 178.772792][ T7994] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 178.825463][ T8003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.835241][ T8003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.844496][ T8003] netlink: 176 bytes leftover after parsing attributes in process `syz.5.434'. [ 179.186589][ T5869] sony 0003:054C:0268.000B: unknown main item tag 0x0 [ 179.193585][ T5869] sony 0003:054C:0268.000B: item fetching failed at offset 3/5 [ 179.201948][ T5869] sony 0003:054C:0268.000B: parse failed [ 179.207662][ T5869] sony 0003:054C:0268.000B: probe with driver sony failed with error -22 [ 179.458707][ T5920] usb 5-1: USB disconnect, device number 32 [ 179.462530][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888032261400: rx timeout, send abort [ 179.475242][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888032261400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 179.520096][ T8010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.530026][ T8009] binder: 8008:8009 ioctl c0306201 200000000240 returned -14 [ 179.543515][ T8010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.660881][ T8017] netlink: 16 bytes leftover after parsing attributes in process `syz.6.438'. [ 179.672600][ T8017] Malformed UNC in devname [ 179.672600][ T8017] [ 179.679929][ T8017] CIFS: VFS: Malformed UNC in devname [ 179.776482][ T8010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.789724][ T8010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.064003][ T8031] netlink: 20 bytes leftover after parsing attributes in process `syz.4.442'. [ 180.213240][ T8034] syz.4.444 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 180.231139][ T5920] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 180.243791][ T8036] fuse: Unknown parameter 'u*62ة}WuPLW3KK0x0000000000000004' [ 180.361102][ T5920] usb 4-1: device descriptor read/64, error -71 [ 180.462163][ T24] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 180.612543][ T5920] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 180.624854][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 180.635508][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 180.646266][ T24] usb 5-1: string descriptor 0 read error: -22 [ 180.653040][ T24] usb 5-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 180.662423][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.771134][ T5920] usb 4-1: device descriptor read/64, error -71 [ 180.885123][ T8040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.892611][ T5920] usb usb4-port1: attempt power cycle [ 180.896166][ T8040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.915051][ T24] usbhid 5-1:1.0: can't add hid device: -71 [ 180.922341][ T24] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 180.935829][ T24] usb 5-1: USB disconnect, device number 33 [ 181.251145][ T5920] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 181.272643][ T5920] usb 4-1: device descriptor read/8, error -71 [ 181.523634][ T5920] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 181.538537][ T8042] vivid-009: ================= START STATUS ================= [ 181.547060][ T8042] vivid-009: FM Deviation: 75000 [ 181.553547][ T8042] vivid-009: ================== END STATUS ================== [ 181.561943][ T5920] usb 4-1: device descriptor read/8, error -71 [ 181.659505][ T8045] netlink: 156 bytes leftover after parsing attributes in process `syz.4.447'. [ 181.668693][ T8045] netlink: 'syz.4.447': attribute type 3 has an invalid length. [ 181.677155][ T5920] usb usb4-port1: unable to enumerate USB device [ 182.500877][ T8051] kAFS: unable to lookup cell '/yz1' [ 182.566552][ T8055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.575330][ T8055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.149211][ T8073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.180632][ T8073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.361156][ T5920] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 184.431054][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 184.439734][ T5920] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.450313][ T5920] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.463950][ T5920] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.473202][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.859152][ T5920] usb 5-1: Product: syz [ 184.871078][ T5920] usb 5-1: Manufacturer: syz [ 184.875704][ T5920] usb 5-1: SerialNumber: syz [ 185.271163][ T10] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 185.431063][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 185.445512][ T10] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 185.460730][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.492619][ T10] usb 4-1: Product: syz [ 185.497057][ T10] usb 4-1: Manufacturer: syz [ 185.510524][ T10] usb 4-1: SerialNumber: syz [ 185.554073][ T10] usb 4-1: config 0 descriptor?? [ 185.603238][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 185.722644][ T5920] usb 5-1: 0:2 : does not exist [ 185.775062][ T5920] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 185.908704][ T8093] syzkaller1: entered promiscuous mode [ 185.921144][ T8093] syzkaller1: entered allmulticast mode [ 186.075123][ T8098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.121799][ T8098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.459375][ T8075] Set syz1 is full, maxelem 65536 reached [ 186.505517][ T5920] usb 5-1: USB disconnect, device number 34 [ 186.570496][ T8112] netlink: 'syz.6.467': attribute type 1 has an invalid length. [ 186.579414][ T8112] nbd: error processing sock list [ 186.590421][ T8112] nbd: must specify at least one socket [ 186.692398][ T8110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.715576][ T5925] udevd[5925]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 186.742110][ T8110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.945978][ T8093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.459'. [ 187.075600][ T8125] syz.6.471 (8125): attempted to duplicate a private mapping with mremap. This is not supported. [ 187.511406][ T10] gspca_stk1135: reg_w 0xf err -110 [ 187.517772][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 187.541066][ T10] gspca_stk1135: Sensor write failed [ 187.546546][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 187.559859][ T10] gspca_stk1135: Sensor write failed [ 187.565254][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 187.581125][ T10] gspca_stk1135: Sensor read failed [ 187.586368][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 187.593464][ T10] gspca_stk1135: Sensor read failed [ 187.599546][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 187.611821][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 187.618409][ T10] gspca_stk1135: Sensor read failed [ 187.639731][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 187.659273][ T10] gspca_stk1135: Sensor read failed [ 187.671142][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 187.677510][ T10] gspca_stk1135: Sensor write failed [ 187.691113][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 187.697466][ T10] gspca_stk1135: Sensor write failed [ 187.711129][ T10] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 188.171646][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 188.331094][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 188.339202][ T10] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 188.361394][ T10] usb 5-1: config 179 has no interface number 0 [ 188.367700][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 188.396678][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 188.421063][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 188.441038][ T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 188.467524][ T10] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 188.501170][ T10] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 188.510239][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.534202][ T8138] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 188.693486][ T8161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.705636][ T8161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.790550][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input22 [ 189.038069][ T8138] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 189.046897][ T8138] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 189.144119][ T10] usb 5-1: USB disconnect, device number 35 [ 189.150104][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 189.150152][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 189.613394][ T8167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.622556][ T8167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.198081][ T8183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.209850][ T8183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.219943][ T8183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.228929][ T8183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.768791][ T8190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.777715][ T8190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.787089][ T8189] netlink: 24 bytes leftover after parsing attributes in process `syz.5.493'. [ 191.291082][ T5869] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 191.350622][ T8196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.359608][ T8196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.374225][ T8196] netlink: 12 bytes leftover after parsing attributes in process `syz.5.495'. [ 191.383544][ T8196] netlink: 12 bytes leftover after parsing attributes in process `syz.5.495'. [ 191.442888][ T5869] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 191.450374][ T5869] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 191.461269][ T5869] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.473027][ T5869] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 191.484199][ T5869] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 191.496460][ T5869] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 191.503937][ T5869] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 191.514636][ T5869] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.526955][ T5869] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 191.538185][ T5869] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 191.550952][ T5869] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 191.559097][ T5869] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 191.569816][ T5869] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.581579][ T5869] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 191.592736][ T5869] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 191.606279][ T5869] usb 5-1: string descriptor 0 read error: -22 [ 191.612615][ T5869] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 191.622236][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.640364][ T5869] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 191.729574][ T8198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.743878][ T8198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.844983][ T5869] usb 5-1: USB disconnect, device number 36 [ 192.049101][ T8194] adutux: No device or device unplugged -19 [ 192.175031][ T8206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.186304][ T8206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.204897][ T8206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.216505][ T8206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.819789][ T8213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.846861][ T8213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.863264][ T8213] netlink: 72 bytes leftover after parsing attributes in process `syz.5.501'. [ 193.371069][ T24] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 193.539143][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 193.558639][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.585950][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=0057, bcdDevice= 0.40 [ 193.608126][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.617603][ T24] usb 5-1: Product: syz [ 193.624157][ T24] usb 5-1: SerialNumber: syz [ 193.822185][ T8226] FAULT_INJECTION: forcing a failure. [ 193.822185][ T8226] name failslab, interval 1, probability 0, space 0, times 1 [ 193.843959][ T8226] CPU: 1 UID: 0 PID: 8226 Comm: syz.6.507 Not tainted syzkaller #0 PREEMPT(full) [ 193.843982][ T8226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 193.844000][ T8226] Call Trace: [ 193.844012][ T8226] [ 193.844019][ T8226] dump_stack_lvl+0x189/0x250 [ 193.844050][ T8226] ? __pfx____ratelimit+0x10/0x10 [ 193.844072][ T8226] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.844093][ T8226] ? __pfx__printk+0x10/0x10 [ 193.844114][ T8226] ? __pfx___might_resched+0x10/0x10 [ 193.844130][ T8226] ? fs_reclaim_acquire+0x7d/0x100 [ 193.844155][ T8226] should_fail_ex+0x414/0x560 [ 193.844178][ T8226] should_failslab+0xa8/0x100 [ 193.844200][ T8226] __kmalloc_noprof+0xdf/0x800 [ 193.844221][ T8226] ? tomoyo_encode+0x28b/0x550 [ 193.844242][ T8226] tomoyo_encode+0x28b/0x550 [ 193.844263][ T8226] tomoyo_realpath_from_path+0x58d/0x5d0 [ 193.844292][ T8226] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 193.844307][ T8226] tomoyo_path_number_perm+0x1e8/0x5a0 [ 193.844326][ T8226] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 193.844381][ T8226] ? __fget_files+0x2a/0x420 [ 193.844404][ T8226] ? __fget_files+0x3a0/0x420 [ 193.844421][ T8226] ? __fget_files+0x2a/0x420 [ 193.844441][ T8226] security_file_ioctl+0xcb/0x2d0 [ 193.844466][ T8226] __se_sys_ioctl+0x47/0x170 [ 193.844491][ T8226] do_syscall_64+0xfa/0xfa0 [ 193.844513][ T8226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.844529][ T8226] ? clear_bhb_loop+0x60/0xb0 [ 193.844549][ T8226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.844563][ T8226] RIP: 0033:0x7f92d518f6c9 [ 193.844584][ T8226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.844596][ T8226] RSP: 002b:00007f92d60b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.844613][ T8226] RAX: ffffffffffffffda RBX: 00007f92d53e5fa0 RCX: 00007f92d518f6c9 [ 193.844624][ T8226] RDX: 00002000000004c0 RSI: 00000000c0905664 RDI: 0000000000000003 [ 193.844633][ T8226] RBP: 00007f92d60b9090 R08: 0000000000000000 R09: 0000000000000000 [ 193.844642][ T8226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.844652][ T8226] R13: 00007f92d53e6038 R14: 00007f92d53e5fa0 R15: 00007fff7d14b728 [ 193.844681][ T8226] [ 193.844725][ T8226] ERROR: Out of memory at tomoyo_realpath_from_path. [ 194.123020][ T8228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.135037][ T8228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.150486][ T8217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.164077][ T8217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.254866][ T24] usbhid 5-1:1.0: can't add hid device: -71 [ 194.260888][ T24] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 194.301478][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.308048][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.350816][ T24] usb 5-1: USB disconnect, device number 37 [ 194.505689][ T30] audit: type=1326 audit(1762816446.679:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8235 comm="syz.6.510" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f92d518f6c9 code=0x0 [ 194.791264][ T24] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 194.815926][ T8243] kAFS: unable to lookup cell 'syz0' [ 194.890669][ T8247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.906653][ T8247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.920563][ T8247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.935323][ T8247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.947426][ T8247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.958347][ T24] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 194.959822][ T8247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.978015][ T8247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.978879][ T24] usb 5-1: config 0 has no interface number 0 [ 194.988055][ T8247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.001764][ T24] usb 5-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9 [ 195.013922][ T8247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.021773][ T24] usb 5-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid maxpacket 99, setting to 64 [ 195.027714][ T8247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.044953][ T24] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 195.054401][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.066563][ T8247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.075345][ T24] usb 5-1: Product: syz [ 195.079667][ T24] usb 5-1: Manufacturer: syz [ 195.086364][ T24] usb 5-1: SerialNumber: syz [ 195.091236][ T8247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.115287][ T24] usb 5-1: config 0 descriptor?? [ 195.129885][ T8237] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 195.343706][ T8233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.356471][ T8233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.385108][ T24] qcserial 5-1:0.49: Qualcomm USB modem converter detected [ 195.403057][ T24] usb 5-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 195.433323][ T24] usb 5-1: USB disconnect, device number 38 [ 195.456219][ T24] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 195.477459][ T8262] fuse: Unknown parameter 'gN0x0000000000000003' [ 195.489171][ T24] qcserial 5-1:0.49: device disconnected [ 195.529839][ T8266] FAULT_INJECTION: forcing a failure. [ 195.529839][ T8266] name failslab, interval 1, probability 0, space 0, times 0 [ 195.542626][ T8266] CPU: 0 UID: 0 PID: 8266 Comm: syz.5.519 Not tainted syzkaller #0 PREEMPT(full) [ 195.542656][ T8266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 195.542663][ T8266] Call Trace: [ 195.542668][ T8266] [ 195.542673][ T8266] dump_stack_lvl+0x189/0x250 [ 195.542689][ T8266] ? __pfx____ratelimit+0x10/0x10 [ 195.542703][ T8266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.542714][ T8266] ? __pfx__printk+0x10/0x10 [ 195.542728][ T8266] ? __pfx___might_resched+0x10/0x10 [ 195.542741][ T8266] should_fail_ex+0x414/0x560 [ 195.542758][ T8266] should_failslab+0xa8/0x100 [ 195.542773][ T8266] __kmalloc_noprof+0xdf/0x800 [ 195.542786][ T8266] ? video_usercopy+0x18d/0x1450 [ 195.542801][ T8266] video_usercopy+0x18d/0x1450 [ 195.542819][ T8266] ? __pfx___video_do_ioctl+0x10/0x10 [ 195.542831][ T8266] ? __pfx_video_usercopy+0x10/0x10 [ 195.542851][ T8266] ? __fget_files+0x3a0/0x420 [ 195.542863][ T8266] v4l2_ioctl+0x18d/0x1e0 [ 195.542876][ T8266] ? __pfx_v4l2_ioctl+0x10/0x10 [ 195.542887][ T8266] __se_sys_ioctl+0xfc/0x170 [ 195.542901][ T8266] do_syscall_64+0xfa/0xfa0 [ 195.542915][ T8266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.542925][ T8266] ? clear_bhb_loop+0x60/0xb0 [ 195.542936][ T8266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.542945][ T8266] RIP: 0033:0x7fee2e78f6c9 [ 195.542954][ T8266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.542962][ T8266] RSP: 002b:00007fee2f66a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.542973][ T8266] RAX: ffffffffffffffda RBX: 00007fee2e9e5fa0 RCX: 00007fee2e78f6c9 [ 195.542980][ T8266] RDX: 00002000000004c0 RSI: 00000000c0905664 RDI: 0000000000000003 [ 195.542986][ T8266] RBP: 00007fee2f66a090 R08: 0000000000000000 R09: 0000000000000000 [ 195.542992][ T8266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.542998][ T8266] R13: 00007fee2e9e6038 R14: 00007fee2e9e5fa0 R15: 00007ffc83a3ba68 [ 195.543014][ T8266] [ 196.149740][ T8279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.158636][ T8279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.664419][ T8288] FAULT_INJECTION: forcing a failure. [ 196.664419][ T8288] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 196.680003][ T8288] CPU: 1 UID: 0 PID: 8288 Comm: syz.4.528 Not tainted syzkaller #0 PREEMPT(full) [ 196.680027][ T8288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 196.680038][ T8288] Call Trace: [ 196.680045][ T8288] [ 196.680053][ T8288] dump_stack_lvl+0x189/0x250 [ 196.680077][ T8288] ? __pfx____ratelimit+0x10/0x10 [ 196.680101][ T8288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.680121][ T8288] ? __pfx__printk+0x10/0x10 [ 196.680141][ T8288] ? __might_fault+0xb0/0x130 [ 196.680172][ T8288] should_fail_ex+0x414/0x560 [ 196.680199][ T8288] _copy_from_user+0x2d/0xb0 [ 196.680220][ T8288] video_usercopy+0x346/0x1450 [ 196.680254][ T8288] ? __pfx___video_do_ioctl+0x10/0x10 [ 196.680275][ T8288] ? __pfx_video_usercopy+0x10/0x10 [ 196.680314][ T8288] ? __fget_files+0x3a0/0x420 [ 196.680343][ T8288] v4l2_ioctl+0x18d/0x1e0 [ 196.680364][ T8288] ? __pfx_v4l2_ioctl+0x10/0x10 [ 196.680386][ T8288] __se_sys_ioctl+0xfc/0x170 [ 196.680411][ T8288] do_syscall_64+0xfa/0xfa0 [ 196.680436][ T8288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.680453][ T8288] ? clear_bhb_loop+0x60/0xb0 [ 196.680474][ T8288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.680490][ T8288] RIP: 0033:0x7f4583d8f6c9 [ 196.680505][ T8288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.680519][ T8288] RSP: 002b:00007f4581ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.680538][ T8288] RAX: ffffffffffffffda RBX: 00007f4583fe5fa0 RCX: 00007f4583d8f6c9 [ 196.680551][ T8288] RDX: 00002000000004c0 RSI: 00000000c0905664 RDI: 0000000000000003 [ 196.680563][ T8288] RBP: 00007f4581ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 196.680574][ T8288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.680585][ T8288] R13: 00007f4583fe6038 R14: 00007f4583fe5fa0 R15: 00007ffff5168568 [ 196.680615][ T8288] [ 196.975610][ T8292] capability: warning: `syz.3.530' uses 32-bit capabilities (legacy support in use) [ 196.986464][ T8292] cgroup: Setting release_agent not allowed [ 197.068954][ T8295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.082151][ T8295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.151294][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 197.247546][ T8302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.281504][ T8302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.303024][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 197.310366][ T10] usb 5-1: config 4 has an invalid interface number: 51 but max is 0 [ 197.311212][ T8302] netlink: 'syz.5.533': attribute type 2 has an invalid length. [ 197.325116][ T10] usb 5-1: config 4 has no interface number 0 [ 197.337264][ T10] usb 5-1: config 4 interface 51 has no altsetting 0 [ 197.347199][ T8302] netlink: 244 bytes leftover after parsing attributes in process `syz.5.533'. [ 197.353149][ T10] usb 5-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice=83.4b [ 197.369355][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.381061][ T10] usb 5-1: Product: syz [ 197.385406][ T10] usb 5-1: Manufacturer: syz [ 197.400294][ T10] usb 5-1: SerialNumber: syz [ 197.417756][ T10] upd78f0730 5-1:4.51: upd78f0730 converter detected [ 197.435742][ T10] usb 5-1: upd78f0730 converter now attached to ttyUSB0 [ 197.622354][ T5920] usb 5-1: USB disconnect, device number 39 [ 197.648313][ T5920] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 197.662953][ T5920] upd78f0730 5-1:4.51: device disconnected [ 197.989480][ T8304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.001518][ T8304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.679317][ T8322] FAULT_INJECTION: forcing a failure. [ 198.679317][ T8322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.693741][ T8322] CPU: 0 UID: 0 PID: 8322 Comm: syz.5.538 Not tainted syzkaller #0 PREEMPT(full) [ 198.693764][ T8322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 198.693774][ T8322] Call Trace: [ 198.693781][ T8322] [ 198.693788][ T8322] dump_stack_lvl+0x189/0x250 [ 198.693813][ T8322] ? __pfx____ratelimit+0x10/0x10 [ 198.693836][ T8322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.693857][ T8322] ? __pfx__printk+0x10/0x10 [ 198.693889][ T8322] should_fail_ex+0x414/0x560 [ 198.693919][ T8322] _copy_to_user+0x31/0xb0 [ 198.693949][ T8322] simple_read_from_buffer+0xe1/0x170 [ 198.693973][ T8322] proc_fail_nth_read+0x1b3/0x220 [ 198.694000][ T8322] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 198.694027][ T8322] ? rw_verify_area+0x2a6/0x4d0 [ 198.694048][ T8322] ? __lock_acquire+0xab9/0xd20 [ 198.694064][ T8322] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 198.694089][ T8322] vfs_read+0x200/0xa30 [ 198.694111][ T8322] ? fdget_pos+0x247/0x320 [ 198.694133][ T8322] ? __pfx___mutex_lock+0x10/0x10 [ 198.694150][ T8322] ? __pfx_vfs_read+0x10/0x10 [ 198.694175][ T8322] ? __fget_files+0x2a/0x420 [ 198.694196][ T8322] ? __fget_files+0x3a0/0x420 [ 198.694214][ T8322] ? __fget_files+0x2a/0x420 [ 198.694241][ T8322] ksys_read+0x145/0x250 [ 198.694259][ T8322] ? __pfx_ksys_read+0x10/0x10 [ 198.694279][ T8322] ? do_syscall_64+0xbe/0xfa0 [ 198.694306][ T8322] do_syscall_64+0xfa/0xfa0 [ 198.694330][ T8322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.694347][ T8322] ? clear_bhb_loop+0x60/0xb0 [ 198.694367][ T8322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.694384][ T8322] RIP: 0033:0x7fee2e78e0dc [ 198.694399][ T8322] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 198.694413][ T8322] RSP: 002b:00007fee2f66a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 198.694431][ T8322] RAX: ffffffffffffffda RBX: 00007fee2e9e5fa0 RCX: 00007fee2e78e0dc [ 198.694444][ T8322] RDX: 000000000000000f RSI: 00007fee2f66a0a0 RDI: 0000000000000004 [ 198.694455][ T8322] RBP: 00007fee2f66a090 R08: 0000000000000000 R09: 0000000000000000 [ 198.694466][ T8322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.694476][ T8322] R13: 00007fee2e9e6038 R14: 00007fee2e9e5fa0 R15: 00007ffc83a3ba68 [ 198.694507][ T8322] [ 199.069507][ T8327] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 199.353648][ T8342] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 199.387246][ T8345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.396072][ T8345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.410408][ T30] audit: type=1326 audit(1762816451.579:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8344 comm="syz.3.545" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34aab8f6c9 code=0x0 [ 199.559386][ T8354] tmpfs: Bad value for 'nr_inodes' [ 199.657959][ T8357] netlink: 'syz.4.549': attribute type 12 has an invalid length. [ 199.668250][ T8357] netlink: 'syz.4.549': attribute type 12 has an invalid length. [ 200.010677][ T8371] netlink: 'syz.5.553': attribute type 29 has an invalid length. [ 200.019193][ T8371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.553'. [ 200.061144][ T24] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 200.221170][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 200.232214][ T24] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 200.240610][ T24] usb 5-1: config 0 has no interface number 0 [ 200.246869][ T24] usb 5-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 200.259241][ T24] usb 5-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 200.260613][ T8377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.285310][ T24] usb 5-1: config 0 interface 49 has no altsetting 0 [ 200.286625][ T8377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.302498][ T24] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 200.311878][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.319845][ T24] usb 5-1: Product: syz [ 200.325228][ T24] usb 5-1: Manufacturer: syz [ 200.329912][ T24] usb 5-1: SerialNumber: syz [ 200.336487][ T24] usb 5-1: config 0 descriptor?? [ 200.552558][ T24] RobotFuzz Open Source InterFace, OSIF 5-1:0.49: failure sending bit rate [ 200.561267][ T24] RobotFuzz Open Source InterFace, OSIF 5-1:0.49: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 200.577008][ T24] usb 5-1: USB disconnect, device number 40 [ 200.835476][ T8379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.847108][ T8379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.098308][ T8382] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 201.108913][ T8382] mac80211_hwsim hwsim16 wlan0: left allmulticast mode [ 201.227330][ T8386] netlink: 24 bytes leftover after parsing attributes in process `syz.4.559'. [ 201.229942][ T8387] netlink: 24 bytes leftover after parsing attributes in process `syz.4.559'. [ 201.931110][ T43] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 202.083180][ T43] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 202.092327][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.102481][ T43] usb 5-1: config 0 descriptor?? [ 202.110479][ T43] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 202.475779][ T8411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.501479][ T8411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.507533][ T8413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.525171][ T43] gp8psk: usb in 128 operation failed. [ 202.528129][ T8413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.537951][ T43] gp8psk: usb in 137 operation failed. [ 202.548390][ T43] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 202.559375][ T43] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 202.570612][ T43] usb 5-1: USB disconnect, device number 41 [ 203.091633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 203.159745][ T8424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.170023][ T8424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.227274][ T8424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.246050][ T8428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.255948][ T8424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.269321][ T8428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.274539][ T8430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.576'. [ 203.285909][ T8428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.287906][ T8428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.300838][ T8424] usb usb8: usbfs: process 8424 (syz.3.573) did not claim interface 0 before use [ 203.341298][ T8424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.349984][ T8424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.360043][ T3503] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.424478][ T8432] sctp: [Deprecated]: syz.4.577 (pid 8432) Use of int in max_burst socket option. [ 203.424478][ T8432] Use struct sctp_assoc_value instead [ 203.897662][ T8448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.907490][ T8448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.911151][ T5869] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 203.976989][ T8450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.988714][ T8450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.072174][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 204.079307][ T5869] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 204.087831][ T5869] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 204.097664][ T5869] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 204.107521][ T5869] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 204.117985][ T5869] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.131594][ T5869] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 204.140668][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.360668][ T5869] usb 5-1: usb_control_msg returned -32 [ 204.366376][ T5869] usbtmc 5-1:16.0: can't read capabilities [ 204.658886][ T8457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.675621][ T8457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.687563][ T8457] rose0: entered allmulticast mode [ 204.696991][ T8457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.708271][ T8457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.730079][ T8458] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 205.244403][ T5869] usb 5-1: USB disconnect, device number 42 [ 205.282486][ T8462] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 205.294945][ T8462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.304857][ T8462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.550707][ T8471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.559543][ T8471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.681127][ T5869] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 205.835523][ T5869] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 205.845945][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.854761][ T5869] usb 5-1: Product: syz [ 205.858973][ T5869] usb 5-1: Manufacturer: syz [ 205.863642][ T5869] usb 5-1: SerialNumber: syz [ 206.022105][ T8480] netlink: 6 bytes leftover after parsing attributes in process `syz.5.591'. [ 206.034256][ T8480] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 206.042481][ T8480] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock [ 206.051838][ T8480] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 206.060256][ T8480] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock [ 206.172164][ T8484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.192118][ T8484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.275411][ T5869] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 206.301213][ T5869] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 206.422802][ T8489] binder: 8488:8489 ioctl c0285628 200000000040 returned -22 [ 206.496955][ T8491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.509471][ T8491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.793112][ T8496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.802906][ T8496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.922006][ T5869] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 206.941633][ T5869] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 206.952880][ T5869] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 206.966578][ T5869] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 206.985504][ T5869] usb 5-1: USB disconnect, device number 43 [ 207.165559][ T8500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.176066][ T8500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.428006][ T8502] syzkaller1: entered promiscuous mode [ 207.433552][ T8502] syzkaller1: entered allmulticast mode [ 207.657840][ T8512] netlink: 'syz.3.604': attribute type 1 has an invalid length. [ 207.666591][ T8512] netlink: 44 bytes leftover after parsing attributes in process `syz.3.604'. [ 208.781101][ T1223] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 208.921096][ T1223] usb 5-1: device descriptor read/64, error -71 [ 209.181120][ T1223] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 209.311873][ T1223] usb 5-1: device descriptor read/64, error -71 [ 209.425688][ T1223] usb usb5-port1: attempt power cycle [ 209.781082][ T1223] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 209.802952][ T1223] usb 5-1: device descriptor read/8, error -71 [ 210.061063][ T1223] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 210.082402][ T1223] usb 5-1: device descriptor read/8, error -71 [ 210.120447][ T8529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.130400][ T8529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.192123][ T1223] usb usb5-port1: unable to enumerate USB device [ 210.676260][ T8531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.685302][ T8531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.226590][ T8537] netlink: 128 bytes leftover after parsing attributes in process `syz.5.613'. [ 211.265442][ T8540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.275166][ T8540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.463832][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.475256][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.517990][ T8583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.526812][ T8583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.534867][ T24] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 212.691892][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 212.698745][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 212.708638][ T24] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 212.719095][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 212.728069][ T24] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 212.737645][ T24] usb 5-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 212.745861][ T24] usb 5-1: Product: syz [ 212.750019][ T24] usb 5-1: Manufacturer: syz [ 212.754674][ T24] usb 5-1: SerialNumber: syz [ 212.764124][ T24] usb 5-1: config 0 descriptor?? [ 213.145855][ T8587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.154884][ T8587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.166169][ T8587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.176181][ T24] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 213.182871][ T8587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.266798][ T8593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.275603][ T8593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.288910][ T8593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.297727][ T8593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.453777][ T24] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 214.465269][ T24] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPIPE) [ 214.474996][ T24] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -32 [ 214.833083][ T8595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.842128][ T8595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.852344][ T8595] netlink: 14 bytes leftover after parsing attributes in process `syz.5.633'. [ 215.043416][ T8602] FAULT_INJECTION: forcing a failure. [ 215.043416][ T8602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.056930][ T8602] CPU: 0 UID: 0 PID: 8602 Comm: syz.6.636 Not tainted syzkaller #0 PREEMPT(full) [ 215.056945][ T8602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 215.056951][ T8602] Call Trace: [ 215.056956][ T8602] [ 215.056960][ T8602] dump_stack_lvl+0x189/0x250 [ 215.056977][ T8602] ? __pfx____ratelimit+0x10/0x10 [ 215.056990][ T8602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.057001][ T8602] ? __pfx__printk+0x10/0x10 [ 215.057019][ T8602] should_fail_ex+0x414/0x560 [ 215.057036][ T8602] _copy_to_user+0x31/0xb0 [ 215.057049][ T8602] simple_read_from_buffer+0xe1/0x170 [ 215.057062][ T8602] proc_fail_nth_read+0x1b3/0x220 [ 215.057078][ T8602] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.057092][ T8602] ? rw_verify_area+0x2a6/0x4d0 [ 215.057105][ T8602] ? __lock_acquire+0xab9/0xd20 [ 215.057114][ T8602] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.057128][ T8602] vfs_read+0x200/0xa30 [ 215.057141][ T8602] ? fdget_pos+0x247/0x320 [ 215.057153][ T8602] ? __pfx___mutex_lock+0x10/0x10 [ 215.057163][ T8602] ? __pfx_vfs_read+0x10/0x10 [ 215.057176][ T8602] ? __fget_files+0x2a/0x420 [ 215.057189][ T8602] ? __fget_files+0x3a0/0x420 [ 215.057198][ T8602] ? __fget_files+0x2a/0x420 [ 215.057213][ T8602] ksys_read+0x145/0x250 [ 215.057223][ T8602] ? __pfx_ksys_read+0x10/0x10 [ 215.057234][ T8602] ? do_syscall_64+0xbe/0xfa0 [ 215.057251][ T8602] do_syscall_64+0xfa/0xfa0 [ 215.057264][ T8602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.057274][ T8602] ? clear_bhb_loop+0x60/0xb0 [ 215.057285][ T8602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.057295][ T8602] RIP: 0033:0x7f92d518e0dc [ 215.057304][ T8602] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 215.057312][ T8602] RSP: 002b:00007f92d60b9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 215.057323][ T8602] RAX: ffffffffffffffda RBX: 00007f92d53e5fa0 RCX: 00007f92d518e0dc [ 215.057330][ T8602] RDX: 000000000000000f RSI: 00007f92d60b90a0 RDI: 0000000000000003 [ 215.057336][ T8602] RBP: 00007f92d60b9090 R08: 0000000000000000 R09: 0000000000000000 [ 215.057342][ T8602] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 215.057347][ T8602] R13: 00007f92d53e6038 R14: 00007f92d53e5fa0 R15: 00007fff7d14b728 [ 215.057364][ T8602] [ 215.311198][ T24] usb 5-1: USB disconnect, device number 48 [ 215.396637][ T8606] syzkaller1: entered promiscuous mode [ 215.417321][ T8606] syzkaller1: entered allmulticast mode [ 215.796225][ T8623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.809664][ T8623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.841990][ T1223] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 216.005612][ T1223] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.014727][ T1223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.023850][ T1223] usb 5-1: Product: syz [ 216.028107][ T1223] usb 5-1: Manufacturer: syz [ 216.033392][ T1223] usb 5-1: SerialNumber: syz [ 216.585636][ T8648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.595386][ T8648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.088972][ T8654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.097838][ T8654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.209890][ T8657] tmpfs: Bad value for 'mpol' [ 217.263210][ T8614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.279840][ T8614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.295182][ T1223] cdc_ncm 5-1:1.0: failed to get mac address [ 217.300400][ T8660] fuse: Bad value for 'group_id' [ 217.308568][ T8660] fuse: Bad value for 'group_id' [ 217.318250][ T1223] cdc_ncm 5-1:1.0: bind() failure [ 217.334487][ T1223] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 217.351836][ T1223] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 217.374311][ T1223] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 217.386463][ T8662] netlink: 92 bytes leftover after parsing attributes in process `syz.3.657'. [ 217.393723][ T8665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.395774][ T8662] netlink: 24 bytes leftover after parsing attributes in process `syz.3.657'. [ 217.408181][ T1223] usb 5-1: USB disconnect, device number 49 [ 217.445908][ T8665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.679782][ T8667] raw_sendmsg: syz.5.658 forgot to set AF_INET. Fix it! [ 217.691535][ T8667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.701924][ T8667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.598533][ T8688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.618982][ T8688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.329341][ T8698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.351773][ T8699] sp0: Synchronizing with TNC [ 219.356562][ T8698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.559214][ T8707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.569709][ T8707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.721096][ T10] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 219.873159][ T10] usb 5-1: config 0 has no interfaces? [ 219.884745][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 219.896318][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.918594][ T10] usb 5-1: Product: syz [ 219.922942][ T10] usb 5-1: Manufacturer: syz [ 219.927545][ T10] usb 5-1: SerialNumber: syz [ 219.942019][ T10] usb 5-1: config 0 descriptor?? [ 219.943643][ T8713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.959543][ T8713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.972270][ T8714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.980867][ T8714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.027515][ T8718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.036905][ T8718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.137385][ T5826] Bluetooth: hci3: Malformed LE Event: 0x02 [ 220.138088][ T8722] netlink: 128 bytes leftover after parsing attributes in process `syz.5.674'. [ 220.153028][ T8722] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 220.173445][ T8722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.191704][ T8722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.245049][ T5920] usb 5-1: USB disconnect, device number 50 [ 220.698636][ T8727] syzkaller1: entered promiscuous mode [ 220.705857][ T8727] syzkaller1: entered allmulticast mode [ 220.980819][ T8737] rtc_cmos 00:00: Alarms can be up to one day in the future [ 221.010447][ T30] audit: type=1326 audit(1762816473.179:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.5.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2e78f6c9 code=0x7ffc0000 [ 221.073055][ T30] audit: type=1326 audit(1762816473.179:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.5.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2e78f6c9 code=0x7ffc0000 [ 221.114170][ T30] audit: type=1326 audit(1762816473.179:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.5.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2e78f6c9 code=0x7ffc0000 [ 221.138826][ T30] audit: type=1326 audit(1762816473.209:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.5.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2e78f6c9 code=0x7ffc0000 [ 221.164193][ T30] audit: type=1326 audit(1762816473.209:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.5.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2e78f6c9 code=0x7ffc0000 [ 221.191952][ T30] audit: type=1326 audit(1762816473.209:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.5.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2e78f6c9 code=0x7ffc0000 [ 221.226695][ T30] audit: type=1326 audit(1762816473.209:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.5.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee2e78f6c9 code=0x7ffc0000 [ 221.251792][ T30] audit: type=1326 audit(1762816473.209:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.5.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2e78f6c9 code=0x7ffc0000 [ 221.277492][ T30] audit: type=1326 audit(1762816473.209:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.5.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2e78f6c9 code=0x7ffc0000 [ 221.302073][ T30] audit: type=1326 audit(1762816473.219:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8738 comm="syz.5.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee2e78f6c9 code=0x7ffc0000 [ 221.668653][ T8754] netlink: 180 bytes leftover after parsing attributes in process `syz.3.686'. [ 221.693403][ T8739] infiniband syz2: set down [ 221.698488][ T8739] infiniband syz2: added ipvlan1 [ 221.732821][ T8739] RDS/IB: syz2: added [ 221.737524][ T8739] smc: adding ib device syz2 with port count 1 [ 221.745258][ T8739] smc: ib device syz2 port 1 has no pnetid [ 221.906999][ T8758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.916739][ T8758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.343624][ T8750] 9pnet_fd: p9_fd_create_tcp (8750): problem connecting socket to 127.0.0.1 [ 222.411529][ T8761] netlink: 60 bytes leftover after parsing attributes in process `syz.4.688'. [ 222.423278][ T8760] netlink: 60 bytes leftover after parsing attributes in process `syz.4.688'. [ 222.519945][ T8766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.528200][ T8767] Invalid ELF header magic: != ELF [ 222.528864][ T8766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.540813][ T8767] Invalid ELF header magic: != ELF [ 222.565787][ T8766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.568486][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.5.689'. [ 222.583951][ T8766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.605650][ T8768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.627976][ T8768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.805627][ T8782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.814899][ T8782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.831343][ T794] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 222.981066][ T794] usb 5-1: Using ep0 maxpacket: 8 [ 222.987610][ T794] usb 5-1: config 162 has an invalid interface number: 246 but max is 1 [ 222.996012][ T794] usb 5-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 223.006407][ T794] usb 5-1: config 162 has 1 interface, different from the descriptor's value: 2 [ 223.015597][ T794] usb 5-1: config 162 has no interface number 0 [ 223.021971][ T794] usb 5-1: config 162 interface 246 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.035256][ T794] usb 5-1: config 162 interface 246 has no altsetting 0 [ 223.044202][ T794] usb 5-1: New USB device found, idVendor=8087, idProduct=0a5a, bcdDevice=5f.2c [ 223.053367][ T794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.062307][ T794] usb 5-1: Product: syz [ 223.066484][ T794] usb 5-1: Manufacturer: syz [ 223.071108][ T794] usb 5-1: SerialNumber: syz [ 223.257362][ T8785] netlink: 'syz.3.697': attribute type 21 has an invalid length. [ 223.265632][ T8785] netlink: 14532 bytes leftover after parsing attributes in process `syz.3.697'. [ 223.313165][ T8771] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 223.325754][ T8771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.341138][ T8771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.449392][ T794] usb 5-1: USB disconnect, device number 51 [ 223.472748][ T8795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.485093][ T8795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.087169][ T8805] binder: Bad value for 'max' [ 224.127047][ T8809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.136524][ T8809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.421083][ T24] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 224.593256][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 224.604465][ T24] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 224.613826][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.624437][ T24] usb 5-1: config 0 descriptor?? [ 224.630140][ T8811] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 224.708446][ T8813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.719105][ T8813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.858942][ T24] elan 0003:04F3:0755.000C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 224.903887][ T24] usb 5-1: USB disconnect, device number 52 [ 225.028181][ T8817] fido_id[8817]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 225.139157][ T8831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.147936][ T8831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.291654][ T24] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 225.461076][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 225.468335][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 225.477722][ T24] usb 5-1: config 9 has an invalid interface number: 16 but max is 0 [ 225.486454][ T24] usb 5-1: config 9 has no interface number 0 [ 225.492622][ T24] usb 5-1: config 9 interface 16 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 225.503423][ T24] usb 5-1: config 9 interface 16 has no altsetting 0 [ 225.513292][ T24] usb 5-1: New USB device found, idVendor=2b73, idProduct=000d, bcdDevice=b9.76 [ 225.522692][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.530695][ T24] usb 5-1: Product: syz [ 225.534876][ T24] usb 5-1: Manufacturer: 뒞恗跥䮏੝姏郊䎺ᣋ脠걜샧䖾섪ഄ✨仳䝬爘钤ꦑ믏ꌕⲓ贋┾調霩灥哭䔟鋑덢앋曜態䡂⎔㭨ჿ姊쥳氼㙀醵鈣៑筿꾻鯌쪟鉶ジ䏚ﹸ瑦筝빁ﱮ㋶믇㛿硾閹뷱鷻㻦돬읁럚ㇹ썲舊ᧇ檈 [ 225.563339][ T24] usb 5-1: SerialNumber: syz [ 225.670469][ T8836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.680673][ T8836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.791086][ T8819] netlink: 14 bytes leftover after parsing attributes in process `syz.4.708'. [ 225.991044][ T8819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.005362][ T8819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.018510][ T8819] bond0 (unregistering): Released all slaves [ 226.146884][ T24] usb 5-1: USB disconnect, device number 53 [ 226.184571][ T5925] udevd[5925]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:9.16/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 226.262135][ T8861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.284852][ T8861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.869120][ T8884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.881308][ T8884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.894949][ T8884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.904465][ T8884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.041132][ T1223] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 227.192597][ T1223] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.204053][ T1223] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 227.219773][ T1223] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 227.228986][ T1223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.237168][ T1223] usb 5-1: Product: syz [ 227.241362][ T1223] usb 5-1: Manufacturer: syz [ 227.245931][ T1223] usb 5-1: SerialNumber: syz [ 227.415085][ T8892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.429229][ T8892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.458348][ T8880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.475196][ T8880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.513153][ T1223] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 227.530133][ T1223] usb 5-1: USB disconnect, device number 54 [ 227.597266][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.734'. [ 228.021086][ T1223] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 228.171057][ T1223] usb 5-1: Using ep0 maxpacket: 8 [ 228.179074][ T1223] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 228.187630][ T1223] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 228.198199][ T1223] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 228.209916][ T1223] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 228.225331][ T1223] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 228.235739][ T1223] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.246801][ T1223] usb 5-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.259812][ T1223] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 228.269206][ T1223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.312572][ T8909] kvm: pic: non byte write [ 228.493928][ T1223] usb 5-1: usb_control_msg returned -32 [ 228.499638][ T1223] usbtmc 5-1:16.0: can't read capabilities [ 228.505879][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.512766][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.518758][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.524771][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.530768][ C1] usbtmc 5-1:16.0: invalid notification: 11 [ 228.537223][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.544178][ C1] usbtmc 5-1:16.0: invalid notification: 2 [ 228.550272][ C1] usbtmc 5-1:16.0: invalid notification: 5 [ 228.556255][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.562291][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.568304][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.574319][ C1] usbtmc 5-1:16.0: invalid notification: 40 [ 228.580612][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.591127][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.597753][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.603851][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.609978][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.615979][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.622018][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.628025][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.634040][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.640963][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.646978][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.653017][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.659024][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.665046][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.671060][ C1] usbtmc 5-1:16.0: invalid notification: 2e [ 228.677197][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.683187][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.689417][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.696644][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.702822][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.708843][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.714827][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.720849][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.726837][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.732862][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.738859][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.744857][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.750848][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.756849][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.762844][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.768867][ C1] usbtmc 5-1:16.0: invalid notification: 2e [ 228.775000][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.781035][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.787046][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.798462][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.804650][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.810659][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.816837][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.822846][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.828845][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.834862][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.841254][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.847272][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.853880][ C1] usbtmc 5-1:16.0: invalid notification: 0 [ 228.890616][ T5920] usb 5-1: USB disconnect, device number 55 [ 228.928771][ T8921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.958383][ T8921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.978148][ T8923] netlink: 20 bytes leftover after parsing attributes in process `syz.4.742'. [ 229.590098][ T5826] Bluetooth: hci1: link tx timeout [ 229.599377][ T5826] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 229.658590][ T52] Bluetooth: hci1: link tx timeout [ 229.664121][ T52] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 229.665252][ T8953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.685708][ T52] Bluetooth: hci1: link tx timeout [ 229.687699][ T8953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.690907][ T52] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 229.709103][ T8953] netlink: 80 bytes leftover after parsing attributes in process `syz.5.745'. [ 229.751764][ T52] Bluetooth: hci1: link tx timeout [ 229.757619][ T52] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 229.961668][ T52] Bluetooth: hci1: link tx timeout [ 229.966910][ T52] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 230.182803][ T52] Bluetooth: hci1: link tx timeout [ 230.189024][ T52] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 230.470079][ T8991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.492231][ T8991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.501457][ T1223] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 230.578728][ T8997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.587889][ T8997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.611302][ T5920] IPVS: starting estimator thread 0... [ 230.671067][ T1223] usb 5-1: Using ep0 maxpacket: 16 [ 230.678244][ T1223] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 230.686805][ T1223] usb 5-1: config 0 has an invalid descriptor of length 204, skipping remainder of the config [ 230.698301][ T1223] usb 5-1: config 0 has no interface number 0 [ 230.701253][ T8999] IPVS: using max 35 ests per chain, 84000 per kthread [ 230.706441][ T1223] usb 5-1: too many endpoints for config 0 interface 214 altsetting 144: 200, using maximum allowed: 30 [ 230.722987][ T1223] usb 5-1: config 0 interface 214 altsetting 144 has 0 endpoint descriptors, different from the interface descriptor's value: 200 [ 230.736737][ T1223] usb 5-1: config 0 interface 214 has no altsetting 0 [ 230.748885][ T1223] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 230.758591][ T1223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.767353][ T1223] usb 5-1: Product: syz [ 230.771914][ T1223] usb 5-1: Manufacturer: syz [ 230.776556][ T1223] usb 5-1: SerialNumber: syz [ 230.784436][ T1223] usb 5-1: config 0 descriptor?? [ 230.887096][ T9002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.895908][ T9002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.051527][ T1223] usb 5-1: USB disconnect, device number 56 [ 231.183139][ T9006] tipc: Enabling of bearer rejected, failed to enable media [ 231.255617][ T52] Bluetooth: hci1: link tx timeout [ 231.260929][ T52] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 231.370717][ T52] Bluetooth: hci1: link tx timeout [ 231.376042][ T52] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 231.385715][ T52] Bluetooth: hci1: link tx timeout [ 231.391047][ T52] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 231.651479][ T52] Bluetooth: hci1: command 0x0405 tx timeout [ 231.941074][ T5869] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 232.056896][ T9013] netlink: 36 bytes leftover after parsing attributes in process `syz.5.760'. [ 232.091144][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 232.099337][ T5869] usb 5-1: config 5 has an invalid interface number: 168 but max is 0 [ 232.107860][ T5869] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 232.118173][ T5869] usb 5-1: config 5 has no interface number 0 [ 232.125954][ T5869] usb 5-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 232.137820][ T5869] usb 5-1: config 5 interface 168 altsetting 7 endpoint 0x8B has invalid wMaxPacketSize 0 [ 232.147764][ T5869] usb 5-1: config 5 interface 168 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.160791][ T5869] usb 5-1: config 5 interface 168 has no altsetting 0 [ 232.169525][ T5869] usb 5-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 232.179793][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.188035][ T5869] usb 5-1: Product: syz [ 232.192306][ T5869] usb 5-1: Manufacturer: syz [ 232.196913][ T5869] usb 5-1: SerialNumber: syz [ 232.423130][ T5869] pn533_usb 5-1:5.168: NFC: Could not find bulk-in or bulk-out endpoint [ 232.438313][ T5869] usb 5-1: USB disconnect, device number 57 [ 232.810791][ T9031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.832134][ T9031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.123613][ T9037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.143329][ T9037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.519624][ T9052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.528362][ T9052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.695455][ T9054] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 233.711225][ T9054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.719837][ T9054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.078437][ T9062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.089216][ T9063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.089638][ T9062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.101531][ T9063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.121703][ T9062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.123641][ T9062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.317684][ T9069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.327360][ T9069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.338960][ T9069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.347740][ T9069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.356655][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.5.778'. [ 234.367022][ T9069] netlink: 'syz.5.778': attribute type 3 has an invalid length. [ 234.882332][ T9087] No control pipe specified [ 234.895647][ T9087] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 235.004606][ T9093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.014748][ T9093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.471080][ T794] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 235.476084][ T9114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.487639][ T9114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.621641][ T9118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.630485][ T9118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.640269][ T794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.654304][ T794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.664336][ T794] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 235.673734][ T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.683731][ T794] usb 5-1: config 0 descriptor?? [ 235.894649][ T9104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.903616][ T9104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.050557][ T30] kauditd_printk_skb: 374 callbacks suppressed [ 236.050573][ T30] audit: type=1326 audit(1762816744.219:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9119 comm="syz.5.792" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee2e78f6c9 code=0x0 [ 236.115792][ T794] steelseries 0003:1038:12B6.000D: unknown main item tag 0x0 [ 236.123311][ T794] steelseries 0003:1038:12B6.000D: unknown main item tag 0x0 [ 236.130706][ T794] steelseries 0003:1038:12B6.000D: unknown main item tag 0x0 [ 236.138393][ T794] steelseries 0003:1038:12B6.000D: unknown main item tag 0x0 [ 236.145875][ T794] steelseries 0003:1038:12B6.000D: unknown main item tag 0x0 [ 236.153449][ T794] steelseries 0003:1038:12B6.000D: unknown main item tag 0x0 [ 236.160842][ T794] steelseries 0003:1038:12B6.000D: unknown main item tag 0x0 [ 236.171477][ T794] steelseries 0003:1038:12B6.000D: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.4-1/input0 [ 236.521733][ T1223] usb 5-1: USB disconnect, device number 58 [ 236.568832][ T9127] netlink: 168 bytes leftover after parsing attributes in process `syz.3.794'. [ 236.733428][ T9139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.735702][ T9142] 9pnet_fd: Insufficient options for proto=fd [ 236.763458][ T9139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.902634][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.799'. [ 236.986323][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.800'. [ 237.055528][ T9157] fuse: Bad value for 'user_id' [ 237.060423][ T9157] fuse: Bad value for 'user_id' [ 237.218397][ T9164] netlink: 168 bytes leftover after parsing attributes in process `syz.4.805'. [ 237.638422][ T9176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.651225][ T9176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.924878][ T9186] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 4294967272. macoff=96 [ 237.945937][ T9186] netlink: 20 bytes leftover after parsing attributes in process `syz.4.811'. [ 237.975423][ T9186] loop4: detected capacity change from 0 to 524287936 [ 238.177607][ T9195] netlink: 168 bytes leftover after parsing attributes in process `syz.3.815'. [ 238.621340][ T9212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.630505][ T9212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.643635][ T9212] netlink: 32 bytes leftover after parsing attributes in process `syz.3.821'. [ 238.866057][ T9214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.875438][ T9214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.884788][ T9214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.893561][ T9214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.231266][ T1223] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 239.391108][ T1223] usb 5-1: Using ep0 maxpacket: 16 [ 239.397910][ T1223] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 239.409796][ T1223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 239.429418][ T1223] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 239.438771][ T1223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.447603][ T1223] usb 5-1: Product: syz [ 239.452214][ T1223] usb 5-1: Manufacturer: syz [ 239.456871][ T1223] usb 5-1: SerialNumber: syz [ 239.466936][ T1223] usb 5-1: config 0 descriptor?? [ 239.482957][ T1223] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 239.492440][ T1223] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 239.525861][ T9228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.536440][ T9228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.079924][ T1223] em28xx 5-1:0.0: chip ID is em2882/3 [ 240.323533][ T9247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.339238][ T9247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.798021][ T9275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.815241][ T9275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.183293][ T1223] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 241.191149][ T1223] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 241.198197][ T1223] em28xx 5-1:0.0: No AC97 audio processor [ 241.440797][ T9280] loop3: detected capacity change from 0 to 7 [ 241.450283][ T9280] Dev loop3: unable to read RDB block 7 [ 241.456044][ T9280] loop3: unable to read partition table [ 241.463004][ T9280] loop3: partition table beyond EOD, truncated [ 241.469353][ T9280] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 241.825224][ T9298] program syz.5.839 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.839978][ T9298] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 242.005552][ T794] usb 5-1: USB disconnect, device number 59 [ 242.026087][ T794] em28xx 5-1:0.0: Disconnecting em28xx [ 242.046948][ T794] em28xx 5-1:0.0: Freeing device [ 242.110207][ T9304] netlink: 'syz.4.840': attribute type 11 has an invalid length. [ 242.451065][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 243.296806][ T9247] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 243.425249][ T9307] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 243.432134][ T9307] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 243.437772][ T9311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.448459][ T9311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.456383][ T9309] program syz.5.841 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.461968][ T9311] netlink: 'syz.3.843': attribute type 2 has an invalid length. [ 243.473961][ T9311] netlink: 244 bytes leftover after parsing attributes in process `syz.3.843'. [ 243.501140][ T9315] netlink: 'syz.3.843': attribute type 2 has an invalid length. [ 243.508797][ T9315] netlink: 244 bytes leftover after parsing attributes in process `syz.3.843'. [ 243.530402][ T9311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.560359][ T9311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.699015][ T9330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.847'. [ 243.745135][ T9337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.753141][ T9338] netlink: 'syz.3.849': attribute type 1 has an invalid length. [ 243.765249][ T9337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.772349][ T9338] netlink: 'syz.3.849': attribute type 2 has an invalid length. [ 243.782717][ T9337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.791692][ T9337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.807291][ T9338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.841977][ T9338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.858135][ T9341] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input23 [ 244.011658][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.853'. [ 244.475726][ T9355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.485599][ T9355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.604119][ T9361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.623233][ T9361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.660768][ T9361] KVM: debugfs: duplicate directory 9361-10 [ 244.715511][ T9363] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 245.080635][ T9380] netlink: 'syz.5.863': attribute type 75 has an invalid length. [ 245.149944][ T9385] netlink: 'syz.5.865': attribute type 21 has an invalid length. [ 245.150064][ T9384] sctp: [Deprecated]: syz.5.865 (pid 9384) Use of int in maxseg socket option. [ 245.150064][ T9384] Use struct sctp_assoc_value instead [ 245.157825][ T9385] netlink: 128 bytes leftover after parsing attributes in process `syz.5.865'. [ 245.183972][ T9385] netlink: 3 bytes leftover after parsing attributes in process `syz.5.865'. [ 245.224412][ T9388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.233125][ T9388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.245795][ T9389] netlink: 20 bytes leftover after parsing attributes in process `syz.4.864'. [ 245.301992][ T9390] x_tables: duplicate underflow at hook 4 [ 245.501240][ T794] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 245.673126][ T794] usb 5-1: config 0 interface 0 has no altsetting 0 [ 245.683558][ T794] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 245.698264][ T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.728352][ T794] usb 5-1: config 0 descriptor?? [ 245.756042][ T9394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.779026][ T9394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.158525][ T794] redragon 0003:0C45:760B.000E: unknown main item tag 0x0 [ 246.167456][ T794] redragon 0003:0C45:760B.000E: hidraw0: USB HID v0.01 Device [HID 0c45:760b] on usb-dummy_hcd.4-1/input0 [ 246.417625][ T9399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.426650][ T9399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.437041][ T9402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.445918][ T9402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.479076][ T9404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.487912][ T9404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.107890][ T9415] devpts: Unknown parameter 'grpquotaR\)[Ǽ@uDf wMW#Y`9>(N' [ 247.302920][ T9424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.317927][ T9424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.332508][ T9426] netlink: 'syz.5.878': attribute type 21 has an invalid length. [ 247.339169][ T9424] support for the xor transformation has been removed. [ 247.347380][ T9426] netlink: 144 bytes leftover after parsing attributes in process `syz.5.878'. [ 247.435902][ T9433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.444882][ T9433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.473182][ T9434] netlink: 'syz.6.879': attribute type 10 has an invalid length. [ 247.481156][ T9434] netlink: 55 bytes leftover after parsing attributes in process `syz.6.879'. [ 247.909592][ T9437] binder_alloc: 9436: binder_alloc_buf size -200 failed, no address space [ 247.920366][ T9437] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 247.931438][ T9437] binder: 9436:9437 ioctl c0306201 200000004a40 returned -22 [ 248.158585][ T5869] usb 5-1: USB disconnect, device number 60 [ 248.348183][ T9458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.357982][ T9458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.369878][ T9454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.380576][ T9454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.661060][ T5869] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 248.791892][ T5869] usb 5-1: device descriptor read/64, error -71 [ 248.816134][ T30] audit: type=1326 audit(1762816756.989:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.3.894" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34aab8f6c9 code=0x0 [ 248.942795][ T9473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.951543][ T9473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.031225][ T5869] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 249.161051][ T5869] usb 5-1: device descriptor read/64, error -71 [ 249.271824][ T5869] usb usb5-port1: attempt power cycle [ 249.505346][ T9475] sctp: [Deprecated]: syz.5.896 (pid 9475) Use of struct sctp_assoc_value in delayed_ack socket option. [ 249.505346][ T9475] Use struct sctp_sack_info instead [ 249.554510][ T9477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.563519][ T9477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.621144][ T5869] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 249.651892][ T5869] usb 5-1: device descriptor read/8, error -71 [ 249.715936][ T9481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.725320][ T9481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.891178][ T1151] wlan1: Trigger new scan to find an IBSS to join [ 249.891301][ T5869] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 249.922706][ T5869] usb 5-1: device descriptor read/8, error -71 [ 250.031356][ T5869] usb usb5-port1: unable to enumerate USB device [ 250.101209][ T9483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.109968][ T9483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.334199][ T9487] tipc: MTU too low for tipc bearer [ 250.725156][ T9494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.733914][ T9494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.858587][ T9503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.874098][ T9503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.920922][ T9506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.929523][ T9503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.936411][ T9506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.939611][ T9504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.954501][ T9503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.956798][ T9506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.963416][ T9504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.973439][ T9506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.068897][ T9510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.077767][ T9510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.931541][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.5.915'. [ 251.991044][ T10] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 252.151071][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 252.159280][ T10] usb 5-1: config 254 has an invalid interface number: 235 but max is 0 [ 252.188502][ T10] usb 5-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 252.199272][ T10] usb 5-1: config 254 has no interface number 0 [ 252.205892][ T10] usb 5-1: config 254 interface 235 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 252.226861][ T10] usb 5-1: config 254 interface 235 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.250130][ T10] usb 5-1: config 254 interface 235 has no altsetting 0 [ 252.262688][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 252.282022][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.290831][ T10] usb 5-1: Product: syz [ 252.296489][ T10] usb 5-1: Manufacturer: syz [ 252.302185][ T10] usb 5-1: SerialNumber: syz [ 252.319315][ T10] usbtest 5-1:254.235: couldn't get endpoints, -22 [ 252.330214][ T10] usbtest 5-1:254.235: probe with driver usbtest failed with error -22 [ 252.347069][ T9555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.923'. [ 252.464039][ T9560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.474466][ T9560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.485289][ T9560] vxcan0: tx address claim with different name [ 252.545632][ T5920] usb 5-1: USB disconnect, device number 65 [ 252.691129][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 252.911292][ T9574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.919982][ T9574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.931942][ T60] wlan1: Trigger new scan to find an IBSS to join [ 253.044083][ T9579] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_0, syncid = 2, id = 0 [ 253.044359][ T9577] IPVS: stopping master sync thread 9579 ... [ 253.127636][ T9581] overlayfs: failed to resolve './file0': -2 [ 253.138220][ T9581] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 253.467515][ T9592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.476549][ T9592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.538069][ T9594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.548165][ T43] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 253.550710][ T9594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.703989][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.714306][ T43] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 253.723629][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.733756][ T43] usb 5-1: config 0 descriptor?? [ 253.742824][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 254.024913][ T9596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.034262][ T9596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.106718][ T9598] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.122575][ T9598] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.129893][ T9598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.147450][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 254.158027][ T43] pwc: recv_control_msg error -32 req 02 val 2700 [ 254.165985][ T43] pwc: recv_control_msg error -32 req 02 val 2c00 [ 254.174010][ T43] pwc: recv_control_msg error -32 req 04 val 1000 [ 254.181502][ T43] pwc: recv_control_msg error -32 req 04 val 1300 [ 254.189167][ T43] pwc: recv_control_msg error -32 req 04 val 1400 [ 254.198474][ T9600] Invalid option length (0) for dns_resolver key [ 254.242664][ T9605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.251556][ T9605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.265452][ T9605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.274427][ T9605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.284297][ T9605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.295407][ T9605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.398468][ T43] pwc: recv_control_msg error -71 req 02 val 2100 [ 254.407934][ T43] pwc: recv_control_msg error -71 req 04 val 1500 [ 254.414859][ T43] pwc: recv_control_msg error -71 req 02 val 2500 [ 254.421656][ T43] pwc: recv_control_msg error -71 req 02 val 2400 [ 254.428355][ T43] pwc: recv_control_msg error -71 req 02 val 2600 [ 254.435208][ T43] pwc: recv_control_msg error -71 req 02 val 2900 [ 254.442238][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 254.449101][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 254.459551][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 254.468947][ T43] pwc: Registered as video103. [ 254.481319][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24 [ 254.518279][ T43] usb 5-1: USB disconnect, device number 66 [ 254.599011][ T9609] Invalid ELF header magic: != ELF [ 254.652800][ T9611] overlay: filesystem on ./file0 not supported as upperdir [ 254.691911][ T9613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.700926][ T9613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.766942][ T9614] cgroup: Unknown subsys name 'fsuuid' [ 254.837445][ T9616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.846432][ T9616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.059724][ T9616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.072778][ T9616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.105303][ T9616] TCP: TCP_TX_DELAY enabled [ 255.704580][ T9630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.713557][ T9630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.740123][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.747734][ T5869] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 255.749506][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.774054][ T9630] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 255.786960][ T9633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.795879][ T9633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.891252][ T12] wlan1: Trigger new scan to find an IBSS to join [ 255.934746][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.947934][ T5869] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 255.959866][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 255.970919][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 255.981908][ T5869] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.996953][ T5869] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 256.006082][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.014114][ T5869] usb 5-1: Product: syz [ 256.018274][ T5869] usb 5-1: Manufacturer: syz [ 256.022926][ T5869] usb 5-1: SerialNumber: syz [ 256.029458][ T5869] usb 5-1: config 0 descriptor?? [ 256.035506][ T9628] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 256.101049][ T5869] rc_core: IR keymap rc-xbox-dvd not found [ 256.106985][ T5869] Registered IR keymap rc-empty [ 256.112820][ T5869] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 256.122908][ T5869] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input25 [ 256.256588][ T5869] usb 5-1: USB disconnect, device number 67 [ 256.262722][ C0] xbox_remote 5-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 256.815549][ T1151] wlan1: Creating new IBSS network, BSSID 8e:2d:d6:11:0f:64 [ 257.251616][ T5869] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 257.431027][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 257.442442][ T5869] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 257.453325][ T5869] usb 5-1: config 0 has no interface number 0 [ 257.459501][ T5869] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 257.471603][ T5869] usb 5-1: config 0 interface 85 has no altsetting 0 [ 257.482403][ T5869] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 257.491771][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.499985][ T5869] usb 5-1: Product: syz [ 257.505059][ T5869] usb 5-1: Manufacturer: syz [ 257.509743][ T5869] usb 5-1: SerialNumber: syz [ 257.518398][ T5869] usb 5-1: config 0 descriptor?? [ 257.820533][ T9659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.836536][ T9658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.838337][ T9659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.855385][ T9658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.906070][ T9659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.916738][ T9659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.926532][ T52] Bluetooth: hci3: adv larger than maximum supported [ 257.926558][ T52] Bluetooth: hci3: Malformed LE Event: 0x0d [ 258.161515][ T5869] appletouch 5-1:0.85: Geyser mode initialized. [ 258.173500][ T5869] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input26 [ 258.375377][ T5869] usb 5-1: USB disconnect, device number 68 [ 258.417546][ T5869] appletouch 5-1:0.85: input: appletouch disconnected [ 258.523673][ T30] audit: type=1804 audit(1762816766.699:461): pid=9664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.958" name="/newroot/263/cgroup.controllers" dev="tmpfs" ino=1404 res=1 errno=0 [ 258.581074][ T30] audit: type=1800 audit(1762816766.699:462): pid=9664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.958" name="cgroup.controllers" dev="tmpfs" ino=1404 res=0 errno=0 [ 258.900181][ T9675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.922309][ T9675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.956187][ T9675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.972476][ T9675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.044827][ T9678] loop8: detected capacity change from 0 to 7 [ 259.057815][ T5925] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 259.066624][ T5925] loop8: partition table partially beyond EOD, truncated [ 259.075899][ T5925] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 259.085787][ T5925] loop8: p2 start 956478 is beyond EOD, truncated [ 259.101483][ T9678] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 259.110162][ T9678] loop8: partition table partially beyond EOD, truncated [ 259.124156][ T9678] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 259.143009][ T9678] loop8: p2 start 956478 is beyond EOD, truncated [ 259.216228][ T5925] udevd[5925]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 259.285489][ T5925] udevd[5925]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 259.339700][ T9682] nbd5: detected capacity change from 0 to 63 [ 259.352400][ T9683] block nbd5: NBD_DISCONNECT [ 259.358319][ T9683] block nbd5: Disconnected due to user request. [ 259.370671][ T9683] block nbd5: shutting down sockets [ 259.378163][ T5928] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.394069][ T5928] Buffer I/O error on dev nbd5, logical block 0, async page read [ 259.402459][ T5928] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.416137][ T5928] Buffer I/O error on dev nbd5, logical block 1, async page read [ 259.431667][ T56] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 259.441086][ T56] Buffer I/O error on dev nbd5, logical block 2, async page read [ 259.449028][ T56] Buffer I/O error on dev nbd5, logical block 3, async page read [ 259.473083][ T5928] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.525569][ T5928] Buffer I/O error on dev nbd5, logical block 0, async page read [ 259.561181][ T5928] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.597254][ T5928] Buffer I/O error on dev nbd5, logical block 1, async page read [ 259.633520][ T5928] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.633574][ T5928] Buffer I/O error on dev nbd5, logical block 2, async page read [ 259.633698][ T5928] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.633720][ T5928] Buffer I/O error on dev nbd5, logical block 3, async page read [ 259.633845][ T5928] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.633862][ T5928] Buffer I/O error on dev nbd5, logical block 0, async page read [ 259.633966][ T5928] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.633982][ T5928] Buffer I/O error on dev nbd5, logical block 1, async page read [ 259.634085][ T5928] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.636524][ T5928] ldm_validate_partition_table(): Disk read failed. [ 259.638454][ T5928] Dev nbd5: unable to read RDB block 0 [ 259.640511][ T5928] nbd5: unable to read partition table [ 259.659699][ T5928] ldm_validate_partition_table(): Disk read failed. [ 259.661679][ T5928] Dev nbd5: unable to read RDB block 0 [ 259.663798][ T5928] nbd5: unable to read partition table [ 259.737174][ T9694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.738552][ T9694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.002569][ T9696] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 260.069074][ T9701] netlink: 764 bytes leftover after parsing attributes in process `syz.5.971'. [ 260.094196][ T9701] openvswitch: netlink: Flow key attr not present in new flow. [ 260.184080][ T9703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.199163][ T9703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.206500][ T9704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.231060][ T9704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.353597][ T9708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.364278][ T9708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.467305][ T9703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.486002][ T9703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.574818][ T9716] netlink: 'syz.3.976': attribute type 23 has an invalid length. [ 261.429913][ T9736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.472329][ T9736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.801201][ T1223] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 261.971048][ T1223] usb 5-1: Using ep0 maxpacket: 16 [ 261.979408][ T1223] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 261.991232][ T1223] usb 5-1: config 1 interface 0 has no altsetting 0 [ 262.000543][ T1223] usb 5-1: New USB device found, idVendor=0596, idProduct=0500, bcdDevice= 0.40 [ 262.011447][ T1223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.019484][ T1223] usb 5-1: Product: ࠬ [ 262.026171][ T1223] usb 5-1: Manufacturer: Ї [ 262.030692][ T1223] usb 5-1: SerialNumber: 縈臨떧伳᜝⺼ꇻ伆咘ᣁ緾亣髲ȼ刵훦걷笜撴땔邰끧垹舓멠銵秔ൻ䡘備䁘홱Ɗ侑ᢓ烢䮉쌌⡌꯬鵪梶㡹逧਽鿿榭怣ῑ偌傺﫩苕嗄斻̤⋽ [ 262.215527][ T9746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.241556][ T9746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.302852][ T1223] usbhid 5-1:1.0: can't add hid device: -71 [ 262.319072][ T1223] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 262.339456][ T1223] usb 5-1: USB disconnect, device number 69 [ 262.415810][ T9756] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 262.427960][ T9756] overlayfs: maximum fs stacking depth exceeded [ 262.922262][ T9773] lo: entered promiscuous mode [ 262.942431][ T9773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.942852][ T9773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.952432][ T9773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.952838][ T9773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.965217][ T30] audit: type=1326 audit(1762816771.139:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.5.1000" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee2e78f6c9 code=0x0 [ 263.039338][ T9777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.039761][ T9777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.784890][ T9789] netlink: 20 bytes leftover after parsing attributes in process `syz.4.998'. [ 264.580524][ T9802] netlink: 'syz.3.1003': attribute type 10 has an invalid length. [ 264.601194][ T9802] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1003'. [ 264.640631][ T9802] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 264.662343][ T9802] team0: Failed to send options change via netlink (err -105) [ 264.669848][ T9802] team0: Port device geneve0 added [ 264.688573][ T9803] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 264.738755][ T9802] kvm: pic: non byte read [ 264.758695][ T9802] kvm: pic: level sensitive irq not supported [ 264.759175][ T9802] kvm: pic: non byte read [ 264.774590][ T9802] kvm: pic: level sensitive irq not supported [ 264.774658][ T9802] kvm: pic: non byte read [ 264.785728][ T9802] kvm: pic: level sensitive irq not supported [ 264.785793][ T9802] kvm: pic: non byte read [ 264.801602][ T9802] kvm: pic: level sensitive irq not supported [ 264.801667][ T9802] kvm: pic: non byte read [ 265.066841][ T9813] netlink: 'syz.3.1006': attribute type 1 has an invalid length. [ 265.101298][ T5920] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 265.130554][ T9815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.145402][ T9815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.296724][ T5920] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 265.306751][ T5920] usb 5-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.320158][ T5920] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 265.331381][ T5920] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 265.341453][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 265.353212][ T5920] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 265.362450][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.370466][ T5920] usb 5-1: Product: syz [ 265.375298][ T5920] usb 5-1: Manufacturer: syz [ 265.379900][ T5920] usb 5-1: SerialNumber: syz [ 265.387440][ T5920] usb 5-1: config 0 descriptor?? [ 265.595817][ T5920] usb 5-1: Can not set alternate setting to 1, error: -71 [ 265.607738][ T5920] synaptics_usb 5-1:0.0: probe with driver synaptics_usb failed with error -71 [ 265.622447][ T5920] usb 5-1: USB disconnect, device number 70 [ 265.746025][ T9817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.756956][ T9817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.919436][ T9769] lo: left promiscuous mode [ 265.963433][ T5920] Process accounting resumed [ 266.030336][ T9819] Process accounting resumed [ 266.324391][ T60] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 266.343828][ T60] Bluetooth: hci2: Frame reassembly failed (-84) [ 266.362390][ T9826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.373173][ T9826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.571092][ T9833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.588800][ T9833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.057053][ T9837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.069208][ T9837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.312685][ T9841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.323159][ T9841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.371506][ T52] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 268.634532][ T9875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.644097][ T9875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.682149][ T9873] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 268.731516][ T9880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.748417][ T9880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.193109][ T9889] veth1_macvtap: left promiscuous mode [ 269.225932][ T9889] veth1_macvtap: entered promiscuous mode [ 269.313385][ T9895] rtc_cmos 00:00: Alarms can be up to one day in the future [ 269.336854][ T9895] rtc_cmos 00:00: Alarms can be up to one day in the future [ 269.377284][ T9894] overlayfs: missing 'lowerdir' [ 269.423415][ T9900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.432370][ T9900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.477665][ T9903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.488500][ T9903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.541800][ T9] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 269.705004][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 269.717994][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 269.727512][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.741999][ T9] usb 5-1: config 0 descriptor?? [ 269.962290][ T9] logitech 0003:046D:C626.000F: unbalanced collection at end of report description [ 269.975968][ T9] logitech 0003:046D:C626.000F: parse failed [ 269.991102][ T9] logitech 0003:046D:C626.000F: probe with driver logitech failed with error -22 [ 270.165000][ T9] usb 5-1: USB disconnect, device number 71 [ 270.282774][ T9910] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 270.550512][ T9906] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 270.557073][ T9906] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 270.568909][ T9906] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 270.576852][ T9906] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 270.587088][ T9906] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 270.597077][ T9906] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 270.717932][ T9906] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 270.729944][ T9906] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 270.738374][ T9906] CPU: 1 UID: 0 PID: 9906 Comm: syz.3.1033 Not tainted syzkaller #0 PREEMPT(full) [ 270.747734][ T9906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 270.757796][ T9906] RIP: 0010:klist_remove+0x14a/0x340 [ 270.763087][ T9906] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 a9 38 cf f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 8a 38 cf f6 49 8b 44 24 58 48 89 44 24 08 [ 270.782687][ T9906] RSP: 0018:ffffc9000f18f0c0 EFLAGS: 00010202 [ 270.788923][ T9906] RAX: 000000000000000b RBX: ffff88802ff0db80 RCX: 0000000000000000 [ 270.796882][ T9906] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 270.804839][ T9906] RBP: ffffc9000f18f1c0 R08: ffffffff8fa60443 R09: 1ffffffff1f4c088 [ 270.812812][ T9906] R10: dffffc0000000000 R11: fffffbfff1f4c089 R12: 0000000000000000 [ 270.820773][ T9906] R13: 1ffff1100f8ee38c R14: ffff88807c771c60 R15: dffffc0000000000 [ 270.828732][ T9906] FS: 00007f34aba916c0(0000) GS:ffff888125b83000(0000) knlGS:0000000000000000 [ 270.837647][ T9906] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 270.844217][ T9906] CR2: 00007fffde19cdd0 CR3: 000000005fe70000 CR4: 00000000003526f0 [ 270.852174][ T9906] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00000000000098ca [ 270.860128][ T9906] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 270.868086][ T9906] Call Trace: [ 270.871370][ T9906] [ 270.874288][ T9906] ? __pfx_klist_remove+0x10/0x10 [ 270.879462][ T9906] ? __pfx_kobject_move+0x10/0x10 [ 270.884501][ T9906] ? do_raw_spin_unlock+0x122/0x240 [ 270.889709][ T9906] ? get_device_parent+0x366/0x3a0 [ 270.894813][ T9906] device_move+0x193/0x730 [ 270.899226][ T9906] hci_conn_del_sysfs+0xb8/0x1a0 [ 270.904148][ T9906] hci_conn_del+0xc33/0x1240 [ 270.908757][ T9906] ? hci_abort_conn_sync+0x24e/0xe30 [ 270.914039][ T9906] hci_abort_conn_sync+0x658/0xe30 [ 270.919220][ T9906] ? __lock_acquire+0xab9/0xd20 [ 270.924056][ T9906] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 270.930024][ T9906] ? hci_disconnect_all_sync+0x2e/0x350 [ 270.935557][ T9906] ? hci_disconnect_all_sync+0x2e/0x350 [ 270.941091][ T9906] ? hci_disconnect_all_sync+0x2e/0x350 [ 270.946649][ T9906] hci_disconnect_all_sync+0x1b5/0x350 [ 270.952095][ T9906] hci_suspend_sync+0x3fc/0xc90 [ 270.956936][ T9906] ? __pfx___mutex_lock+0x10/0x10 [ 270.961942][ T9906] ? enable_work+0x258/0x2c0 [ 270.966522][ T9906] ? __pfx_hci_suspend_sync+0x10/0x10 [ 270.971884][ T9906] ? mgmt_pending_find+0x152/0x170 [ 270.976983][ T9906] ? hci_cmd_sync_cancel_sync+0xc9/0x1c0 [ 270.982603][ T9906] hci_suspend_dev+0x28d/0x530 [ 270.987533][ T9906] ? __pfx_hci_suspend_dev+0x10/0x10 [ 270.992806][ T9906] hci_suspend_notifier+0xf2/0x2f0 [ 270.997902][ T9906] notifier_call_chain+0x1b6/0x3e0 [ 271.003003][ T9906] blocking_notifier_call_chain_robust+0x85/0x100 [ 271.009405][ T9906] pm_notifier_call_chain_robust+0x2c/0x60 [ 271.015193][ T9906] snapshot_open+0x19c/0x280 [ 271.019766][ T9906] ? __pfx_snapshot_open+0x10/0x10 [ 271.024870][ T9906] misc_open+0x2d5/0x350 [ 271.029185][ T9906] chrdev_open+0x4cc/0x5e0 [ 271.033588][ T9906] ? __pfx_chrdev_open+0x10/0x10 [ 271.038532][ T9906] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 271.044855][ T9906] ? __pfx_chrdev_open+0x10/0x10 [ 271.049780][ T9906] do_dentry_open+0x953/0x13f0 [ 271.054544][ T9906] vfs_open+0x3b/0x340 [ 271.058694][ T9906] ? path_openat+0x2ede/0x3860 [ 271.063532][ T9906] path_openat+0x2efb/0x3860 [ 271.068119][ T9906] ? __pfx_path_openat+0x10/0x10 [ 271.073049][ T9906] do_filp_open+0x1fa/0x410 [ 271.077539][ T9906] ? __lock_acquire+0xab9/0xd20 [ 271.082375][ T9906] ? __pfx_do_filp_open+0x10/0x10 [ 271.087396][ T9906] ? _raw_spin_unlock+0x28/0x50 [ 271.092243][ T9906] ? alloc_fd+0x64c/0x6c0 [ 271.096560][ T9906] do_sys_openat2+0x121/0x1c0 [ 271.101222][ T9906] ? __pfx_do_sys_openat2+0x10/0x10 [ 271.106406][ T9906] ? rcu_is_watching+0x15/0xb0 [ 271.111168][ T9906] __x64_sys_openat+0x138/0x170 [ 271.116018][ T9906] do_syscall_64+0xfa/0xfa0 [ 271.120519][ T9906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.126569][ T9906] ? clear_bhb_loop+0x60/0xb0 [ 271.131234][ T9906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.137109][ T9906] RIP: 0033:0x7f34aab8f6c9 [ 271.141505][ T9906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.161367][ T9906] RSP: 002b:00007f34aba91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 271.169775][ T9906] RAX: ffffffffffffffda RBX: 00007f34aade5fa0 RCX: 00007f34aab8f6c9 [ 271.177900][ T9906] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 271.185857][ T9906] RBP: 00007f34aac11f91 R08: 0000000000000000 R09: 0000000000000000 [ 271.193811][ T9906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.201764][ T9906] R13: 00007f34aade6038 R14: 00007f34aade5fa0 R15: 00007fff0639daa8 [ 271.209725][ T9906] [ 271.212736][ T9906] Modules linked in: [ 271.220297][ T9906] ---[ end trace 0000000000000000 ]--- [ 271.250638][ T9906] RIP: 0010:klist_remove+0x14a/0x340 [ 271.282422][ T9906] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 a9 38 cf f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 8a 38 cf f6 49 8b 44 24 58 48 89 44 24 08 [ 271.319604][ T9906] RSP: 0018:ffffc9000f18f0c0 EFLAGS: 00010202 [ 271.326186][ T9906] RAX: 000000000000000b RBX: ffff88802ff0db80 RCX: 0000000000000000 [ 271.341827][ T9906] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 271.349877][ T9906] RBP: ffffc9000f18f1c0 R08: ffffffff8fa60443 R09: 1ffffffff1f4c088 [ 271.380166][ T9906] R10: dffffc0000000000 R11: fffffbfff1f4c089 R12: 0000000000000000 [ 271.390274][ T9906] R13: 1ffff1100f8ee38c R14: ffff88807c771c60 R15: dffffc0000000000 [ 271.410221][ T9906] FS: 00007f34aba916c0(0000) GS:ffff888125a83000(0000) knlGS:0000000000000000 [ 271.427759][ T9906] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.434471][ T9906] CR2: 00007ffcff357258 CR3: 000000005fe70000 CR4: 00000000003526f0 [ 271.451021][ T9906] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00000000000098ca [ 271.459094][ T9906] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 271.467130][ T9906] Kernel panic - not syncing: Fatal exception [ 271.473475][ T9906] Kernel Offset: disabled [ 271.477788][ T9906] Rebooting in 86400 seconds..