last executing test programs: 9m31.227564031s ago: executing program 3 (id=3819): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r1, 0xb97534d5fe9704cf, 0x0, 0xfffffffc, {{0x12}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x2c}}, 0x0) 9m31.066964064s ago: executing program 3 (id=3821): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x62800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x12, r1, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000034c0)=""/4092, 0xffc}, {&(0x7f0000001cc0)=""/202, 0xca}, {&(0x7f00000044c0)=""/4091, 0xffb}, {&(0x7f00000000c0)=""/111, 0x6f}, {&(0x7f0000000280)=""/82, 0x52}, {&(0x7f0000000440)=""/60, 0x3c}, {&(0x7f0000000180)=""/204, 0xcc}, {&(0x7f0000001dc0)=""/143, 0x8f}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x9}, 0x40016002) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0xd5}], 0x1}, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) 9m30.923507469s ago: executing program 3 (id=3823): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) pipe2(&(0x7f00000003c0), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000300000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 9m30.920114969s ago: executing program 3 (id=3824): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be12442cfffe8000000000000000000000000000aaff020000000000000000000000001001", @ANYRES64=r1], 0xfdef) 9m30.774052566s ago: executing program 3 (id=3825): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000e, 0x11, r2, 0x29000) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000040)={0x7}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r6 = fsopen(&(0x7f0000000240)='vfat\x00', 0x0) ioctl$FIOCLEX(r2, 0x5451) (async) ioctl$FIOCLEX(r2, 0x5451) syz_open_dev$dri(&(0x7f0000000540), 0xd21, 0x0) (async) r7 = syz_open_dev$dri(&(0x7f0000000540), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000280)={r9, 0x0, 0x0, 0x0, 0x0, [], [], [], [0x0, 0x3, 0x400000006]}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000280)={r9, 0x0, 0x0, 0x0, 0x0, [], [], [], [0x0, 0x3, 0x400000006]}) close_range(r6, 0xffffffffffffffff, 0x0) (async) close_range(r6, 0xffffffffffffffff, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r10, 0x89fb, &(0x7f00000014c0)={'sit0\x00', &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @empty}, @multicast2, 0x10, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r10, 0x89fb, &(0x7f00000014c0)={'sit0\x00', &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @empty}, @multicast2, 0x10, 0x8}}) sendto$packet(r3, &(0x7f0000000180)="0b036812e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/169, 0xa9}], 0x1, 0x5, 0x401) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x58) 9m30.58122839s ago: executing program 3 (id=3826): r0 = syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0xc0400) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xadf) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x57789000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x2) (async, rerun: 64) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) (rerun: 64) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x138a, 0x8004, 0x1, 0xffff, 0x9, 0x1ed, 0x2, 0x3, 0xbb, 0x7, 0x2070, 0xfec, 0xfffffff7, 0x1ac, 0xfffffff8], 0x0, 0x4}) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async, rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = dup(r3) (async) r5 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r5, 0x200004) (async) sendfile(r4, r5, 0x0, 0x80001d00c0d1) (async, rerun: 64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (rerun: 64) 9m15.233730222s ago: executing program 32 (id=3826): r0 = syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0xc0400) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xadf) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x57789000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x2) (async, rerun: 64) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) (rerun: 64) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x138a, 0x8004, 0x1, 0xffff, 0x9, 0x1ed, 0x2, 0x3, 0xbb, 0x7, 0x2070, 0xfec, 0xfffffff7, 0x1ac, 0xfffffff8], 0x0, 0x4}) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async, rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = dup(r3) (async) r5 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r5, 0x200004) (async) sendfile(r4, r5, 0x0, 0x80001d00c0d1) (async, rerun: 64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (rerun: 64) 1m40.455585488s ago: executing program 0 (id=7673): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40b00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) gettid() timer_create(0x3, 0x0, &(0x7f0000044000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000000)=0xd07b626b, 0x4) getpid() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m40.068032132s ago: executing program 0 (id=7674): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) pipe2(&(0x7f00000003c0), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}, 0x1, 0x0, 0x3000000}, 0x0) 1m39.933918709s ago: executing program 0 (id=7675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a0000008d0000006c07010033d42ffffe800000000000000005000000000010ff02000000000000000000000000000188"], 0x340a) 1m39.692393181s ago: executing program 0 (id=7678): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x3f, 0x0, 0xfdfdffff, 0x4400046, r1}) 1m39.607205213s ago: executing program 0 (id=7680): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a42, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) fadvise64(r0, 0x18, 0x0, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb00148008000d"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000000c0)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000f00)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000380)=0x3) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000005c0)={0x44, 0x0, &(0x7f0000000840)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000004c0)='Q'}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r4, 0x93774000) 1m39.067631123s ago: executing program 0 (id=7685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009740)=ANY=[@ANYBLOB="280000001200170a26bd70000000000007000000140000000000000000be"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000180)={0x1d, r2}, 0x10) bind$x25(r1, &(0x7f0000000100), 0x12) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010007000000000000000000ffff40000000160a03020000000000000000020000000900020073797a30000000000900010e73797a300000000000080001400001000014000000020a0102000000000000000002000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 1m23.627939801s ago: executing program 33 (id=7685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009740)=ANY=[@ANYBLOB="280000001200170a26bd70000000000007000000140000000000000000be"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000180)={0x1d, r2}, 0x10) bind$x25(r1, &(0x7f0000000100), 0x12) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010007000000000000000000ffff40000000160a03020000000000000000020000000900020073797a30000000000900010e73797a300000000000080001400001000014000000020a0102000000000000000002000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 3.776667161s ago: executing program 4 (id=8399): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000200)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x4, &(0x7f0000000240)=@ccm_128={{0x303}, "f7108300", "e9529133b864d54100", "b9ed814d", "000000af3800"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x4010, r0, 0xdcc3b000) r2 = syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f00000000c0)={0x3, 0x0, [{0x2, 0xb, 0x3, [0x8, 0x0, 0x9, 0x3361, 0xfffffffc, 0xb0, 0xffffff96, 0x7]}, {0xa0, 0x7, 0x0, [0x4, 0x3, 0x6, 0x0, 0x4, 0x2, 0x2, 0x2]}, {0x7, 0x9, 0x4a1a, [0xffffffff, 0x101, 0x8, 0x1, 0x7f, 0x40, 0x3, 0x5]}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.776368785s ago: executing program 1 (id=8400): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e210002020000003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000fe80000000000000000000000000001b000000000000000000000000000000000000000000000000080000000000000000000020000000000000000000000000000000000000000043050000000000000400000000000000ffffffffffffff7f0000000000000000000000000000000000000000000000000000000028bd7000003500000a000400000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000009ce4151400000000000000000000000000000000000000000000000000000000a000000060"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 3.764279014s ago: executing program 1 (id=8401): io_setup(0x2278, &(0x7f0000000180)=0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x8, r1, &(0x7f00000000c0)=' ', 0x1}]) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) 3.739211477s ago: executing program 4 (id=8402): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r2, 0x88, 0x30, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a"], 0x4c}}, 0x0) (async, rerun: 64) syz_open_dev$evdev(0x0, 0x0, 0x200) (rerun: 64) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xc1, 0x88, 0x7d, 0x8, 0xbfd, 0x10d, 0x7ea3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x3, 0xf0, 0x0, [{{0x9, 0x4, 0x97, 0xb2, 0x1, 0xa6, 0x91, 0xf, 0x5, [], [{{0x9, 0x5, 0x5, 0x0, 0x8, 0x3, 0x79, 0x5}}]}}]}}]}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r6 = syz_open_dev$audion(&(0x7f0000000100), 0xfffffffffffffffb, 0x521100) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async, rerun: 32) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x84, @local, 0x4}, {0xa, 0x0, 0x3, @mcast1}, 0x0, {[0x2, 0x8, 0xa, 0x0, 0x0, 0x0, 0x7ff, 0x4]}}, 0x5c) (async, rerun: 32) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}}) (async, rerun: 64) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) (async, rerun: 64) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) (async, rerun: 32) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x3, 0xa, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x9, 0x0, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x81, 0xfc, 0x4}}]}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x201, 0x9, 0xa0, 0x7, 0x8, 0x5}, 0x5, &(0x7f0000000600)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x405}}, {0xdb, &(0x7f0000000700)=@string={0xdb, 0x3, "dfd86e9cdd352f330255ad5713e491165074dfdd4dfb0a53afb3ac3629d3d4b513e83603cfb6cfc3886b063ae6a61b674b276799c454b886a20521ed1f9e33e16ce19936065eac5c30ad45dd83626dce19e15fdce29533fc809c74f28a4424f7d03c6a6d88bf17b7c90a443652f83c0d31a327ed41dc794c942290c8d82d6d0803755ec020a24950c8d7de6f34bd72693c73bfcdd52ec33767e96df3a6b63a558b290c22a3266a04cfa7662685bf169fa1514ba83a2ebeb7dcfe6fad69b9285954956d911b183b064bbbf5b96867472a3bfdb1d0dc9514c20e"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x810}}]}) (rerun: 32) sendmmsg$inet(r7, &(0x7f00000073c0)=[{{&(0x7f0000002740)={0x2, 0xfff9, @rand_addr=0x64010101}, 0x10, 0x0}}], 0x1, 0x4) (async) syz_usb_connect(0x2, 0x3d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109022b000100000000090400000201035100090583130000000000072501"], 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240), r8) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000500)={0x50, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c095}, 0x40004) (async) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r10, 0x4600, &(0x7f0000000000)) (async) preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000440)=""/180, 0xb4}], 0x1, 0xffeffffb, 0x1007) 3.738508401s ago: executing program 5 (id=8403): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) (async) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000009, 0x50, r0, 0xb3cd0000) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000009, 0x50, r0, 0xb3cd0000) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000040)={0x0, "aff2db0d93df48b83c6907877a0fab89"}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001040)={0x0, 0xff}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000010c0)={r3, 0x6}, &(0x7f0000001100)=0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001140)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001180)={'tunl0\x00', 0x1000}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000011c0)={r3, 0x4}, &(0x7f0000001200)=0x8) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000011c0)={r3, 0x4}, &(0x7f0000001200)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000001240)={r5, 0x5}, 0x8) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r6, 0x6628) setsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f0000001280), 0x4) (async) setsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f0000001280), 0x4) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000012c0)={r1, 0xfd8, 0x1, 0x1}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000012c0)={r1, 0xfd8, 0x1, 0x1}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r4) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x28, r7, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000050}, 0x810) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000001840)={'wg0\x00', 0x400}) (async) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000001840)={'wg0\x00', 0x400}) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000001940)={0xffffffffffffffff, r2, 0x3, 0xbc, &(0x7f0000001880)="4e359bab76ed732ac3cb98b4d9420589f052a27ed1f0223d68442f487dc60337c1867b4c6e7fb2c757c27486366a34f319be8eeac9028acb3c2ecb63b0c73d8b617fb52b1d4cbe81d892d763e74ddfa94f2d0bf9c7539e82bcfca4128cd8d5d0f53b0cacc76b7995ae334ef75617ba07f8069a264d0703728ed49782aae00659487c0dc80f55da69027481cff4d580fe4926898b6a3732a8e380f2e550894bccd75a672e8e28b9dc2af9dfb3dcb234481fb0bac1a96181b59b0cb5f0", 0x70, 0x9, 0x7, 0x800, 0x7, 0x0, 0x0, 'syz0\x00'}) (async) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000001940)={0xffffffffffffffff, r2, 0x3, 0xbc, &(0x7f0000001880)="4e359bab76ed732ac3cb98b4d9420589f052a27ed1f0223d68442f487dc60337c1867b4c6e7fb2c757c27486366a34f319be8eeac9028acb3c2ecb63b0c73d8b617fb52b1d4cbe81d892d763e74ddfa94f2d0bf9c7539e82bcfca4128cd8d5d0f53b0cacc76b7995ae334ef75617ba07f8069a264d0703728ed49782aae00659487c0dc80f55da69027481cff4d580fe4926898b6a3732a8e380f2e550894bccd75a672e8e28b9dc2af9dfb3dcb234481fb0bac1a96181b59b0cb5f0", 0x70, 0x9, 0x7, 0x800, 0x7, 0x0, 0x0, 'syz0\x00'}) syz_open_dev$loop(&(0x7f0000001a00), 0x7, 0x3a02) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000001a40)={{0xffffffffffffffff, 0x3, 0x6, 0x2, 0x3}, 0x10, 0x5, 'id1\x00', 'timer1\x00', 0x0, 0x8000, 0x8, 0x6, 0x16b3}) ioctl$SIOCAX25DELFWD(r4, 0x89eb, &(0x7f0000001b40)={@null, @bcast}) sendmmsg$inet6(r2, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000001b80)="56a62e07fa29a33165db7c62a19d4ee2502a5da7519dc4e5fa663821dc8fb0fd38d45151338a6ba5d3eda7724d61070bfc84faf835b0ed04660b848313b7a865d9e8e9c464a7355a8f3fcacd7881ae7df2e816c1a165cb0e9c202bb7d4925660cd9bdc5a6855b7bcbd6757bda58ef27e8a812f3cf562ab7d09", 0x79}, {&(0x7f0000001c00)="c5bbea4f", 0x4}, {&(0x7f0000001c40)="69c836adb81121e08da037cbc481b96d7767943ace46081b6794d8f48b771c529fd425621c6886983abc6af87da95c261a362d7790eca59af13170daa2730cfd6b1e4a397681440a27e4d145658e0b53a6bf279718", 0x55}, {&(0x7f0000001cc0)="ed7cc58431a36f3cac1637975a285c1397cc69b41530e8ccead687dbeb7093b5de65ec1bce6226c20183cfb41eec76dc2dcd46a4d0f4a214aeb9c28065a6eb11e79795b60d713bf360311dd9f3b05d16005f67f030b264f29d0fb462fe7c36d4f451f6b03416f64c4e97b86de9a879975d58e3ade37186b0553dfa5569a98695e2887f7ab41719361ec514f49fa61fcb0cbd2ddad26e95aa3234d1572c3e8d5b2d3da3d8180716ec676e9e462c6fee5f684f919244b67acc7d22a461a797c5fe93c1e9577c7f4263cef91c2f4783372fe9a96b4382b38af944986b72bd56e5db2360c51fe067adc08b909edebd307161546347285ced990899a0db5e2b157b15e3eac34c2b6cb5d24dbb34c78051fadb630195daeb6b0cee42b56cd2632e2479d734589bc8518ff26069e58d47a85ff4b060c3c9befda2d8c5394297afe260f223f1e6bf6f085218494aab2e0cd25b5d56e5d689e3ae1d830b3b64d42e55a0cbc3663ffc2d86b0c74fb5308c41da1896381fcdb658252756dd9a70759b480e43a540a25c0389a08daa7fe12cba4425e8377fd661cadf75c088bb89faef06df41a79b6e2a13a6bfe7debca0762a1ae5ffa98f44afd59c020e22175ca2ad38f472721ff7f76b2da03f312458fef1e6629376147067496495030534c42bcc68afee037bffcc101e90e5629950282f24aea281b15243a96297e9b5ed3c1ce7cb0f76270f4d96749a4303d1cf4e94704cf608b61bb688cde5d92c39e1f6020e886c616f3cf5215107beabc26717893ae9c65e35412cd6452477a9288ee07679ec425025213b653ccafa0ef70f73b819f4ec88d6f5374c4d7a5bf8d871e1c4ee68c048da1c69082c53ebca9a42d2bffd8b6838972c1b552c15539b9ed6901bfdd48ff6fc253a9c197fe729daad4f8e6212253b11ebe47250a59d4f466d0046d3a6560c7fcd35e4d206d3d6f2a5957daa4c1cdfa00e8c9edd77995df7921f9ff361efda509f3f79c6cbe951a5db85454a26cf51cb56cdda69f1ddf57c2c79c1a7787c441bf58e247f629bb4c8192864d2eb33bcac3156d23aa5c9c21a34f17d66bc80dbe0258a6b4bc04efe585333698cd62a78c5b9a2924def66c0267531f52c354b89ca9f7232070f48a72556113e8646b7550bdb7f78d4dc0102442ed9d4df20c4e9befb600d3ef2e4023ac76c9ea7eb4d97b46d4a9753d5d293afd36e9ece9409cf729a4262b8024da9b40c396115e84324496ff6557439422d7f061435ed21043f6cf0c7e4a6bc07b3058463d7c35cc94057bfeef899bb58ac631d44ff70c304482df8aa537aa3bde799f29b0c192e03acf156561992f089de11577ac3d24b18df46e00bba258e3fe812271f60790cf828fa1e56989fee22c6ec1650218e596a74916db3d0630a7f88755e583406cd60b3c3f2575904f423236f5214176bb12dda571b5c6978f98da77fbaab1c974cbc296a25d45f084ecf7016b4f6e0a180489d98bcb00dbfed2e98e57e7423db8ec8c19d3b07bc969d134ddbea82dda63635bbd10ba7909665c1639c945609f98ec3469b113f0a70d5db9af076e3536ab76175a70103bf3196d9a463fd67deebc49dbfea28220f47912f868aaa0f48ea824ab3613f90485d32e4049496904f1fb4803a8099c70c091d663042e5fbdcc406adee6292252ac393ca4fbcd7d65ef35d4bdb3e6444f8ced69c95597bb68975da76ddc95b5f836c7ebb2420e417774f3a84b00b623537cf7829debea3431d340902f54d34bb6f188618fc743ca5b333b3957b6076e003750159c5f575a52bda5cdae081f9d62a5fd7ca15c904cfbe648791cde9e4b939e1115685399e5a9e7e87270cc9aa9e9b2af1a0754c9cf9410770d213f3659719ff9de3abc45f401c9b57d2e3b72c60861f3251dc67034f54c9d9f2e1ec28dde1365f27db978d11bdc67969a36b257d8bcbbed434ee24df6f2a942f272e499351ae9857ff1995f29313364d685f5d5b2a1f8f3955dd9be8958ea2d8568fe1b765245e3428336e6b6f70e39d3f35e1a705feed20a0f7ae84a2c8129e615bac2a7800952779222b76a4f2fc2cbe7580c7fcfa1b7f50a192dccc72b9fec04dbfb1d3bcaeab3a2b351a04995379f1a0d346dbf4d72b2e62217b0779fe495ab43b2d552b70337b1ab83b167638fcc3730bca5aa733e9f3b89182be59de09cc37d712691be9b6dc6d43c8a20a7c67d8aef49edfc821fa69ac59ffd3aa76af212b1f433d894cb88c8b9dbd889a71e56481a636fb237e2559091c9446eafc0b96d60f85647b4255c12f7b1bba05f6b44afd489156dbc306a79642a9a90982a3d4c8408485d99a2febe8e40480f07232c8e4de57533edd303d7e8eb8cd21dcf8eba36619f2c733dd144060798ecbc45da96137714ecae6c2d0bd8a7764fd332a395075ec17dbda881116db02ee59298746635f6c5c0fd93a8a768a09626990bc17e797900e8d2aa20afbb1dbc74ebd6c60ffde080e05a1b340d1bb8539b9198dfa8a68df50f95a076d145efe3f0e27ecabecd966f0e9f5c0f053f0172e73c2133a27b803983144c8426e6f1af898d0bbd228965a7fe7d60dd6c184bb17dc8f2c733ae42c6e57f1ffb80cef7634ddad6bfc56e78e5bc4a1492cc83150f13b30ed46db61aaacfd7d441bceaf486ea3c4dd8c8fad39e43c45581ec6ff3a7f4296c49d2eb682736832484046f0e12730318f6c7f67dbaf777a0f7b87e2250cf0c286262d7bf857f02289f59dbeab5325f4c0af1704ed3824190f441890b44268bea64ad23f19a7aef2c25a5dce473ddd67d7955ecd00b8d6af0e7635f54b2c838950b58ff7b01bf466d9531f691d1d99b7f81c7442c1b09ec67f80a6e446696a2614fc42b7432d6d39cae7ae3d2bf51d5658c3dc326dde3d1afaff1c9801c651ac88485817526686106ee31bc9950a2b9f8088bbeeb4feb4b1946ad44b3b8db197900992d969172e9311380cdc89546b5680cd4681c02045832062da88f7f03226072038843cb9ccf81d63e50447c72938f36151a5bc52dfe670fdac516da24cac911463a21655cef222c5618fa145fca96f7292cd964a95629bf59a45c48c9edf52ba8cc3a565fc2f069b18446ac07dd62708cc63771cd6167b921231059550308b96bf9d68687b79db3fc0334bba381c08a3936495f46bb49a589d077851c0813c9fd6e353da52069af75a3a753b9fb5513494e74aeff825a457e2d8373ff991a39c838d3489e37bdbc0e01f72122dc7d07533b3050e132f0a877126a12928478fa938c94948b8c62b11db1f875bf0d8f2eca8c5736140c09be56d252cff9ae8b668204bfd422857bc901caf128a4b1ef890e79ae86fb8e1d3e3f49115426ef8510a3525d1b97a4df135c1d8c705171fd2f4fa9e7425af8ce87054fc32ba893d721b19553dee96a828de6cc74a0672087ebaabbe21fe2bdcc9e3491ca67ed4281da956bf3bed3c951ba8e5107aa13a0adca9a21b1f6a07455bcfcc6935a6f16a1c026a770f749a1b314a415a9fa85a2dbc1b43f882a5aed398a13efab38d51fcba375915d7fe26b4f5e0497f2ea8824feebc07b293ca54618221d9804666fe26db7fb08d3e3b11811a41158d2c5c34ba41baa070c658a3f3c0f4509462dbd1d312a2b54d5bb301d58a6756b9647f91ffddee77388120f8c73c6106264b0ae4418e82e359e068c81914ba4e8b42c5b693052babe2fb9c09a8d7637462197cb15f1a3a472ac756a882c982201f863399c6bb2d3da3040fd4754d0dcdc29f19b1a0682b0b4c05fb351e70043aea065e5a0ac62d0ace53f29f2b13fd29a754fb9d0211109315d64f923d14d6c0d37111d454f6632b16df81715df7f530dc00acc8422b142dded5eb6224a941d313305fdee4cc6da726c9ef5a0a18dd9caffcec55eb4220bd5a4e5098d099f930df40af37c06e4d04f0606d60c2a990260d0bcd88d50a7a7fac178ff95bfd9b664440c33c262ea8e227aa14528c142c721b227c8dbf50005709d841d27f3280289b4f9af7d976a5064b41c6689b2e276ece0a2400cd9fb3d1ca12d32692be969b7c62ebbf357622692e48d98d6c70f69385ca3c57593088b9df6cdf18e568b783e775474482d54eee4d39db85b3093ba9c148af7b2870f3f786ebbdd50086292d541d8ff1a48c10f07ead45bcd003dd2966e9a1471073e67907107c495bbb2fad3c32a0199592f8ab7c848e3165200967d515df0a255f2b89fcd05acf6292b9cef8e118cc9b3625b2a20384784b95fe3d06cdba9c51ffe5c2e514609882e884a5e6b56ef5d3a6eddfde59792c62b4e216d75d14d8546ac50c40dd9d027c6a8ea0a1af46d7647fac969e161ed5552ac9049bea312e59289820f29b443083d6568712c37da949db94f9d9ae86156a20717bdb29a097b210d0bbde49687b5e7b78a69d778d74ee8aa66565956735a8b49817e1e360119bb426b0a76a5a5ba8ae8684bfe2fff69814d0f97f3810d3d9d9b94ce5c2461b56258a9b49013ab1101a60f40d41d9ae5817e82c78a6e48411618d4f785f01d080266f6ad1e7765fd08b52696b2b9f354c3c1ec975a41a2520be2f92c6b9e3ff33cfda2372d22d10fae74128ee09aea6c5539ccf8d0ca5d01c70607c6d1193b834c74271b79e39a2e84fcfe8446528c4627f09b316d8b48bab80122cfae1537107e43902b52eebb7413874b687e93269ceb895dcecc14ffbfa719b6ba14e78880279ad8a6b8a79437f96fedc35fbc916fac6d0bfe9e2f64e4861730683ff1869eb6a98ef472a4757ae645151bb8b616006ff15c11c4baa2a24eea286b26a00627e690a537df48fc232431adc57a520864043974e5abcbce76fd520a1a73b6fbf46996cd9d2c10b8f055902549b7fb92092fc2bd5dc106ad5df37892fff3242a74e0ce9b23f4ccd7743a8fd09b1641e3746a38f9eb2aa74e3d0c71ed834a782f965d5f5fe3554bcff8ed84116080efd65d581be275c4e58e01a359003709d84d716b94a23bb4ae1a656459db599fc03374445b8c11ffd5a0aa6c67836d1e6ac383749f811c493211046db2d4e5e9afae803ff8fb687445f51d84aa04acb67f358c8fa4191ad4790b28db33f934db91a13be272b508eef02c4d87dd404aaef971a16e089b6d4497a7937cc0659bbf2f4ec0fd8497748c156a90b917b29afd063b6cacb0c559fba4e2695b38f4335f84265e12affa96a9cc9e5edfc48b6c689d479afd9648ae99eec40bec65c336524e4b99adb93468858d675af77d5de7e3c176c3063b80a1e458bc85158de27a68ca63132f4724e48a682752bdbbfdeed1275baec6d5337080d051d91564cdeba339d1b0e35ce7536462795d9472427d84e2a548a5f1c072897ff68fb7b2a9e444a4cdceeffe5c3ca9fcff307e49516149bcd835db4af89a8965c2b96f82fe462711bf97556126eb5deb842cf756df407429a2eb8dd230288b4555a3819728e537a0db9ab65c9cf9d5217ad23ee2faca5e0724fdb0099e3eec892eb13a8661969d2b4fa9a2094a08e88d525f94af9003a0f63fbd149dbffa5347998e180470313e139326e60a8f817eeb54897301e3191ad8045de8fb56a33e3df497cebd97eb28fa0cf3f7f984d6cdfed35a231cce0327e8dd02432cada70cfb085da01c89169df9d1d6c4624d456c970b0b7f4de9092a6ef249a3c48ef42d769b5b946b717840d99b6fe83bbadf4c4f475f3b2f8f3192af2e4b57a0fa13641d52defdb9cc0a7926fbc51b635f918926cdfa085aa29d086f29ae8d7b124109716129c05ed477a33d31426ed52", 0x1000}], 0x4}}, {{&(0x7f0000002d00)={0xa, 0x4e23, 0xda, @remote, 0xfffffff6}, 0x1c, &(0x7f0000004280)=[{&(0x7f0000002d40)="8050e1946f", 0x5}, {&(0x7f0000002d80)="e32cd8522472f68884197ff86ef3c1a3c9a9a818b69493c1b9e149d338", 0x1d}, {&(0x7f0000002dc0)="3800150bec4392315933af981b012699589b35f767fb61ff6243048551e281cb136a0739022cb0f1553fa8a043fcd7c46cebacc13f6d0adf445a36a7b8c751ef836d49aab6afc9366c97e7582502a88a88d2276a9ca96ea9139cc779bc16552b7761cd9568e8789bc38fa4ef056347371388d50bd04f9ae5b28c0cbd56b102fd7ea15886488f620da54ce005b23b50e55d18fee48dbf48c098fa0db785a4c5b91afcbefea01f09c1543fa45bbe377ead50b577b7248f5b26facb930d41ee5ce4da5af0edbf817a255a6f393a0a8340938b96290079b69ddf8b8eea08b78e3f", 0xdf}, {&(0x7f0000002ec0)="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", 0x1000}, {&(0x7f0000003ec0)="1ba04de4ee4dbbb9411892f99b6c78eae913a4ed4e29770e2f7826c40262f5f380a0c5548e5712a3f658abf30b57eaeec1cc32b466787da245b7bbfe7e940a8aba0089af63d2448fded24b64e480abbf240dfbd7cd54f3153e82e649acdb8471f29ac029678754220f333ae0d4936dd105ae5c96bd4a5a66eb11d42e99d388e7b2d52c2918d413815e0165be79dc82893f06c2e7eaa1d16c6e5c11430cea4f301e330f588e844a3d0a36c12942fa2d8d17a8f7e680eb9641d4d0a86052", 0xbd}, {&(0x7f0000003f80)="bda9c147c3fa5f0717104c6224c2eb9b096d1e38c85f4af6eff95de50f2ae6fcd95186ffab4652b22deaccbe291658185d89a7085ffb58f0a652b20b26ff790a441203d97cf943f07668ba4ea39ccbc30355d71115896355efd0faa3f3f0d5b4b402f32811c3f5de8b5945c16520115c6cc0eccbe87624b41c58e09030080762385a625da7f3771ef30eb9b3d330d8396ff4d5e87df983f77939bd35a49259537fe1592786fcc895d0a89f9a1f70d52d9f", 0xb1}, {&(0x7f0000004040)="91258371c7bfeae9b75df7166506a54e899a59cbb7c5248c4df527bc8b50309e8ba7b7e87e6fe395930e55d3e0c3d069fbad4cb1387bfdb3b6b8bffc1c9be841948c3a67e7010d764fb4b7ab40105ff73cd2b15d4c2ee272577ebd87aca9edfda17d7237194657b638ab7e67efa500b3dfbda8e0d47b18f9c7d11a2364b5d0e474b6692a2d606beea483c6558aee9a17a2b0abcd1ddf00083d82a413e814d22fffa1aed916ed177671728267d46893228bd0c2d431c93478ecf181abb2d04886a165c8044ed92b3005254f3b", 0xcc}, {&(0x7f0000004140)="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", 0xff}, {&(0x7f0000004240)}], 0x9, &(0x7f0000004340)=[@hoplimit={{0x14, 0x29, 0x34, 0xffffffff}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x16, 0xe, 0x2, 0x0, 0x0, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @local, @empty, @mcast2, @empty]}}}, @dstopts={{0x40, 0x29, 0x37, {0x33, 0x4, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x7, 0x8000, [0x8, 0x80000000]}}, @enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0xe0}}], 0x2, 0x4) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000004500), r4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000004600)={'gre0\x00', &(0x7f0000004540)={'tunl0\x00', 0x0, 0x10, 0x1, 0x7ff, 0x4, {{0x27, 0x4, 0x1, 0x6, 0x9c, 0x65, 0x0, 0x9, 0x4, 0x0, @multicast1, @multicast1, {[@end, @timestamp_addr={0x44, 0x1c, 0x91, 0x1, 0x0, [{@loopback, 0x5}, {@broadcast, 0x800}, {@rand_addr=0x64010101, 0x1}]}, @timestamp={0x44, 0xc, 0xe4, 0x0, 0x6, [0x8, 0x7]}, @cipso={0x86, 0x5d, 0x3, [{0x6, 0x11, "83028de0ee45344a2a717d84bef711"}, {0x2, 0xe, "bff4207b485ff2fc32508279"}, {0x2, 0xb, "99437e4f5ac1ed6cad"}, {0x5, 0xf, "bd02d1a194d8b2f8712ae2531e"}, {0x1, 0x12, "f87ebb362d54dcccfa3ec623eabc7b4d"}, {0x1, 0x2}, {0x0, 0xa, "35ce03f0505a05bf"}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000004600)={'gre0\x00', &(0x7f0000004540)={'tunl0\x00', 0x0, 0x10, 0x1, 0x7ff, 0x4, {{0x27, 0x4, 0x1, 0x6, 0x9c, 0x65, 0x0, 0x9, 0x4, 0x0, @multicast1, @multicast1, {[@end, @timestamp_addr={0x44, 0x1c, 0x91, 0x1, 0x0, [{@loopback, 0x5}, {@broadcast, 0x800}, {@rand_addr=0x64010101, 0x1}]}, @timestamp={0x44, 0xc, 0xe4, 0x0, 0x6, [0x8, 0x7]}, @cipso={0x86, 0x5d, 0x3, [{0x6, 0x11, "83028de0ee45344a2a717d84bef711"}, {0x2, 0xe, "bff4207b485ff2fc32508279"}, {0x2, 0xb, "99437e4f5ac1ed6cad"}, {0x5, 0xf, "bd02d1a194d8b2f8712ae2531e"}, {0x1, 0x12, "f87ebb362d54dcccfa3ec623eabc7b4d"}, {0x1, 0x2}, {0x0, 0xa, "35ce03f0505a05bf"}]}]}}}}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f00000046c0)={&(0x7f00000044c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004680)={&(0x7f0000004640)={0x40, r9, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000004700)={r5, 0x1, 0x1, 0xfff, 0x8000, 0x1}, 0x14) (async) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000004700)={r5, 0x1, 0x1, 0xfff, 0x8000, 0x1}, 0x14) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000004800)={&(0x7f0000004740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000047c0)={&(0x7f0000004780)={0x20, 0x15, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) r11 = openat$cgroup_pressure(r4, &(0x7f0000004840)='io.pressure\x00', 0x2, 0x0) close(r11) 3.73772094s ago: executing program 1 (id=8404): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x20011, r0, 0xf648d000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x141, 0x58, 0xa5, 0x75, 0x20, 0x99fa, 0x8988, 0x65cd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x6c, 0x7, 0x0, 0x70, 0xcf, 0xee}}]}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x141, 0x58, 0xa5, 0x75, 0x20, 0x99fa, 0x8988, 0x65cd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x6c, 0x7, 0x0, 0x70, 0xcf, 0xee}}]}}]}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x32, 0x0, 0x0, 0xfd, @time, {}, {0xe}, @queue}], 0x1c) madvise(&(0x7f00002a7000/0x1000)=nil, 0x1000, 0x2) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4140aecd, 0x0) ptrace(0x10, 0x0) (async) ptrace(0x10, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000008a80), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000008b00)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000008c00)={0x0, 0x0, &(0x7f0000008bc0)={&(0x7f0000008b40)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000800) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x420000) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x24, &(0x7f0000000400)={0x0, 0x0, 0x4, "a7212277"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x24, &(0x7f0000000400)={0x0, 0x0, 0x4, "a7212277"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_IOC_PROTOVER(r6, 0x80049363, &(0x7f0000000100)) (async) ioctl$AUTOFS_IOC_PROTOVER(r6, 0x80049363, &(0x7f0000000100)) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.735515394s ago: executing program 5 (id=8405): mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440), &(0x7f0000000180)=@v2={0x2000000, [{0x4, 0xfffffff7}, {0xfffffffd, 0x2}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x11) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) getresgid(&(0x7f00000005c0), &(0x7f0000000600)=0x0, &(0x7f0000000640)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) statx(r4, &(0x7f0000002000)='./cgroup/file0\x00', 0x2000, 0x400, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './cgroup\x00'}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='.\x00']) read$FUSE(r7, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r7, &(0x7f00000022c0)={0x50, 0x0, r8, {0x7, 0x29, 0x3, 0x11812450, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x0, 0x20, 0xfffffffffffffff9, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r9, r10, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000540)='./cgroup/file0\x00', &(0x7f0000000580), 0x80000, &(0x7f0000000880)={[{@gid={'gid', 0x3d, r2}}, {}, {@uid={'uid', 0x3d, r5}}, {@uid={'uid', 0x3d, r6}}, {@gid={'gid', 0x3d, r10}}, {@mode={'mode', 0x3d, 0xb53}}], [{@smackfshat={'smackfshat', 0x3d, 'fsname'}}, {@dont_appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, '*\'\\'}}, {@fowner_eq={'fowner', 0x3d, r11}}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) 3.734333721s ago: executing program 4 (id=8406): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x24580, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x2000}, 0xc) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000540), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000200)={r8}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x3, [0x2, 0x0, 0x0, r7], [0x80ffff], [], [0x400000000000000]}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000140)={r7}) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$int_in(r9, 0x5452, &(0x7f0000000140)=0x9) ppoll(&(0x7f0000000a40)=[{r9}], 0x1, 0x0, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x7ffff000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x3a, @private1={0xfc, 0x1, '\x00', 0xfe}, 0xd}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, @in6={0xa, 0x4e24, 0x28, @dev={0xfe, 0x80, '\x00', 0x42}, 0x6}, @in={0x2, 0x4e22, @broadcast}], 0x68) 3.683738547s ago: executing program 4 (id=8407): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x62800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x4, &(0x7f0000000040), 0x4) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r3, &(0x7f0000000000)="240000001e005f0214f9f407000904001f0000000000000000000000080004000100000d", 0xfe3d) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) 3.683245465s ago: executing program 4 (id=8408): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) r0 = socket$inet(0x2, 0xe, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r2, &(0x7f0000000200)=""/251, 0xfb) lseek(r2, 0x4, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xa, 0x0, 0x7fffffff}]}) r5 = socket$unix(0x1, 0x5, 0x0) clock_adjtime(0x6, &(0x7f0000001600)={0x5, 0x4, 0x1, 0xc0000000000, 0xb54, 0xfffffffffffffffc, 0x4dc, 0x7, 0x45, 0x7, 0x2, 0x0, 0x3ff, 0x2, 0xfffffffffffffffd, 0x2, 0xb, 0x5, 0x7, 0xe, 0x401, 0x6, 0xd, 0x0, 0xfffffffffffffffe, 0x9}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000280)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f0000000840)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0xb3, 0x3, 0x4}]}}}], 0x18}, 0x4840) r9 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r7, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000001700)={0xeeef0000, 0x11000}) r11 = dup2(r5, r4) close_range(r11, 0xffffffffffffffff, 0x0) ioctl$SG_IO(r11, 0x2285, &(0x7f0000001580)={0x53, 0xfffffffffffffffb, 0x6d, 0x7, @scatter={0x4, 0x0, &(0x7f0000001440)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/177, 0xb1}, {&(0x7f0000001340)=""/246, 0xf6}, {&(0x7f00000001c0)=""/87, 0x57}]}, &(0x7f0000001480)="e68adf764a34b94d1aacf129aa467adf5354a1dee9a92e398e34808fcb055a1163ed8a8d217e91d59fb9f6453766017ad2969cf0481646a02a2d09e1d0f19b3929ad6d1dba5d1c0d662965c1c864e1d7d250b088ea3283df5915619365303de1773f3b09b6b346ad0e0365012d", &(0x7f0000001500)=""/12, 0x3, 0x3, 0x3, &(0x7f0000001540)}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r3}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r3}, &(0x7f0000000100)=0x8) 2.842022512s ago: executing program 4 (id=8409): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5dfc7fbbbc5b58c2", 0x9, 0xfffffffffffffffe) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r2, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x4800c3, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000047ff4f40d3131132677a010203010902120001760fb30f09040001"], 0x0) syz_usb_disconnect(r7) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x0, 0x31, 0x7d, 0x55}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x1, 0x1, {0x22, 0x96b}}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000200)={0x20, 0x15}, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0}) syz_usb_control_io(r8, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) 1.646056196s ago: executing program 2 (id=8413): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioprio_set$uid(0x3, 0x0, 0x6000) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) preadv(r2, &(0x7f00000041c0)=[{&(0x7f0000001040)=""/102, 0x5}], 0x2, 0x0, 0x0) close_range(r0, r1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00007c1000/0x2000)=nil, 0x2000, 0x15) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000) 1.523017517s ago: executing program 2 (id=8414): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000002740)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfff, r2, 0x0, 0x0, 0x8}]) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) 1.403696035s ago: executing program 2 (id=8415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee", 0x3}], 0x1) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 1.378627139s ago: executing program 2 (id=8416): ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x1, 0x7}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x1000) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00'}) ioprio_set$pid(0x1, 0x0, 0x2000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x1000000, [{0x3, 0x3313}]}, 0xc, 0x1) migrate_pages(r3, 0x5, &(0x7f0000000040)=0xe, &(0x7f0000000080)=0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x800) sendfile(r2, r2, 0x0, 0x7ffff000) 1.313599362s ago: executing program 2 (id=8417): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1.210287787s ago: executing program 2 (id=8418): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000014c0)={0x24, 0x0, &(0x7f0000001400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0be}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x164, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4000) fsmount(0xffffffffffffffff, 0x1, 0x9) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x6}, {0x20, 0xfe, 0x2, 0xfffff034}, {0x6, 0xfa, 0x0, 0x4}]}, 0x10) 944.551315ms ago: executing program 1 (id=8419): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) pipe2(&(0x7f00000003c0), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x2400000000000000) 939.023856ms ago: executing program 5 (id=8420): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e210002020000003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000fe80000000000000000000000000001b0000000000000000000000000000000000000000000000000800000000000000000000001a0000000000000000000000000000000000000043050000000000000400000000000000ffffffffffffff7f0000000000000000000000000000000000000000000000000000000028bd7000003500000a000400000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000009ce4151400000000000000000000000000000000000000000000000000000000a000000060"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 843.349033ms ago: executing program 5 (id=8421): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) fadvise64(r3, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x22052, r3, 0x93771000) 842.400326ms ago: executing program 1 (id=8422): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)=ANY=[@ANYBLOB="380000003c0007010000000000000000017c00000800fc80040008800c00018006000600800a00000800028097f09726080005000900ff"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x50424752}}) mmap(&(0x7f00003a7000/0x2000)=nil, 0x2000, 0x6, 0x12, r4, 0xdcc3b000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)) gettid() r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) syz_open_procfs(r6, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000009c0), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 501.892119ms ago: executing program 5 (id=8423): r0 = socket(0x11, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth1_vlan\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x3b, 0x2, [{0xffffffff, 0x4}, {0x3, 0xb36a}]}}) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000001800000000000000f1a100000000000032000000000000001800000000000000680b00000000000000000000000000001800000000000000000000800000000014000000000000001800000000000000010000000200000046000000004000002000000000000000020000000000000079000000000000000a000000000000004800000000000000f34d0faeee440fc72dfa2600000f0fcb97400f0fc4b0652e430fae58000f001e66bad004ed66420f09c4c13564f73e670f0135b7000000c30000000000000000180000000000000004000000000000000a00000000000000530000000000000036450f783266ba200066b8090066ef36660f5ad6c461f928c666ba4200b80e000000ef0f21d0652e66430f38815a0766440f1c8000000000c4e2f1acdc65420f7808c300100000000000001800000000000000b00e000000000000320000000000000018000000000000000c02000000000000000000000000000018000000000000000200000000000000460000000000000020000000000000000300000000000000010000000000000000000000000000001800000000000000070000000000000014000000000000001800000000000000ff07000001000100320000000000000018000000000000001303000000000000"], 0x1e3}) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000200)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private0}}, &(0x7f0000000640)=0xe8) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$cgroup(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@name={'name', 0x3d, 'noprefix'}}, {@name={'name', 0x3d, 'cgroup\x00'}}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffd}) mount$9p_fd(0x0, &(0x7f0000000480)='./cgroup\x00', &(0x7f00000004c0), 0x884, &(0x7f00000026c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@dont_measure}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@smackfsdef={'smackfsdef', 0x3d, '[}'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', r4}}]}}) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f00000000c0)={{0x2000, 0xd000, 0x0, 0x4, 0x81, 0x3, 0x9, 0x8, 0x2, 0x3, 0x9, 0x9}, {0xdddd0000, 0xf000, 0xf, 0x4, 0x5, 0x1f, 0x9, 0xf0, 0x0, 0x1, 0x8, 0x7}, {0xeeee8000, 0x100000, 0x8, 0x1, 0xd4, 0x5, 0x5, 0x6, 0x0, 0x7, 0x7, 0xeb}, {0x1000, 0xeeef0000, 0x10, 0xfe, 0x7e, 0x5, 0x1, 0x1, 0x7, 0x6, 0x5, 0x57}, {0x80a0000, 0x1, 0xe, 0x9, 0xb, 0x40, 0x7, 0x1, 0x8, 0x7, 0x26, 0xce}, {0x2, 0xeeee8000, 0x8, 0x4, 0x9, 0xfa, 0xce, 0xd, 0xff, 0x1, 0x81, 0xd6}, {0x10000, 0xdddd1000, 0x8, 0xfd, 0x9, 0xd8, 0x5, 0x6, 0x4, 0xf, 0x5, 0x5}, {0x4000, 0xdddd1000, 0xb, 0x2, 0x0, 0x2d, 0x0, 0x9, 0x7, 0x7, 0x2, 0x83}, {0xffff1000, 0x7}, {0xeeee0000, 0x3}, 0x50066, 0x0, 0x4, 0x40405, 0x8, 0x2400, 0x4000, [0x2977, 0x7, 0x6, 0x101]}) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) 257.109022ms ago: executing program 5 (id=8424): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) fadvise64(r0, 0x94, 0x6e, 0x5) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "02000000"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000540)={0x40, 0x3, 0x4, "98013af8"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f00000009c0)={0x0, 0x15, 0x4, "c70b9810"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000100)={0x0, 0xf, 0x4, "a9e218ec"}, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000380)={0x0, 0xe, 0x4, "c7527f1a"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede01020301090212000100000200090414b7da628c64d247d59ed1bde7733b7bb2afbd2dd1d47bf667716465b0b48a4dc6abf06abc5afa2292abc92237318521c169b60f340d5d2971899a2f6917adc144a0a5fe9e0ed7772d1a9a804db45db89e8a794c413a5954a6eff4345348"], 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), 0x4) setsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000000000)=0x5, 0x4) 161.853102ms ago: executing program 34 (id=8424): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) fadvise64(r0, 0x94, 0x6e, 0x5) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "02000000"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000540)={0x40, 0x3, 0x4, "98013af8"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f00000009c0)={0x0, 0x15, 0x4, "c70b9810"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000100)={0x0, 0xf, 0x4, "a9e218ec"}, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000380)={0x0, 0xe, 0x4, "c7527f1a"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede01020301090212000100000200090414b7da628c64d247d59ed1bde7733b7bb2afbd2dd1d47bf667716465b0b48a4dc6abf06abc5afa2292abc92237318521c169b60f340d5d2971899a2f6917adc144a0a5fe9e0ed7772d1a9a804db45db89e8a794c413a5954a6eff4345348"], 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), 0x4) setsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000000000)=0x5, 0x4) 0s ago: executing program 1 (id=8426): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) (async) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190007000200060007c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x5c) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) kernel console output (not intermixed with test programs): terface number: 2 but max is 0 [ 1208.410261][ T10] usb 3-1: config 0 has no interface number 0 [ 1208.417428][ T10] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1208.424881][ T3096] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 1208.426070][ T10] usb 3-1: config 0 has no interface number 0 [ 1208.441776][ T10] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1208.450932][ T5907] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1208.458542][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.466755][ T10] usb 3-1: Product: syz [ 1208.471065][ T10] usb 3-1: Manufacturer: syz [ 1208.475887][ T10] usb 3-1: SerialNumber: syz [ 1208.481975][ T10] usb 3-1: config 0 descriptor?? [ 1208.487537][ T5907] usb 2-1: device descriptor read/8, error -71 [ 1208.494394][ T10] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 1208.587514][ T3096] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1208.598304][ T3096] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 1208.609411][ T3096] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1208.624735][ T3096] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1208.638669][ T3096] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.647887][ T3096] usb 5-1: Product: syz [ 1208.651424][T31668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1208.653203][ T3096] usb 5-1: Manufacturer: syz [ 1208.665741][T31668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1208.665885][ T3096] usb 5-1: SerialNumber: syz [ 1208.686780][ T3096] usb 5-1: config 0 descriptor?? [ 1208.696313][ T10] etas_es58x 3-1:0.2: could not parse product info: '' [ 1208.754769][ T5907] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1208.778334][ T5907] usb 2-1: device descriptor read/8, error -71 [ 1208.898718][ T10] usb 5-1: USB disconnect, device number 79 [ 1208.910220][ T5907] usb usb2-port1: unable to enumerate USB device [ 1209.080607][ C0] etas_es58x 3-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x015D. [ 1209.091602][ C0] etas_es58x 3-1:0.2: Recovery successful! Dropped 341 bytes (urb_cmd_len: -61) [ 1209.100975][ T5532] etas_es58x 3-1:0.2 can0: bit-timing not yet defined [ 1209.389428][T31709] Bluetooth: MGMT ver 1.23 [ 1209.438344][T31711] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7936'. [ 1210.133975][ T5532] etas_es58x 3-1:0.2: es58x_free_urbs: Timeout, some TX urbs still remain [ 1210.148688][ C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 1210.157033][ C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 1210.165564][ C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 1210.174099][ C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 1210.182607][ T5532] etas_es58x 3-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL [ 1210.210146][ C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1210.210750][ T3096] usb 3-1: USB disconnect, device number 98 [ 1210.234487][ T3096] etas_es58x 3-1:0.2: Disconnecting syz syz [ 1210.535151][ T44] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1210.543029][T20145] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1210.705311][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 1210.711931][T20145] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1210.744035][ T44] usb 2-1: config 0 has an invalid interface number: 197 but max is 0 [ 1210.754675][T20145] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1210.786183][ T44] usb 2-1: config 0 has no interface number 0 [ 1210.802043][T20145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.810897][ T44] usb 2-1: config 0 interface 197 has no altsetting 0 [ 1210.842713][ T44] usb 2-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=32.65 [ 1210.868247][T19952] usbhid 6-1:0.0: can't add hid device: -71 [ 1210.874233][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.886212][T19952] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1210.897424][T20145] usb 5-1: config 0 descriptor?? [ 1210.908495][ T44] usb 2-1: Product: syz [ 1210.916149][T31747] 9p: Unknown parameter 'trats' [ 1210.923278][ T44] usb 2-1: Manufacturer: syz [ 1210.933268][T19952] usb 6-1: USB disconnect, device number 5 [ 1210.941714][ T44] usb 2-1: SerialNumber: syz [ 1210.957753][ T44] usb 2-1: config 0 descriptor?? [ 1210.982780][ T44] gspca_main: etoms-2.14.0 probing 102c:6151 [ 1211.000722][T31747] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.7940'. [ 1211.012466][T31747] netlink: 666 bytes leftover after parsing attributes in process `syz.5.7940'. [ 1211.319449][T20145] keytouch 0003:0926:3333.01B8: fixing up Keytouch IEC report descriptor [ 1211.359572][T20145] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.01B8/input/input458 [ 1211.368561][T31776] netlink: 'syz.2.7944': attribute type 3 has an invalid length. [ 1211.381265][T31776] netlink: 'syz.2.7944': attribute type 1 has an invalid length. [ 1211.389189][T31776] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7944'. [ 1211.418437][T16525] Bluetooth: hci0: command 0x0419 tx timeout [ 1211.425932][ T5869] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1211.499289][T20145] keytouch 0003:0926:3333.01B8: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1211.552551][T31785] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1211.663019][T19952] usb 2-1: USB disconnect, device number 26 [ 1211.693280][ T5907] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 1211.772207][T31791] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7946'. [ 1211.824233][T20145] usb 5-1: USB disconnect, device number 80 [ 1211.866649][ T5907] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1211.882444][ T5907] usb 3-1: not running at top speed; connect to a high speed hub [ 1211.902249][ T5907] usb 3-1: config 1 has an invalid descriptor of length 227, skipping remainder of the config [ 1211.915496][ T5907] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1211.929863][ T5907] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1211.940500][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.951054][ T5907] usb 3-1: Product: syz [ 1211.955402][ T5907] usb 3-1: Manufacturer: syz [ 1211.960007][ T5907] usb 3-1: SerialNumber: syz [ 1212.084250][T31799] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1212.181950][ T5907] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1212.201414][ T5907] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1212.218134][ T5907] usb 3-1: USB disconnect, device number 99 [ 1212.238923][T18487] udevd[18487]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1212.327623][T31808] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7951'. [ 1212.336730][T31802] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7950'. [ 1212.475362][T31817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7954'. [ 1212.485278][T31818] openvswitch: netlink: VXLAN extension message has 16 unknown bytes. [ 1212.485278][T31817] openvswitch: netlink: VXLAN extension message has 16 unknown bytes. [ 1212.486001][T31818] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7954'. [ 1212.513381][T31819] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7954'. [ 1212.642766][ T44] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1212.739959][T31825] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7956'. [ 1213.129980][T31836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1213.150525][T31836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1213.180648][T31838] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1213.205671][T20145] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1213.376699][T20145] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1213.386554][T20145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.399856][ T30] audit: type=1400 audit(2000033296.941:67): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=31845 comm="syz.1.7965" [ 1213.403295][T20145] usb 5-1: config 0 descriptor?? [ 1213.432334][ T5907] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1213.444930][T20145] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1213.593830][ T5907] usb 3-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 1213.602972][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.612834][ T5907] usb 3-1: config 0 descriptor?? [ 1213.624667][ T5907] pwc: Creative Labs Webcam 5 detected. [ 1213.659967][T20145] gspca_sn9c2028: read1 error -32 [ 1213.668562][T20145] gspca_sn9c2028: read1 error -32 [ 1213.852939][ T5907] pwc: Failed to set LED on/off time (-71) [ 1213.860425][ T5907] pwc: send_video_command error -71 [ 1213.865760][ T5907] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1213.875515][ T5907] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1213.896198][ T5907] usb 3-1: USB disconnect, device number 100 [ 1213.931367][T31853] /dev/rnullb0: Can't open blockdev [ 1214.122724][ T5869] Bluetooth: Unknown BR/EDR signaling command 0xaa [ 1214.129563][ T5869] Bluetooth: Wrong link type (-22) [ 1214.821657][ T10] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 1214.984886][ T10] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 1214.993347][ T10] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1215.001918][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1215.010831][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1215.022176][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1215.033840][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1215.044705][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1215.087442][ T10] usb 3-1: string descriptor 0 read error: -22 [ 1215.100865][ T10] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1215.111565][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.121343][ T10] usb 3-1: config 0 descriptor?? [ 1215.133101][ T10] hub 3-1:0.0: bad descriptor, ignoring hub [ 1215.141979][ T10] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1215.159444][ T10] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input459 [ 1215.184834][T31883] dns_resolver: Unsupported server list version (0) [ 1215.210321][T31883] /dev/rnullb0: Can't open blockdev [ 1215.406748][ T10] usb 3-1: USB disconnect, device number 101 [ 1215.691272][ T3096] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1215.702304][ T5907] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1215.821195][ T3096] usb 6-1: device descriptor read/64, error -71 [ 1215.871069][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 1215.877420][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1215.887274][ T5907] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1215.896924][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.907013][ T5907] usb 2-1: config 0 descriptor?? [ 1215.928669][ T10] usb 5-1: USB disconnect, device number 81 [ 1216.061142][ T3096] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1216.128432][ T5907] usbhid 2-1:0.0: can't add hid device: -71 [ 1216.136194][ T5907] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1216.159076][ T5907] usb 2-1: USB disconnect, device number 27 [ 1216.212365][ T3096] usb 6-1: device descriptor read/64, error -71 [ 1216.327203][ T3096] usb usb6-port1: attempt power cycle [ 1216.338606][T31916] __nla_validate_parse: 7 callbacks suppressed [ 1216.338627][T31916] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7990'. [ 1216.357733][ T10] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1216.541064][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1216.547540][ T10] usb 5-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 1216.558345][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 32695, setting to 1024 [ 1216.571700][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1216.596345][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1216.611099][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1216.613197][T31925] netlink: 'syz.1.7994': attribute type 2 has an invalid length. [ 1216.623871][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1216.636265][ T10] usb 5-1: Manufacturer: syz [ 1216.642973][ T10] usb 5-1: config 0 descriptor?? [ 1216.653484][T31903] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1216.672014][ T3096] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1216.691972][ T3096] usb 6-1: device descriptor read/8, error -71 [ 1216.717243][T31925] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1216.726443][ T5907] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1216.890584][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 1216.896242][ T5907] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 1216.904968][ T5907] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1216.913650][ T5907] usb 3-1: config 0 has no interface number 0 [ 1216.922751][ T5907] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1216.931640][ T5907] usb 3-1: config 0 has no interface number 0 [ 1216.932339][ T3096] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1216.938567][ T5907] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1216.953879][ T5907] usb 3-1: config 0 has no interface number 0 [ 1216.960319][ T44] usb 5-1: USB disconnect, device number 82 [ 1216.965484][ T5907] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1216.974385][ T5907] usb 3-1: config 0 has no interface number 0 [ 1216.981780][ T5907] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1216.991399][ T5907] usb 3-1: config 0 has no interface number 0 [ 1216.998304][ T5907] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1217.003377][ T3096] usb 6-1: device descriptor read/8, error -71 [ 1217.007345][ T5907] usb 3-1: config 0 has no interface number 0 [ 1217.019349][ T5907] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1217.028094][ T5907] usb 3-1: config 0 has no interface number 0 [ 1217.035700][ T5907] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1217.043811][ T5907] usb 3-1: config 0 has no interface number 0 [ 1217.052573][ T5907] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1217.061694][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.069702][ T5907] usb 3-1: Product: syz [ 1217.070519][T20145] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1217.073913][ T5907] usb 3-1: Manufacturer: syz [ 1217.086159][ T5907] usb 3-1: SerialNumber: syz [ 1217.092985][ T5907] usb 3-1: config 0 descriptor?? [ 1217.099299][ T5907] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 1217.120972][ T3096] usb usb6-port1: unable to enumerate USB device [ 1217.232085][T20145] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1217.241982][T20145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.251831][T20145] usb 2-1: config 0 descriptor?? [ 1217.263175][T20145] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1217.300403][ T5907] etas_es58x 3-1:0.2: could not parse product info: '' [ 1217.475613][T20145] gspca_sn9c2028: read1 error -32 [ 1217.484472][T20145] gspca_sn9c2028: read1 error -32 [ 1217.525728][T31940] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7996'. [ 1217.723820][ T5532] etas_es58x 3-1:0.2 can0: bit-timing not yet defined [ 1217.723900][ C1] etas_es58x 3-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x015D. [ 1217.723940][ C1] etas_es58x 3-1:0.2: Recovery successful! Dropped 341 bytes (urb_cmd_len: -61) [ 1217.900059][ T44] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 1218.031014][ T44] usb 5-1: device descriptor read/64, error -71 [ 1218.269964][ T44] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 1218.399908][ T44] usb 5-1: device descriptor read/64, error -71 [ 1218.509957][ T44] usb usb5-port1: attempt power cycle [ 1218.769726][ T5532] etas_es58x 3-1:0.2: es58x_free_urbs: Timeout, some TX urbs still remain [ 1218.779287][ C1] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 1218.787010][ C1] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 1218.794739][ C1] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 1218.802892][ C1] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 1218.810507][ T5532] etas_es58x 3-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL [ 1218.839999][ C1] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1218.850481][ T3096] usb 3-1: USB disconnect, device number 102 [ 1218.857316][ T3096] etas_es58x 3-1:0.2: Disconnecting syz syz [ 1218.864179][ T44] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 1218.891184][ T44] usb 5-1: device descriptor read/8, error -71 [ 1219.014186][T31967] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8000'. [ 1219.129550][ T44] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 1219.161813][ T44] usb 5-1: device descriptor read/8, error -71 [ 1219.279692][ T44] usb usb5-port1: unable to enumerate USB device [ 1219.679229][ T44] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1219.829234][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 1219.845394][ T44] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 1219.862056][ T44] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1219.869903][ T5907] usb 2-1: USB disconnect, device number 28 [ 1219.882142][ T44] usb 3-1: config 0 has no interface number 0 [ 1219.898020][ T44] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1219.917458][ T44] usb 3-1: config 0 has no interface number 0 [ 1219.928660][ C0] Unknown status report in ack skb [ 1219.937031][ T44] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1219.948710][ T44] usb 3-1: config 0 has no interface number 0 [ 1219.960891][ T44] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1219.969486][T16525] Bluetooth: hci0: command 0x0419 tx timeout [ 1219.975891][ T5869] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1219.976045][ T44] usb 3-1: config 0 has no interface number 0 [ 1220.014607][ T44] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1220.026026][ T44] usb 3-1: config 0 has no interface number 0 [ 1220.035085][ T44] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1220.052619][ T44] usb 3-1: config 0 has no interface number 0 [ 1220.079834][ T44] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1220.082127][T32026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8008'. [ 1220.087842][ T44] usb 3-1: config 0 has no interface number 0 [ 1220.105466][ T44] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1220.114129][T32029] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8009'. [ 1220.120201][ T44] usb 3-1: config 0 has no interface number 0 [ 1220.134664][ T44] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1220.156847][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.175505][ T44] usb 3-1: Product: syz [ 1220.183113][ T44] usb 3-1: Manufacturer: syz [ 1220.187851][ T44] usb 3-1: SerialNumber: syz [ 1220.196450][ T44] usb 3-1: config 0 descriptor?? [ 1220.205081][ T44] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 1220.358994][ T5907] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1220.405449][ T44] etas_es58x 3-1:0.2: could not parse product info: '' [ 1220.518855][ T5907] usb 2-1: Using ep0 maxpacket: 8 [ 1220.531746][ T5907] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1220.543189][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.552270][ T5907] usb 2-1: Product: syz [ 1220.556469][ T5907] usb 2-1: Manufacturer: syz [ 1220.563609][ T5907] usb 2-1: SerialNumber: syz [ 1220.573915][ T5907] usb 2-1: config 0 descriptor?? [ 1220.613986][ T44] usb 3-1: USB disconnect, device number 103 [ 1220.624467][ T44] etas_es58x 3-1:0.2: Disconnecting syz syz [ 1220.688726][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1220.784072][ T5907] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1220.878881][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1220.885186][ T10] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 1220.897979][ T10] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1220.906522][ T10] usb 6-1: config 0 has no interface number 0 [ 1220.917112][ T10] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1220.927383][ T10] usb 6-1: config 0 has no interface number 0 [ 1220.941337][ T10] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1220.952578][ T10] usb 6-1: config 0 has no interface number 0 [ 1220.961713][ T10] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1220.972617][ T10] usb 6-1: config 0 has no interface number 0 [ 1220.979922][ T10] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1220.991448][ T10] usb 6-1: config 0 has no interface number 0 [ 1220.999269][ T10] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1221.007392][ T10] usb 6-1: config 0 has no interface number 0 [ 1221.018301][ T10] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1221.027518][ T10] usb 6-1: config 0 has no interface number 0 [ 1221.037133][ T10] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1221.045542][ T10] usb 6-1: config 0 has no interface number 0 [ 1221.059030][ T10] usb 6-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1221.072066][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.080596][ T10] usb 6-1: Product: syz [ 1221.084835][ T10] usb 6-1: Manufacturer: syz [ 1221.092280][ T10] usb 6-1: SerialNumber: syz [ 1221.099441][ T10] usb 6-1: config 0 descriptor?? [ 1221.111315][ T10] etas_es58x 6-1:0.2: Starting syz syz (Serial Number syz) [ 1221.186134][T32070] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8016'. [ 1221.312089][ T10] etas_es58x 6-1:0.2: could not parse product info: '' [ 1221.428666][ T3096] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1221.599849][ T3096] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1221.620780][ T3096] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.643152][ T3096] usb 3-1: config 0 descriptor?? [ 1221.662305][ T3096] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 1221.679086][T32094] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8020'. [ 1221.863631][ T3096] gspca_sn9c2028: read1 error -32 [ 1221.866046][ C0] etas_es58x 6-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x015D. [ 1221.869860][ T3096] gspca_sn9c2028: read1 error -32 [ 1221.879645][ C0] etas_es58x 6-1:0.2: Recovery successful! Dropped 341 bytes (urb_cmd_len: -61) [ 1221.883860][ T5532] etas_es58x 6-1:0.2 can0: bit-timing not yet defined [ 1221.988019][ T10] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1222.142371][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1222.152208][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.160665][ T10] usb 5-1: Product: syz [ 1222.164860][ T10] usb 5-1: Manufacturer: syz [ 1222.169521][ T10] usb 5-1: SerialNumber: syz [ 1222.179514][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1222.200424][ T1210] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1222.213982][ T5907] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1222.229158][ T5907] usb 2-1: USB disconnect, device number 29 [ 1222.614139][T32099] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8021'. [ 1222.707782][ T5907] usb 5-1: USB disconnect, device number 87 [ 1222.751224][T32111] netlink: 6 bytes leftover after parsing attributes in process `syz.4.8022'. [ 1222.927651][ T5532] etas_es58x 6-1:0.2: es58x_free_urbs: Timeout, some TX urbs still remain [ 1222.937355][ C0] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 1222.945602][ C0] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 1222.953364][ C0] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 1222.961352][ C0] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 1222.969078][ T5532] etas_es58x 6-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL [ 1222.986458][ C0] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1223.021281][ T3096] usb 6-1: USB disconnect, device number 11 [ 1223.033837][ T3096] etas_es58x 6-1:0.2: Disconnecting syz syz [ 1223.101495][T32122] input: syz1 as /devices/virtual/input/input460 [ 1223.249582][ T1210] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1223.256655][ T1210] ath9k_htc: Failed to initialize the device [ 1223.263592][ T5907] usb 5-1: ath9k_htc: USB layer deinitialized [ 1223.577386][ T5907] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1223.644462][T32145] /dev/rnullb0: Can't open blockdev [ 1223.676335][T32145] netlink: 108 bytes leftover after parsing attributes in process `syz.5.8027'. [ 1223.714199][T32145] netlink: 'syz.5.8027': attribute type 27 has an invalid length. [ 1223.747134][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 1223.752881][ T5907] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 1223.763150][ T5907] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1223.771316][ T5907] usb 5-1: config 0 has no interface number 0 [ 1223.780313][ T5907] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1223.790346][ T5907] usb 5-1: config 0 has no interface number 0 [ 1223.802637][ T5907] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1223.811458][ T5907] usb 5-1: config 0 has no interface number 0 [ 1223.821121][ T5907] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1223.829816][ T5907] usb 5-1: config 0 has no interface number 0 [ 1223.836759][ T5907] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1223.845118][ T5907] usb 5-1: config 0 has no interface number 0 [ 1223.852129][ T5907] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1223.860315][ T5907] usb 5-1: config 0 has no interface number 0 [ 1223.867341][ T5907] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1223.875584][ T5907] usb 5-1: config 0 has no interface number 0 [ 1223.882931][ T5907] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1223.893093][ T5907] usb 5-1: config 0 has no interface number 0 [ 1223.901352][ T5907] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1223.910658][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.918787][ T5907] usb 5-1: Product: syz [ 1223.923016][ T5907] usb 5-1: Manufacturer: syz [ 1223.929854][ T5907] usb 5-1: SerialNumber: syz [ 1223.937722][ T5907] usb 5-1: config 0 descriptor?? [ 1223.946295][ T5907] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 1223.957071][ T3096] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1223.967279][ T10] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 1224.047901][ T5869] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1224.049431][T16525] Bluetooth: hci0: command 0x0419 tx timeout [ 1224.054224][T19706] block nbd0: Possible stuck request ffff888025990000: control (read@0,1024B). Runtime 60 seconds [ 1224.070817][T19706] block nbd0: Possible stuck request ffff8880259901c0: control (read@1024,1024B). Runtime 60 seconds [ 1224.081748][T19706] block nbd0: Possible stuck request ffff888025990380: control (read@2048,1024B). Runtime 60 seconds [ 1224.093116][T19706] block nbd0: Possible stuck request ffff888025990540: control (read@3072,1024B). Runtime 60 seconds [ 1224.118991][ T3096] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1224.131470][ T3096] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.142117][ T3096] usb 6-1: config 0 has no interface number 0 [ 1224.150576][ T3096] usb 6-1: New USB device found, idVendor=0572, idProduct=58a2, bcdDevice=27.0a [ 1224.151710][ T5907] etas_es58x 5-1:0.2: could not parse product info: '' [ 1224.166938][ T3096] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.166961][ T3096] usb 6-1: Product: syz [ 1224.166975][ T3096] usb 6-1: Manufacturer: syz [ 1224.166989][ T3096] usb 6-1: SerialNumber: syz [ 1224.190057][ T3096] usb 6-1: config 0 descriptor?? [ 1224.202431][ T3096] cx231xx 6-1:0.1: New device syz syz @ 12 Mbps (0572:58a2) with 1 interfaces [ 1224.207973][ T10] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1224.215669][ T3096] cx231xx 6-1:0.1: Not found matching IAD interface [ 1224.240818][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.244999][ T3096] usb 3-1: USB disconnect, device number 104 [ 1224.284228][ T10] usb 2-1: config 0 descriptor?? [ 1224.300793][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1224.304876][T32171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8029'. [ 1224.361885][ T5907] usb 5-1: USB disconnect, device number 88 [ 1224.381128][ T5907] etas_es58x 5-1:0.2: Disconnecting syz syz [ 1224.403856][T32145] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8027'. [ 1224.418044][ T5864] usb 6-1: USB disconnect, device number 12 [ 1224.504275][T32176] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8031'. [ 1224.693077][T32186] netlink: 'syz.2.8033': attribute type 1 has an invalid length. [ 1224.707897][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1224.736063][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1224.884572][T32197] program syz.2.8035 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1224.935127][ T1210] usb 2-1: USB disconnect, device number 30 [ 1225.071941][T32205] /dev/rnullb0: Can't open blockdev [ 1225.085207][T32204] netlink: 164 bytes leftover after parsing attributes in process `syz.5.8037'. [ 1225.402366][T32222] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8040'. [ 1225.826114][ T44] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1225.937252][ T5907] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1225.942245][T32243] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8048'. [ 1225.966755][ T44] usb 3-1: device descriptor read/64, error -71 [ 1225.967669][T32245] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1226.012946][T32245] /dev/rnullb0: Can't open blockdev [ 1226.116623][ T5907] usb 6-1: Using ep0 maxpacket: 32 [ 1226.126119][ T5907] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 1226.141711][ T5907] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1226.155909][ T5907] usb 6-1: config 0 has no interface number 0 [ 1226.167237][ T5907] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1226.175529][ T5907] usb 6-1: config 0 has no interface number 0 [ 1226.193259][ T5907] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1226.204635][ T5907] usb 6-1: config 0 has no interface number 0 [ 1226.213079][T32253] overlayfs: failed to resolve './file1': -2 [ 1226.219414][ T44] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1226.224846][ T5907] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1226.255513][ T5907] usb 6-1: config 0 has no interface number 0 [ 1226.274248][ T5907] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1226.289184][ T5907] usb 6-1: config 0 has no interface number 0 [ 1226.306023][ T5907] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1226.325679][ T5907] usb 6-1: config 0 has no interface number 0 [ 1226.332938][ T5907] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1226.347972][ T5907] usb 6-1: config 0 has no interface number 0 [ 1226.355699][ T5907] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1226.357519][ T44] usb 3-1: device descriptor read/64, error -71 [ 1226.371637][ T5907] usb 6-1: config 0 has no interface number 0 [ 1226.376889][T32259] /dev/rnullb0: Can't open blockdev [ 1226.385344][ T5907] usb 6-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1226.415948][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.423964][ T5907] usb 6-1: Product: syz [ 1226.428723][ T5907] usb 6-1: Manufacturer: syz [ 1226.433343][ T5907] usb 6-1: SerialNumber: syz [ 1226.469098][ T5907] usb 6-1: config 0 descriptor?? [ 1226.486387][ T5907] etas_es58x 6-1:0.2: Starting syz syz (Serial Number syz) [ 1226.495964][ T44] usb usb3-port1: attempt power cycle [ 1226.749922][T32267] __nla_validate_parse: 1 callbacks suppressed [ 1226.749937][T32267] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8060'. [ 1226.775642][ T5864] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1226.845777][ T44] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1226.866118][ T44] usb 3-1: device descriptor read/8, error -71 [ 1226.937019][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1226.948930][ T5864] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1226.958910][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.968554][ T5864] usb 5-1: config 0 descriptor?? [ 1227.105503][ T44] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1227.126232][ T44] usb 3-1: device descriptor read/8, error -71 [ 1227.155448][T20145] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1227.235934][ T44] usb usb3-port1: unable to enumerate USB device [ 1227.305393][T20145] usb 2-1: Using ep0 maxpacket: 16 [ 1227.312054][T20145] usb 2-1: config 5 has an invalid interface number: 20 but max is 0 [ 1227.320290][T20145] usb 2-1: config 5 has no interface number 0 [ 1227.326950][T20145] usb 2-1: config 5 interface 20 has no altsetting 0 [ 1227.337519][T20145] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08 [ 1227.346658][T20145] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.354678][T20145] usb 2-1: Product: syz [ 1227.359081][T20145] usb 2-1: Manufacturer: syz [ 1227.363712][T20145] usb 2-1: SerialNumber: syz [ 1227.379513][ T5864] keytouch 0003:0926:3333.01B9: fixing up Keytouch IEC report descriptor [ 1227.391382][ T5864] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.01B9/input/input461 [ 1227.465487][ T5864] keytouch 0003:0926:3333.01B9: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1227.582103][T20145] go7007 2-1:5.20: probe with driver go7007 failed with error -12 [ 1227.601125][T20145] usb 2-1: USB disconnect, device number 31 [ 1227.911725][ T5864] usb 5-1: USB disconnect, device number 89 [ 1228.112604][T32275] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8063'. [ 1228.379834][T32279] netlink: 'syz.1.8065': attribute type 1 has an invalid length. [ 1228.388507][T32279] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8065'. [ 1228.482925][T32279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8065'. [ 1228.644534][T32293] tipc: Trying to set illegal importance in message [ 1228.646815][T32295] netlink: 'syz.2.8068': attribute type 46 has an invalid length. [ 1228.652416][T32294] tipc: Trying to set illegal importance in message [ 1228.702709][ T5907] etas_es58x 6-1:0.2: could not retrieve the product info string [ 1228.723120][T32295] /dev/rnullb0: Can't open blockdev [ 1228.782026][ T5907] usb 6-1: USB disconnect, device number 13 [ 1228.797395][T32300] binder: 32299:32300 ioctl c018620c 200000000640 returned -22 [ 1228.806783][ T5907] etas_es58x 6-1:0.2: Disconnecting syz syz [ 1228.829690][T32301] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1228.839191][T32301] /dev/rnullb0: Can't open blockdev [ 1228.958218][T32308] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8073'. [ 1229.001250][T32313] /dev/rnullb0: Can't open blockdev [ 1229.008271][ T5869] Bluetooth: Unexpected start frame (len 18) [ 1229.016938][T32314] /dev/rnullb0: Can't open blockdev [ 1229.086619][T32320] 9p: Bad value for 'rfdno' [ 1229.092556][T32320] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1229.100000][T32320] /dev/rnullb0: Can't open blockdev [ 1229.194452][ T5907] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1229.284447][ T10] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1229.354559][ T5907] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.365355][ T5907] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1229.378459][ T5907] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1229.392058][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1229.400342][ T5907] usb 6-1: SerialNumber: syz [ 1229.405055][ T5864] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1229.446189][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1229.459442][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1229.469156][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.505273][ T10] usb 5-1: config 0 descriptor?? [ 1229.564958][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 1229.576717][ T5864] usb 2-1: config 5 has an invalid interface number: 168 but max is 0 [ 1229.585152][ T5864] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.597549][ T5864] usb 2-1: config 5 has no interface number 0 [ 1229.603672][ T5864] usb 2-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1229.616150][ T5864] usb 2-1: config 5 interface 168 altsetting 7 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1229.628432][ T5907] usb 6-1: 0:2 : does not exist [ 1229.635424][ T5864] usb 2-1: config 5 interface 168 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1229.649644][ T5864] usb 2-1: config 5 interface 168 has no altsetting 0 [ 1229.656296][ T5907] usb 6-1: USB disconnect, device number 14 [ 1229.672095][ T5864] usb 2-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 1229.685394][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.693614][ T5864] usb 2-1: Product: syz [ 1229.700127][ T5864] usb 2-1: Manufacturer: syz [ 1229.706508][T18487] udevd[18487]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1229.730476][ T5864] usb 2-1: SerialNumber: syz [ 1229.806844][ T5969] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1229.922187][ T10] keytouch 0003:0926:3333.01BA: fixing up Keytouch IEC report descriptor [ 1229.934331][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.01BA/input/input462 [ 1229.951060][T32323] syz.1.8077: attempt to access beyond end of device [ 1229.951060][T32323] loop1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1229.965145][T32323] syz.1.8077: attempt to access beyond end of device [ 1229.965145][T32323] loop1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1229.978590][ T5969] usb 3-1: Using ep0 maxpacket: 32 [ 1229.983871][T32323] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1229.985448][ T5969] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 1229.994515][T32323] syz.1.8077: attempt to access beyond end of device [ 1229.994515][T32323] loop1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1230.003525][ T5969] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1230.014707][T32323] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1230.029390][ T5969] usb 3-1: config 0 has no interface number 0 [ 1230.036401][T32345] /dev/rnullb0: Can't open blockdev [ 1230.045268][T32323] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1230.047966][ T5969] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1230.055079][T32323] UDF-fs: Scanning with blocksize 512 failed [ 1230.072628][T32323] syz.1.8077: attempt to access beyond end of device [ 1230.072628][T32323] loop1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1230.073011][ T10] keytouch 0003:0926:3333.01BA: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1230.100362][ T5969] usb 3-1: config 0 has no interface number 0 [ 1230.108928][ T5969] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1230.119873][ T5969] usb 3-1: config 0 has no interface number 0 [ 1230.131965][ T5969] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1230.134864][T32323] syz.1.8077: attempt to access beyond end of device [ 1230.134864][T32323] loop1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1230.147978][ T5969] usb 3-1: config 0 has no interface number 0 [ 1230.184208][T32323] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1230.203211][T32323] syz.1.8077: attempt to access beyond end of device [ 1230.203211][T32323] loop1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1230.216972][ T5969] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1230.230600][ T5969] usb 3-1: config 0 has no interface number 0 [ 1230.241236][T32323] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1230.258979][ T5969] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1230.259459][T32348] /dev/rnullb0: Can't open blockdev [ 1230.269267][ T5969] usb 3-1: config 0 has no interface number 0 [ 1230.281973][T32323] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1230.290421][T32323] UDF-fs: Scanning with blocksize 1024 failed [ 1230.297254][ T5969] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1230.305572][ T5969] usb 3-1: config 0 has no interface number 0 [ 1230.312915][ T5969] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1230.324225][ T5969] usb 3-1: config 0 has no interface number 0 [ 1230.350651][ T5969] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1230.363843][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.377427][T32323] syz.1.8077: attempt to access beyond end of device [ 1230.377427][T32323] loop1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1230.396536][ T5969] usb 3-1: Product: syz [ 1230.400756][ T5969] usb 3-1: Manufacturer: syz [ 1230.405957][ T5969] usb 3-1: SerialNumber: syz [ 1230.412328][ T5969] usb 3-1: config 0 descriptor?? [ 1230.422122][ T5969] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 1230.429919][T32323] syz.1.8077: attempt to access beyond end of device [ 1230.429919][T32323] loop1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1230.430017][T32323] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1230.461047][T32323] syz.1.8077: attempt to access beyond end of device [ 1230.461047][T32323] loop1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1230.476525][T32323] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1230.488901][T32323] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1230.497817][T32323] UDF-fs: Scanning with blocksize 2048 failed [ 1230.504521][T32323] syz.1.8077: attempt to access beyond end of device [ 1230.504521][T32323] loop1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1230.517739][T32323] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1230.519338][T32353] /dev/rnullb0: Can't open blockdev [ 1230.527951][T32323] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1230.543939][T32323] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1230.550294][ T10] usb 5-1: USB disconnect, device number 90 [ 1230.551630][T32323] UDF-fs: Scanning with blocksize 4096 failed [ 1230.585968][T32323] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 1230.611043][ T5869] Bluetooth: hci3: command 0x0406 tx timeout [ 1230.633202][ T5864] pn533_usb 2-1:5.168: NFC: Could not find bulk-in or bulk-out endpoint [ 1230.655090][ T5864] usb 2-1: USB disconnect, device number 32 [ 1230.867406][T32366] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8084'. [ 1231.131385][T32375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8088'. [ 1231.161373][T32376] /dev/rnullb0: Can't open blockdev [ 1231.167497][T32375] /dev/rnullb0: Can't open blockdev [ 1231.206383][T32378] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8089'. [ 1231.283375][ T1210] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1231.479321][ T1210] usb 6-1: Using ep0 maxpacket: 16 [ 1231.487722][T32387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8093'. [ 1231.489181][ T1210] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1231.508787][ T1210] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.527890][ T1210] usb 6-1: config 0 descriptor?? [ 1231.538776][ T1210] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1231.811627][T32401] /dev/sg0: Can't lookup blockdev [ 1231.913112][ T6528] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1231.999077][T32371] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1232.016519][ T1210] gspca_sonixj: reg_r err -71 [ 1232.021283][ T1210] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 1232.052596][ T1210] usb 6-1: USB disconnect, device number 15 [ 1232.063045][ T6528] usb 2-1: Using ep0 maxpacket: 8 [ 1232.069700][ T6528] usb 2-1: config 127 has an invalid interface number: 171 but max is 1 [ 1232.079792][ T6528] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.090939][ T6528] usb 2-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 1232.100184][ T6528] usb 2-1: config 127 has no interface number 0 [ 1232.106605][ T6528] usb 2-1: config 127 interface 171 has no altsetting 0 [ 1232.115737][ T6528] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1232.126543][ T6528] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.134588][ T6528] usb 2-1: Product: syz [ 1232.138814][ T6528] usb 2-1: Manufacturer: syz [ 1232.144144][ T6528] usb 2-1: SerialNumber: syz [ 1232.352602][T32392] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8094'. [ 1232.458102][ T6528] usb 2-1: USB disconnect, device number 33 [ 1232.583755][ T5969] etas_es58x 3-1:0.2: could not retrieve the product info string [ 1232.627447][ T5969] usb 3-1: USB disconnect, device number 109 [ 1232.645896][ T5969] etas_es58x 3-1:0.2: Disconnecting syz syz [ 1232.794898][ T44] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1232.945436][T32431] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8102'. [ 1232.958666][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.978727][ T44] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1232.998658][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.018864][ T44] usb 6-1: config 0 descriptor?? [ 1233.362330][ T5969] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1233.442778][ T44] keytouch 0003:0926:3333.01BB: fixing up Keytouch IEC report descriptor [ 1233.473248][T32460] support for cryptoloop has been removed. Use dm-crypt instead. [ 1233.482431][ T44] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.01BB/input/input463 [ 1233.505296][ T1210] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1233.544048][ T5969] usb 5-1: Using ep0 maxpacket: 16 [ 1233.554003][ T5969] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.574743][ T5969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1233.600291][ T44] keytouch 0003:0926:3333.01BB: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1233.602868][ T5969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1233.679882][ T5969] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1233.689223][ T1210] usb 3-1: Using ep0 maxpacket: 32 [ 1233.689999][ T1210] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 1233.693239][ T1210] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1233.693265][ T1210] usb 3-1: config 0 has no interface number 0 [ 1233.694218][ T1210] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1233.751028][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.775735][ T5969] usb 5-1: config 0 descriptor?? [ 1233.791444][ T1210] usb 3-1: config 0 has no interface number 0 [ 1233.809868][ T1210] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1233.820917][ T1210] usb 3-1: config 0 has no interface number 0 [ 1233.837980][ T1210] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1233.852059][ T1210] usb 3-1: config 0 has no interface number 0 [ 1233.869715][ T1210] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1233.878159][ T1210] usb 3-1: config 0 has no interface number 0 [ 1233.893367][ T1210] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1233.901525][ T1210] usb 3-1: config 0 has no interface number 0 [ 1233.911438][ T1210] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1233.920386][ T1210] usb 3-1: config 0 has no interface number 0 [ 1233.933118][ T1210] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1233.941228][ T1210] usb 3-1: config 0 has no interface number 0 [ 1233.949395][ T1210] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1233.958522][ T1210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.969578][ T1210] usb 3-1: Product: syz [ 1233.973924][ T6528] usb 6-1: USB disconnect, device number 16 [ 1233.974423][ T1210] usb 3-1: Manufacturer: syz [ 1233.984678][ T1210] usb 3-1: SerialNumber: syz [ 1233.991735][T32473] gfs2: error -5 reading superblock [ 1234.014721][ T1210] usb 3-1: config 0 descriptor?? [ 1234.031138][ T1210] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 1234.051641][T32476] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8111'. [ 1234.095533][T32478] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1234.211496][ T5969] hid-picolcd 0003:04D8:F002.01BC: unbalanced delimiter at end of report description [ 1234.224546][ T5969] hid-picolcd 0003:04D8:F002.01BC: device report parse failed [ 1234.233238][ T5969] hid-picolcd 0003:04D8:F002.01BC: probe with driver hid-picolcd failed with error -22 [ 1234.411837][ T44] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1234.539204][T32490] /dev/rnullb0: Can't open blockdev [ 1234.551570][T32490] /dev/rnullb0: Can't open blockdev [ 1234.562956][ T44] usb 2-1: too many configurations: 60, using maximum allowed: 8 [ 1234.580063][ T44] usb 2-1: config 0 has an invalid interface number: 216 but max is 0 [ 1234.598401][ T44] usb 2-1: config 0 has no interface number 0 [ 1234.619637][ T44] usb 2-1: too many endpoints for config 0 interface 216 altsetting 120: 225, using maximum allowed: 30 [ 1234.636837][ T44] usb 2-1: config 0 interface 216 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 225 [ 1234.650631][ T44] usb 2-1: config 0 interface 216 has no altsetting 0 [ 1234.659753][ T44] usb 2-1: config 0 has an invalid interface number: 216 but max is 0 [ 1234.668339][ T44] usb 2-1: config 0 has no interface number 0 [ 1234.675056][ T44] usb 2-1: too many endpoints for config 0 interface 216 altsetting 120: 225, using maximum allowed: 30 [ 1234.687972][ T44] usb 2-1: config 0 interface 216 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 225 [ 1234.703553][ T44] usb 2-1: config 0 interface 216 has no altsetting 0 [ 1234.711330][ T44] usb 2-1: config 0 has an invalid interface number: 216 but max is 0 [ 1234.720204][ T44] usb 2-1: config 0 has no interface number 0 [ 1234.728732][ T44] usb 2-1: too many endpoints for config 0 interface 216 altsetting 120: 225, using maximum allowed: 30 [ 1234.741491][ T44] usb 2-1: config 0 interface 216 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 225 [ 1234.757063][ T44] usb 2-1: config 0 interface 216 has no altsetting 0 [ 1234.769450][ T44] usb 2-1: config 0 has an invalid interface number: 216 but max is 0 [ 1234.780099][ T44] usb 2-1: config 0 has no interface number 0 [ 1234.786420][ T44] usb 2-1: too many endpoints for config 0 interface 216 altsetting 120: 225, using maximum allowed: 30 [ 1234.799783][ T44] usb 2-1: config 0 interface 216 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 225 [ 1234.815272][ T44] usb 2-1: config 0 interface 216 has no altsetting 0 [ 1234.824043][ T44] usb 2-1: config 0 has an invalid interface number: 216 but max is 0 [ 1234.834597][ T44] usb 2-1: config 0 has no interface number 0 [ 1234.842273][ T44] usb 2-1: too many endpoints for config 0 interface 216 altsetting 120: 225, using maximum allowed: 30 [ 1234.853791][ T44] usb 2-1: config 0 interface 216 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 225 [ 1234.867387][ T44] usb 2-1: config 0 interface 216 has no altsetting 0 [ 1234.878027][ T44] usb 2-1: config 0 has an invalid interface number: 216 but max is 0 [ 1234.888396][ T44] usb 2-1: config 0 has no interface number 0 [ 1234.894742][ T44] usb 2-1: too many endpoints for config 0 interface 216 altsetting 120: 225, using maximum allowed: 30 [ 1234.908006][ T44] usb 2-1: config 0 interface 216 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 225 [ 1234.922761][ T44] usb 2-1: config 0 interface 216 has no altsetting 0 [ 1234.955455][ T44] usb 2-1: config 0 has an invalid interface number: 216 but max is 0 [ 1234.963943][ T44] usb 2-1: config 0 has no interface number 0 [ 1234.970128][ T44] usb 2-1: too many endpoints for config 0 interface 216 altsetting 120: 225, using maximum allowed: 30 [ 1234.983282][ T44] usb 2-1: config 0 interface 216 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 225 [ 1234.997382][ T44] usb 2-1: config 0 interface 216 has no altsetting 0 [ 1235.005222][ T44] usb 2-1: config 0 has an invalid interface number: 216 but max is 0 [ 1235.013463][ T44] usb 2-1: config 0 has no interface number 0 [ 1235.019552][ T44] usb 2-1: too many endpoints for config 0 interface 216 altsetting 120: 225, using maximum allowed: 30 [ 1235.030740][ T44] usb 2-1: config 0 interface 216 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 225 [ 1235.045197][ T44] usb 2-1: config 0 interface 216 has no altsetting 0 [ 1235.054074][ T44] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1235.063284][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=81 [ 1235.071359][ T44] usb 2-1: Product: syz [ 1235.075600][ T44] usb 2-1: Manufacturer: syz [ 1235.080215][ T44] usb 2-1: SerialNumber: syz [ 1235.086803][ T44] usb 2-1: config 0 descriptor?? [ 1235.201417][T19952] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1235.294273][T32480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.303544][T32480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1235.371482][T19952] usb 6-1: Using ep0 maxpacket: 32 [ 1235.379678][T19952] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 1235.389093][T19952] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1235.399975][T19952] usb 6-1: config 0 has no interface number 0 [ 1235.408229][T19952] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1235.419698][T19952] usb 6-1: config 0 has no interface number 0 [ 1235.427540][T19952] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1235.431914][T32508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.446728][T19952] usb 6-1: config 0 has no interface number 0 [ 1235.448533][T32508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1235.457673][T19952] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1235.469161][T19952] usb 6-1: config 0 has no interface number 0 [ 1235.477107][T19952] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1235.485552][T19952] usb 6-1: config 0 has no interface number 0 [ 1235.493196][T19952] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1235.495400][ T44] i2c-tiny-usb 2-1:0.216: version 6d.cc found at bus 002 address 034 [ 1235.501764][T19952] usb 6-1: config 0 has no interface number 0 [ 1235.518755][ T44] (null): failure setting delay to 10us [ 1235.525911][ T44] i2c-tiny-usb 2-1:0.216: probe with driver i2c-tiny-usb failed with error -5 [ 1235.529336][T19952] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1235.544736][T19952] usb 6-1: config 0 has no interface number 0 [ 1235.551008][ T44] usb 2-1: USB disconnect, device number 34 [ 1235.560214][T19952] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1235.569926][T19952] usb 6-1: config 0 has no interface number 0 [ 1235.584134][T19952] usb 6-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1235.596725][T19952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.609228][T19952] usb 6-1: Product: syz [ 1235.614419][T19952] usb 6-1: Manufacturer: syz [ 1235.619191][T19952] usb 6-1: SerialNumber: syz [ 1235.632779][T19952] usb 6-1: config 0 descriptor?? [ 1235.644172][T19952] etas_es58x 6-1:0.2: Starting syz syz (Serial Number syz) [ 1235.841547][T19952] etas_es58x 6-1:0.2: could not parse product info: '' [ 1236.055167][ T30] audit: type=1326 audit(2000033319.603:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32434 comm="syz.4.8103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb07e78ebe9 code=0x7fc00000 [ 1236.124362][ T6528] usb 5-1: USB disconnect, device number 91 [ 1236.163975][T32534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8121'. [ 1236.181010][ T44] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1236.264892][ T1210] etas_es58x 3-1:0.2: could not retrieve the product info string [ 1236.313687][T32544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8123'. [ 1236.324738][ T1210] usb 3-1: USB disconnect, device number 110 [ 1236.335497][ C0] etas_es58x 6-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x015D. [ 1236.346482][ C0] etas_es58x 6-1:0.2: Recovery successful! Dropped 341 bytes (urb_cmd_len: -61) [ 1236.347412][ T5532] etas_es58x 6-1:0.2 can0: bit-timing not yet defined [ 1236.364950][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 1236.376276][ T44] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1236.383300][ T1210] etas_es58x 3-1:0.2: Disconnecting syz syz [ 1236.389468][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.408044][ T44] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1236.415814][ T44] pvrusb2: ********** [ 1236.419816][ T44] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1236.433872][ T44] pvrusb2: Important functionality might not be entirely working. [ 1236.444332][ T44] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1236.457794][ T44] pvrusb2: ********** [ 1236.607188][ T2344] pvrusb2: Invalid write control endpoint [ 1236.658285][ T2344] pvrusb2: Invalid write control endpoint [ 1236.668308][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1236.678743][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1236.691679][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1236.701848][ T2344] pvrusb2: Device being rendered inoperable [ 1236.707841][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1236.715177][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1236.723551][ T2344] pvrusb2: Attached sub-driver cx25840 [ 1236.729062][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1236.741683][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1236.804638][T32565] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8126'. [ 1236.887970][ T30] audit: type=1400 audit(2000033320.433:69): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 2-1: USB disconnect, device number 35 [ 1237.400365][ T5532] etas_es58x 6-1:0.2: es58x_free_urbs: Timeout, some TX urbs still remain [ 1237.409249][ C0] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 1237.417298][ C0] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 1237.425140][ C0] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 1237.432952][ C0] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 1237.440620][ T5532] etas_es58x 6-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL [ 1237.476684][ C0] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1237.486323][T19952] usb 6-1: USB disconnect, device number 17 [ 1237.502521][T19952] etas_es58x 6-1:0.2: Disconnecting syz syz [ 1237.613910][T32575] orangefs_mount: mount request failed with -4 [ 1237.704342][T32589] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8130'. [ 1238.090587][T19952] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1238.225546][T32629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8137'. [ 1238.265413][T19952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1238.278576][T19952] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1238.303459][T19952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.315249][T19952] usb 5-1: config 0 descriptor?? [ 1238.319942][T20145] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1238.479813][T20145] usb 6-1: Using ep0 maxpacket: 32 [ 1238.486962][T20145] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1238.516324][T20145] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1238.545048][T20145] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1238.559286][T32641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8140'. [ 1238.571447][T20145] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1238.585633][T20145] usb 6-1: Product: syz [ 1238.600674][T16525] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1238.602528][T20145] usb 6-1: Manufacturer: syz [ 1238.606949][ T5869] Bluetooth: hci0: command 0x0419 tx timeout [ 1238.639799][T20145] usb 6-1: SerialNumber: syz [ 1238.669254][T20145] usb 6-1: config 0 descriptor?? [ 1238.737163][T19952] keytouch 0003:0926:3333.01BE: fixing up Keytouch IEC report descriptor [ 1238.762663][ T10] hid-generic 0005:10CF:0005.01BD: item fetching failed at offset 0/1 [ 1238.772835][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.793889][T19952] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.01BE/input/input464 [ 1238.805835][ T10] hid-generic 0005:10CF:0005.01BD: probe with driver hid-generic failed with error -22 [ 1238.895502][T32655] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.8135'. [ 1238.956437][T19952] keytouch 0003:0926:3333.01BE: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1239.004095][ T44] usb 6-1: USB disconnect, device number 18 [ 1239.251816][ T10] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1239.275712][T19952] usb 5-1: USB disconnect, device number 92 [ 1239.440870][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1239.459088][ T10] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 1239.476232][ T10] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1239.484873][ T10] usb 3-1: config 0 has no interface number 0 [ 1239.493537][T32684] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8150'. [ 1239.494069][ T10] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1239.513678][ T10] usb 3-1: config 0 has no interface number 0 [ 1239.522735][ T10] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1239.530959][ T10] usb 3-1: config 0 has no interface number 0 [ 1239.538977][ T10] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1239.550319][ T10] usb 3-1: config 0 has no interface number 0 [ 1239.557337][ T10] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1239.566369][ T10] usb 3-1: config 0 has no interface number 0 [ 1239.574537][ T10] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1239.582688][ T10] usb 3-1: config 0 has no interface number 0 [ 1239.590282][ T10] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1239.598280][ T10] usb 3-1: config 0 has no interface number 0 [ 1239.607598][ T10] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1239.616181][ T10] usb 3-1: config 0 has no interface number 0 [ 1239.627606][ T10] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1239.636758][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.648141][ T10] usb 3-1: Product: syz [ 1239.653396][ T10] usb 3-1: Manufacturer: syz [ 1239.660971][ T10] usb 3-1: SerialNumber: syz [ 1239.669595][ T10] usb 3-1: config 0 descriptor?? [ 1239.675954][ T10] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 1239.785662][T32695] /dev/rnullb0: Can't open blockdev [ 1239.848002][T32697] /dev/rnullb0: Can't open blockdev [ 1239.879389][ T10] etas_es58x 3-1:0.2: could not parse product info: '' [ 1240.004114][T32708] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8159'. [ 1240.435283][T32740] /dev/rnullb0: Can't open blockdev [ 1240.456108][ C0] etas_es58x 3-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x015D. [ 1240.458832][ T44] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1240.467186][ C0] etas_es58x 3-1:0.2: Recovery successful! Dropped 341 bytes (urb_cmd_len: -61) [ 1240.469422][ T5532] etas_es58x 3-1:0.2 can0: bit-timing not yet defined [ 1240.614136][ T44] usb 6-1: device descriptor read/64, error -71 [ 1240.657450][ C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1240.666650][ C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1240.675817][ C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1240.684987][ C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1240.694149][ C0] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1240.703312][ C0] etas_es58x 3-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 1240.711386][ T5532] etas_es58x 3-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL [ 1240.713246][ T1210] usb 3-1: USB disconnect, device number 111 [ 1240.727540][ T1210] etas_es58x 3-1:0.2: Disconnecting syz syz [ 1240.868574][ T44] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1240.912334][ T10] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1241.018525][ T44] usb 6-1: device descriptor read/64, error -71 [ 1241.069124][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1241.086934][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1241.106580][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.128774][ T10] usb 5-1: Product: syz [ 1241.130725][ T44] usb usb6-port1: attempt power cycle [ 1241.132968][ T10] usb 5-1: Manufacturer: syz [ 1241.132986][ T10] usb 5-1: SerialNumber: syz [ 1241.157347][ T10] usb 5-1: config 0 descriptor?? [ 1241.204773][T32762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8166'. [ 1241.317012][ T301] netdevsim netdevsim1: Firmware load for 'nel/address_bits0/../file0' refused, path contains '..' component [ 1241.366991][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1241.488343][ T44] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1241.523969][ T44] usb 6-1: device descriptor read/8, error -71 [ 1241.632226][T19952] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1241.780689][ T44] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1241.799552][T19952] usb 3-1: Using ep0 maxpacket: 16 [ 1241.806506][T19952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1241.817621][T19952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1241.827827][T19952] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1241.827946][ T44] usb 6-1: device descriptor read/8, error -71 [ 1241.846122][T19952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.864852][T19952] usb 3-1: config 0 descriptor?? [ 1241.959140][ T44] usb usb6-port1: unable to enumerate USB device [ 1241.978227][T20145] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1242.137933][T20145] usb 2-1: Using ep0 maxpacket: 32 [ 1242.143867][T20145] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 1242.154428][T20145] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1242.162533][T20145] usb 2-1: config 0 has no interface number 0 [ 1242.171227][T20145] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1242.179304][T20145] usb 2-1: config 0 has no interface number 0 [ 1242.186187][T20145] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1242.194326][T20145] usb 2-1: config 0 has no interface number 0 [ 1242.201572][T20145] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1242.210527][T20145] usb 2-1: config 0 has no interface number 0 [ 1242.217571][T20145] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1242.225760][T20145] usb 2-1: config 0 has no interface number 0 [ 1242.232703][T20145] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1242.240769][T20145] usb 2-1: config 0 has no interface number 0 [ 1242.250372][T20145] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1242.258445][T20145] usb 2-1: config 0 has no interface number 0 [ 1242.265337][T20145] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1242.273424][T20145] usb 2-1: config 0 has no interface number 0 [ 1242.281362][T20145] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1242.290484][T20145] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.298801][T20145] usb 2-1: Product: syz [ 1242.300515][T19952] letsketch 0003:6161:4D15.01BF: Device info: ᣍ [ 1242.302980][T20145] usb 2-1: Manufacturer: syz [ 1242.302998][T20145] usb 2-1: SerialNumber: syz [ 1242.311875][T20145] usb 2-1: config 0 descriptor?? [ 1242.326405][T20145] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 1242.388755][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1242.401082][ T10] usb 5-1: USB disconnect, device number 93 [ 1242.506434][T19952] letsketch 0003:6161:4D15.01BF: Device info: ఁ [ 1242.517888][T16525] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1242.524088][ T5869] Bluetooth: hci0: command 0x0419 tx timeout [ 1242.528025][T20145] etas_es58x 2-1:0.2: could not parse product info: '' [ 1242.735802][T19952] usb 3-1: Max retries (5) exceeded reading string descriptor 202 [ 1242.747509][T19952] letsketch 0003:6161:4D15.01BF: probe with driver letsketch failed with error -71 [ 1242.764960][T19952] usb 3-1: USB disconnect, device number 112 [ 1242.942111][ C1] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x015D. [ 1242.953138][ C1] etas_es58x 2-1:0.2: Recovery successful! Dropped 341 bytes (urb_cmd_len: 9) [ 1242.962024][ C1] etas_es58x 2-1:0.2: es58x_fd_handle_urb_cmd: Unknown command type (0x00) and command ID (0x00) combination [ 1242.973606][ C1] etas_es58x 2-1:0.2: ops->handle_urb_cmd() returned error -EBADRQC [ 1242.985966][ T5532] etas_es58x 2-1:0.2 can1: bit-timing not yet defined [ 1243.277435][ T370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8175'. [ 1243.386547][ T377] /dev/rnullb0: Can't open blockdev [ 1243.509308][ T384] netlink: 'syz.4.8180': attribute type 1 has an invalid length. [ 1243.517085][ T384] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8180'. [ 1243.637190][T19952] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1243.777176][T19952] usb 3-1: device descriptor read/64, error -71 [ 1243.847086][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1243.998652][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.009631][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1244.018771][T19952] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1244.026513][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.036406][ T10] usb 6-1: config 0 descriptor?? [ 1244.037082][ T5532] etas_es58x 2-1:0.2: es58x_free_urbs: Timeout, some TX urbs still remain [ 1244.054665][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 1244.062980][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 1244.070881][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 1244.078572][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -ENOENT [ 1244.086160][ T5532] etas_es58x 2-1:0.2 can1: es58x_open: Could not open the network device: -EINVAL [ 1244.098674][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1244.110235][T20145] usb 2-1: USB disconnect, device number 36 [ 1244.118385][T20145] etas_es58x 2-1:0.2: Disconnecting syz syz [ 1244.157248][T19952] usb 3-1: device descriptor read/64, error -71 [ 1244.277758][T19952] usb usb3-port1: attempt power cycle [ 1244.461611][ T10] keytouch 0003:0926:3333.01C0: fixing up Keytouch IEC report descriptor [ 1244.484683][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.01C0/input/input465 [ 1244.549976][T18487] buffer_io_error: 2377 callbacks suppressed [ 1244.549999][T18487] Buffer I/O error on dev loop6, logical block 32767999, async page read [ 1244.615546][ T10] keytouch 0003:0926:3333.01C0: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1244.627744][T19952] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1244.683938][T19952] usb 3-1: device descriptor read/8, error -71 [ 1244.774514][ T414] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8185'. [ 1244.956664][T19952] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1245.005811][ T5969] usb 6-1: USB disconnect, device number 23 [ 1245.013435][T19952] usb 3-1: device descriptor read/8, error -71 [ 1245.136705][T19952] usb usb3-port1: unable to enumerate USB device [ 1245.222866][ T444] netlink: 'syz.1.8186': attribute type 10 has an invalid length. [ 1245.253379][ T444] batman_adv: batadv0: Adding interface: netdevsim0 [ 1245.270747][ T444] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1245.299299][ T444] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1245.656341][ T10] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1245.826080][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1245.831321][ T5969] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1245.840761][ T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1245.849175][ T10] usb 5-1: config 0 has no interface number 0 [ 1245.857838][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1245.867037][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.875048][ T10] usb 5-1: Product: syz [ 1245.879738][ T10] usb 5-1: Manufacturer: syz [ 1245.885031][ T10] usb 5-1: SerialNumber: syz [ 1245.895328][ T10] usb 5-1: config 0 descriptor?? [ 1245.903302][ T10] smsc95xx v2.0.0 [ 1245.988024][ T5969] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1246.000220][ T5969] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1246.010025][ T471] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8194'. [ 1246.015253][ T5969] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1246.039278][ T5969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.107153][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1246.141863][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1246.171931][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1246.183539][ T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 1246.214902][ T10] usb 5-1: USB disconnect, device number 94 [ 1246.252503][ T5969] usb 6-1: usb_control_msg returned -32 [ 1246.258334][ T5969] usbtmc 6-1:16.0: can't read capabilities [ 1246.410503][ T494] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8199'. [ 1246.515860][ T10] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1246.667173][ T44] usb 6-1: USB disconnect, device number 24 [ 1246.680820][ T501] overlayfs: failed to resolve './file0': -2 [ 1246.687224][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1246.697701][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.722983][ T10] usb 5-1: config 0 descriptor?? [ 1246.736076][ T10] cp210x 5-1:0.0: cp210x converter detected [ 1246.767689][ T511] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8203'. [ 1246.834456][ T513] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8204'. [ 1247.041775][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1247.104558][ T528] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8208'. [ 1247.298783][ T541] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8213'. [ 1247.587083][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1247.622081][ T565] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8219'. [ 1247.745492][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1247.752204][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1247.764007][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1247.777303][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1247.786488][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.794481][ T10] usb 6-1: Product: syz [ 1247.799192][ T10] usb 6-1: Manufacturer: syz [ 1247.803805][ T10] usb 6-1: SerialNumber: syz [ 1247.809797][ T10] usb 6-1: config 0 descriptor?? [ 1247.945130][T20145] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 1247.955172][ T6528] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1248.018356][ T546] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1248.078628][ T10] appledisplay 6-1:0.0: Error while getting initial brightness: -110 [ 1248.087795][ T10] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -110 [ 1248.099418][T20145] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1248.103364][ T10] usb 6-1: USB disconnect, device number 25 [ 1248.108755][ T6528] usb 3-1: Using ep0 maxpacket: 32 [ 1248.121856][T20145] usb 2-1: not running at top speed; connect to a high speed hub [ 1248.134025][ T6528] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1248.142546][ T6528] usb 3-1: config 0 has no interface number 0 [ 1248.150027][ T6528] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1248.161052][ T6528] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1248.167992][T20145] usb 2-1: config 10 has an invalid interface number: 50 but max is 0 [ 1248.176668][T20145] usb 2-1: config 10 has no interface number 0 [ 1248.183422][T20145] usb 2-1: config 10 interface 50 has no altsetting 0 [ 1248.192404][ T6528] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1248.202127][ T6528] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.210289][ T6528] usb 3-1: Product: syz [ 1248.214608][T20145] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=43.2d [ 1248.223726][ T6528] usb 3-1: Manufacturer: syz [ 1248.228415][ T6528] usb 3-1: SerialNumber: syz [ 1248.233637][T20145] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.242400][ T6528] usb 3-1: config 0 descriptor?? [ 1248.248172][T20145] usb 2-1: Product: syz [ 1248.252349][T20145] usb 2-1: Manufacturer: syz [ 1248.257130][T20145] usb 2-1: SerialNumber: syz [ 1248.467776][ T6528] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1248.477405][ T6528] cx231xx 3-1:0.1: Failed to read PCB config [ 1248.483503][ T6528] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 1248.494637][ T6528] usb 3-1: USB disconnect, device number 117 [ 1248.569782][T20145] usbserial_generic 2-1:10.50: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1248.582208][T20145] usbserial_generic 2-1:10.50: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1248.594025][T20145] usbserial_generic 2-1:10.50: device has no bulk endpoints [ 1248.607705][T20145] usb 2-1: USB disconnect, device number 37 [ 1248.877956][ T585] __nla_validate_parse: 1 callbacks suppressed [ 1248.877978][ T585] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8225'. [ 1248.904625][ T5969] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1249.074687][ T5969] usb 3-1: Using ep0 maxpacket: 32 [ 1249.087677][ T5969] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1249.107260][ T5969] usb 3-1: config 0 has no interface number 0 [ 1249.120220][ T5969] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1249.140100][ T5969] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1249.152494][ T5969] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1249.166796][ T599] bio_check_eod: 3 callbacks suppressed [ 1249.166811][ T599] syz.1.8229: attempt to access beyond end of device [ 1249.166811][ T599] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1249.186185][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.195302][ T5969] usb 3-1: Product: syz [ 1249.199690][ T599] hpfs: hpfs_map_sector(): read error [ 1249.200053][ T5969] usb 3-1: Manufacturer: syz [ 1249.210156][ T5969] usb 3-1: SerialNumber: syz [ 1249.221643][ T5969] usb 3-1: config 0 descriptor?? [ 1249.314833][ T606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1249.329716][ T606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1249.413486][ T609] /dev/rnullb0: Can't open blockdev [ 1249.436229][ T5969] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1249.447927][ T5969] cx231xx 3-1:0.1: bad config in buspower!!!! [ 1249.447927][ T5969] config_info=40 [ 1249.457460][ T5969] cx231xx 3-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 1249.501138][ T612] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8234'. [ 1249.594959][ T5969] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 1249.603441][ T5969] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1249.614090][ T5969] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1249.622462][ T5969] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1249.633703][ T5969] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1249.642725][ T5969] cx231xx 3-1:0.1: Failed to set devmode to analog: error: -32 [ 1249.652567][ T570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1249.661341][ T570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1249.699163][ T5969] i2c i2c-2: Added multiplexed i2c bus 4 [ 1249.707436][ T5969] i2c i2c-2: Added multiplexed i2c bus 5 [ 1249.713415][ T5969] cx231xx 3-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-32]! [ 1249.722511][ T5969] cx231xx 3-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-32]! [ 1249.740585][ T5969] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -32 [ 1249.753049][ T626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1249.770114][ T626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1249.791286][ T627] syz.1.8240: attempt to access beyond end of device [ 1249.791286][ T627] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1249.824213][ T5927] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1249.848379][T20145] usb 3-1: USB disconnect, device number 118 [ 1249.994808][ T5927] usb 6-1: Using ep0 maxpacket: 32 [ 1250.000961][ T5927] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 1250.009876][ T5927] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1250.017950][ T5927] usb 6-1: config 0 has no interface number 0 [ 1250.025222][ T5927] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1250.033248][ T5927] usb 6-1: config 0 has no interface number 0 [ 1250.040634][ T5927] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1250.048663][ T5927] usb 6-1: config 0 has no interface number 0 [ 1250.055878][ T5927] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1250.064047][ T5927] usb 6-1: config 0 has no interface number 0 [ 1250.071040][ T5927] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1250.079271][ T5927] usb 6-1: config 0 has no interface number 0 [ 1250.086720][ T5927] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1250.095681][ T5927] usb 6-1: config 0 has no interface number 0 [ 1250.102583][ T5927] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1250.110779][ T5927] usb 6-1: config 0 has no interface number 0 [ 1250.117863][ T5927] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1250.125907][ T5927] usb 6-1: config 0 has no interface number 0 [ 1250.133719][ T5927] usb 6-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1250.142878][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.150930][ T5927] usb 6-1: Product: syz [ 1250.155158][ T5927] usb 6-1: Manufacturer: syz [ 1250.159763][ T5927] usb 6-1: SerialNumber: syz [ 1250.165713][ T5927] usb 6-1: config 0 descriptor?? [ 1250.171933][ T5927] etas_es58x 6-1:0.2: Starting syz syz (Serial Number syz) [ 1250.373582][ T5927] etas_es58x 6-1:0.2: could not parse product info: '' [ 1250.405813][ T629] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8241'. [ 1250.594436][ T5927] usb 6-1: USB disconnect, device number 26 [ 1250.602364][ T5927] etas_es58x 6-1:0.2: Disconnecting syz syz [ 1250.773021][ T652] /dev/rnullb0: Can't open blockdev [ 1250.916870][ T657] binder: 656:657 ioctl c0306201 200000000480 returned -14 [ 1251.359803][ T682] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8251'. [ 1251.403374][ T6528] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1251.571672][ T6528] usb 6-1: Using ep0 maxpacket: 16 [ 1251.580480][ T6528] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1251.589764][ T6528] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1251.599737][ T6528] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1251.609563][ T6528] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1251.619484][ T6528] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1251.630563][ T6528] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1251.637363][ T6528] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1251.649628][ T6528] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.665460][ T6528] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 1251.819218][ T703] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1251.962692][ T710] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.8259'. [ 1251.977423][ T710] /dev/rnullb0: Can't open blockdev [ 1252.193086][ T5864] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1252.351362][ T719] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8261'. [ 1252.363346][ T5864] usb 2-1: Using ep0 maxpacket: 32 [ 1252.379071][ T5864] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 1252.393150][ T5864] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1252.409614][ T5864] usb 2-1: config 0 has no interface number 0 [ 1252.426594][ T5864] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1252.438501][ T5864] usb 2-1: config 0 has no interface number 0 [ 1252.456242][ T5864] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1252.466997][ T5864] usb 2-1: config 0 has no interface number 0 [ 1252.481302][ T724] /dev/rnullb0: Can't open blockdev [ 1252.485387][ T5864] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1252.502800][ T5864] usb 2-1: config 0 has no interface number 0 [ 1252.524739][ T5864] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1252.537756][ T5864] usb 2-1: config 0 has no interface number 0 [ 1252.547763][ T5864] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1252.565900][ T5864] usb 2-1: config 0 has no interface number 0 [ 1252.586500][ T5864] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1252.595357][ T5869] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1252.601876][ T5864] usb 2-1: config 0 has no interface number 0 [ 1252.609243][ T5869] Bluetooth: hci0: command 0x0419 tx timeout [ 1252.617674][ T5864] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1252.632697][ T5864] usb 2-1: config 0 has no interface number 0 [ 1252.641671][ T5864] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1252.652021][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.662090][ T5864] usb 2-1: Product: syz [ 1252.666508][ T5864] usb 2-1: Manufacturer: syz [ 1252.671131][ T5864] usb 2-1: SerialNumber: syz [ 1252.680627][ T5864] usb 2-1: config 0 descriptor?? [ 1252.687946][ T5864] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 1252.762719][ T5969] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1252.890889][ T5864] etas_es58x 2-1:0.2: could not parse product info: '' [ 1252.901755][ T741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.917073][ T741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.944334][ T5969] usb 3-1: config 0 has an invalid interface number: 45 but max is 0 [ 1252.963822][ T5969] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.987742][ T5969] usb 3-1: config 0 has no interface number 0 [ 1253.004823][ T5969] usb 3-1: config 0 interface 45 has no altsetting 0 [ 1253.020390][ T5969] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1253.039911][ T5969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.060807][ T5969] usb 3-1: config 0 descriptor?? [ 1253.113790][ T5969] usb 2-1: USB disconnect, device number 38 [ 1253.120699][ T5969] etas_es58x 2-1:0.2: Disconnecting syz syz [ 1253.557078][ T766] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8272'. [ 1254.132098][T19706] block nbd0: Possible stuck request ffff888025990000: control (read@0,1024B). Runtime 90 seconds [ 1254.142900][T19706] block nbd0: Possible stuck request ffff8880259901c0: control (read@1024,1024B). Runtime 90 seconds [ 1254.154075][T19706] block nbd0: Possible stuck request ffff888025990380: control (read@2048,1024B). Runtime 90 seconds [ 1254.165020][T19706] block nbd0: Possible stuck request ffff888025990540: control (read@3072,1024B). Runtime 90 seconds [ 1254.441374][ T812] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8283'. [ 1254.596572][ T820] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8286'. [ 1254.657764][ T825] /dev/rnullb0: Can't open blockdev [ 1255.004870][ T835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.013985][ T835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1255.151515][ T5869] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1255.151580][T16525] Bluetooth: hci0: command 0x0419 tx timeout [ 1255.442795][ T841] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8292'. [ 1255.571921][ T3096] usb 3-1: USB disconnect, device number 119 [ 1255.594797][ T845] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8295'. [ 1256.030557][ T875] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8301'. [ 1256.410922][ T5969] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1256.477291][ T886] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8305'. [ 1256.590891][ T5969] usb 3-1: Using ep0 maxpacket: 16 [ 1256.610554][ T5969] usb 3-1: config 0 has no interfaces? [ 1256.645063][ T5969] usb 3-1: New USB device found, idVendor=1410, idProduct=a020, bcdDevice=9e.d7 [ 1256.656423][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.673658][ T5969] usb 3-1: Product: syz [ 1256.679771][ T5969] usb 3-1: Manufacturer: syz [ 1256.684683][ T5969] usb 3-1: SerialNumber: syz [ 1256.693419][ T5969] usb 3-1: config 0 descriptor?? [ 1256.791844][ T6528] ums-sddr09 6-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 1256.924572][ T917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.935103][ T917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1257.095024][ T925] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1257.101640][ T925] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1257.108144][ T925] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1257.115180][ T925] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 1257.122313][ T925] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1257.129366][ T925] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1257.135912][ T925] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1257.142996][ T925] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1257.149606][ T925] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1257.157187][ T925] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1257.164025][ T925] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1257.200521][ T6528] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1257.245198][ T929] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8314'. [ 1257.350451][ T6528] usb 2-1: Using ep0 maxpacket: 32 [ 1257.359391][ T6528] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 1257.368214][ T6528] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1257.378443][ T6528] usb 2-1: config 0 has no interface number 0 [ 1257.385568][ T6528] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1257.392822][ T938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1257.397741][ T6528] usb 2-1: config 0 has no interface number 0 [ 1257.414602][ T6528] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1257.423250][ T6528] usb 2-1: config 0 has no interface number 0 [ 1257.432414][ T6528] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1257.440586][ T6528] usb 2-1: config 0 has no interface number 0 [ 1257.459586][ T6528] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1257.479699][ T6528] usb 2-1: config 0 has no interface number 0 [ 1257.490796][ T6528] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1257.499182][ T6528] usb 2-1: config 0 has no interface number 0 [ 1257.522795][ T6528] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1257.531993][ T6528] usb 2-1: config 0 has no interface number 0 [ 1257.539343][ T6528] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1257.557881][ T6528] usb 2-1: config 0 has no interface number 0 [ 1257.572029][ T6528] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1257.590995][ T6528] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.602897][ T6528] usb 2-1: Product: syz [ 1257.607244][ T6528] usb 2-1: Manufacturer: syz [ 1257.626266][ T6528] usb 2-1: SerialNumber: syz [ 1257.647275][ T6528] usb 2-1: config 0 descriptor?? [ 1257.656857][ T6528] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 1257.777390][ T966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1257.790792][ T966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.325008][ T974] /dev/rnullb0: Can't open blockdev [ 1258.344280][ T976] /dev/rnullb0: Can't open blockdev [ 1258.381137][ T978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.390134][ T978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.934456][ T980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.944053][ T980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1259.362806][T20145] usb 3-1: USB disconnect, device number 120 [ 1259.494976][ T984] /dev/rnullb0: Can't open blockdev [ 1259.710950][T20145] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1259.756349][ T994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1259.766327][ T994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1259.869800][T20145] usb 3-1: Using ep0 maxpacket: 32 [ 1259.876858][T20145] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1259.886863][T20145] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1259.895986][T20145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.905641][T20145] usb 3-1: config 0 descriptor?? [ 1259.971702][ T6528] etas_es58x 2-1:0.2: could not retrieve the product info string [ 1260.001043][ T6528] usb 2-1: USB disconnect, device number 39 [ 1260.023585][ T6528] etas_es58x 2-1:0.2: Disconnecting syz syz [ 1260.270004][T25415] Bluetooth: hci0: command 0x0419 tx timeout [ 1260.279047][T16525] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1260.344921][T20145] magicmouse 0003:05AC:0265.01C1: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.2-1/input0 [ 1260.369686][ T1022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.373268][ T1024] tmpfs: Bad value for 'mpol' [ 1260.384562][ T1022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.530039][ T5969] usb 3-1: USB disconnect, device number 121 [ 1261.267150][ T1085] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1261.308576][T16525] Bluetooth: hci1: command 0x0406 tx timeout [ 1261.513223][ T1091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1261.523551][ T1091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1261.531805][T20145] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1261.548829][ T5969] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1261.688307][T20145] usb 2-1: Using ep0 maxpacket: 32 [ 1261.694947][T20145] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1261.703338][T20145] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1261.712052][T20145] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1261.720818][ T5969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1261.721384][T20145] usb 2-1: config 1 has no interface number 0 [ 1261.736630][ T5969] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1261.738037][T20145] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1261.747487][ T5969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.759316][T20145] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1261.769442][ T5969] usb 3-1: config 0 descriptor?? [ 1261.791990][T20145] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1261.801413][T20145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.814403][T20145] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1262.013890][T20145] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1262.191836][ T5969] keytouch 0003:0926:3333.01C2: fixing up Keytouch IEC report descriptor [ 1262.203951][ T5969] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.01C2/input/input466 [ 1262.284705][ T1102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1262.295663][ T1102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.328128][ T5969] keytouch 0003:0926:3333.01C2: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1262.722683][T20145] usb 3-1: USB disconnect, device number 122 [ 1262.966892][T20145] usb 2-1: USB disconnect, device number 40 [ 1262.974787][T20145] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1263.023936][ T1119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8353'. [ 1263.357601][T20145] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1263.455608][ T1138] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8359'. [ 1263.577263][T20145] usb 2-1: device descriptor read/64, error -71 [ 1263.699386][ T1152] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8362'. [ 1263.820955][T20145] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1263.833031][ T1159] XFS (rnullb0): Invalid superblock magic number [ 1263.957149][T20145] usb 2-1: device descriptor read/64, error -71 [ 1264.067386][T20145] usb usb2-port1: attempt power cycle [ 1264.076966][ T5969] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1264.085506][ T1179] netlink: 'syz.5.8369': attribute type 20 has an invalid length. [ 1264.115097][ T1181] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1264.260321][ T5969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1264.280403][ T5969] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1264.291498][ T5969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.304478][ T5969] usb 3-1: config 0 descriptor?? [ 1264.419739][T20145] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1264.447559][T20145] usb 2-1: device descriptor read/8, error -71 [ 1264.595268][ T1215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1264.609043][ T1215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1264.686694][T20145] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1264.717164][T20145] usb 2-1: device descriptor read/8, error -71 [ 1264.731260][ T5969] keytouch 0003:0926:3333.01C3: fixing up Keytouch IEC report descriptor [ 1264.742109][ T5969] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.01C3/input/input467 [ 1264.826817][T20145] usb usb2-port1: unable to enumerate USB device [ 1264.831834][ T5969] keytouch 0003:0926:3333.01C3: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1265.255894][T20145] usb 3-1: USB disconnect, device number 123 [ 1265.291342][ T1223] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1265.319834][ T1223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.329017][ T1223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.157305][T20145] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1266.282102][ T1257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.295035][ T1257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.319986][T20145] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1266.329322][T20145] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.337432][T20145] usb 3-1: Product: syz [ 1266.341692][T20145] usb 3-1: Manufacturer: syz [ 1266.346550][T20145] usb 3-1: SerialNumber: syz [ 1266.352577][T20145] usb 3-1: config 0 descriptor?? [ 1266.555750][ T44] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1266.568272][ T1236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.577576][ T1236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.588771][T20145] usb 3-1: f81604_read: reg: 105 failed: -EPROTO [ 1266.595288][T20145] f81604 3-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 1266.602868][T20145] f81604 3-1:0.0: probe with driver f81604 failed with error -71 [ 1266.613757][T20145] usb 3-1: USB disconnect, device number 124 [ 1266.705850][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 1266.712611][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1266.720904][ T44] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1266.729993][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.738191][ T44] usb 2-1: Product: syz [ 1266.742373][ T44] usb 2-1: Manufacturer: syz [ 1266.747145][ T44] usb 2-1: SerialNumber: syz [ 1266.753304][ T44] usb 2-1: config 0 descriptor?? [ 1266.760953][ T44] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 1266.864884][ T1265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.876469][ T1265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.887029][ T1265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.895754][ T1265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.962179][ T44] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 1266.971824][ T44] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1267.162760][ T5927] usb 2-1: USB disconnect, device number 45 [ 1267.365422][ T44] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1267.495305][ T44] usb 3-1: device descriptor read/64, error -71 [ 1267.631938][ T1275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.641893][ T1275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.651308][ T1275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.660524][ T1275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.670576][ T1275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.680008][ T1275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.691635][ T1275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.705567][ T1275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.716668][ T1275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.726723][ T1275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.745383][ T1275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.746902][ T44] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1267.761888][ T1280] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8400'. [ 1267.798370][ T1275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.826628][ T1275] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8398'. [ 1267.906098][ T44] usb 3-1: device descriptor read/64, error -71 [ 1267.944580][ T1299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.968178][ T1299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.987543][ T1304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.998624][ T1299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.998816][ T1304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.010286][ T1299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.025081][ T44] usb usb3-port1: attempt power cycle [ 1268.175349][ T5969] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1268.325150][ T5969] usb 2-1: device descriptor read/64, error -71 [ 1268.364835][ T44] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1268.385359][ T44] usb 3-1: device descriptor read/8, error -71 [ 1268.564824][ T5969] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1268.634734][ T44] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1268.655090][ T44] usb 3-1: device descriptor read/8, error -71 [ 1268.704805][ T5969] usb 2-1: device descriptor read/64, error -71 [ 1268.764948][ T44] usb usb3-port1: unable to enumerate USB device [ 1268.824982][ T5969] usb usb2-port1: attempt power cycle [ 1269.101529][ T1316] can0: slcan on ttyS3. [ 1269.155544][ T1316] can0 (unregistered): slcan off ttyS3. [ 1269.174411][ T5969] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1269.194788][ T5969] usb 2-1: device descriptor read/8, error -71 [ 1269.444347][ T5969] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1269.465908][ T5969] usb 2-1: device descriptor read/8, error -71 [ 1269.575841][ T5969] usb usb2-port1: unable to enumerate USB device [ 1270.159458][ T1320] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8410'. [ 1270.198262][ T1322] 9p: Unknown parameter 'uid' [ 1270.547725][ T30] audit: type=1800 audit(2000033354.120:70): pid=1335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8416" name="bus" dev="overlay" ino=1762 res=0 errno=0 [ 1270.903610][ T5927] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1270.984916][ T1343] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8420'. [ 1271.055541][ T5927] usb 3-1: Using ep0 maxpacket: 32 [ 1271.065264][ T5927] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 1271.074937][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.085571][ T5927] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1271.095271][ T1350] netlink: 176 bytes leftover after parsing attributes in process `syz.1.8422'. [ 1271.096065][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.130084][ T5927] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1271.149172][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.166402][ T5927] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1271.177726][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.188279][ T5927] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1271.198650][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.209299][ T5927] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1271.219656][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.230385][ T5927] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1271.240600][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.251077][ T5927] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1271.262980][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.274207][ T5927] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1271.285645][ T5927] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1271.294801][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.302795][ T5927] usb 3-1: Product: syz [ 1271.309738][ T5927] usb 3-1: Manufacturer: syz [ 1271.314446][ T5927] usb 3-1: SerialNumber: syz [ 1271.320254][ T5927] usb 3-1: config 0 descriptor?? [ 1271.595221][ T5927] usb 6-1: USB disconnect, device number 27 [ 1271.652731][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.697587][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.759693][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.828103][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.922111][T16525] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1271.937245][T16525] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1271.945121][T16525] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1271.954856][T16525] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1271.962678][T16525] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1271.995447][ T13] bridge_slave_1: left allmulticast mode [ 1272.001237][ T13] bridge_slave_1: left promiscuous mode [ 1272.007315][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.019681][ T13] bridge_slave_0: left allmulticast mode [ 1272.027500][ T13] bridge_slave_0: left promiscuous mode [ 1272.036095][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.199494][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1272.209857][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1272.219573][ T13] bond0 (unregistering): Released all slaves [ 1272.302979][ T1210] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1272.410487][ T1353] chnl_net:caif_netlink_parms(): no params data found [ 1272.470315][ T13] hsr_slave_0: left promiscuous mode [ 1272.478509][ T13] hsr_slave_1: left promiscuous mode [ 1272.485285][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1272.485727][ T1210] usb 2-1: not running at top speed; connect to a high speed hub [ 1272.496256][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1272.509255][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1272.517282][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1272.527300][ T1210] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.537842][ T13] veth1_macvtap: left promiscuous mode [ 1272.540861][ T1210] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1272.548432][ T13] veth0_macvtap: left promiscuous mode [ 1272.558028][ T13] veth1_vlan: left promiscuous mode [ 1272.563701][ T13] veth0_vlan: left promiscuous mode [ 1272.566336][ T1210] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1272.580481][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.590778][ T1210] usb 2-1: Product: syz [ 1272.597394][ T1210] usb 2-1: Manufacturer: syz [ 1272.602139][ T1210] usb 2-1: SerialNumber: syz [ 1272.739614][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1272.767142][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1272.857239][ T1353] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.864476][ T1353] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.871639][ T1353] bridge_slave_0: entered allmulticast mode [ 1272.878870][ T1353] bridge_slave_0: entered promiscuous mode [ 1272.886829][ T1353] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.899360][ T1353] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.906751][ T1353] bridge_slave_1: entered allmulticast mode [ 1272.914231][ T1353] bridge_slave_1: entered promiscuous mode [ 1272.939530][ T1353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1272.951936][ T1353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1272.979887][ T1353] team0: Port device team_slave_0 added [ 1272.988855][ T1353] team0: Port device team_slave_1 added [ 1273.021456][ T1353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1273.023712][ T1365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1273.029480][ T1353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.037213][ T1365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1273.063038][ C1] vkms_vblank_simulate: vblank timer overrun [ 1273.082069][ T1353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.096409][ T1353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.105833][ T1353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.115618][ T1210] usb 2-1: 0:2 : does not exist [ 1273.131759][ C1] vkms_vblank_simulate: vblank timer overrun [ 1273.142144][ T1353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.175479][ T1210] usb 2-1: USB disconnect, device number 50 [ 1273.229897][ T1353] hsr_slave_0: entered promiscuous mode [ 1273.244814][T18487] udevd[18487]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1273.265201][ T1353] hsr_slave_1: entered promiscuous mode [ 1273.271289][ T1353] debugfs: 'hsr0' already exists in 'hsr' [ 1273.278274][ T1353] Cannot create hsr debugfs directory [ 1273.423574][ T1353] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1273.438428][ T1353] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1273.454913][ T1353] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1273.467941][ T1353] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1273.499468][ T1353] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.506680][ T1353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1273.514116][ T1353] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.521265][ T1353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1273.578813][ T1353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1273.594102][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.601748][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.618711][ T1353] 8021q: adding VLAN 0 to HW filter on device team0 [ 1273.638784][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.645927][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1273.680209][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.687405][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1273.712133][T20145] usb 3-1: USB disconnect, device number 3 [ 1273.954762][ T1353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1274.022245][T16525] Bluetooth: hci2: command tx timeout [ 1274.176674][ T1353] veth0_vlan: entered promiscuous mode [ 1274.191481][ T1353] veth1_vlan: entered promiscuous mode [ 1274.227319][ T1353] veth0_macvtap: entered promiscuous mode [ 1274.237261][ T1353] veth1_macvtap: entered promiscuous mode [ 1274.256833][ T1353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1274.273564][ T1353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1274.289984][ T1155] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.310033][ T1155] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.343683][ T1155] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.373985][ T1155] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.404151][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1274.422193][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1274.452671][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1274.461154][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.861414][T16525] Bluetooth: hci0: command 0x0419 tx timeout [ 1275.867472][ T5869] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1276.101202][ T5869] Bluetooth: hci2: command tx timeout [ 1278.130844][ T5237] udevd[5237]: worker [21521] /devices/virtual/block/nbd0 is taking a long time [ 1278.190093][ T5869] Bluetooth: hci2: command tx timeout [ 1280.258937][ T5869] Bluetooth: hci2: command tx timeout [ 1284.177544][T19706] block nbd0: Possible stuck request ffff888025990000: control (read@0,1024B). Runtime 120 seconds [ 1284.188747][T19706] block nbd0: Possible stuck request ffff8880259901c0: control (read@1024,1024B). Runtime 120 seconds [ 1284.199774][T19706] block nbd0: Possible stuck request ffff888025990380: control (read@2048,1024B). Runtime 120 seconds [ 1284.211076][T19706] block nbd0: Possible stuck request ffff888025990540: control (read@3072,1024B). Runtime 120 seconds [ 1300.170678][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1314.242613][T19706] block nbd0: Possible stuck request ffff888025990000: control (read@0,1024B). Runtime 150 seconds [ 1314.253492][T19706] block nbd0: Possible stuck request ffff8880259901c0: control (read@1024,1024B). Runtime 150 seconds [ 1314.265534][T19706] block nbd0: Possible stuck request ffff888025990380: control (read@2048,1024B). Runtime 150 seconds [ 1314.276733][T19706] block nbd0: Possible stuck request ffff888025990540: control (read@3072,1024B). Runtime 150 seconds [ 1333.432836][ T31] INFO: task syz.0.7685:30655 blocked for more than 143 seconds. [ 1333.440612][ T31] Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 [ 1333.448156][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1333.456923][ T31] task:syz.0.7685 state:D stack:26408 pid:30655 tgid:30654 ppid:21717 task_flags:0x400140 flags:0x00004004 [ 1333.469146][ T31] Call Trace: [ 1333.472500][ T31] [ 1333.475438][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 1333.479949][ T31] ? __mutex_trylock_common+0x153/0x260 [ 1333.485771][ T31] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1333.491715][ T31] ? kasan_save_track+0x4f/0x80 [ 1333.497104][ T31] ? __pfx___schedule+0x10/0x10 [ 1333.501993][ T31] ? schedule+0x91/0x360 [ 1333.506808][ T31] ? rcu_is_watching+0x15/0xb0 [ 1333.511625][ T31] ? lock_release+0x4b/0x3e0 [ 1333.516364][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1333.542170][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1333.548634][ T31] schedule+0x165/0x360 [ 1333.594483][ T31] schedule_preempt_disabled+0x13/0x30 [ 1333.622675][ T31] __mutex_lock+0x7e6/0x1350 [ 1333.627425][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1333.654034][ T31] ? bdev_open+0xe0/0xd30 [ 1333.658415][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1333.675191][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 1333.680878][ T31] ? alloc_file_pseudo_noaccount+0x203/0x2c0 [ 1333.712243][ T31] ? disk_block_events+0xab/0x120 [ 1333.717325][ T31] ? bdev_open+0xbe/0xd30 [ 1333.721713][ T31] bdev_open+0xe0/0xd30 [ 1333.742238][ T31] bdev_file_open_by_dev+0x1be/0x240 [ 1333.747575][ T31] setup_bdev_super+0x5a/0x5b0 [ 1333.762079][ T31] get_tree_bdev_flags+0x366/0x4d0 [ 1333.767325][ T31] ? __pfx_exfat_fill_super+0x10/0x10 [ 1333.779613][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1333.785581][ T31] vfs_get_tree+0x8f/0x2b0 [ 1333.790047][ T31] do_new_mount+0x2a2/0xa30 [ 1333.795525][ T31] ? ns_capable+0x8a/0xf0 [ 1333.799888][ T31] ? __pfx_do_new_mount+0x10/0x10 [ 1333.807371][ T31] ? path_mount+0x61c/0xfe0 [ 1333.812901][ T31] ? user_path_at+0x44/0x60 [ 1333.817442][ T31] __se_sys_mount+0x317/0x410 [ 1333.822501][ T31] ? __pfx___se_sys_mount+0x10/0x10 [ 1333.827732][ T31] ? rcu_is_watching+0x15/0xb0 [ 1333.832918][ T31] ? rcu_is_watching+0x15/0xb0 [ 1333.837716][ T31] ? __x64_sys_mount+0x20/0xc0 [ 1333.842756][ T31] do_syscall_64+0xfa/0x3b0 [ 1333.847292][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.853596][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1333.858315][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.864410][ T31] RIP: 0033:0x7f00b418ebe9 [ 1333.868847][ T31] RSP: 002b:00007f00b50c6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1333.877376][ T31] RAX: ffffffffffffffda RBX: 00007f00b43b5fa0 RCX: 00007f00b418ebe9 [ 1333.885474][ T31] RDX: 0000200000000080 RSI: 00002000000001c0 RDI: 0000200000000000 [ 1333.893535][ T31] RBP: 00007f00b4211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1333.901524][ T31] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 1333.910020][ T31] R13: 00007f00b43b6038 R14: 00007f00b43b5fa0 R15: 00007ffc449de998 [ 1333.919658][ T31] [ 1333.923025][ T31] INFO: lockdep is turned off. [ 1333.929189][ T31] NMI backtrace for cpu 0 [ 1333.929205][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 PREEMPT(full) [ 1333.929229][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1333.929242][ T31] Call Trace: [ 1333.929249][ T31] [ 1333.929257][ T31] dump_stack_lvl+0x189/0x250 [ 1333.929291][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1333.929320][ T31] ? __pfx__printk+0x10/0x10 [ 1333.929359][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1333.929380][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1333.929400][ T31] ? __pfx__printk+0x10/0x10 [ 1333.929428][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1333.929455][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1333.929475][ T31] watchdog+0xf60/0xfa0 [ 1333.929496][ T31] ? watchdog+0x1e2/0xfa0 [ 1333.929519][ T31] kthread+0x711/0x8a0 [ 1333.929538][ T31] ? __pfx_watchdog+0x10/0x10 [ 1333.929558][ T31] ? __pfx_kthread+0x10/0x10 [ 1333.929577][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1333.929598][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1333.929620][ T31] ? __pfx_kthread+0x10/0x10 [ 1333.929639][ T31] ret_from_fork+0x3f9/0x770 [ 1333.929665][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1333.929693][ T31] ? __switch_to_asm+0x39/0x70 [ 1333.929712][ T31] ? __switch_to_asm+0x33/0x70 [ 1333.929731][ T31] ? __pfx_kthread+0x10/0x10 [ 1333.929748][ T31] ret_from_fork_asm+0x1a/0x30 [ 1333.929775][ T31] [ 1333.929782][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1334.082737][ C1] NMI backtrace for cpu 1 [ 1334.082753][ C1] CPU: 1 UID: 0 PID: 29111 Comm: syz.2.7356 Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 PREEMPT(full) [ 1334.082774][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1334.082785][ C1] RIP: 0010:set_task_cpu+0x10e/0x990 [ 1334.082815][ C1] Code: 77 07 00 00 41 8b 07 83 f8 02 0f 85 aa 05 00 00 48 c7 c0 70 26 e5 8f 48 c1 e8 03 49 bf 00 00 00 00 00 fc ff df 42 0f b6 04 38 <84> c0 0f 85 ae 05 00 00 83 3d 93 3c 54 0e 00 0f 84 e1 00 00 00 49 [ 1334.082831][ C1] RSP: 0018:ffffc90000a08850 EFLAGS: 00000802 [ 1334.082846][ C1] RAX: 0000000000000000 RBX: 1ffff1100fc3e3cd RCX: dffffc0000000000 [ 1334.082858][ C1] RDX: ffff88807e1f1e00 RSI: 0000000000000001 RDI: ffff88807e1f1e00 [ 1334.082870][ C1] RBP: 0000000000000000 R08: ffffffff8fe4f537 R09: 1ffffffff1fc9ea6 [ 1334.082882][ C1] R10: dffffc0000000000 R11: fffffbfff1fc9ea7 R12: ffff88807e1f1e00 [ 1334.082895][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 1334.082907][ C1] FS: 0000000000000000(0000) GS:ffff8881258d0000(0000) knlGS:0000000000000000 [ 1334.082921][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1334.082932][ C1] CR2: 000055f013dfe000 CR3: 000000000e336000 CR4: 00000000003526f0 [ 1334.082947][ C1] Call Trace: [ 1334.082954][ C1] [ 1334.082962][ C1] ? detach_task+0x1c8/0x3c0 [ 1334.083003][ C1] sched_balance_rq+0x3f39/0x57a0 [ 1334.083023][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1334.083060][ C1] ? __pfx_sched_balance_rq+0x10/0x10 [ 1334.083080][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1334.083101][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1334.083120][ C1] ? rcu_is_watching+0x15/0xb0 [ 1334.083149][ C1] ? rcu_is_watching+0x15/0xb0 [ 1334.083181][ C1] ? rcu_is_watching+0x15/0xb0 [ 1334.083215][ C1] sched_balance_domains+0x49f/0x9e0 [ 1334.083238][ C1] ? sched_balance_domains+0x121/0x9e0 [ 1334.083260][ C1] handle_softirqs+0x283/0x870 [ 1334.083284][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1334.083308][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1334.083337][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1334.083360][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1334.083386][ C1] irq_exit_rcu+0x9/0x30 [ 1334.083407][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1334.083428][ C1] [ 1334.083434][ C1] [ 1334.083441][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1334.083460][ C1] RIP: 0010:deref_stack_reg+0x1b3/0x230 [ 1334.083485][ C1] Code: 39 f0 0f 96 c0 20 c8 3c 01 75 30 4c 89 c7 49 89 f7 e8 11 08 00 00 49 89 c6 48 8b 5c 24 18 48 89 d8 48 c1 e8 03 42 80 3c 38 00 <74> 08 48 89 df e8 a3 79 b0 00 4c 89 33 b0 01 eb 02 31 c0 48 83 c4 [ 1334.083500][ C1] RSP: 0018:ffffc900044674e0 EFLAGS: 00000246 [ 1334.083515][ C1] RAX: 1ffff9200088cec9 RBX: ffffc90004467648 RCX: 0000000000000001 [ 1334.083527][ C1] RDX: ffffc90004467648 RSI: dffffc0000000000 RDI: ffffc90004467730 [ 1334.083540][ C1] RBP: 1ffff9200088cec1 R08: ffffc90004467730 R09: 0000000000000000 [ 1334.083552][ C1] R10: ffffc90004467658 R11: fffff5200088cecd R12: 1ffff9200088cec2 [ 1334.083566][ C1] R13: 1ffff9200088cec3 R14: ffffc90004467870 R15: dffffc0000000000 [ 1334.083595][ C1] unwind_next_frame+0x17c4/0x2390 [ 1334.083623][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1334.083648][ C1] ? stack_trace_save+0x9c/0xe0 [ 1334.083675][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1334.083702][ C1] arch_stack_walk+0x11c/0x150 [ 1334.083730][ C1] ? save_stack+0xf5/0x1f0 [ 1334.083748][ C1] stack_trace_save+0x9c/0xe0 [ 1334.083773][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1334.083803][ C1] save_stack+0xf5/0x1f0 [ 1334.083819][ C1] ? __pfx_save_stack+0x10/0x10 [ 1334.083834][ C1] ? page_ext_get+0x22/0x2f0 [ 1334.083854][ C1] ? lock_release+0x4b/0x3e0 [ 1334.083872][ C1] ? page_ext_get+0x22/0x2f0 [ 1334.083892][ C1] __reset_page_owner+0x71/0x1f0 [ 1334.083909][ C1] __free_frozen_pages+0xbc4/0xd30 [ 1334.083932][ C1] vfree+0x25a/0x400 [ 1334.083950][ C1] ? __pfx_kcov_close+0x10/0x10 [ 1334.083969][ C1] kcov_close+0x28/0x50 [ 1334.083985][ C1] __fput+0x449/0xa70 [ 1334.084006][ C1] task_work_run+0x1d4/0x260 [ 1334.084025][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1334.084044][ C1] ? kmem_cache_free+0x18f/0x400 [ 1334.084064][ C1] do_exit+0x6b5/0x2300 [ 1334.084082][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1334.084097][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1334.084114][ C1] ? __pfx_do_exit+0x10/0x10 [ 1334.084133][ C1] ? rcu_is_watching+0x15/0xb0 [ 1334.084157][ C1] do_group_exit+0x21c/0x2d0 [ 1334.084176][ C1] get_signal+0x1286/0x1340 [ 1334.084205][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 1334.084228][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 1334.084260][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1334.084285][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 1334.084306][ C1] ? rcu_is_watching+0x15/0xb0 [ 1334.084330][ C1] exit_to_user_mode_loop+0x75/0x130 [ 1334.084350][ C1] do_syscall_64+0x2bd/0x3b0 [ 1334.084372][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.084388][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1334.084407][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.084423][ C1] RIP: 0033:0x7fe9fb7c14a5 [ 1334.084436][ C1] Code: Unable to access opcode bytes at 0x7fe9fb7c147b. [ 1334.084445][ C1] RSP: 002b:00007fe9fc55af80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1334.084461][ C1] RAX: fffffffffffffdfc RBX: 00007fe9fb9b6090 RCX: 00007fe9fb7c14a5 [ 1334.084473][ C1] RDX: 00007fe9fc55afc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1334.084484][ C1] RBP: 00007fe9fb811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1334.084495][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1334.084505][ C1] R13: 00007fe9fb9b6128 R14: 00007fe9fb9b6090 R15: 00007ffe2d61ff58 [ 1334.084523][ C1] [ 1334.090376][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1334.651884][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 PREEMPT(full) [ 1334.663164][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1334.673220][ T31] Call Trace: [ 1334.676503][ T31] [ 1334.679451][ T31] dump_stack_lvl+0x99/0x250 [ 1334.684047][ T31] ? __asan_memcpy+0x40/0x70 [ 1334.688650][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1334.693860][ T31] ? __pfx__printk+0x10/0x10 [ 1334.698466][ T31] vpanic+0x281/0x750 [ 1334.702459][ T31] ? __pfx_vpanic+0x10/0x10 [ 1334.706967][ T31] ? preempt_schedule+0xae/0xc0 [ 1334.711820][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1334.717304][ T31] panic+0xb9/0xc0 [ 1334.721050][ T31] ? __pfx_panic+0x10/0x10 [ 1334.725489][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1334.730948][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1334.737097][ T31] watchdog+0xf9f/0xfa0 [ 1334.741262][ T31] ? watchdog+0x1e2/0xfa0 [ 1334.745626][ T31] kthread+0x711/0x8a0 [ 1334.749697][ T31] ? __pfx_watchdog+0x10/0x10 [ 1334.754376][ T31] ? __pfx_kthread+0x10/0x10 [ 1334.758969][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1334.764174][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1334.769386][ T31] ? __pfx_kthread+0x10/0x10 [ 1334.773984][ T31] ret_from_fork+0x3f9/0x770 [ 1334.778596][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1334.783732][ T31] ? __switch_to_asm+0x39/0x70 [ 1334.788504][ T31] ? __switch_to_asm+0x33/0x70 [ 1334.793279][ T31] ? __pfx_kthread+0x10/0x10 [ 1334.797883][ T31] ret_from_fork_asm+0x1a/0x30 [ 1334.802697][ T31] [ 1334.806090][ T31] Kernel Offset: disabled [ 1334.810410][ T31] Rebooting in 86400 seconds..