last executing test programs: 2m32.806460774s ago: executing program 0 (id=1877): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) 2m32.227180643s ago: executing program 0 (id=1880): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000240)={0x0, 0xa765}, &(0x7f0000000580)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x40010, r0, 0x2000) r3 = socket$inet_sctp(0x2, 0x4, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000000480)={&(0x7f0000000040)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000180)="98eaf54f43060a61c1273050cd8c3ca52232edd88adf5e61622b45656e6622d5d93df4e49e7a8567499411b084c822c4865529e219859c3edbd7b241bdbc8450c14a79b0ba2aeaaea251662f4b335608b147cc511ade3cbd395b3d853f67dfa53bec5eab2fe2a977651883ef1380ca347da26b1967bdb69ab14356f20c4a5a5973d3dd76c23ce9930104e8733edef9e27d0d94e1370ec25b5c", 0x99}, {&(0x7f0000000080)="2ed255fb2edefa3466847e72882d2d61513b864f89d869bfd26614b3ac5af5f75c621d3e4b46cf4c80fdbe145b82df4ce0159613a0b3efb203c33bf0916b1a686f1f40cb3b5a28", 0x47}, {&(0x7f0000000280)="cf56814307220fc2dedf07f95bb983614a639dbffc72c8026c021ce5861cbf74", 0x20}, {&(0x7f00000002c0)="169f701ee9e4c2b240760ebb306f48dddfad", 0x12}, {&(0x7f0000000300)="9125de13be127c8619053109614eaf4642e148559130cddc5c43dab939d0b40b864c4677e8ebe7da083682de275d9d66f1a421c9531f9e7220c6e2500cb65def1a5a01dc7a15505d2f88f5770a5c71524dd0a1c2cdcaf5", 0x57}, {&(0x7f0000000380)="a696f27cfc57cbe0411267f97b0a04c8b034046c01564df2dd3f277e9ab3ac147f13c1f3e2feadf7dcd3483f7563587e615e1bf4676da361096e9a5cda29c88581079a0a5bf9d5984a345b7b12f349d7", 0x50}], 0x6, &(0x7f00000005c0)=[@authinfo={0x18, 0x84, 0x6, {0x1}}, @init={0x18, 0x84, 0x0, {0x5, 0x5, 0x5, 0x81}}, @init={0x18, 0x84, 0x0, {0x32, 0x2, 0x5, 0xa6e8}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x4, 0x0, 0x6, 0x9, 0x81, 0xffffffff, 0x9, r2}}, @sndinfo={0x20, 0x84, 0x2, {0xc9e, 0x0, 0xd, 0x3, r2}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @init={0x18, 0x84, 0x0, {0xf0, 0x6, 0x9, 0x8000}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x72, 0x20f, 0x7, 0x3a8, 0x5, 0x9, 0xb096, r2}}, @sndrcv={0x30, 0x84, 0x1, {0xe3, 0x6, 0x8000, 0xd, 0x0, 0x43581a27, 0x2, 0x4, r2}}], 0x128, 0x44010}, 0x40801) 2m19.453104071s ago: executing program 0 (id=1880): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000240)={0x0, 0xa765}, &(0x7f0000000580)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x40010, r0, 0x2000) r3 = socket$inet_sctp(0x2, 0x4, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000000480)={&(0x7f0000000040)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000180)="98eaf54f43060a61c1273050cd8c3ca52232edd88adf5e61622b45656e6622d5d93df4e49e7a8567499411b084c822c4865529e219859c3edbd7b241bdbc8450c14a79b0ba2aeaaea251662f4b335608b147cc511ade3cbd395b3d853f67dfa53bec5eab2fe2a977651883ef1380ca347da26b1967bdb69ab14356f20c4a5a5973d3dd76c23ce9930104e8733edef9e27d0d94e1370ec25b5c", 0x99}, {&(0x7f0000000080)="2ed255fb2edefa3466847e72882d2d61513b864f89d869bfd26614b3ac5af5f75c621d3e4b46cf4c80fdbe145b82df4ce0159613a0b3efb203c33bf0916b1a686f1f40cb3b5a28", 0x47}, {&(0x7f0000000280)="cf56814307220fc2dedf07f95bb983614a639dbffc72c8026c021ce5861cbf74", 0x20}, {&(0x7f00000002c0)="169f701ee9e4c2b240760ebb306f48dddfad", 0x12}, {&(0x7f0000000300)="9125de13be127c8619053109614eaf4642e148559130cddc5c43dab939d0b40b864c4677e8ebe7da083682de275d9d66f1a421c9531f9e7220c6e2500cb65def1a5a01dc7a15505d2f88f5770a5c71524dd0a1c2cdcaf5", 0x57}, {&(0x7f0000000380)="a696f27cfc57cbe0411267f97b0a04c8b034046c01564df2dd3f277e9ab3ac147f13c1f3e2feadf7dcd3483f7563587e615e1bf4676da361096e9a5cda29c88581079a0a5bf9d5984a345b7b12f349d7", 0x50}], 0x6, &(0x7f00000005c0)=[@authinfo={0x18, 0x84, 0x6, {0x1}}, @init={0x18, 0x84, 0x0, {0x5, 0x5, 0x5, 0x81}}, @init={0x18, 0x84, 0x0, {0x32, 0x2, 0x5, 0xa6e8}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x4, 0x0, 0x6, 0x9, 0x81, 0xffffffff, 0x9, r2}}, @sndinfo={0x20, 0x84, 0x2, {0xc9e, 0x0, 0xd, 0x3, r2}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @init={0x18, 0x84, 0x0, {0xf0, 0x6, 0x9, 0x8000}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x72, 0x20f, 0x7, 0x3a8, 0x5, 0x9, 0xb096, r2}}, @sndrcv={0x30, 0x84, 0x1, {0xe3, 0x6, 0x8000, 0xd, 0x0, 0x43581a27, 0x2, 0x4, r2}}], 0x128, 0x44010}, 0x40801) 2m18.850696913s ago: executing program 0 (id=1935): r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x4, 0x2) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) (rerun: 64) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={r2, @in={{0x2, 0x4e20, @empty}}, 0x401, 0x4, 0xffffffff, 0x2, 0x4, 0xc, 0x3}, &(0x7f0000000140)=0x9c) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000140)) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xe2008, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000000)=0xd7d2, &(0x7f00000000c0)=0x4) 2m17.757728378s ago: executing program 0 (id=1942): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x541742, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) getpid() 2m17.547999039s ago: executing program 0 (id=1944): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) fadvise64(r0, 0x8, 0x4d, 0x2) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r1 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r0, r1, 0x80000) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xd4}], 0x1, 0x562, 0x1407) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async) fadvise64(r0, 0x8, 0x4d, 0x2) (async) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) (async) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) dup3(r0, r1, 0x80000) (async) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xd4}], 0x1, 0x562, 0x1407) (async) 2m2.393436692s ago: executing program 32 (id=1944): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) fadvise64(r0, 0x8, 0x4d, 0x2) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r1 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r0, r1, 0x80000) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xd4}], 0x1, 0x562, 0x1407) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async) fadvise64(r0, 0x8, 0x4d, 0x2) (async) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) (async) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) dup3(r0, r1, 0x80000) (async) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xd4}], 0x1, 0x562, 0x1407) (async) 9.597573166s ago: executing program 3 (id=2700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x38, 0xd, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x140c0}, 0x80) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) 9.241031908s ago: executing program 3 (id=2705): ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000140)=0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140)={0x0, 0xf}, 0x8) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x2) 9.172687075s ago: executing program 3 (id=2706): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0xc0105b08, &(0x7f0000000040)) 8.937264011s ago: executing program 3 (id=2711): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x100, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) gettid() (async) r2 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) listen(r3, 0x0) (async) listen(r3, 0x0) accept4$nfc_llcp(r3, 0x0, 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x10, r4, 0x5a7f8000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x10, r4, 0x5a7f8000) 8.188574239s ago: executing program 2 (id=2719): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x3a4, &(0x7f0000000800)={[{0x16, 0x4e00, "593d8ba55b3c235db383440da599824bcec71f2e5cc9"}, {0x89, 0x4e00, "49300568a92a2b3ccf96e75570f65f74fddfa2f76ac355d948654536402fead6fd1a58440b22bad15e8ddfd5c281ad07ea1cae5010127b64e4bdf2432fac18cc588e705717cce58222707458ba1dd66325c79b7d029d9c4f918cbc4305d91b904e423fe0de671a1ab2a204a12640fc12031df0f38104750c9fb3befd99237e3390bc43ae25686c5f6a"}, {0x1b, 0x4e00, "9b9507b2b83ad2d5ced849dbd2fefdd38acfa425a4d07e5b037f4b"}, {0x41, 0x4e00, "85916e95e89f02b000207be36fe35f83552f8f422955375cbaa09714bb018f04492aac1cfe21956b365baf65ba36ab94482751bbfd0e316a98041c8a5805d09257"}, {0xe6, 0x4e00, "8769ca87d7d3240bec7bf4a9f362c81b478433a8ec3d0b51c696051a9d17532e7ee203796297d2a06edb6cf76cb5be916ad69e805f6a95f8ad29a4f653f188c27976605e646b2dd9e70fb64140574efb85a7755559022d35b92ffe2ad4e98ca4f3deaf853e5dd1718d4ce348b5f2b9217a35e97a84138663fccd46e2bb971c7f5a28e8041fd35af059a0c351bb2fd63014142a92938e6b9f31ec3f39b6b3e495632272f116b54343ca61781139312485da8cdd11585202285aedc8418f17b98ceb11b00a9d8a97bc35bc545b0750aa3924c497c83a85a1d7d4bc490e9ea1bdb47b5f72d06173"}, {0xf5, 0x4e00, "e9abd24447c2ecf01e3d626cf11eb488194e53174d0f65612aaa41530a5501d1a87e3eb9a9ac686aa4e44161aec577dd50302d8e28695a091d661107a7987da310c0a1a3f775bea68403c954a1cf8615e2c743eb04a4d339a45e9475b44c3b595cf0ff0af23788f91aa1bfa6b0f4a50facb0c5cc9a7ee3f357c1cbd209dd473bda52b24af89b09ba01bc4b39cf6f63391bb77820184cd90e9170955d7864b67dcec0221f2b21dd52c08913be013a2c9ffc7b5b95b0490fabf296c1317db03cbbb04467a41d73a628c4103b3f49a5269b5b9747fa34aaa57c3ff76340371fee7f2af78a17d31cd3fd92c42c4058dfc9779b9dd76f0d"}, {0x55, 0x4e00, "4b5f64c1aacc57759559d83156ad515fbb4d9edea6601db7dd1a521831aef3dd878625ef1aa7c4f48261632a26164be3ef30cecfe52489b10550f451803f3b1bfe5343e6f162ce415a4d348fb1e458f89c33729d6e"}, {0x47, 0x4e00, "2f915e1250a5ed2121daa4a699358afd7feccf1872d8342bf68f36b290fe0eb869c5b262c091623b1e0f63e429977ad4ff918ba15ab82f63992b778a6ab710142e0dd1e06d4f61"}]}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000340)=0xfdd) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x84867) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x1003a, 0x1000, 0x1, 0x0, 0x0, 0x6}, 0xffffff50) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) epoll_create(0x2) ioctl$FS_IOC_GETVERSION(r3, 0xc0105b08, &(0x7f0000000040)) 7.969864908s ago: executing program 3 (id=2720): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) r0 = memfd_secret(0x80000) r1 = syz_usb_connect(0x3, 0x24, &(0x7f0000000f80)=ANY=[@ANYBLOB="120100038ee3710889076001fe8201020301090212000107d1102d0904cc50f109"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000002d00)={0x44, &(0x7f0000000000)={0x20, 0x16, 0x6, "99d9e9678b2c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000003140)={0x34, &(0x7f0000002ec0)={0x40, 0xe, 0x2, "68ae"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x20, 0xad, 0x16, 0x20, 0x7c0, 0x158b, 0xd096, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x7f, 0x0, 0x4, [{{0x9, 0x4, 0xb3, 0x1, 0x0, 0x4f, 0x7e, 0xc2, 0x2}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x80000001, 0x8}, 0x10) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket(0x10, 0x803, 0x0) write(r4, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0xb) fcntl$lock(r0, 0x5, &(0x7f0000000d00)={0x2, 0x0, 0x200, 0x4}) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000080)=0x477, 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) (async) memfd_secret(0x80000) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000f80)=ANY=[@ANYBLOB="120100038ee3710889076001fe8201020301090212000107d1102d0904cc50f109"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000002d00)={0x44, &(0x7f0000000000)={0x20, 0x16, 0x6, "99d9e9678b2c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000003140)={0x34, &(0x7f0000002ec0)={0x40, 0xe, 0x2, "68ae"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_disconnect(r1) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x20, 0xad, 0x16, 0x20, 0x7c0, 0x158b, 0xd096, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x7f, 0x0, 0x4, [{{0x9, 0x4, 0xb3, 0x1, 0x0, 0x4f, 0x7e, 0xc2, 0x2}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x80000001, 0x8}, 0x10) (async) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) socket(0x10, 0x803, 0x0) (async) write(r4, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r5, 0x400455c8, 0xb) (async) fcntl$lock(r0, 0x5, &(0x7f0000000d00)={0x2, 0x0, 0x200, 0x4}) (async) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000080)=0x477, 0x4) (async) 6.382297202s ago: executing program 1 (id=2733): r0 = socket$kcm(0x10, 0x2, 0x0) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async, rerun: 64) r3 = dup(r2) (rerun: 64) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) (async) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) getpeername$packet(r4, 0x0, &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async, rerun: 64) chdir(&(0x7f0000000100)='./file0\x00') (rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x6000) (async) mkdir(&(0x7f00000000c0)='./cgroup\x00', 0x100) (async) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000a00142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) listen(r0, 0x5) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps_rollup\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000021c0), r6) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000002400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002240)={0x150, r8, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dd6fba953c3b25e044ab105129385c1e2291878a385ff51a"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "044633f8daf092d60f1ea581e4f8dac21369d603424c030c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "918f58a69a19b2db8787975f88ae4d36adb27a6e756a6be4"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e7d97e5faf7c318dd9ca0f199243f5ab71e683facf6b4188"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async, rerun: 32) r10 = syz_open_dev$vcsu(&(0x7f0000002440), 0x8, 0x640) (rerun: 32) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, &(0x7f0000002480)={@multicast1, @empty, 0x1, "c7a6f291ee4efd85f2d885448539afc8cd1b0defa63a61ca5badb7ae35546586", 0x4, 0x7, 0x4, 0x2}, 0x3c) (async, rerun: 64) exit(0x3) (async, rerun: 64) read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x2020) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) 6.181440304s ago: executing program 1 (id=2735): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) getpeername$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000000c0)={0x8, {{0x2, 0x4e20, @empty}}, 0x1, 0x3, [{{0x2, 0x4e24, @local}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e23, @multicast2}}]}, 0x210) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f0000000480)=0xe8) quotactl_fd$Q_GETFMT(r1, 0x0, r2, &(0x7f00000004c0)) write$6lowpan_enable(r0, &(0x7f0000000500)='0', 0x1) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000540)={0xc, {0x2, 0x7, 0x2f}}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000580)={[0x8000, 0x7, 0x0, 0x2, 0xfff, 0x40000, 0x5, 0x3, 0xffffffffffffff7f, 0x8, 0xffffffff, 0x1, 0xfff, 0x8, 0x0, 0x3], 0x2, 0x179040}) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000680)={{r3, r4+10000000}, {0x0, 0x3938700}}, &(0x7f00000006c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x480800, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000740), &(0x7f0000000780)=0x4) openat$ttynull(0xffffffffffffff9c, &(0x7f00000007c0), 0x240, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000800)=@gcm_128={{0x303}, "61a221b2f930a496", "2072c21b339441c5a4407037e75bb792", "806fe73f", "e52d039bad42377d"}, 0x28) newfstatat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x2800) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000900)={0x30, 0x5, 0x0, {0x0, 0x4, 0x9, 0xf59f}}, 0x30) pipe2(&(0x7f0000000940)={0xffffffffffffffff}, 0x84000) timer_create(0x7, &(0x7f0000000a40)={0x0, 0x2d, 0x0, @thr={&(0x7f0000000980)="9cf958a9b6875ffbff368f4d3821bb5812e01b89f88c51561fcd76b08eeb69ec24dc90744764b3ee9bab6e7c51bb4d84b3fa9b3f5e7ce71481879c16d292fa104cf67ac52d0c625efeaf51c6e4eedccfc2304af271073c1ad0262af53eaf59748993f9d3a1e476bc0d094d22", &(0x7f0000000a00)="ad3ca248490dea3c8e3a1c214bcb09f6e4b86f"}}, &(0x7f0000000a80)=0x0) clock_gettime(0x0, &(0x7f0000000ac0)={0x0, 0x0}) timer_settime(r6, 0x1, &(0x7f0000000b00)={{0x77359400}, {r7, r8+60000000}}, &(0x7f0000000b40)) fcntl$setsig(r5, 0xa, 0x37) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, r9, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xc, 0x15}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000801}, 0x81) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000d00)={{0x2f, @dev={0xac, 0x14, 0x14, 0x1d}, 0x4e24, 0x1, 'dh\x00', 0x0, 0x9, 0x5c}, {@remote, 0x4e20, 0x3, 0x4, 0x9, 0x4}}, 0x44) sendto$inet(r0, &(0x7f0000000d80)="dcd19fa24a1482dcbf", 0x9, 0x20008000, &(0x7f0000000dc0)={0x2, 0x4e20, @multicast2}, 0x10) r11 = getpgid(0x0) timer_create(0x0, &(0x7f0000000e00)={0x0, 0x2f, 0x1, @tid=r11}, &(0x7f0000000e40)) 6.038428403s ago: executing program 1 (id=2737): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000000)) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) 5.945873161s ago: executing program 4 (id=2738): r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r0, 0x2000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @local}}}, &(0x7f0000000040)=0xfee7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x2d, 0x0, 0x1, 0xfffffffc}, {0x4}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1}, 0xc) r5 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000140)="5185", 0x2}], 0x1) landlock_restrict_self(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x840}, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='hfsplus\x00', 0x200018, 0x0) 5.824671537s ago: executing program 4 (id=2739): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x20, 0xfb, 0x6}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf256700000008000300", @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x2) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000140)={0x0, 0x6, r0, 0xb42, 0x80000}) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000107d1e2e2c001a0000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000d80)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "c87bbc6e"}]}}, 0x0}, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000180)={0x1, 0x80000642a}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0xc5ba, 0x1, 0x1, 0xc3}, 0x0, 0x0) sendfile(r5, r5, 0x0, 0x7ffff000) 5.129794464s ago: executing program 2 (id=2740): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000280)="f3ff520d66400faef60f0132420f01c3f083720ff8c463c12242f700470f3248b8a2000000000000000f23d80f21f835c00000900f23f866bad104b006ee440f01d1", 0xfffffda6}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) listen(r2, 0x9) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r7, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x280}, 0x1, 0x0, 0x0, 0x48000}, 0xc845) read$alg(r8, &(0x7f0000002dc0)=""/4096, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r9 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x4, 0x3, 0x3f00}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r11 = dup(r10) ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000004503"]) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r11, 0x4068aea3, &(0x7f0000000040)) 4.813994363s ago: executing program 2 (id=2741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="300000000d0a0108000000000a0000010900020073797a31000000000900010073797a310000000004000380"], 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r3) ptrace(0x4207, r3) ptrace$pokeuser(0x6, r3, 0x1, 0x5) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='gfs2\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x400, 0x7, [0x4, 0x0, 0x0, 0x14a2, 0x2, 0x3, 0x8000]}, &(0x7f0000000180)=0x16) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x6, 0x3, 0x1, 0x6, 0x600, 0x8, 0x5, 0x3, r4}, 0x20) 4.621618401s ago: executing program 2 (id=2742): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, r2, 0x1, 0x70bd28, 0x25dfdffd, {{}, {@val={0x8, 0x1, 0x80035}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}}, 0x24040894) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000080)={0x7}, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x20, 0x8f, 0xde08, 0x80000001, {{0x7, 0x4, 0x1, 0x32, 0x1c, 0x65, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@noop, @ra={0x94, 0x4, 0x1}]}}}}}) sendmmsg$inet(r5, &(0x7f0000000180)=[{{&(0x7f0000000000)={0x2, 0x4c20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @dev={0xac, 0x14, 0x14, 0x2f}}}}], 0x20}}], 0x1, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi4\x00', 0x8000, 0x0) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r8, 0x400442c8, &(0x7f0000001180)={r1, 0x5, 0x3, "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"}) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r9, 0x45809000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000400060108000000000000000000000000050005000100000034457d2645bb1ac8ec000300686173683a690005000a00"/64], 0x40}, 0x1, 0x0, 0x0, 0x20000911}, 0x4004804) ioctl$COMEDI_CMDTEST(r7, 0x8050640a, &(0x7f00000001c0)={0x8, 0x30000, 0x4, 0x1, 0x20, 0x5, 0x1, 0x7f, 0xffffffff, 0x5, 0x80, 0x1c, 0x0, 0x0, 0x0, 0x26}) r11 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r15, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000010000000030100c0"]) splice(r12, 0x0, r11, &(0x7f0000000140)=0xa7, 0x4, 0x0) 4.182388077s ago: executing program 1 (id=2743): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800c21dc21d0005000000", 0x29}], 0x1) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) 4.061890181s ago: executing program 1 (id=2744): r0 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000000000000000008000000", @ANYRES32=r2, @ANYBLOB="0600000021a500000c003a80"], 0x2c}], 0x1}, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='gfs2\x00', 0x200000, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r4, @ANYRES16=r3, @ANYRES16=r1, @ANYRESDEC=r0, @ANYRES16=r4], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) (async) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r4, 0x920, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x13}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4880) 2.732882396s ago: executing program 4 (id=2745): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[{}, {}, {}, {}], 0x0, 0x0, '\x00', 0x3, 0x4}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r4, @ANYRES64=r3], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r2, 0x1, 0x0) openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000000)={0x4, r1, 0x80000}) syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0xc5ba, 0x1, 0x1, 0xc3}, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 2.11733311s ago: executing program 4 (id=2746): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x84) (async) mount$cgroup2(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x203, &(0x7f0000000240)=ANY=[@ANYBLOB='meMory_recursiveprot,\x00']) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x20011, r0, 0xf648e000) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x89e1, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310300000000000000000900000004000600", @ANYBLOB="08000300", @ANYRES64=r4], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) (async) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x28b00, 0x0) (async) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000440)={r6, 0x8000, {0x0, 0x0, 0x0, 0xffffffffffffff80, 0x0, 0x0, 0x0, 0x6, 0x846fe97dc65f6e46, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1173939c787a16c1ca43f8539f3d33697c176d1bb29f35239d20000000080b000000000000000001e00000000000000947d00000200", "24431a1e77a68e174ff60000000000000010e200"}}) (async) fanotify_init(0x4000, 0x145800) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fcntl$setlease(r8, 0x400, 0x1) ioctl$sock_ifreq(r8, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) ioctl$sock_netdev_private(r8, 0x89f0, &(0x7f0000000000)) (async) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e25, 0x7, @remote, 0x6}, 0x1c) write(r5, &(0x7f0000000440)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a0bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18a6e3cdb8049d6d6f6d6bd5703a6b9027389878", 0x93) (async) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 2.01782601s ago: executing program 4 (id=2747): r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r1, 0x4068aea3, &(0x7f0000000040)={0xd4, 0x0, 0xb3e}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="0fbaba00a00000fe66660fc7320f01c40fc7a896420000c4e2abf7fe66b855008ec00f0fb3fcffffff1c66baf80cb80e113282ef66bafc0c66ed0f01b802000000c4c2d58e4101", 0x47}], 0x1, 0x10, &(0x7f0000000180), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@initdev, @multicast1, 0x0}, &(0x7f0000000200)=0xc) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @empty}, r4}, 0x14) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x202000, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x8, 0x6, 0x2, 0x0, 0x9, 0x4, 0x8}, 0x1c) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{0x9, 0xe, 0xa, 0xffffffff}, {0xdb, 0x10, 0x0, 0x3}]}) preadv(r6, &(0x7f0000000840)=[{&(0x7f0000000380)=""/177, 0xb1}, {&(0x7f0000000440)=""/33, 0x21}, {&(0x7f0000000480)=""/10, 0xa}, {&(0x7f00000004c0)=""/213, 0xd5}, {&(0x7f00000005c0)=""/121, 0x79}, {&(0x7f0000000640)=""/208, 0xd0}, {&(0x7f0000000740)=""/206, 0xce}], 0x7, 0x6, 0x3) io_setup(0xfff, &(0x7f00000008c0)=0x0) io_cancel(r7, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x8, 0x81, r0, &(0x7f0000000900)="01fe51ec5f0cc85facca3d6c808025e49a5992a132c3d846a9b614259d6a9a368c64405843872672bf306febfaa6f103b9210d6ace318902b7f9ab7d3a86cb6679613ebcbd66ceb4ceb400ee6c650b17f79d2c35ea1bd2584cba321316a8556497af3cf1d72eb47100a61ab3c7d79aad2bf6257b407a0207", 0x78, 0x5, 0x0, 0x7, r5}, &(0x7f00000009c0)) readv(r0, &(0x7f0000001c00)=[{&(0x7f0000000a00)=""/113, 0x71}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/98, 0x62}, {&(0x7f0000001b00)=""/211, 0xd3}], 0x4) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000001c40), &(0x7f0000001c80)={0x0, 0xfb, 0x61, 0x5, 0xf9, "d16081de12ed6e4bd7c3a45850409ddb", "ae3a9e328a1e4ccc20e11e466c80022aa5b97d06e64e8948805012989739e757bd58de0f92d4507fc78e4bd633546f60e2e23462ed564378a8285f7f99ba61005df87b3fa2c9b0acd017422c"}, 0x61, 0x2) r8 = geteuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000001d00)={{0x1, 0x1, 0x18, r1, {0x0, 0xffffffffffffffff}}, './file0\x00'}) read$FUSE(r5, &(0x7f0000001d40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setresuid(r8, r10, r11) ioctl$SCSI_IOCTL_PROBE_HOST(r9, 0x5385, &(0x7f0000003d80)={0x50, ""/80}) r12 = openat$cuse(0xffffffffffffff9c, &(0x7f0000003e00), 0x2, 0x0) read$FUSE(r12, &(0x7f0000003e40)={0x2020}, 0x2020) ioctl$FIBMAP(r5, 0x1, &(0x7f0000005e80)) socket$kcm(0x29, 0x0, 0x0) sendto$inet6(r9, &(0x7f0000005ec0)="05beb73cdf1031c7401b688c1b8b646e07c9b88503053005a227a1897bb3757d535ea7f4bcc25b104f9ab9ea27c85ba708ee884cc243d204a0c56155a3422905645be47f32e3ea1288de4135f85ad479c254e3ab464a1ce553b7ea49d48ab17f0e16cf5739e936e12712b8dfbc146a34b3bc56b70288a68e85ca4c42ac2c62cc1de4ba3034dc8697a656ab33850829a13211be7a627563e0b12d68bdd8f242857d1a6c54806fb4c5423c81a431bd8acff1218a0dcd125af30797168703ce26edabeaafc9fa85e9f546df1db2ea805750a0f0306d4b75a1a5a336d3b366b9d7c310590377aeadb2f29c0d69", 0xeb, 0x40854, &(0x7f0000005fc0)={0xa, 0x4e21, 0x401, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf2a6}, 0x1c) sendfile(r2, r2, &(0x7f0000006000)=0x9, 0xbc9) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006080), r9) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r9, &(0x7f0000006180)={&(0x7f0000006040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000006140)={&(0x7f0000006100)={0x28, r13, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x10) 1.920505759s ago: executing program 4 (id=2748): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x3a4, &(0x7f0000000800)={[{0x16, 0x4e00, "593d8ba55b3c235db383440da599824bcec71f2e5cc9"}, {0x89, 0x4e00, "49300568a92a2b3ccf96e75570f65f74fddfa2f76ac355d948654536402fead6fd1a58440b22bad15e8ddfd5c281ad07ea1cae5010127b64e4bdf2432fac18cc588e705717cce58222707458ba1dd66325c79b7d029d9c4f918cbc4305d91b904e423fe0de671a1ab2a204a12640fc12031df0f38104750c9fb3befd99237e3390bc43ae25686c5f6a"}, {0x1b, 0x4e00, "9b9507b2b83ad2d5ced849dbd2fefdd38acfa425a4d07e5b037f4b"}, {0x41, 0x4e00, "85916e95e89f02b000207be36fe35f83552f8f422955375cbaa09714bb018f04492aac1cfe21956b365baf65ba36ab94482751bbfd0e316a98041c8a5805d09257"}, {0xe6, 0x4e00, "8769ca87d7d3240bec7bf4a9f362c81b478433a8ec3d0b51c696051a9d17532e7ee203796297d2a06edb6cf76cb5be916ad69e805f6a95f8ad29a4f653f188c27976605e646b2dd9e70fb64140574efb85a7755559022d35b92ffe2ad4e98ca4f3deaf853e5dd1718d4ce348b5f2b9217a35e97a84138663fccd46e2bb971c7f5a28e8041fd35af059a0c351bb2fd63014142a92938e6b9f31ec3f39b6b3e495632272f116b54343ca61781139312485da8cdd11585202285aedc8418f17b98ceb11b00a9d8a97bc35bc545b0750aa3924c497c83a85a1d7d4bc490e9ea1bdb47b5f72d06173"}, {0xf5, 0x4e00, "e9abd24447c2ecf01e3d626cf11eb488194e53174d0f65612aaa41530a5501d1a87e3eb9a9ac686aa4e44161aec577dd50302d8e28695a091d661107a7987da310c0a1a3f775bea68403c954a1cf8615e2c743eb04a4d339a45e9475b44c3b595cf0ff0af23788f91aa1bfa6b0f4a50facb0c5cc9a7ee3f357c1cbd209dd473bda52b24af89b09ba01bc4b39cf6f63391bb77820184cd90e9170955d7864b67dcec0221f2b21dd52c08913be013a2c9ffc7b5b95b0490fabf296c1317db03cbbb04467a41d73a628c4103b3f49a5269b5b9747fa34aaa57c3ff76340371fee7f2af78a17d31cd3fd92c42c4058dfc9779b9dd76f0d"}, {0x55, 0x4e00, "4b5f64c1aacc57759559d83156ad515fbb4d9edea6601db7dd1a521831aef3dd878625ef1aa7c4f48261632a26164be3ef30cecfe52489b10550f451803f3b1bfe5343e6f162ce415a4d348fb1e458f89c33729d6e"}, {0x47, 0x4e00, "2f915e1250a5ed2121daa4a699358afd7feccf1872d8342bf68f36b290fe0eb869c5b262c091623b1e0f63e429977ad4ff918ba15ab82f63992b778a6ab710142e0dd1e06d4f61"}]}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000340)=0xfdd) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x84867) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x1003a, 0x1000, 0x1, 0x0, 0x0, 0x6}, 0xffffff50) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) epoll_create(0x2) ioctl$FS_IOC_GETVERSION(r3, 0xc0105b08, &(0x7f0000000040)) 155.871016ms ago: executing program 2 (id=2749): creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_CANCEL(r0, 0x6407) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000080)='gadgetfs\x00', 0x400, 0x0) 140.180404ms ago: executing program 3 (id=2750): r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, 0x0, 0x0) (async) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) read$FUSE(r2, &(0x7f0000002680)={0x2020, 0x0, 0x0, 0x0}, 0x27ecd7fbade98535) setresuid(0xffffffffffffffff, r3, 0x0) (async, rerun: 64) write$vhost_msg_v2(r2, &(0x7f0000000100)={0x2, 0x0, {&(0x7f0000000080)=""/121, 0x79, &(0x7f00000001c0)=""/163, 0x3, 0x1}}, 0x48) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r3, 0xee00}}, './file0\x00'}) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x7ffff000) 85.713721ms ago: executing program 1 (id=2751): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x12, r1, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x404}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) dup3(r3, r0, 0x80000) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000002f80)={{0x1, 0x6, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) ioctl$sock_netdev_private(r0, 0x89fd, &(0x7f0000000000)="c801ea8dfdefe452caba6bb932c6773aca37f58810a0b4232753424ddf05a88cd59029c0dc9e9d69077e888fc8c04232870867b85fd5ad305888e1c09a2efd77eb6ef49f0439d958a72e7e3f8e16070afaa496803ef22306b8084ac14f1729ad90aa20ab8629edfd53f64b05e673c57c8a7299238f04089ee777c725f510d708d24bcbfa2def57b76d933e65cdc7e51fcd979e8c530556206edf8984c774d30003a026bbc72e885185a3e863a9992f21ab312445e827e4d79834fe15411e09e2edead90388dca49e8eb2937824fdcd3a13e6adfaf27cf1262d2e3762981ac0ae243555a5510c603ea582237f7aea29f98194ec27027d2f93d93823b594009a37c651dcaba09e528bb47e423bfa1359bf1d7e9b0608991668e14fa27befa2aa785c630819af03af09bfd3b8b1e5425b40abcd0d6a8e59a08fb768037321ff917fe66a034e8e189c8c722abf829726f8754005bfde5e13b0cfa274a2f7a42651bf4c54593daa7a757807967045d8d8f2bbdfaad1e30d44eb828a171eae217d4ef93f10670d74e1d43c81720d56df321ab8b0ad9b299a930043fb88f8519a78f5987b12606203b4af75ae30f021a4d2b11d17d00363853923847393905337bdbc45358c728499bdb9eec0d6fecee617ed9b56b1cfb537549fa1b7b9c08ffe0e90dc3ccd66206c36d92dda40b2fd04cf512ba45ad8a23db8c026324e912364ce69cd8e930da83bdbef2aad5f291688283a8b600d5d587e3233203b2d8c69ebfed23b9fd1c233dc3b7789c877d86975ca87b0f3b1a0788e34b36fb3e5bd41b9f399a125c56d1ab8cb9d9fe376d40060df154043457b2fe3a3e8b513eb3b257efebdc1772a93bcce42667a8a0d2ed5be1c611cf742dd69de5f9e9dcc4ae34f4a8065c84b096aad82abadf20113a6e66f64afd502a6c8c6e222122dc56232a885dda90626a54ca06373eca7727ac88667a282f03d11939f5526bb687df9f13f38ce8041c8377b898c7337777abf9876c6fc3a46b7cfb00188a15ba06688fcf3dfbd1fbfe722acfca58f0c0d35f61e8d56e32e5e73db59ba25c256480c64c47a71d7d054ccca15a0d0c50945ca1ab13abc94f014ffb2d9f6d01fb3875fac756a34910a27753a11e53423d0c2d3cfa6b067b939e5214dccb5afcd62a5b8ffd970843678abe54857f284ee7259f2d765372ce2ed1b3612ed7098e85f77d7062b6801fa16dc921ff01bce352f9d3355263539d7bedb4012319b56e5aa48c92c881d776995bd7fff5c8d6d8d685d7085fbc991a6c110955873f907223b655b0486c8e501e3953f06f556de7eaf845785e4cace7d53ea0be684abb313438e1c15726dadb861ce45964f3e1acb9fc3feed3ec9182b895fec9a1a89cd77f5c28e996ebaf314f679571fdc24e35ddedd1373dedb26f975cf6d834b4790a6d207962e48b8054c7ca971d43e5d6fd5370578fc85694d22f5e725cf2d9ad9f44a7dd85a6de8f879da26a1713772b3890e735e5d7a5c82212d61d944f0483ad4c5887b935fa4bff79575b2886e38eb89fa3de56bfcde3fd5611c05beeb94aa4515a5a783faca0696b07cae43bb284c87130dd7001db3913c8677eaef776f4e01566bcac0be12340b125dad03450dd7cd6e73bfa195fee8ff19896e2077eac120fd1c432ec7b4bc2a48e7d603732cc5a4c11edb2f04e7a7fb4126dabb35d8fac734c27093ab62c98c3fca159ea252ed1a8ece9c4bea308a0ed4581022002d9db8686c0de23c894a7df3d56856479c357b6af7d5347fdd1ea3eaf9201fe6bf46f58aa43f461b63b9cfff9c75ba23aebb7d4e45825fb4b05a873cb9bb057493832a3eb4fe693cbe37cd64be1ea158ba0d116bc53c71d034e533c092f55173bf130f2974fc5a505919a1e11483864195d846e2fa7e9920b588ed5609500c4294fa42d107a1aae66db60f2a2de61a5ebb5ab38bdfbf59beb75ff7abaf2f88398b47ff0f72b94c6b52459c63fbb1fbd4ac931fc32a3b707125cb6df034ab79b8f5da3973277298111a3560aaffd2c612fcd93479eff3a965f397aa467ff9c3730b15241b9925079806e2bdd7d346cbd7030e2964671796c8e43a87687fdc463af837986258fa2569629a20cb54586cb06dbb0615d9f108abce2f0b8e892edc504ebe70e0c5fb5cfc65df02392aff1576c43df579e2292410eae10cba0b82f965d6c2ff0b6b5af4cc6269bc5681500b438e5e23ee3ca23c3354e9c12c5058382b263203d3f95eaa2cc449dcac17b1d175561df2ec3de8db3676538f714f97cfcdd23cab4e7828c75225020597c8de8f6ab16932474a0326133390abf650fd14b538b0a43164392d42b631391d4c2166faec1456736ecf34a9ee7472fe3d40a1440f8158a73ebd9a15301d61e3a3bc19b2a37ed57758936f7651ef977cb0bdbd5abd42eed92173ee736b8a4726f5c2b4ebbf932832f29942ba2a426835c1c3be3b260464952f28d6a9fdef4de51582225412c6a60b21f990245161b3a93a75d057718db9225907b8bd68f978f2648ca10916f3808fbcf50043a460202914e634ee708c72b8e976d487d97621d7d0aa244b53f150cda8b6452557703e1566a45038e047c68ffb1fdfc67dd1dd9695a7a0d560a19cfaa92edd884a6834d5cc369790bc4ba8962c83043ef046532be609ba7d894f8bf0d0d7dd77adad3ebe53ce5222eedca7e745b440e54b01f46a15f155cec3491b6a6dd50a6227e9f1cb139d94260efb3ecb6fc8208dc28f558681c481371c56635326d7de509d1e746b34b0feadace550dd18037add2c611ac562cb1c79b470cdcd997a31a6d36335f7557dfc3f33bfa29aeb3f059400c6a563e7bd986ace45c78fd0a099fc756ae081918f3b172e4b3ace7eba0baa59b10cb27b0088cd30a607a816026dac54133ff7eb2700ad1e3a0f19b4c38e06266238f46fdfbe37fc9af0d9cf803fb8c261dfa0b316e51d83eb53a8c7cd1fa7bf773b936dd354bdf4e75ca08104cbadf5896067c572f7ee94d18262f6062b42674da25ed5e2ad5cceb2c58bbf5193ee20fd015eaddf6f9140885af64bc5a43fe06903c00f5e12e18011cae48982e894ce0d2e45c24e1c7b00c71d15c81801cfab0496087de413eb4300e87bb34aff97e15101a51e51915374c7a4dc7ced2a0452a3b63d49c31aaf17de2d9be03f17ae6dd8586ac27781542959a23106c7bce8d70c808118bc77e9548932106a1fe9f30972c4e3a38901a7ec27ed064c6ab5ca1ad64e833daa41de9604c29362ee315d9af02dbd70385a450f1e7f291c0476d9369c3934b9a012c040466d02b3f77eb8488e97fab82d1be43c61302001a52a3ca70f47f423d56af7e42af775a257f27009722076083d2ac64bad09b6a73ac233a66d7cc4f4667b0ee214603e57f64acfa38876b64509d01ee9406aaf0194d86d6541d4d109d22bc282905503ac90eafcb01e7e6a655f97f22847a1c60469486566aca4c3ed62237d1d9cc1c743a6a14c38dfda633f1575cf36eb9714ffb789efde347de8aed9ce1ba2ffb875b45a65d7b19162090b9ce5088cbec6724f202462af62426d5b1745449e45c30f071129e4d2c9d8931face286e59354a2d98aadab835ff946a725c01dfe507b13dd2bba53e88f4182343b57eec4e6e1db96ddcb5dbfb4b590888cb20fb6dceb19a44dab493c6c938fb2b6df457fe3e15842b88c7e7eeef27fb75098e92903f000c09ba19fa68790d8845eec99421ff9762fae024b2216259c76900a5b6c53561fb814e71646e66568ecf4149948f12d1501e6fd7032db7de5960341cdb9da1a3930404c9bce44e287e8eef0afaed6391dd1cc38a973ecb1ec3eba1c8bd985e723cbcf163eefc6146936e551b84e9fffb8cd6fe80999da3eaf45ec724482fc77576593a5a9eddf932ac81d6a0fa3fdf5043b599a4540b55171671e7e661a56a34ff537b5f370dda804bc7893450bbb5a8c2809e0d4e968d1567832982687cd0f07edd9218efd85041897397935e5a32cf701082f0cf69ecc8b464feb6ecdf182c21aad8b3836171f78070ae0db68580ef2e060358356bcedac4b2a9f34cfb2f44b772bac95f043d29608b8f8851117093d6a7565bc76f50bce82c63d829e05b25c64600c9c3c4fd396d5d1d51a79ec7c72242fed1eb3801b1f08ffb554e0b5f3e00c7f9e46ffc9d53513b1e77d2ee9fa1cdf5a7cf4aa1639055d52e5d4daa64cdc75c33d411c9462b92969806839e33c8f5d8d02bdac6b8b08cfb1f333ccafdd57af183e8c91109083b8150a5b85ecac78eb3e000bebc1b09cfcf4e0eda0f901a29425554a63bf1fb7d0fe10a6aebb1da8b93d9d1ca014a19567e0f6b0e2cd839e32c95618b4c4cc106bee02ce111ee10ebe76c900c37a6eb3f166541c349e18e15266dfe19e58a8d8272c57772d9364d2e33f103a9b78857b904d4e7e202c6816030945084c2f500d592eb084c72354cdd625d630f4ea8979bcc9d6f6d58c2be76825c94e4bb877400adab4016980e048392fbecb51f2e05c2287e08bf7650520bfd079298a4610cdd5e8443538c10e359999fe1c34f1498c86ab9b11801fe9bab781fa237c3beebd644aec28f4d31c7b8b770f5f584231d84a34c4edbb8f03f4a445a449a411d378fde44b3b24f9c4df3dac8870670ff52787f9e2c435a026dcb938d9cf4fcd49988aeca38ec4d916d26fcdcfc93615ab5e71ed8aea2c96dee877d07b8de2b47dd77ab898444fe285500d1bd3f0f2f27311fdde3384cb897647a16420b6df56a536d15b75f81a2aa2543aecac2096efca0ff6a59272ced1e3590999328018437d41f423935a3a7bb8901fe3de2f711d86c93ff1543751d62b41a6f8b3d4b6f90220b335febc9902842cef9832c0ec1743bd8ff64882f3ec43fbf6c468f5e3706ae866036249e30657e581f553d0e678f35cf7741c14e72c0d8561462eee60078851457e30ad288a5d54301c3d7018880a7084a1cd8b2da63080dc97144baf2bd806aa1f4f3ed937022724916357cabf30dc77b2392cf118dad15fdbf2883a3c4508d96e7611ad2fbc0637362d84e589d2a6eb6fc17d3410b68c96ac0feb5e98ced5c7f255c3ce68253c767a8d27f86ebc4d896dec64f42d3934694ca7640083762c260839b87177016285a16f0b7790f2a12ab14915f11bcd377a90370fdfb6a79a0d074c412dec799c97a7b5d295bad8e522ead47527bd1aea5a76fc92f33d2ef2b742c0665633e4eab86ff8774f24acf3860751335bb2e3d693cf79d01995f06be9e66e761557be273a07ff046e68ebfa36b58283754b1c5befc7fe9f0037854c8aa8f8e3373cfae3aa387623d9e981441a1b7406395371c57afa6a882990c8144a38a2370c0eef69b09b63653d8f88fb8d8aaa46a3df58c2f79ebbed9eda8d05c4bce771ee004e736a5df8277a83c9cbb47580f73097ea74873259aac0d34636f0d897b551518c4103a50b672d8f71180a8ce01053d15dc9811ac33239cce6ba31d5a9115eb80d76e1f1bd0e74f5aafd2609cc6e599854bb9a5f71bfd9c0297d8ece400def08ee3c0449596d248b14198898f279d70cd4f06c133498871292529eba2f2457ad0e27052d66ee84674e2bd0eac78befcc7b854ed926d7cdf45a7d4ffc006c5efd061dc33fef10c0e3a4e7107c593c47f9b1c7c06d871747ebaae01ec90fbdff2edc3c3ecdf66fbd8600c53ddfe04ab9637ea0db5e0c2d1cdb09347919d70e08bd80615eacba57a06c4e570a93bb96234f09e52d199046d6a878effff0d48e4cfbc5d9b84b6ea2659137857a") userfaultfd(0x80000) 0s ago: executing program 2 (id=2752): openat$nvram(0xffffff9c, &(0x7f0000000340), 0x127081, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000005, 0x20011, r0, 0xf648a000) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = syz_open_dev$mouse(&(0x7f00000002c0), 0xfffffffffffffffc, 0x420000) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000380)=""/254, 0xfe}], 0x1, 0xfffffffd, 0x9) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/power/freeze_filesystems', 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6002, 0x0, 0x0, 0x2) read$nci(r3, &(0x7f0000000680)=""/88, 0x58) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELOBJ={0x134, 0x14, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_OBJ_USERDATA={0x89, 0x8, "13720b09bd99104f663c930a841f71bd82d5de70583c6e65d0fadc1d8839ee8e9b7ebe28ff303fb6cb96cace980418c471afe7f3894696f280503bb133c888112d6d584635d153d0648b74637f9582286a7b4e5e844c9e5a66d096c4018a1d018eba97a222d69ece4c1ad82f9e0117b1e1544d4b6dbad019c5a46d2510332aff3513ea0b8b"}, @NFTA_OBJ_USERDATA={0x4c, 0x8, "26af9dcac71233ca76278e1caaec3077cb2d2faa90f5f4f360b9359504c76201b5a3ab8d73760b1a598ef3c7763e73c2556e618c2922fd96b4fa1a4596a1c8db0d92cab747e54f14"}, @NFTA_OBJ_USERDATA={0x46, 0x8, "4216ea15f01097d192323f2216dfb7f83f651eaaa2c1d918a762264eddc63b3d83bfe940672b896f696aa34a47a6a716e683849f8b0df4ca2f8e7d4e2895705fa559"}]}], {0x14}}, 0x15c}, 0x1, 0x0, 0x0, 0x22040010}, 0x4000840) (async) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000000), 0x4) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) futex(0x0, 0x0, 0x6, 0x0, 0x0, 0xfefffffc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): acket: 32 [ 677.839930][ T45] usb usb5-port1: unable to enumerate USB device [ 678.044757][T12445] /dev/rnullb0: Can't open blockdev [ 678.163364][T12449] /dev/rnullb0: Can't open blockdev [ 678.235578][T12451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.258407][T12451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.420468][T12460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.435929][T12460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.465707][T12460] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 678.742125][T12469] /dev/rnullb0: Can't open blockdev [ 679.469026][T12493] use of bytesused == 0 is deprecated and will be removed in the future, [ 679.502626][T12493] use the actual size instead. [ 681.103078][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2126'. [ 681.215549][T12502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2126'. [ 681.272459][T12501] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2126'. [ 681.375633][T12505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.383786][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2126'. [ 681.418796][T12505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.497409][T12501] /dev/rnullb0: Can't open blockdev [ 681.713777][ T982] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 681.857711][ T982] usb 4-1: device descriptor read/64, error -71 [ 682.058193][T12517] /dev/rnullb0: Can't open blockdev [ 682.133649][ T982] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 682.217096][T12521] /dev/rnullb0: Can't open blockdev [ 682.303696][ T982] usb 4-1: device descriptor read/64, error -71 [ 682.433198][ T982] usb usb4-port1: attempt power cycle [ 682.546014][T12529] /dev/rnullb0: Can't open blockdev [ 682.560101][T12531] /dev/rnullb0: Can't open blockdev [ 682.792633][ T982] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 682.840632][ T982] usb 4-1: device descriptor read/8, error -71 [ 682.986055][T12539] /dev/rnullb0: Can't open blockdev [ 683.013490][T12539] 9pnet_fd: p9_fd_create_unix (12539): problem connecting socket: ./cgroup: -111 [ 683.112918][ T982] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 683.139724][ T982] usb 4-1: device descriptor read/8, error -71 [ 683.191180][T12549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.211148][T12549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.248453][ T982] usb usb4-port1: unable to enumerate USB device [ 683.890458][T12573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.909855][T12573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.196183][T12573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.240778][T12573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.260555][T12573] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 684.268145][T12573] /dev/rnullb0: Can't open blockdev [ 684.623515][ T5970] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 684.803143][ T5970] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 684.843809][ T5970] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 684.883310][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 684.891448][ T5970] usb 5-1: Product: syz [ 684.916150][ T5970] usb 5-1: Manufacturer: syz [ 684.920809][ T5970] usb 5-1: SerialNumber: syz [ 684.932734][ T5952] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 684.984776][T12595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.012597][T10660] raw-gadget.0 gadget.2: failed to queue disconnect event [ 685.013099][T12595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.122829][ T5952] usb 4-1: Using ep0 maxpacket: 32 [ 685.135551][ T5952] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 685.182071][ T5970] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 685.184236][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 685.242311][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 685.282867][ T5952] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 685.292003][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.343760][ T5952] usb 4-1: config 0 descriptor?? [ 685.353705][T12592] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 685.375063][ T5952] hub 4-1:0.0: USB hub found [ 685.515892][T11770] usb 5-1: USB disconnect, device number 6 [ 685.534761][T11770] usblp0: removed [ 685.568838][ T5166] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 685.581695][ T5166] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 685.596103][ T5166] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 685.602537][T12592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.613656][T12592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.623514][ T5166] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 685.632195][ T5166] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 685.648803][ T5952] hub 4-1:0.0: config failed, hub has too many ports! (err -19) [ 685.844927][ T5966] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.868818][ T5952] usbhid 4-1:0.0: can't add hid device: -71 [ 685.882574][ T5952] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 685.914995][ T5952] usb 4-1: USB disconnect, device number 85 [ 686.047557][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.063781][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.071014][ T5966] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.292163][T12609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.315824][T12609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.326024][ T5966] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.409873][T12616] overlayfs: workdir and upperdir must be separate subtrees [ 686.453769][ T5966] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.552625][ T5970] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 686.620484][T12620] /dev/rnullb0: Can't open blockdev [ 686.721860][T12599] chnl_net:caif_netlink_parms(): no params data found [ 687.007192][T12627] /dev/rnullb0: Can't open blockdev [ 687.062529][T12626] dlm: non-version read from control device 2 [ 687.107802][T12626] /dev/rnullb0: Can't open blockdev [ 687.713510][ T5166] Bluetooth: hci5: command tx timeout [ 687.870468][T12599] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.901217][T12599] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.940423][T12599] bridge_slave_0: entered allmulticast mode [ 687.986017][T12599] bridge_slave_0: entered promiscuous mode [ 688.091829][T12599] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.147718][T12599] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.166830][T12599] bridge_slave_1: entered allmulticast mode [ 688.205335][T12599] bridge_slave_1: entered promiscuous mode [ 688.225179][ T5966] bridge_slave_1: left allmulticast mode [ 688.240000][ T5966] bridge_slave_1: left promiscuous mode [ 688.261248][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.264153][T12657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.290967][ T5966] bridge_slave_0: left allmulticast mode [ 688.312095][ T5966] bridge_slave_0: left promiscuous mode [ 688.329858][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.335277][T12657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.393257][T12657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.406313][T12657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.919891][T12662] /dev/rnullb0: Can't open blockdev [ 689.663638][ T5966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.686549][ T5966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.709526][ T5966] bond0 (unregistering): Released all slaves [ 689.792382][ T5166] Bluetooth: hci5: command tx timeout [ 689.907537][T12677] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 689.939563][T12599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.954342][T12599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.005366][T12683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.033679][T12683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.190327][T12686] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2175'. [ 690.305565][T12599] team0: Port device team_slave_0 added [ 690.508714][T12599] team0: Port device team_slave_1 added [ 690.887174][T12599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.918195][T12599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.982494][T12599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.005138][T12599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.012137][T12599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.112437][ T5970] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 691.136943][T12599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.250542][ T5966] hsr_slave_0: left promiscuous mode [ 691.261705][ T5966] hsr_slave_1: left promiscuous mode [ 691.269024][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 691.269087][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 691.282945][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 691.282973][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 691.283795][ T5970] usb 5-1: Using ep0 maxpacket: 32 [ 691.286409][ T5970] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 691.286443][ T5970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 691.286472][ T5970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 691.286517][ T5970] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 691.286542][ T5970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.289638][ T5970] usb 5-1: config 0 descriptor?? [ 691.365346][T12716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.398776][T12716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.427750][ T5966] veth1_macvtap: left promiscuous mode [ 691.444146][ T5966] veth0_macvtap: left promiscuous mode [ 691.449889][ T5966] veth1_vlan: left promiscuous mode [ 691.466066][T12701] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 691.478873][ T5966] veth0_vlan: left promiscuous mode [ 691.488307][ T5970] hub 5-1:0.0: USB hub found [ 691.643810][ T5966] pimreg3 (unregistering): left allmulticast mode [ 691.716332][T12701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.726694][T12701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.748416][ T5970] hub 5-1:0.0: config failed, hub has too many ports! (err -19) [ 691.766599][ T5931] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 691.872496][ T5166] Bluetooth: hci5: command tx timeout [ 691.928114][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.938573][ T5931] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 691.948094][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.958617][ T5970] usbhid 5-1:0.0: can't add hid device: -71 [ 691.970780][ T5970] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 691.974112][ T5931] usb 4-1: config 0 descriptor?? [ 692.006267][ T5931] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 692.026890][ T5970] usb 5-1: USB disconnect, device number 8 [ 692.387635][ T5966] team0 (unregistering): Port device team_slave_1 removed [ 692.452783][ T5966] team0 (unregistering): Port device team_slave_0 removed [ 693.278156][T11770] usb 4-1: USB disconnect, device number 86 [ 693.469021][T12599] hsr_slave_0: entered promiscuous mode [ 693.485751][T12599] hsr_slave_1: entered promiscuous mode [ 693.493240][T12599] debugfs: 'hsr0' already exists in 'hsr' [ 693.499294][T12599] Cannot create hsr debugfs directory [ 693.866405][ T5966] IPVS: stop unused estimator thread 0... [ 693.962189][ T5166] Bluetooth: hci5: command tx timeout [ 694.635287][T12768] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 694.635287][T12768] The task syz.1.2195 (12768) triggered the difference, watch for misbehavior. [ 695.380730][T12787] /dev/rnullb0: Can't open blockdev [ 695.470015][T12789] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 695.517405][T12789] /dev/rnullb0: Can't open blockdev [ 696.049642][T12599] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 696.094803][T12796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.118669][T12796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.128489][T12599] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 696.160342][T12599] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 696.199313][T12599] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 696.628363][T12599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.692572][T12599] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.725345][ T5906] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.732669][ T5906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.780085][ T5906] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.787435][ T5906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.902746][T11770] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 697.087650][T11770] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.123704][T11770] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 697.151996][T11770] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 697.204285][T11770] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 697.222356][T11770] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 697.252438][T11770] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 697.272387][T11770] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 697.308294][T11770] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 697.321548][T11770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.340340][T11770] usb 5-1: Product: syz [ 697.358212][T11770] usb 5-1: Manufacturer: syz [ 697.373641][T11770] usb 5-1: SerialNumber: syz [ 697.420897][T11770] usb 5-1: config 0 descriptor?? [ 697.443237][T12807] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 697.458433][T11770] ati_remote 5-1:0.0: Initializing ati_remote hardware failed. [ 697.485439][T11770] ati_remote 5-1:0.0: probe with driver ati_remote failed with error -5 [ 697.652199][T12599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.691864][T12807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.720584][T12807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.771410][ T5970] usb 5-1: USB disconnect, device number 9 [ 697.906182][T12599] veth0_vlan: entered promiscuous mode [ 697.948854][T12599] veth1_vlan: entered promiscuous mode [ 698.067601][T12599] veth0_macvtap: entered promiscuous mode [ 698.098907][T12599] veth1_macvtap: entered promiscuous mode [ 698.172473][T12599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.217415][T12599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.251386][ T8153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.295368][ T8153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.353429][ T8153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.390684][ T8153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.700373][ T5951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.738181][ T5951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.862777][ T8153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.897665][ T8153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.225975][T12848] mkiss: ax0: crc mode is auto. [ 699.293519][T12853] netlink: 'syz.2.2155': attribute type 1 has an invalid length. [ 699.354738][T12853] syz.2.2155(12853): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 699.645445][T12834] usb 2-1: USB disconnect, device number 39 [ 699.657523][T12834] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 699.734904][T12834] keyspan 2-1:0.133: device disconnected [ 700.623273][ T5931] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 700.640241][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 700.651459][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 700.678421][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 700.689108][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 700.699512][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 700.777926][ T8242] syz_tun (unregistering): left allmulticast mode [ 700.855304][ T5931] usb 4-1: Using ep0 maxpacket: 32 [ 700.878592][ T5931] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 700.888682][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.912695][ T5931] usb 4-1: Product: syz [ 700.918001][ T5931] usb 4-1: Manufacturer: syz [ 700.932288][ T5931] usb 4-1: SerialNumber: syz [ 700.946856][ T5931] usb 4-1: config 0 descriptor?? [ 701.126982][ T5906] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.171570][ T5931] airspy 4-1:0.0: usb_control_msg() failed -71 request 09 [ 701.197327][ T5931] airspy 4-1:0.0: Could not detect board [ 701.208145][ T5931] airspy 4-1:0.0: probe with driver airspy failed with error -71 [ 701.219057][ T5931] usb 4-1: USB disconnect, device number 87 [ 701.346745][ T5906] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.511286][ T5906] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.719032][ T5906] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.942965][T11770] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 702.074825][T12909] /dev/rnullb0: Can't open blockdev [ 702.136186][T11770] usb 5-1: Using ep0 maxpacket: 16 [ 702.158896][T11770] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 702.196274][T11770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.259829][T11770] usb 5-1: Product: syz [ 702.283246][T11770] usb 5-1: Manufacturer: syz [ 702.303778][T11770] usb 5-1: SerialNumber: syz [ 702.403914][T12921] /dev/rnullb0: Can't open blockdev [ 702.519298][T12881] chnl_net:caif_netlink_parms(): no params data found [ 702.572185][T11770] cdc_ncm 5-1:1.0: bind() failure [ 702.589693][T11770] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 702.633453][T11770] cdc_ncm 5-1:1.1: bind() failure [ 702.676579][T11770] usb 5-1: USB disconnect, device number 10 [ 702.777978][ T5906] bridge_slave_1: left allmulticast mode [ 702.792702][ T5906] bridge_slave_1: left promiscuous mode [ 702.800626][ T5906] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.833341][ T51] Bluetooth: hci3: command tx timeout [ 702.869936][ T5906] bridge_slave_0: left allmulticast mode [ 702.888870][ T5906] bridge_slave_0: left promiscuous mode [ 702.897572][ T5906] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.981905][T12937] /dev/rnullb0: Can't open blockdev [ 703.144375][T12945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.154865][T12945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.228890][T12948] /dev/rnullb0: Can't open blockdev [ 703.331500][T12952] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2227'. [ 703.395323][ T5931] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 703.404581][ T5906] dvmrp0 (unregistering): left allmulticast mode [ 703.613966][ T5906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 703.625153][ T5906] bond_slave_0: left promiscuous mode [ 703.630786][ T5906] bond_slave_0: left allmulticast mode [ 703.640237][ T5906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 703.650186][ T5906] bond_slave_1: left promiscuous mode [ 703.656188][ T5906] bond_slave_1: left allmulticast mode [ 703.665390][ T5906] bond0 (unregistering): Released all slaves [ 703.704551][T12940] syzkaller1: entered promiscuous mode [ 703.710260][T12940] syzkaller1: entered allmulticast mode [ 703.717974][T12940] hsr_slave_0: entered allmulticast mode [ 703.730508][T12940] hsr_slave_1: entered allmulticast mode [ 703.969567][T12881] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.991725][T12881] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.001751][T12881] bridge_slave_0: entered allmulticast mode [ 704.014739][T12881] bridge_slave_0: entered promiscuous mode [ 704.061125][T12881] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.072183][T12881] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.084373][T12881] bridge_slave_1: entered allmulticast mode [ 704.095740][T12881] bridge_slave_1: entered promiscuous mode [ 704.153194][ T5938] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 704.203865][T12881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.225802][T12881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.288316][ T5906] hsr_slave_0: left promiscuous mode [ 704.297434][ T5906] hsr_slave_1: left promiscuous mode [ 704.305109][ T5906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.312784][ T5906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.320638][ T5906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.329028][ T5906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.331697][ T5938] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 704.347305][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 704.358735][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.369308][ T5938] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 704.377086][ T5906] veth1_macvtap: left promiscuous mode [ 704.386161][ T5938] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 704.388942][ T5906] veth0_macvtap: left promiscuous mode [ 704.403626][ T5938] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 704.405010][ T5906] veth1_vlan: left promiscuous mode [ 704.412993][ T5938] usb 5-1: Manufacturer: syz [ 704.418093][ T5906] veth0_vlan: left promiscuous mode [ 704.433570][ T5938] usb 5-1: config 0 descriptor?? [ 704.444011][ T5931] usb 3-1: device descriptor read/64, error -71 [ 704.512974][T11770] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 704.682897][T11770] usb 4-1: Using ep0 maxpacket: 32 [ 704.696156][T11770] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.710372][ T5931] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 704.718617][T11770] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.730000][T11770] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 704.739833][T11770] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.763176][T11770] usb 4-1: config 0 descriptor?? [ 704.852686][ T5931] usb 3-1: device descriptor read/64, error -71 [ 704.865137][ T5938] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 704.903030][ T5938] appleir 0003:05AC:8243.000A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 704.914295][ T51] Bluetooth: hci3: command tx timeout [ 704.972759][ T5931] usb usb3-port1: attempt power cycle [ 705.098991][T12957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.132503][T12957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.170418][ T5906] team0 (unregistering): Port device team_slave_1 removed [ 705.199813][T11770] ft260 0003:0403:6030.000B: unknown main item tag 0x7 [ 705.247035][ T5906] team0 (unregistering): Port device team_slave_0 removed [ 705.352383][ T5931] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 705.383132][ T5931] usb 3-1: device descriptor read/8, error -71 [ 705.411729][T11770] ft260 0003:0403:6030.000B: chip code: 6424 8183 [ 705.566773][ T5970] usb 5-1: USB disconnect, device number 11 [ 705.625608][T11770] ft260 0003:0403:6030.000B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 705.656870][ T5931] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 705.694720][ T5931] usb 3-1: device descriptor read/8, error -71 [ 705.806944][ T5931] usb usb3-port1: unable to enumerate USB device [ 705.838367][T11770] ft260 0003:0403:6030.000B: failed to retrieve status: -32, no wakeup [ 705.848111][T11770] ft260 0003:0403:6030.000B: i2c bus error: 0x9a [ 706.052137][T12881] team0: Port device team_slave_0 added [ 706.065962][T12881] team0: Port device team_slave_1 added [ 706.149351][T11770] ft260 0003:0403:6030.000B: failed to reset I2C controller: -71 [ 706.270180][T12881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.287481][T12881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.353456][T12881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.367318][T12881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.385298][T12881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.413974][T12881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.420540][T12974] /dev/rnullb0: Can't open blockdev [ 706.660833][T12881] hsr_slave_0: entered promiscuous mode [ 706.694871][T12881] hsr_slave_1: entered promiscuous mode [ 706.701575][T12881] debugfs: 'hsr0' already exists in 'hsr' [ 706.725750][T12881] Cannot create hsr debugfs directory [ 706.763048][T12983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2234'. [ 706.822866][T12987] syz.3.2235: attempt to access beyond end of device [ 706.822866][T12987] loop3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 706.852963][T12987] SQUASHFS error: Failed to read block 0x0: -5 [ 706.898028][T12987] unable to read squashfs_super_block [ 706.999612][ T51] Bluetooth: hci3: command tx timeout [ 707.065238][T11770] usb 4-1: USB disconnect, device number 88 [ 707.568348][T13008] /dev/rnullb0: Can't open blockdev [ 707.746646][T13012] /dev/rnullb0: Can't open blockdev [ 707.800063][T13014] /dev/rnullb0: Can't open blockdev [ 708.296921][T11770] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 708.511640][T11770] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 708.533596][T11770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.559830][T11770] usb 3-1: Product: syz [ 708.577583][T11770] usb 3-1: Manufacturer: syz [ 708.598131][T11770] usb 3-1: SerialNumber: syz [ 708.619929][T11770] usb 3-1: config 0 descriptor?? [ 708.680938][T12881] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 708.715289][T12881] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 708.764117][T12881] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 708.773007][T13038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2247'. [ 708.794629][T12881] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 708.863582][T11770] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 708.909726][T13046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 708.951374][T13046] /dev/rnullb0: Can't open blockdev [ 709.088083][ T51] Bluetooth: hci3: command tx timeout [ 709.140191][T12881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.194400][T12881] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.228869][ T5906] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.236090][ T5906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.295438][ T5906] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.302673][ T5906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.335484][T13060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2251'. [ 709.372955][T13060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 709.397085][T13062] Bluetooth: MGMT ver 1.23 [ 709.454811][T13064] netlink: 'syz.3.2251': attribute type 2 has an invalid length. [ 709.476535][T13064] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2251'. [ 709.919530][T13077] /dev/rnullb0: Can't open blockdev [ 710.049493][T12881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.222716][T12881] veth0_vlan: entered promiscuous mode [ 710.256245][T12881] veth1_vlan: entered promiscuous mode [ 710.327482][T13085] syzkaller1: left promiscuous mode [ 710.339497][T13085] syzkaller1: left allmulticast mode [ 710.359803][T13085] hsr_slave_0: left allmulticast mode [ 710.375082][T13085] hsr_slave_1: left allmulticast mode [ 710.412753][T13085] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2256'. [ 710.437023][T12881] veth0_macvtap: entered promiscuous mode [ 710.470784][T12881] veth1_macvtap: entered promiscuous mode [ 710.540064][T12881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.590440][T12881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 710.655289][ T8153] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.689327][ T8153] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.713430][ T8153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.751827][ T8153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.973218][ T8154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.981123][ T8154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.087871][ T5951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.107621][ T5951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.112683][T13017] /dev/rnullb0: Can't open blockdev [ 711.131054][T11770] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 711.175348][T11770] usb 3-1: USB disconnect, device number 63 [ 711.477608][T13116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2261'. [ 711.723085][T13123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2263'. [ 711.752393][ T5970] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 711.909341][ T5970] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 711.941609][ T5970] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 711.962498][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 711.971266][ T5970] usb 5-1: Product: syz [ 711.985757][ T5970] usb 5-1: Manufacturer: syz [ 711.990411][ T5970] usb 5-1: SerialNumber: syz [ 712.172741][T11770] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 712.230404][ T5970] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 712.243688][T13142] /dev/rnullb0: Can't open blockdev [ 712.364634][T13145] /dev/sg0: Can't lookup blockdev [ 712.374737][T11770] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 712.410299][T11770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.431670][T13116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2261'. [ 712.439580][T11770] usb 4-1: Product: syz [ 712.446455][T11770] usb 4-1: Manufacturer: syz [ 712.461686][T11770] usb 4-1: SerialNumber: syz [ 712.476359][T11770] usb 4-1: config 0 descriptor?? [ 712.515873][T13138] /dev/rnullb0: Can't open blockdev [ 712.831063][T13155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2274'. [ 712.906573][T11770] airspy 4-1:0.0: Board ID: 00 [ 712.918615][T11770] airspy 4-1:0.0: Firmware version: [ 713.038585][T13163] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2276'. [ 713.050540][T13163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2276'. [ 713.062100][T13163] Invalid source name [ 713.066248][T13163] UBIFS error (pid: 13163): cannot open "/dev/nbd1", error -22 [ 713.113846][T13135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.141147][T13135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.440463][T13171] /dev/rnullb0: Can't open blockdev [ 713.620164][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 713.620186][ T30] audit: type=1326 audit(1752825736.080:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13152 comm="syz.2.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80758e929 code=0x7fc00000 [ 713.711713][T13177] /dev/rnullb0: Can't open blockdev [ 713.737038][T13178] /dev/rnullb0: Can't open blockdev [ 713.967999][T11770] airspy 4-1:0.0: Registered as swradio24 [ 713.977734][T11770] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 714.259977][T13193] __nla_validate_parse: 1 callbacks suppressed [ 714.260001][T13193] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2287'. [ 714.855119][T11770] usb 4-1: USB disconnect, device number 89 [ 715.205960][T13210] /dev/rnullb0: Can't open blockdev [ 715.217385][T13209] /dev/rnullb0: Can't open blockdev [ 715.261869][T13212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2292'. [ 715.293213][ T5970] usb 5-1: USB disconnect, device number 12 [ 715.329436][ T5970] usblp0: removed [ 715.753184][T13222] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 715.777364][T13217] delete_channel: no stack [ 715.849114][T13235] /dev/rnullb0: Can't open blockdev [ 715.973958][T13236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.011497][T13236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.082555][ T5938] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 716.203180][T13245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2302'. [ 716.242565][ T5938] usb 4-1: Using ep0 maxpacket: 8 [ 716.256332][ T5938] usb 4-1: config index 0 descriptor too short (expected 4096, got 18) [ 716.285400][ T5938] usb 4-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 716.299730][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.308314][ T5938] usb 4-1: Product: syz [ 716.315235][ T5938] usb 4-1: Manufacturer: syz [ 716.319936][ T5938] usb 4-1: SerialNumber: syz [ 716.332088][ T5938] usb 4-1: config 0 descriptor?? [ 716.344422][ T5938] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 716.452659][ T5970] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 716.478133][ T30] audit: type=1326 audit(1752825738.940:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13248 comm="syz.4.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccc78e929 code=0x7fc00000 [ 716.489511][T13260] fuse: Bad value for 'group_id' [ 716.506604][T13260] fuse: Bad value for 'group_id' [ 716.543227][ T5938] pwc: Failed to set LED on/off time (-71) [ 716.555507][ T5938] pwc: send_video_command error -71 [ 716.561480][ T5938] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 716.569633][ T5938] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 716.597075][ T5938] usb 4-1: USB disconnect, device number 90 [ 716.619344][ T5970] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 716.643028][ T5970] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 716.656717][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 716.666283][ T5970] usb 2-1: Product: syz [ 716.670504][ T5970] usb 2-1: Manufacturer: syz [ 716.676397][ T5970] usb 2-1: SerialNumber: syz [ 716.902055][ T5970] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 716.953027][T11770] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 717.092383][ T30] audit: type=1326 audit(1752825739.550:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13248 comm="syz.4.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6ccc72ab19 code=0x7fc00000 [ 717.095649][T13266] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2310'. [ 717.131401][T13266] openvswitch: netlink: Missing key (keys=40, expected=80) [ 717.141670][T11770] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 717.155952][ T30] audit: type=1326 audit(1752825739.550:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13248 comm="syz.4.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6ccc72abdf code=0x7fc00000 [ 717.160075][T11770] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.201997][T11770] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 717.208364][ T30] audit: type=1326 audit(1752825739.550:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13248 comm="syz.4.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6ccc78e929 code=0x7fc00000 [ 717.242088][T11770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.274329][T11770] usb 3-1: config 0 descriptor?? [ 717.380493][T13275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2313'. [ 717.483324][T13277] syz.3.2314: attempt to access beyond end of device [ 717.483324][T13277] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 717.499492][T13277] (syz.3.2314,13277,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 717.509217][T13277] (syz.3.2314,13277,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 717.519980][T13277] (syz.3.2314,13277,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 717.538157][T13277] (syz.3.2314,13277,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 717.727057][T11770] hid-u2fzero 0003:10C4:8ACF.000C: unbalanced delimiter at end of report description [ 717.764023][T11770] hid-u2fzero 0003:10C4:8ACF.000C: probe with driver hid-u2fzero failed with error -22 [ 717.774574][T13282] fuse: Bad value for 'group_id' [ 717.779854][T13282] fuse: Bad value for 'group_id' [ 717.972539][T13289] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2319'. [ 718.088741][T13292] raw_sendmsg: syz.4.2320 forgot to set AF_INET. Fix it! [ 718.328130][T13300] can0: slcan on ptm0. [ 718.999707][T13310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2323'. [ 719.196217][T13298] can0 (unregistered): slcan off ptm0. [ 719.285221][ T5980] usb 2-1: USB disconnect, device number 40 [ 719.328177][ T5980] usblp0: removed [ 719.361582][T13318] /dev/rnullb0: Can't open blockdev [ 719.441282][T13321] fuse: Bad value for 'group_id' [ 719.447612][T13321] fuse: Bad value for 'group_id' [ 719.554568][ T5931] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 719.593956][T13327] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2329'. [ 719.762080][ T5938] usb 3-1: USB disconnect, device number 64 [ 719.798731][ T5931] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 719.832348][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.840540][ T5931] usb 5-1: Product: syz [ 719.849282][ T5931] usb 5-1: Manufacturer: syz [ 719.874834][ T5931] usb 5-1: SerialNumber: syz [ 719.904475][T13339] /dev/rnullb0: Can't open blockdev [ 719.908277][ T5931] usb 5-1: config 0 descriptor?? [ 719.973827][T13342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2332'. [ 720.149085][ T5931] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 720.204031][T13327] /dev/rnullb0: Can't open blockdev [ 720.292452][ T5980] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 720.350195][T13356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2335'. [ 720.368554][T13356] /dev/rnullb0: Can't open blockdev [ 720.464687][ T5980] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 720.500516][ T5980] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 720.512163][ T5980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 720.527718][ T5980] usb 3-1: Product: syz [ 720.531934][ T5980] usb 3-1: Manufacturer: syz [ 720.547002][ T5980] usb 3-1: SerialNumber: syz [ 720.781050][ T5980] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 65 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 721.270047][T13378] /dev/rnullb0: Can't open blockdev [ 721.339277][T13381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2342'. [ 721.365324][ T5980] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 721.418962][T13383] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 721.428949][T13383] /dev/rnullb0: Can't open blockdev [ 721.522458][ T5980] usb 4-1: Using ep0 maxpacket: 32 [ 721.529765][ T5980] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 721.541700][ T5980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 721.553568][ T5980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 721.567797][ T5980] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 721.577132][ T5980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.589723][ T5980] usb 4-1: config 0 descriptor?? [ 721.613312][T13375] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 721.634719][ T5980] hub 4-1:0.0: USB hub found [ 721.641632][T13387] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2324'. [ 721.653694][T13315] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2324'. [ 721.669647][T13387] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2324'. [ 721.690732][ T5931] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 721.707306][ T5931] usb 5-1: USB disconnect, device number 13 [ 721.832186][ T5980] hub 4-1:0.0: 2 ports detected [ 721.881351][T13386] /dev/rnullb0: Can't open blockdev [ 722.355788][T13392] FAULT_INJECTION: forcing a failure. [ 722.355788][T13392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 722.370379][T13392] CPU: 0 UID: 0 PID: 13392 Comm: syz.4.2346 Not tainted 6.16.0-rc6-next-20250717-syzkaller #0 PREEMPT(full) [ 722.370411][T13392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 722.370423][T13392] Call Trace: [ 722.370432][T13392] [ 722.370441][T13392] dump_stack_lvl+0x189/0x250 [ 722.370477][T13392] ? __pfx____ratelimit+0x10/0x10 [ 722.370504][T13392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 722.370531][T13392] ? __pfx__printk+0x10/0x10 [ 722.370574][T13392] should_fail_ex+0x414/0x560 [ 722.370606][T13392] _copy_to_user+0x31/0xb0 [ 722.370632][T13392] simple_read_from_buffer+0xe1/0x170 [ 722.370666][T13392] proc_fail_nth_read+0x1df/0x250 [ 722.370691][T13392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 722.370717][T13392] ? rw_verify_area+0x2a6/0x4d0 [ 722.370741][T13392] ? __lock_acquire+0xab9/0xd20 [ 722.370763][T13392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 722.370788][T13392] vfs_read+0x200/0x980 [ 722.370820][T13392] ? __pfx___mutex_lock+0x10/0x10 [ 722.370847][T13392] ? __pfx_vfs_read+0x10/0x10 [ 722.370873][T13392] ? __fget_files+0x2a/0x420 [ 722.370906][T13392] ? __fget_files+0x3a0/0x420 [ 722.370933][T13392] ? __fget_files+0x2a/0x420 [ 722.370973][T13392] ksys_read+0x145/0x250 [ 722.371005][T13392] ? __fget_files+0x3a0/0x420 [ 722.371034][T13392] ? __pfx_ksys_read+0x10/0x10 [ 722.371066][T13392] ? do_syscall_64+0xbe/0x3b0 [ 722.371098][T13392] do_syscall_64+0xfa/0x3b0 [ 722.371122][T13392] ? lockdep_hardirqs_on+0x9c/0x150 [ 722.371148][T13392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.371168][T13392] ? clear_bhb_loop+0x60/0xb0 [ 722.371194][T13392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.371213][T13392] RIP: 0033:0x7f6ccc78d33c [ 722.371232][T13392] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 722.371249][T13392] RSP: 002b:00007f6cca5f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 722.371274][T13392] RAX: ffffffffffffffda RBX: 00007f6ccc9b5fa0 RCX: 00007f6ccc78d33c [ 722.371290][T13392] RDX: 000000000000000f RSI: 00007f6cca5f60a0 RDI: 0000000000000004 [ 722.371302][T13392] RBP: 00007f6cca5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 722.371316][T13392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.371329][T13392] R13: 0000000000000000 R14: 00007f6ccc9b5fa0 R15: 00007fff45676228 [ 722.371363][T13392] [ 722.660002][ T5980] usb 4-1: USB disconnect, device number 91 [ 722.867131][T13396] /dev/rnullb0: Can't open blockdev [ 722.907699][T13400] /dev/rnullb0: Can't open blockdev [ 723.005605][T13405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2351'. [ 723.303431][T13422] /dev/rnullb0: Can't open blockdev [ 723.457257][T13429] /dev/rnullb0: Can't open blockdev [ 723.752329][T13439] /dev/rnullb0: Can't open blockdev [ 723.817806][T13443] /dev/rnullb0: Can't open blockdev [ 723.832858][ T5970] usb 4-1: new low-speed USB device number 92 using dummy_hcd [ 723.840687][ T5980] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 723.982350][ T5970] usb 4-1: device descriptor read/64, error -71 [ 724.005183][ T5980] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 724.020450][ T5980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.038590][ T5980] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 724.047995][ T5980] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 724.056475][ T5980] usb 2-1: Manufacturer: syz [ 724.071195][ T5980] usb 2-1: config 0 descriptor?? [ 724.172711][ T5980] rc_core: IR keymap rc-hauppauge not found [ 724.185710][ T5980] Registered IR keymap rc-empty [ 724.194719][ T5980] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 724.214515][ T5980] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input23 [ 724.226249][ T5970] usb 4-1: new low-speed USB device number 93 using dummy_hcd [ 724.362469][ T5970] usb 4-1: device descriptor read/64, error -71 [ 724.410044][ T5931] usb 2-1: USB disconnect, device number 41 [ 724.492908][ T5970] usb usb4-port1: attempt power cycle [ 724.552401][ T5980] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 724.702577][ T5980] usb 5-1: Using ep0 maxpacket: 32 [ 724.709735][ T5980] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 724.721792][ T5980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 724.733316][ T5980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 724.744655][ T5980] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 724.754102][ T5980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.766668][ T5980] usb 5-1: config 0 descriptor?? [ 724.772653][T13450] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 724.789535][ T5980] hub 5-1:0.0: USB hub found [ 724.852420][ T5970] usb 4-1: new low-speed USB device number 94 using dummy_hcd [ 724.873394][ T5970] usb 4-1: device descriptor read/8, error -71 [ 724.994327][ T5980] hub 5-1:0.0: 2 ports detected [ 725.114703][ T5970] usb 4-1: new low-speed USB device number 95 using dummy_hcd [ 725.143427][ T5970] usb 4-1: device descriptor read/8, error -71 [ 725.263005][ T5970] usb usb4-port1: unable to enumerate USB device [ 725.619491][ T5980] usb 5-1: USB disconnect, device number 14 [ 725.692361][ T5938] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 725.852323][ T5938] usb 2-1: Using ep0 maxpacket: 16 [ 725.865619][ T5938] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 725.874033][ T5938] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.884627][ T5938] usb 2-1: config 0 has no interface number 0 [ 725.894673][ T5938] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 725.905111][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.913246][ T5938] usb 2-1: Product: syz [ 725.917649][ T5938] usb 2-1: Manufacturer: syz [ 725.922336][ T5938] usb 2-1: SerialNumber: syz [ 725.933542][ T5938] usb 2-1: config 0 descriptor?? [ 726.168284][ T5938] usb 2-1: Found UVC 0.00 device syz (046d:08d3) [ 726.187537][ T5938] usb 2-1: No valid video chain found. [ 726.249566][T13468] /dev/rnullb0: Can't open blockdev [ 726.773268][T13475] netlink: 'syz.3.2371': attribute type 11 has an invalid length. [ 726.795387][ T30] audit: type=1800 audit(1752825749.260:186): pid=13475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2371" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 726.958029][T13477] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 726.971668][T13477] /dev/rnullb0: Can't open blockdev [ 727.200343][T13480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2373'. [ 727.597353][T13493] /dev/rnullb0: Can't open blockdev [ 727.605989][T13495] /dev/rnullb0: Can't open blockdev [ 727.717503][ T5970] usb 3-1: USB disconnect, device number 65 [ 727.737424][ T5970] usblp0: removed [ 727.927243][T13503] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2380'. [ 727.948128][ T5931] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 728.030539][T13507] /dev/rnullb0: Can't open blockdev [ 728.097994][T13510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2383'. [ 728.156023][ T5931] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.172356][ T5931] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 728.202434][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 728.222521][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 728.252382][ T5931] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 728.299172][ T5931] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 728.312282][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 728.340893][ T5931] usb 4-1: Product: syz [ 728.355593][ T5931] usb 4-1: Manufacturer: syz [ 728.383139][ T5931] usb 4-1: SerialNumber: syz [ 728.396972][ T5931] usb 4-1: config 0 descriptor?? [ 728.563161][T13522] /dev/rnullb0: Can't open blockdev [ 728.575248][T13524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.587503][T13524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.610733][T13524] netlink: 'syz.1.2391': attribute type 21 has an invalid length. [ 728.624249][ T5931] radio-si470x 4-1:0.0: DeviceID=0x75fd ChipID=0x4f61 [ 728.698908][ T5931] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 728.734029][ T5931] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 728.757546][T13524] netlink: 'syz.1.2391': attribute type 41 has an invalid length. [ 728.769974][ T5931] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 728.789499][T13533] /dev/rnullb0: Can't open blockdev [ 728.807903][ T5931] usb 4-1: USB disconnect, device number 96 [ 729.126845][T13529] /dev/rnullb0: Can't open blockdev [ 729.244806][T13544] input: syz1 as /devices/virtual/input/input25 [ 729.487342][T13549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2397'. [ 729.593017][T13551] fuse: Unknown parameter 'group_i00000000000000000000' [ 729.658828][ T5931] usb 2-1: USB disconnect, device number 42 [ 729.852495][T12834] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 729.962582][T13568] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 730.027418][T12834] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 730.040612][T12834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.059023][T12834] usb 4-1: Product: syz [ 730.064708][T12834] usb 4-1: Manufacturer: syz [ 730.079603][T12834] usb 4-1: SerialNumber: syz [ 730.090320][T12834] usb 4-1: config 0 descriptor?? [ 730.112785][T12834] hub 4-1:0.0: bad descriptor, ignoring hub [ 730.118756][T12834] hub 4-1:0.0: probe with driver hub failed with error -5 [ 730.131456][T12834] f81232 4-1:0.0: f81534a converter detected [ 730.151760][T13573] vivid-004: disconnect [ 730.330749][T13553] /dev/rnullb0: Can't open blockdev [ 730.350191][T12834] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 730.362682][T12834] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 730.416784][T12834] usb 4-1: USB disconnect, device number 97 [ 730.432354][ T5970] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 730.448608][T12834] f81232 4-1:0.0: device disconnected [ 730.602975][ T5970] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 730.622512][ T5970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64 [ 730.634821][ T5970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 730.648391][ T5970] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 730.658724][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.667081][ T5970] usb 5-1: Product: syz [ 730.671480][ T5970] usb 5-1: Manufacturer: syz [ 730.679980][ T5970] usb 5-1: SerialNumber: syz [ 730.689891][ T5970] usb 5-1: config 0 descriptor?? [ 730.704858][T13573] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 730.720301][ T5970] option 5-1:0.0: GSM modem (1-port) converter detected [ 730.923059][T13573] /dev/rnullb0: Can't open blockdev [ 730.938451][T12834] usb 5-1: USB disconnect, device number 15 [ 730.955979][T13572] vivid-004: reconnect [ 730.968581][T12834] option 5-1:0.0: device disconnected [ 731.288116][T13595] netdevsim netdevsim2: Firmware load for '/../file0' refused, path contains '..' component [ 731.331423][ T5970] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 731.407231][T13597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2414'. [ 731.504811][ T5970] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 731.543869][ T5970] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 731.559285][ T5970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 731.567685][ T5970] usb 4-1: Product: syz [ 731.572060][ T5970] usb 4-1: Manufacturer: syz [ 731.584748][ T5970] usb 4-1: SerialNumber: syz [ 731.745722][T13611] : Can't lookup blockdev [ 731.816469][ T5970] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 98 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 731.919606][T13614] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 731.927718][T13614] /dev/rnullb0: Can't open blockdev [ 732.071090][T13617] /dev/rnullb0: Can't open blockdev [ 732.727942][ T30] audit: type=1800 audit(1752825755.190:187): pid=13633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2426" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 733.484587][T13642] /dev/rnullb0: Can't open blockdev [ 733.501347][T13642] nfs: Unknown parameter '' [ 733.595308][T13646] Malformed UNC in devname [ 733.595308][T13646] [ 733.602900][T13646] CIFS: VFS: Malformed UNC in devname [ 733.793013][ T51] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 733.952403][ T5970] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 734.115273][ T5970] usb 2-1: Using ep0 maxpacket: 32 [ 734.157197][ T5970] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 734.168604][ T5938] usb 4-1: USB disconnect, device number 98 [ 734.177665][ T5970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 734.195517][ T5970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 734.205825][T13668] /dev/rnullb0: Can't open blockdev [ 734.213114][ T5970] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 734.230291][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.233005][ T5938] usblp0: removed [ 734.263076][ T5970] usb 2-1: config 0 descriptor?? [ 734.269269][T13648] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 734.291219][ T5970] hub 2-1:0.0: USB hub found [ 734.294812][T13671] /dev/rnullb0: Can't open blockdev [ 734.410672][T13673] /dev/rnullb0: Can't open blockdev [ 734.519622][ T5970] hub 2-1:0.0: 2 ports detected [ 735.124780][ T5970] usb 2-1: USB disconnect, device number 43 [ 735.285534][ T5938] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 735.457396][ T5938] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 735.479363][ T5938] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 735.488810][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 735.497161][T12834] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 735.504845][ T5938] usb 5-1: Product: syz [ 735.509044][ T5938] usb 5-1: Manufacturer: syz [ 735.514366][ T5938] usb 5-1: SerialNumber: syz [ 735.666229][T12834] usb 4-1: Using ep0 maxpacket: 16 [ 735.701717][T12834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.718394][T12834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.756929][ T5938] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 735.767903][T12834] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 735.785244][T12834] usb 4-1: New USB device found, idVendor=045e, idProduct=6427, bcdDevice= 0.00 [ 735.807888][T12834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.829529][T12834] usb 4-1: config 0 descriptor?? [ 735.986595][T13701] /dev/rnullb0: Can't open blockdev [ 736.049543][T13695] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 736.069046][T12834] usbhid 4-1:0.0: can't add hid device: -71 [ 736.075311][T12834] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 736.109230][T12834] usb 4-1: USB disconnect, device number 99 [ 736.151572][ T45] usb 5-1: USB disconnect, device number 16 [ 736.177180][ T45] usblp0: removed [ 736.814361][T13705] netlink: 'syz.3.2454': attribute type 58 has an invalid length. [ 737.319939][T13718] /dev/rnullb0: Can't open blockdev [ 738.285009][ T30] audit: type=1326 audit(1752825760.750:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13730 comm="syz.4.2460" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ccc78e929 code=0x0 [ 738.685312][T13747] /dev/rnullb0: Can't open blockdev [ 739.197647][T13751] /dev/rnullb0: Can't open blockdev [ 739.389462][T13760] netlink: 5820 bytes leftover after parsing attributes in process `syz.1.2467'. [ 739.724966][T12834] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 739.882694][T12834] usb 5-1: Using ep0 maxpacket: 16 [ 739.894427][T12834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.905883][T12834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.916219][T12834] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 739.929540][T12834] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 739.949555][T12834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.971056][T12834] usb 5-1: config 0 descriptor?? [ 740.230494][T13779] /dev/rnullb0: Can't open blockdev [ 740.737544][T12834] usbhid 5-1:0.0: can't add hid device: -71 [ 740.747130][T12834] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 740.772643][ T45] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 740.776163][T12834] usb 5-1: USB disconnect, device number 17 [ 740.912567][ T5970] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 740.920286][ T45] usb 2-1: device descriptor read/64, error -71 [ 741.094247][ T5970] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 741.110009][ T5970] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 741.128998][ T5970] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 741.138903][ T5970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.182704][ T45] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 741.342377][ T45] usb 2-1: device descriptor read/64, error -71 [ 741.446320][ T5970] usb 3-1: usb_control_msg returned -32 [ 741.451975][ T5970] usbtmc 3-1:16.0: can't read capabilities [ 741.469090][ T45] usb usb2-port1: attempt power cycle [ 741.702571][T12834] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 741.819340][T13794] /dev/rnullb0: Can't open blockdev [ 741.822540][ T45] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 741.858274][ T45] usb 2-1: device descriptor read/8, error -71 [ 741.874628][T12834] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 741.893111][T12834] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 741.902304][T12834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 741.910475][T12834] usb 5-1: Product: syz [ 741.914846][T12834] usb 5-1: Manufacturer: syz [ 741.919477][T12834] usb 5-1: SerialNumber: syz [ 742.102566][ T45] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 742.123576][ T45] usb 2-1: device descriptor read/8, error -71 [ 742.155208][T12834] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 742.232841][ T45] usb usb2-port1: unable to enumerate USB device [ 742.407010][T13793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.419509][T13793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.563560][ T45] usb 5-1: USB disconnect, device number 18 [ 742.580600][ T45] usblp1: removed [ 743.705561][ T5970] usb 3-1: USB disconnect, device number 66 [ 743.889159][ T5166] Bluetooth: hci5: link tx timeout [ 743.896326][ T5166] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 744.058542][T13812] sctp: [Deprecated]: syz.1.2484 (pid 13812) Use of struct sctp_assoc_value in delayed_ack socket option. [ 744.058542][T13812] Use struct sctp_sack_info instead [ 744.110532][T13812] /dev/rnullb0: Can't open blockdev [ 744.142026][T13815] /dev/rnullb0: Can't open blockdev [ 744.402765][T13822] ./file0: Can't lookup blockdev [ 744.423241][T13822] ./file0: Can't lookup blockdev [ 744.453656][T13822] ./file0: Can't lookup blockdev [ 744.489689][T13822] ./file0: Can't lookup blockdev [ 744.513354][T13822] ./file0: Can't lookup blockdev [ 744.518806][T13822] ./file0: Can't lookup blockdev [ 744.532343][ T5970] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 744.547545][T13822] ./file0: Can't lookup blockdev [ 744.562948][T13822] ./file0: Can't lookup blockdev [ 744.583510][T13822] ./file0: Can't lookup blockdev [ 744.599979][T13822] ./file0: Can't lookup blockdev [ 744.619604][T13822] ./file0: Can't lookup blockdev [ 744.633754][T13822] ./file0: Can't lookup blockdev [ 744.652933][T13822] ./file0: Can't lookup blockdev [ 744.666387][T13822] ./file0: Can't lookup blockdev [ 744.682599][T13822] ./file0: Can't lookup blockdev [ 744.696901][T13822] ./file0: Can't lookup blockdev [ 744.704345][T13822] ./file0: Can't lookup blockdev [ 744.722813][T13822] ./file0: Can't lookup blockdev [ 744.728288][T13822] ./file0: Can't lookup blockdev [ 744.824512][ T5970] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 744.855194][ T5970] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 744.865453][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 744.882471][ T5970] usb 2-1: Product: syz [ 744.892548][ T5970] usb 2-1: Manufacturer: syz [ 744.897220][ T5970] usb 2-1: SerialNumber: syz [ 744.897875][T13827] binder: 13826:13827 ioctl 4008f50a 200000000000 returned -22 [ 744.917087][T13827] /dev/rnullb0: Can't open blockdev [ 745.091855][T13831] /dev/rnullb0: Can't open blockdev [ 745.154618][ T5970] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 745.227364][T13836] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 745.241424][T13836] /dev/rnullb0: Can't open blockdev [ 745.352807][T13839] /dev/rnullb0: Can't open blockdev [ 745.479834][ T5970] usb 2-1: USB disconnect, device number 48 [ 745.497604][ T5970] usblp0: removed [ 745.573091][T13846] /dev/rnullb0: Can't open blockdev [ 745.698667][T13851] /dev/rnullb0: Can't open blockdev [ 745.952538][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 746.293548][ T5970] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 746.442820][ T5970] usb 3-1: device descriptor read/64, error -71 [ 746.690973][ T5970] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 746.841910][T13888] /dev/rnullb0: Can't open blockdev [ 746.847534][ T5970] usb 3-1: device descriptor read/64, error -71 [ 746.972846][ T5970] usb usb3-port1: attempt power cycle [ 747.327967][T13770] syz.3.2470 (13770) used greatest stack depth: 18008 bytes left [ 747.342758][ T5970] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 747.383620][ T5970] usb 3-1: device descriptor read/8, error -71 [ 747.487908][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.495620][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.623337][ T30] audit: type=1800 audit(1752825770.090:189): pid=13904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2518" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 747.643563][ C0] vkms_vblank_simulate: vblank timer overrun [ 747.647533][ T5970] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 747.666453][T12834] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 747.674899][ T5970] usb 3-1: device descriptor read/8, error -71 [ 747.782877][ T5970] usb usb3-port1: unable to enumerate USB device [ 747.834493][T12834] usb 2-1: config 1 has an invalid descriptor of length 186, skipping remainder of the config [ 747.845160][T12834] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 747.855643][T12834] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 747.865045][T12834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 747.873557][T12834] usb 2-1: SerialNumber: syz [ 748.083529][T13897] /dev/rnullb0: Can't open blockdev [ 748.095089][T12834] usb 2-1: 0:2 : does not exist [ 748.146461][T12834] usb 2-1: USB disconnect, device number 49 [ 748.194816][T13918] ./file0: Can't lookup blockdev [ 748.212012][ T8255] udevd[8255]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 748.368781][T13926] /dev/rnullb0: Can't open blockdev [ 748.486649][T13930] /dev/rnullb0: Can't open blockdev [ 748.700018][T13939] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2528'. [ 748.728215][T13939] netlink: 'syz.1.2528': attribute type 10 has an invalid length. [ 748.799716][T13939] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 748.809992][T12834] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 748.992594][T12834] usb 5-1: Using ep0 maxpacket: 32 [ 749.005931][T12834] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 749.042354][T12834] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 749.052599][T13954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2532'. [ 749.072275][T12834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.094170][T12834] usb 5-1: config 0 descriptor?? [ 749.111142][T12834] hub 5-1:0.0: bad descriptor, ignoring hub [ 749.126518][T12834] hub 5-1:0.0: probe with driver hub failed with error -5 [ 749.150109][T12834] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 749.172448][ T45] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 749.312495][ T45] usb 4-1: device descriptor read/64, error -71 [ 749.552712][ T45] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 749.712334][ T45] usb 4-1: device descriptor read/64, error -71 [ 749.779970][T13974] fuse: Invalid rootmode [ 749.822861][ T45] usb usb4-port1: attempt power cycle [ 749.971740][T13981] /dev/rnullb0: Can't open blockdev [ 750.083734][T13989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2542'. [ 750.172647][ T45] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 750.195418][ T45] usb 4-1: device descriptor read/8, error -71 [ 750.198152][T13993] /dev/rnullb0: Can't open blockdev [ 750.378651][T14003] fuse: Bad value for 'rootmode' [ 750.424964][T14005] /dev/rnullb0: Can't open blockdev [ 750.445065][ T45] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 750.473121][ T45] usb 4-1: device descriptor read/8, error -71 [ 750.587877][ T45] usb usb4-port1: unable to enumerate USB device [ 750.596822][ T5980] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 750.717811][T14015] /dev/rnullb0: Can't open blockdev [ 750.764480][ T5980] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 750.774199][ T5980] usb 2-1: config 150 has no interface number 0 [ 750.780665][ T5980] usb 2-1: config 150 interface 204 has no altsetting 0 [ 750.796737][T14017] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 750.799575][ T5980] usb 2-1: config 150 interface 1 has no altsetting 0 [ 750.813958][T14017] /dev/rnullb0: Can't open blockdev [ 750.814146][ T5980] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 750.829335][ T5980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.837965][ T5980] usb 2-1: Product: syz [ 750.843482][ T5980] usb 2-1: Manufacturer: syz [ 750.848190][ T5980] usb 2-1: SerialNumber: syz [ 751.075410][ T5980] xr_serial 2-1:150.204: xr_serial converter detected [ 751.252075][T14025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.266610][T14025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.475483][T14001] /dev/rnullb0: Can't open blockdev [ 751.481834][ T5980] xr_serial ttyUSB0: Failed to set reg 0x0c: -71 [ 751.488606][T12834] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 751.490041][ T5980] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 751.520052][ T5980] usb 2-1: USB disconnect, device number 50 [ 751.535944][ T5980] xr_serial 2-1:150.204: device disconnected [ 751.657800][T12834] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 751.666993][T12834] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 751.677845][T12834] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 751.688006][T12834] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 751.692724][ T5970] usb 5-1: USB disconnect, device number 19 [ 751.699511][T12834] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 751.720845][T12834] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 751.732943][T12834] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 751.747885][T12834] usb 3-1: Product: syz [ 751.758583][T12834] usb 3-1: Manufacturer: syz [ 751.775852][T12834] cdc_wdm 3-1:1.0: skipping garbage [ 751.784788][T12834] cdc_wdm 3-1:1.0: skipping garbage [ 751.793700][T12834] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 751.800320][T12834] cdc_wdm 3-1:1.0: Unknown control protocol [ 751.943531][T14030] fuse: Bad value for 'rootmode' [ 752.017444][T14032] syz.3.2557: attempt to access beyond end of device [ 752.017444][T14032] loop3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 752.046465][T14032] gfs2: error -5 reading superblock [ 752.143016][ T5970] usb 3-1: USB disconnect, device number 71 [ 752.986299][T14060] fuse: Bad value for 'rootmode' [ 753.002400][T14062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2567'. [ 753.046316][ T5980] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 753.107216][T14066] /dev/rnullb0: Can't open blockdev [ 753.251210][ T5980] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 753.267316][ T5980] usb 4-1: config 0 has no interface number 0 [ 753.281920][ T5980] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 753.296586][ T5980] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 753.311509][ T5980] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 753.322519][T11770] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 753.338737][ T5980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.349582][ T5980] usb 4-1: Product: syz [ 753.362250][ T5980] usb 4-1: Manufacturer: syz [ 753.366888][ T5980] usb 4-1: SerialNumber: syz [ 753.377670][ T5980] usb 4-1: config 0 descriptor?? [ 753.383702][T14054] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 753.404097][ T5980] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 753.429071][ T5980] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 753.495823][T11770] usb 5-1: too many configurations: 141, using maximum allowed: 8 [ 753.511887][T11770] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 753.529498][T11770] usb 5-1: can't read configurations, error -61 [ 753.665959][T14075] /dev/rnullb0: Can't open blockdev [ 753.673485][T11770] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 753.765929][T14077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 753.823808][T14079] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 753.831137][T14079] /dev/rnullb0: Can't open blockdev [ 753.844413][T14054] /dev/rnullb0: Can't open blockdev [ 753.850419][T11770] usb 5-1: too many configurations: 141, using maximum allowed: 8 [ 753.869089][T12834] usb 4-1: USB disconnect, device number 104 [ 753.883888][T11770] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 753.894411][T11770] usb 5-1: can't read configurations, error -61 [ 753.918154][T11770] usb usb5-port1: attempt power cycle [ 753.925408][T12834] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 753.958296][T12834] cyberjack 4-1:0.69: device disconnected [ 754.282332][T11770] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 754.314053][T11770] usb 5-1: too many configurations: 141, using maximum allowed: 8 [ 754.336035][T11770] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 754.354188][T11770] usb 5-1: can't read configurations, error -61 [ 754.398201][T14089] fuse: Unknown parameter 'use00000000000000000000' [ 754.492464][T11770] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 754.506459][T14091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2578'. [ 754.544493][T11770] usb 5-1: too many configurations: 141, using maximum allowed: 8 [ 754.555646][T11770] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 754.567673][T11770] usb 5-1: can't read configurations, error -61 [ 754.590839][T11770] usb usb5-port1: unable to enumerate USB device [ 754.791634][T14103] /dev/rnullb0: Can't open blockdev [ 754.972502][T11770] usb 3-1: new low-speed USB device number 72 using dummy_hcd [ 755.133285][T11770] usb 3-1: Invalid ep0 maxpacket: 64 [ 755.273900][T11770] usb 3-1: new low-speed USB device number 73 using dummy_hcd [ 755.433035][T11770] usb 3-1: Invalid ep0 maxpacket: 64 [ 755.444756][T11770] usb usb3-port1: attempt power cycle [ 755.802814][T11770] usb 3-1: new low-speed USB device number 74 using dummy_hcd [ 755.839739][T11770] usb 3-1: Invalid ep0 maxpacket: 64 [ 755.900703][T14117] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2587'. [ 755.917003][T14117] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2587'. [ 755.927219][T14117] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2587'. [ 755.972797][T11770] usb 3-1: new low-speed USB device number 75 using dummy_hcd [ 755.986607][T14120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2588'. [ 755.997337][T11770] usb 3-1: Invalid ep0 maxpacket: 64 [ 756.010287][T11770] usb usb3-port1: unable to enumerate USB device [ 756.120984][T14126] /dev/rnullb0: Can't open blockdev [ 756.127575][T14125] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2590'. [ 756.160757][T14125] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2590'. [ 756.191232][T14125] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2590'. [ 756.329317][T14140] batadv_slave_1: entered promiscuous mode [ 756.433242][T11770] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 756.582443][ T45] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 756.604067][T11770] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 756.620505][T11770] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 756.630516][T11770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 756.639876][T11770] usb 4-1: Product: syz [ 756.644644][T11770] usb 4-1: Manufacturer: syz [ 756.649926][T11770] usb 4-1: SerialNumber: syz [ 756.674903][ T5980] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 756.742353][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 756.751892][ T45] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 756.761607][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.770179][ T45] usb 5-1: Product: syz [ 756.774568][ T45] usb 5-1: Manufacturer: syz [ 756.779192][ T45] usb 5-1: SerialNumber: syz [ 756.787323][ T45] usb 5-1: config 0 descriptor?? [ 756.855311][ T5980] usb 2-1: not running at top speed; connect to a high speed hub [ 756.864789][ T5980] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 756.866872][T11770] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 105 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 756.875304][ T5980] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 756.895287][ T5980] usb 2-1: config 1 has no interface number 1 [ 756.901480][ T5980] usb 2-1: too many endpoints for config 1 interface 2 altsetting 16: 224, using maximum allowed: 30 [ 756.913184][ T5980] usb 2-1: config 1 interface 2 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 224 [ 756.926509][ T5980] usb 2-1: config 1 interface 2 has no altsetting 0 [ 756.940297][ T5980] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 756.949527][ T5980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.957620][ T5980] usb 2-1: Product: syz [ 756.966021][ T5980] usb 2-1: Manufacturer: syz [ 756.970665][ T5980] usb 2-1: SerialNumber: syz [ 757.143300][T14143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.152861][T14143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.202742][ T45] airspy 5-1:0.0: Board ID: 00 [ 757.207684][ T45] airspy 5-1:0.0: Firmware version: [ 757.233169][T11770] usb 4-1: USB disconnect, device number 105 [ 757.257797][T11770] usblp0: removed [ 757.298970][ T5980] usb 2-1: USB disconnect, device number 51 [ 757.328166][ T8255] udevd[8255]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 757.409286][ T45] airspy 5-1:0.0: usb_control_msg() failed -71 request 11 [ 757.427035][ T45] airspy 5-1:0.0: Registered as swradio24 [ 757.433792][ T45] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 757.450645][ T45] usb 5-1: USB disconnect, device number 24 [ 757.457860][T14139] batadv_slave_1: left promiscuous mode [ 757.817790][T14149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2597'. [ 757.880727][T14151] /dev/rnullb0: Can't open blockdev [ 758.142326][ T45] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 758.246652][T14166] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 758.310043][T14167] IPVS: sync thread started: state = MASTER, mcast_ifn = gre0, syncid = 0, id = 0 [ 758.336089][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 758.361607][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.413564][ T45] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 758.469240][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 758.483218][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.491465][ T45] usb 2-1: Product: syz [ 758.511774][ T45] usb 2-1: Manufacturer: syz [ 758.527443][ T45] usb 2-1: SerialNumber: syz [ 758.812510][T12834] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 758.852526][ T5980] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 758.948181][ T45] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 758.959162][ T45] cdc_ncm 2-1:1.0: bind() failure [ 758.972112][ T45] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 758.984025][T12834] usb 3-1: Using ep0 maxpacket: 16 [ 758.985334][ T45] cdc_ncm 2-1:1.1: bind() failure [ 759.011220][T12834] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.012317][ T5980] usb 5-1: Using ep0 maxpacket: 8 [ 759.027408][T12834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 759.039463][T12834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 759.052805][T12834] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 759.065290][ T5980] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 759.071147][T12834] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 759.078656][ T5980] usb 5-1: config 0 has no interface number 0 [ 759.096762][ T5980] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 759.105876][T12834] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 759.117874][ T5980] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 759.136412][T12834] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 759.148148][T12834] usb 3-1: Manufacturer: syz [ 759.151948][ T5980] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 759.158161][T12834] usb 3-1: config 0 descriptor?? [ 759.170622][ T5980] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 759.187783][ T5980] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 759.197376][ T5980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.217847][ T5980] usb 5-1: config 0 descriptor?? [ 759.239654][ T5980] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 759.274110][T14189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2611'. [ 759.346631][T14192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.356502][T14192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.508396][ T5980] usb 5-1: USB disconnect, device number 25 [ 759.508468][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 759.536181][ T5980] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 759.572451][T12834] rc_core: IR keymap rc-hauppauge not found [ 759.578557][T12834] Registered IR keymap rc-empty [ 759.584316][ T5931] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 759.596752][T12834] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 759.622430][T12834] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 759.644394][T12834] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 759.650306][T14169] /dev/rnullb0: Can't open blockdev [ 759.672806][T14196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.683738][T11770] usb 2-1: USB disconnect, device number 52 [ 759.699755][T12834] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input26 [ 759.710547][T14196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.732180][T14171] /dev/rnullb0: Can't open blockdev [ 759.755802][T12834] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 759.763114][ T5931] usb 4-1: Using ep0 maxpacket: 16 [ 759.773300][T14204] /dev/rnullb0: Can't open blockdev [ 759.794229][ T5931] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 759.809344][T12834] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 759.817119][T14205] /dev/rnullb0: Can't open blockdev [ 759.823731][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.831800][ T5931] usb 4-1: Product: syz [ 759.837301][ T5931] usb 4-1: Manufacturer: syz [ 759.845056][ T5931] usb 4-1: SerialNumber: syz [ 759.852359][T12834] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 759.867345][ T5931] usb 4-1: config 0 descriptor?? [ 759.877363][T12834] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 759.887514][ T5931] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 759.908400][ T5931] usb 4-1: Detected FT232H [ 759.922501][T12834] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 759.953426][T12834] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 759.967428][T14208] /dev/rnullb0: Can't open blockdev [ 760.005379][T12834] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 760.042424][T12834] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 760.062487][T12834] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 760.071376][T14212] netlink: 'syz.2.2616': attribute type 1 has an invalid length. [ 760.079289][T14212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2616'. [ 760.088488][T12834] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 760.095961][ T5931] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 760.109273][T14212] /dev/rnullb0: Can't open blockdev [ 760.115867][ T5931] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 760.135084][T12834] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 760.145388][ T5931] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 760.159952][ T5931] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 760.170433][T12834] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 760.194238][ T5931] usb 4-1: USB disconnect, device number 106 [ 760.234425][ T5931] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 760.248188][T12834] usb 3-1: USB disconnect, device number 76 [ 760.273855][ T5931] ftdi_sio 4-1:0.0: device disconnected [ 760.497527][T14216] /dev/rnullb0: Can't open blockdev [ 760.660341][T14218] /dev/rnullb0: Can't open blockdev [ 760.725697][T14221] /dev/rnullb0: Can't open blockdev [ 760.773536][T14227] /dev/rnullb0: Can't open blockdev [ 760.996517][T14235] /dev/rnullb0: Can't open blockdev [ 761.051325][T14237] /dev/rnullb0: Can't open blockdev [ 761.310979][T14247] /dev/rnullb0: Can't open blockdev [ 761.348307][T14247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2628'. [ 761.417042][T14251] /dev/rnullb0: Can't open blockdev [ 761.523172][ T5931] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 761.692322][T12834] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 761.714937][ T5931] usb 3-1: not running at top speed; connect to a high speed hub [ 761.734065][ T5931] usb 3-1: config 9 has an invalid interface number: 214 but max is 2 [ 761.752320][ T5931] usb 3-1: config 9 has an invalid interface number: 57 but max is 2 [ 761.760455][ T5931] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 761.793041][ T5931] usb 3-1: config 9 has no interface number 1 [ 761.799344][ T5931] usb 3-1: config 9 has no interface number 2 [ 761.806033][ T5931] usb 3-1: config 9 interface 0 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 761.827225][ T5931] usb 3-1: config 9 interface 57 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 761.852896][ T5931] usb 3-1: config 9 interface 214 has no altsetting 0 [ 761.859826][ T5931] usb 3-1: config 9 interface 0 has no altsetting 0 [ 761.872149][T14271] /dev/rnullb0: Can't open blockdev [ 761.872541][T12834] usb 4-1: Using ep0 maxpacket: 16 [ 761.875286][T12834] usb 4-1: unable to get BOS descriptor or descriptor too short [ 761.902297][ T5931] usb 3-1: config 9 interface 57 has no altsetting 0 [ 761.911608][T12834] usb 4-1: config 1 has an invalid interface number: 231 but max is 0 [ 761.922777][ T5931] usb 3-1: New USB device found, idVendor=093a, idProduct=2474, bcdDevice=92.5a [ 761.932033][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.940441][T12834] usb 4-1: config 1 has no interface number 0 [ 761.947895][T12834] usb 4-1: config 1 interface 231 has no altsetting 0 [ 761.955910][ T5931] usb 3-1: Product: Ѝ [ 761.960019][ T5931] usb 3-1: Manufacturer:  [ 761.965906][ T5931] usb 3-1: SerialNumber: syz [ 761.973582][T12834] usb 4-1: string descriptor 0 read error: -22 [ 761.980106][T12834] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=5c.f5 [ 762.008867][T12834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.233943][T12834] usbtest 4-1:1.231: Linux gadget zero [ 762.239474][T12834] usbtest 4-1:1.231: high-speed {control in/out int-out} tests (+alt) [ 762.408066][T14246] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2627'. [ 762.459172][T11770] usb 4-1: USB disconnect, device number 107 [ 762.530187][ T5931] gspca_main: pac207-2.14.0 probing 093a:2474 [ 762.549272][ T5931] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 762.575319][ T5931] usb 3-1: USB disconnect, device number 77 [ 762.653249][T12834] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 762.822435][T12834] usb 5-1: Using ep0 maxpacket: 16 [ 762.829580][T12834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.843906][T12834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.854736][T12834] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 762.868723][T12834] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 762.878379][T12834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.897463][T12834] usb 5-1: config 0 descriptor?? [ 763.296107][T14300] /dev/rnullb0: Can't open blockdev [ 763.332146][T12834] microsoft 0003:045E:07DA.000D: item 0 4 0 8 parsing failed [ 763.356634][T12834] microsoft 0003:045E:07DA.000D: parse failed [ 763.373419][T12834] microsoft 0003:045E:07DA.000D: probe with driver microsoft failed with error -22 [ 763.496194][T14302] /dev/rnullb0: Can't open blockdev [ 763.531734][T12834] usb 5-1: USB disconnect, device number 26 [ 763.840016][T14306] /dev/rnullb0: Can't open blockdev [ 763.917779][T14311] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 763.935632][T14311] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 763.944732][T14311] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 763.963536][T14311] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 763.976104][T14311] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 764.417489][T14327] /dev/rnullb0: Can't open blockdev [ 764.460698][T14328] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2650'. [ 764.496444][T14320] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2650'. [ 764.543505][T14320] /dev/rnullb0: Can't open blockdev [ 764.555227][ T5166] Bluetooth: hci5: unexpected cc 0x040d length: 63 > 7 [ 764.563879][ T5166] Bluetooth: hci5: unexpected event for opcode 0x040d [ 764.598134][T14330] /dev/rnullb0: Can't open blockdev [ 764.636375][ T5951] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.701347][T14309] chnl_net:caif_netlink_parms(): no params data found [ 764.759494][ T5951] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.860556][ T5951] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.953609][ T5951] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.057041][T14309] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.069640][T14309] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.078546][T14309] bridge_slave_0: entered allmulticast mode [ 765.084881][ T30] audit: type=1800 audit(1752825787.540:190): pid=14349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2658" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 765.115203][T14309] bridge_slave_0: entered promiscuous mode [ 765.152528][T14309] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.159737][T14309] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.167234][T14309] bridge_slave_1: entered allmulticast mode [ 765.177326][T14309] bridge_slave_1: entered promiscuous mode [ 765.257352][T14309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.270986][T14309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.376936][T14309] team0: Port device team_slave_0 added [ 765.387787][T14309] team0: Port device team_slave_1 added [ 765.504212][ T5951] bridge_slave_1: left allmulticast mode [ 765.509915][ T5951] bridge_slave_1: left promiscuous mode [ 765.522581][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.555262][ T5951] bridge_slave_0: left allmulticast mode [ 765.561134][ T5951] bridge_slave_0: left promiscuous mode [ 765.567385][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.043912][ T5166] Bluetooth: hci2: command tx timeout [ 766.196085][T14363] /dev/rnullb0: Can't open blockdev [ 766.293153][T14366] binder: 14358:14366 ioctl c0306201 2000000003c0 returned -22 [ 767.138919][T14381] /dev/rnullb0: Can't open blockdev [ 767.257178][ T5951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.305572][ T5951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.319308][ T5951] bond0 (unregistering): Released all slaves [ 767.342005][T14309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 767.352298][T14309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.381540][T14309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.395014][T14309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.402081][T14309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.435103][T14309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.540763][ T5951] tipc: Disabling bearer [ 767.550018][ T5951] tipc: Left network mode [ 767.603958][T14393] syzkaller0: create flow: hash 2805493621 index 1 [ 767.762971][T14406] /dev/rnullb0: Can't open blockdev [ 767.878436][T14393] syzkaller0: delete flow: hash 2805493621 index 1 [ 768.120887][ T5166] Bluetooth: hci2: command tx timeout [ 768.434285][ T5938] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 768.598412][ T5938] usb 2-1: Using ep0 maxpacket: 32 [ 768.604484][ T5166] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 768.617574][ T5166] Bluetooth: hci5: Injecting HCI hardware error event [ 768.627236][T14311] Bluetooth: hci5: hardware error 0x00 [ 768.644345][ T5938] usb 2-1: config 0 interface 0 has no altsetting 0 [ 768.665865][ T5938] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 768.708960][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.732355][ T5938] usb 2-1: Product: syz [ 768.736582][ T5938] usb 2-1: Manufacturer: syz [ 768.741385][ T5938] usb 2-1: SerialNumber: syz [ 768.795671][ T5938] usb 2-1: config 0 descriptor?? [ 769.017859][ T5938] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 769.401401][T14437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.415613][T14437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.195835][ T5166] Bluetooth: hci2: command tx timeout [ 770.695685][T14309] hsr_slave_0: entered promiscuous mode [ 770.702087][T14309] hsr_slave_1: entered promiscuous mode [ 770.708596][T14309] debugfs: 'hsr0' already exists in 'hsr' [ 770.714380][T14309] Cannot create hsr debugfs directory [ 770.754223][T14311] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 770.915588][ T5938] usb 2-1: USB disconnect, device number 53 [ 771.136997][ T5951] hsr_slave_0: left promiscuous mode [ 771.145524][ T5951] hsr_slave_1: left promiscuous mode [ 771.151507][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 771.163073][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.171422][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 771.180570][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.218015][ T5951] veth1_macvtap: left promiscuous mode [ 771.224703][ T5951] veth0_macvtap: left promiscuous mode [ 771.230446][ T5951] veth1_vlan: left promiscuous mode [ 771.242794][ T5951] veth0_vlan: left promiscuous mode [ 772.001645][T14452] No control pipe specified [ 772.228815][ T5166] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 772.250773][ T5166] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 772.261180][ T5166] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 772.275562][ T5166] Bluetooth: hci2: command tx timeout [ 772.295341][ T5166] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 772.307041][ T5166] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 772.314958][ T5951] team0 (unregistering): Port device team_slave_1 removed [ 772.373793][ T5951] team0 (unregistering): Port device team_slave_0 removed [ 772.950496][T14446] netlink: 'syz.1.2680': attribute type 6 has an invalid length. [ 773.200180][T14460] /dev/rnullb0: Can't open blockdev [ 773.613767][ T5938] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 773.810914][ T5938] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 773.858888][ T5938] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 773.880341][ T5938] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 773.904083][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.049912][ T5951] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.112984][T14456] chnl_net:caif_netlink_parms(): no params data found [ 774.123069][ T5970] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 774.226236][ T5951] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.240124][ T5938] usb 5-1: usb_control_msg returned -32 [ 774.255858][ T5938] usbtmc 5-1:16.0: can't read capabilities [ 774.273515][ T5970] usb 2-1: device descriptor read/64, error -71 [ 774.337305][ T5951] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.353329][T14311] Bluetooth: hci1: command tx timeout [ 774.488655][ T5951] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.522441][ T5970] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 774.584351][T14309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 774.598544][T14309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 774.616941][T14309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 774.650546][T14456] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.661011][T14456] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.669270][T14456] bridge_slave_0: entered allmulticast mode [ 774.672361][ T5970] usb 2-1: device descriptor read/64, error -71 [ 774.678108][T14456] bridge_slave_0: entered promiscuous mode [ 774.689930][T14309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 774.708927][T14456] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.716269][T14456] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.724652][T14456] bridge_slave_1: entered allmulticast mode [ 774.731899][T14456] bridge_slave_1: entered promiscuous mode [ 774.782704][ T5970] usb usb2-port1: attempt power cycle [ 774.800406][T14456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.825642][T14456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.967262][T14456] team0: Port device team_slave_0 added [ 774.977735][T14456] team0: Port device team_slave_1 added [ 775.001175][ T5951] bridge_slave_1: left allmulticast mode [ 775.007129][ T5951] bridge_slave_1: left promiscuous mode [ 775.013522][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.027056][ T5951] bridge_slave_0: left allmulticast mode [ 775.032971][ T5951] bridge_slave_0: left promiscuous mode [ 775.038950][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.132381][ T5970] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 775.160451][ T5970] usb 2-1: device descriptor read/8, error -71 [ 775.412635][ T5970] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 775.445768][ T5970] usb 2-1: device descriptor read/8, error -71 [ 775.504517][ T5951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 775.516069][ T5951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 775.526590][ T5951] bond0 (unregistering): Released all slaves [ 775.553901][ T5970] usb usb2-port1: unable to enumerate USB device [ 775.555209][T14456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.573496][T14456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.605923][T14456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.634984][ T5951] IPVS: stopping master sync thread 14167 ... [ 775.693578][T14456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.700631][T14456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.728422][T14456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.856455][T14456] hsr_slave_0: entered promiscuous mode [ 775.864122][T14456] hsr_slave_1: entered promiscuous mode [ 775.870455][T14456] debugfs: 'hsr0' already exists in 'hsr' [ 775.879999][T14456] Cannot create hsr debugfs directory [ 775.929757][ T5951] hsr_slave_0: left promiscuous mode [ 775.939272][ T5951] hsr_slave_1: left promiscuous mode [ 775.946235][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.953941][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.961763][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 775.969564][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.991573][ T5951] veth1_macvtap: left promiscuous mode [ 775.997436][ T5951] veth0_macvtap: left promiscuous mode [ 776.003285][ T5951] veth1_vlan: left promiscuous mode [ 776.008626][ T5951] veth0_vlan: left promiscuous mode [ 776.417072][T11770] usb 5-1: USB disconnect, device number 27 [ 776.446385][T14311] Bluetooth: hci1: command tx timeout [ 776.720912][T14504] /dev/rnullb0: Can't open blockdev [ 776.744079][T12834] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 776.806239][ T5951] team0 (unregistering): Port device team_slave_1 removed [ 776.865990][ T5951] team0 (unregistering): Port device team_slave_0 removed [ 776.912797][T12834] usb 2-1: Using ep0 maxpacket: 16 [ 776.921160][T12834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 776.938174][T12834] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 776.947675][T12834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.969037][T12834] usb 2-1: config 0 descriptor?? [ 776.994678][T12834] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 777.590514][T14507] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 777.621142][T14507] /dev/rnullb0: Can't open blockdev [ 777.698343][T14309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.757592][T14510] netlink: 'syz.4.2690': attribute type 1 has an invalid length. [ 777.772881][T14510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2690'. [ 777.841003][T14309] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.865623][ T8153] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.872888][ T8153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.900612][T14513] /dev/rnullb0: Can't open blockdev [ 778.032265][ T773] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.039485][ T773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.522520][T14311] Bluetooth: hci1: command tx timeout [ 778.582155][T14456] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 778.592718][ T5879] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 778.596084][T14456] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 778.641383][T14456] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 778.656275][T14456] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 778.764864][T14309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 778.783640][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 778.796284][ T5879] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 778.813945][ T5879] usb 5-1: config 0 has no interface number 0 [ 778.835712][ T5879] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 778.857334][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.879751][ T5879] usb 5-1: Product: syz [ 778.893926][ T5879] usb 5-1: Manufacturer: syz [ 778.904272][ T5879] usb 5-1: SerialNumber: syz [ 778.931019][ T5879] usb 5-1: config 0 descriptor?? [ 778.954815][ T5879] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 778.962020][T14309] veth0_vlan: entered promiscuous mode [ 779.000855][T14456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.022964][T14309] veth1_vlan: entered promiscuous mode [ 779.087186][T14456] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.112112][ T5906] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.119395][ T5906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.159834][T14520] /dev/rnullb0: Can't open blockdev [ 779.167787][ T5879] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0x00, error -71) [ 779.177224][ T5906] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.184601][ T5906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.191359][ T5879] gspca_xirlink_cit: Failed to write a register (index 0x0112, value 0x01, error -71) [ 779.229104][ T5879] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x00, error -71) [ 779.248656][ T5879] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x01, error -71) [ 779.256721][T14309] veth0_macvtap: entered promiscuous mode [ 779.264009][ T5879] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x00, error -71) [ 779.279684][ T5879] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x01, error -71) [ 779.293752][T14309] veth1_macvtap: entered promiscuous mode [ 779.312777][ T5879] gspca_xirlink_cit: Failed to write a register (index 0x0409, value 0x0D, error -71) [ 779.343655][ T5879] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -71) [ 779.371922][ T5879] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -71) [ 779.408241][ T5879] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 779.424395][T14309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 779.452875][ T5879] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 779.467379][T14309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 779.478145][ T5980] usb 2-1: USB disconnect, device number 58 [ 779.495453][ T5879] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 779.545991][ T5906] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.564606][ T5879] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 779.583781][ T5906] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.593163][ T5879] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 779.624272][ T5879] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 779.635858][ T5906] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.648936][ T5879] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 779.659450][ T5906] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.685778][ T5879] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 779.717269][ T5879] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 779.754849][ T5879] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 779.821798][T14556] loop6: detected capacity change from 0 to 7 [ 779.848232][ T5879] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input27 [ 779.919630][T14556] Dev loop6: unable to read RDB block 7 [ 779.933668][ T5879] usb 5-1: USB disconnect, device number 28 [ 779.990597][T14556] loop6: unable to read partition table [ 780.025871][ T5906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.051195][ T5906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.080785][T14556] loop6: partition table beyond EOD, truncated [ 780.164668][T14556] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 780.310611][ T5966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.319437][T14456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 780.348570][ T5966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.434032][T14568] /dev/rnullb0: Can't open blockdev [ 780.564992][T14456] veth0_vlan: entered promiscuous mode [ 780.602121][T14311] Bluetooth: hci1: command tx timeout [ 780.640737][T14456] veth1_vlan: entered promiscuous mode [ 780.868640][T14456] veth0_macvtap: entered promiscuous mode [ 780.905812][T14456] veth1_macvtap: entered promiscuous mode [ 780.950019][T14456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 780.986041][T14456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.043152][ T5906] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.083764][ T5906] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.155808][ T773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.179344][ T773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.448753][ T773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.495405][ T773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.578055][ T5906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.595802][ T5906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.675949][T14603] /dev/rnullb0: Can't open blockdev [ 781.840119][T14607] vivid-000: disconnect [ 781.845688][T14607] /dev/rnullb0: Can't open blockdev [ 781.851968][T14606] vivid-000: reconnect [ 781.930246][T14613] /dev/rnullb0: Can't open blockdev [ 781.985400][T14616] /dev/rnullb0: Can't open blockdev [ 782.025849][T14619] netlink: 'syz.1.2707': attribute type 10 has an invalid length. [ 782.116797][T14619] team0: Port device geneve1 added [ 782.196088][T14311] Bluetooth: hci1: Dropping invalid advertising data [ 782.206081][T14311] Bluetooth: hci1: Dropping invalid advertising data [ 782.213378][T14311] Bluetooth: hci1: Malformed LE Event: 0x02 [ 782.393331][T14642] overlayfs: failed to resolve './file0': -2 [ 782.535212][T14650] /dev/rnullb0: Can't open blockdev [ 782.812434][ T5879] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 782.860946][T14654] /dev/rnullb0: Can't open blockdev [ 782.962287][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 782.970909][ T5879] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 782.982249][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.990359][ T5879] usb 5-1: Product: syz [ 782.997936][ T5879] usb 5-1: Manufacturer: syz [ 783.002709][ T5879] usb 5-1: SerialNumber: syz [ 783.009643][ T5879] usb 5-1: config 0 descriptor?? [ 783.090667][T14658] /dev/rnullb0: Can't open blockdev [ 783.144025][T11770] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 783.305719][T11770] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 783.319597][T11770] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 783.336333][T11770] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 783.336368][T11770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.342476][ T5938] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 783.422409][ T5879] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 783.456828][ T5879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 783.474143][ T5879] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 783.485994][ T5879] usb 5-1: media controller created [ 783.492558][ T5938] usb 4-1: Using ep0 maxpacket: 8 [ 783.524553][ T5938] usb 4-1: unable to get BOS descriptor or descriptor too short [ 783.527191][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 783.550717][T14666] /dev/rnullb0: Can't open blockdev [ 783.566594][ T5938] usb 4-1: config 7 has an invalid interface number: 204 but max is 0 [ 783.579198][ T5938] usb 4-1: config 7 has no interface number 0 [ 783.586144][ T5938] usb 4-1: too many endpoints for config 7 interface 204 altsetting 80: 241, using maximum allowed: 30 [ 783.622814][ T5879] zl10353_read_register: readreg error (reg=127, ret==0) [ 783.640272][ T5879] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 783.648759][ T5938] usb 4-1: config 7 interface 204 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 241 [ 783.648801][ T5938] usb 4-1: config 7 interface 204 has no altsetting 0 [ 783.681611][ T5938] usb 4-1: string descriptor 0 read error: -22 [ 783.693884][T11770] usb 3-1: usb_control_msg returned -32 [ 783.702147][T11770] usbtmc 3-1:16.0: can't read capabilities [ 783.702155][ T5879] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 783.718419][ T5938] usb 4-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 783.727985][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.752876][ T5879] usb 5-1: USB disconnect, device number 29 [ 783.778094][ T5938] hub 4-1:7.204: bad descriptor, ignoring hub [ 783.823962][ T5938] hub 4-1:7.204: probe with driver hub failed with error -5 [ 783.913155][ T5879] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 783.971733][ T5938] asix 4-1:7.204 (unnamed net_device) (uninitialized): invalid hw address, using random [ 783.988663][T14677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2725'. [ 784.386007][ T5938] asix 4-1:7.204 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 784.404395][ T5938] asix 4-1:7.204 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 784.586142][ T5938] asix 4-1:7.204 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 784.615300][ T5938] asix 4-1:7.204 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 784.639900][T14699] /dev/rnullb0: Can't open blockdev [ 784.649804][T14698] /dev/rnullb0: Can't open blockdev [ 784.817675][ T5938] asix 4-1:7.204 eth1: register 'asix' at usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet, 8e:08:7a:d5:6d:7f [ 784.860212][T14706] /dev/rnullb0: Can't open blockdev [ 785.034003][T14712] /dev/rnullb0: Can't open blockdev [ 785.034352][ T5938] usb 4-1: reset high-speed USB device number 108 using dummy_hcd [ 785.255927][ T5938] usb 4-1: unable to get BOS descriptor or descriptor too short [ 785.310692][ T30] audit: type=1326 audit(1752825807.770:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14723 comm="syz.4.2739" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ccc78e929 code=0x0 [ 785.403031][ T5972] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 785.420180][T14728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2739'. [ 785.582293][ T5972] usb 2-1: Using ep0 maxpacket: 16 [ 785.589782][ T5972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.605682][ T5972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.615940][ T5972] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 785.635263][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.653928][ T5972] usb 2-1: config 0 descriptor?? [ 785.672454][ T5931] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 785.774428][T14733] /dev/rnullb0: Can't open blockdev [ 785.822597][ T5931] usb 5-1: device descriptor read/64, error -71 [ 785.934867][ T5938] usb 3-1: USB disconnect, device number 78 [ 786.062917][ T5931] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 786.092115][ T5972] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.000E/input/input29 [ 786.202360][ T5931] usb 5-1: device descriptor read/64, error -71 [ 786.244950][ T5972] appleir 0003:05AC:8241.000E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 786.273835][T14716] /dev/rnullb0: Can't open blockdev [ 786.283615][T14740] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2741'. [ 786.304109][ T5972] usb 2-1: USB disconnect, device number 59 [ 786.329585][ T5931] usb usb5-port1: attempt power cycle [ 786.385277][T14740] /dev/rnullb0: Can't open blockdev [ 786.433801][T14741] fido_id[14741]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 786.682438][ T5931] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 786.703195][ T5931] usb 5-1: device descriptor read/8, error -71 [ 786.917111][T14748] /dev/rnullb0: Can't open blockdev [ 786.952327][ T5931] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 786.983359][ T5931] usb 5-1: device descriptor read/8, error -71 [ 787.024812][T14751] netlink: 'syz.1.2744': attribute type 58 has an invalid length. [ 787.096760][ T5931] usb usb5-port1: unable to enumerate USB device [ 788.987389][T14759] cgroup2: Unknown parameter 'meMory_recursiveprot' [ 789.432381][ T5931] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 789.606728][ T5931] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 789.616694][ T5931] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 789.629791][ T5931] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 789.639331][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.916069][ T5931] usb 5-1: usb_control_msg returned -32 [ 789.921765][ T5931] usbtmc 5-1:16.0: can't read capabilities [ 790.843580][ T5511] asix 4-1:7.204 eth1: Failed to read reg index 0x0000: -110 [ 791.023296][ T5931] usb 4-1: USB disconnect, device number 108 [ 791.053387][ T5931] asix 4-1:7.204 eth1: unregister 'asix' usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet [ 791.077932][ T5931] ------------[ cut here ]------------ [ 791.085027][ T5931] WARNING: net/sched/sch_generic.c:1498 at dev_shutdown+0x3e1/0x440, CPU#0: kworker/0:4/5931 [ 791.095998][ T5931] Modules linked in: [ 791.100741][ T5931] CPU: 0 UID: 0 PID: 5931 Comm: kworker/0:4 Not tainted 6.16.0-rc6-next-20250717-syzkaller #0 PREEMPT(full) [ 791.113026][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 791.123799][ T5931] Workqueue: usb_hub_wq hub_event [ 791.128976][ T5931] RIP: 0010:dev_shutdown+0x3e1/0x440 [ 791.136288][ T5931] Code: 55 a5 9c f8 49 83 7d 00 00 75 19 e8 b9 57 39 f8 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 96 45 fb 01 cc e8 a0 57 39 f8 90 <0f> 0b 90 eb e1 e8 95 57 39 f8 4c 89 e7 be 03 00 00 00 e8 e8 c9 47 [ 791.157726][ T5931] RSP: 0018:ffffc9000471f180 EFLAGS: 00010287 [ 791.164532][ T5931] RAX: ffffffff8986aa10 RBX: ffff88805e59c4c8 RCX: 0000000000100000 [ 791.173192][ T5931] RDX: ffffc90015c95000 RSI: 0000000000004cd7 RDI: 0000000000004cd8 [ 791.181882][ T5931] RBP: 0000000000000001 R08: ffffc9000471ef67 R09: 1ffff920008e3dec [ 791.190534][ T5931] R10: dffffc0000000000 R11: fffff520008e3ded R12: ffffffff8f981a90 [ 791.200775][ T5931] R13: ffff88805e59c5a8 R14: 1ffff1100bcb3899 R15: ffffffff8f981a80 [ 791.209725][ T5931] FS: 0000000000000000(0000) GS:ffff8881257ac000(0000) knlGS:0000000000000000 [ 791.219552][ T5931] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 791.226797][ T5931] CR2: 00005555829305c8 CR3: 0000000056290000 CR4: 00000000003526f0 [ 791.236493][ T5931] Call Trace: [ 791.239817][ T5931] [ 791.243764][ T5931] unregister_netdevice_many_notify+0xe0f/0x1ff0 [ 791.250258][ T5931] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 791.257129][ T5931] ? rtnl_net_dev_lock+0x257/0x2f0 [ 791.262343][ T5931] ? __pfx___mutex_lock+0x10/0x10 [ 791.268076][ T5931] unregister_netdevice_queue+0x33c/0x380 [ 791.273916][ T5931] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 791.282288][ T5931] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 791.287580][ T5931] unregister_netdev+0x1f/0x60 [ 791.292461][ T5931] usbnet_disconnect+0xcd/0x380 [ 791.297526][ T5931] usb_unbind_interface+0x26b/0x910 [ 791.302986][ T5931] ? __pfx_usb_unbind_interface+0x10/0x10 [ 791.308774][ T5931] device_release_driver_internal+0x4d9/0x800 [ 791.315045][ T5931] bus_remove_device+0x34d/0x410 [ 791.320062][ T5931] device_del+0x511/0x8e0 [ 791.324556][ T5931] ? __pm_runtime_barrier+0x212/0x460 [ 791.329996][ T5931] ? __pfx_device_del+0x10/0x10 [ 791.335918][ T5931] ? __pfx___mutex_lock+0x10/0x10 [ 791.341841][ T5931] usb_disable_device+0x3e9/0x8a0 [ 791.347015][ T5931] usb_disconnect+0x330/0x950 [ 791.351764][ T5931] hub_event+0x1cf5/0x4a20 [ 791.356339][ T5931] ? do_raw_spin_lock+0x121/0x290 [ 791.361436][ T5931] ? register_lock_class+0x51/0x320 [ 791.366787][ T5931] ? __pfx_hub_event+0x10/0x10 [ 791.371605][ T5931] ? process_scheduled_works+0x9ef/0x17b0 [ 791.377467][ T5931] ? _raw_spin_unlock_irq+0x23/0x50 [ 791.382774][ T5931] ? process_scheduled_works+0x9ef/0x17b0 [ 791.388550][ T5931] ? process_scheduled_works+0x9ef/0x17b0 [ 791.394587][ T5931] process_scheduled_works+0xae1/0x17b0 [ 791.400239][ T5931] ? __pfx_process_scheduled_works+0x10/0x10 [ 791.406378][ T5931] worker_thread+0x8a0/0xda0 [ 791.411055][ T5931] ? __kthread_parkme+0x7b/0x200 [ 791.416124][ T5931] kthread+0x70e/0x8a0 [ 791.420434][ T5931] ? __pfx_worker_thread+0x10/0x10 [ 791.425662][ T5931] ? __pfx_kthread+0x10/0x10 [ 791.430323][ T5931] ? _raw_spin_unlock_irq+0x23/0x50 [ 791.435615][ T5931] ? lockdep_hardirqs_on+0x9c/0x150 [ 791.441847][ T5931] ? __pfx_kthread+0x10/0x10 [ 791.447346][ T5931] ret_from_fork+0x3f9/0x770 [ 791.452014][ T5931] ? __pfx_ret_from_fork+0x10/0x10 [ 791.457330][ T5931] ? __switch_to_asm+0x39/0x70 [ 791.462282][ T5931] ? __switch_to_asm+0x33/0x70 [ 791.467192][ T5931] ? __pfx_kthread+0x10/0x10 [ 791.472112][ T5931] ret_from_fork_asm+0x1a/0x30 [ 791.477094][ T5931] [ 791.480155][ T5931] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 791.487467][ T5931] CPU: 0 UID: 0 PID: 5931 Comm: kworker/0:4 Not tainted 6.16.0-rc6-next-20250717-syzkaller #0 PREEMPT(full) [ 791.499040][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 791.509125][ T5931] Workqueue: usb_hub_wq hub_event [ 791.514176][ T5931] Call Trace: [ 791.517469][ T5931] [ 791.520403][ T5931] dump_stack_lvl+0x99/0x250 [ 791.525008][ T5931] ? __asan_memcpy+0x40/0x70 [ 791.529623][ T5931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 791.534836][ T5931] ? __pfx__printk+0x10/0x10 [ 791.539448][ T5931] vpanic+0x281/0x750 [ 791.543444][ T5931] ? __pfx_vpanic+0x10/0x10 [ 791.547956][ T5931] ? is_bpf_text_address+0x292/0x2b0 [ 791.553252][ T5931] ? is_bpf_text_address+0x26/0x2b0 [ 791.558467][ T5931] panic+0xb9/0xc0 [ 791.562199][ T5931] ? __pfx_panic+0x10/0x10 [ 791.566639][ T5931] ? ret_from_fork_asm+0x1a/0x30 [ 791.571596][ T5931] __warn+0x334/0x4c0 [ 791.575614][ T5931] ? dev_shutdown+0x3e1/0x440 [ 791.580482][ T5931] ? dev_shutdown+0x3e1/0x440 [ 791.585182][ T5931] report_bug+0x2be/0x4f0 [ 791.589522][ T5931] ? dev_shutdown+0x3e1/0x440 [ 791.594208][ T5931] ? dev_shutdown+0x3e1/0x440 [ 791.598901][ T5931] ? dev_shutdown+0x3e3/0x440 [ 791.603615][ T5931] handle_bug+0x84/0x160 [ 791.607874][ T5931] exc_invalid_op+0x1a/0x50 [ 791.612420][ T5931] asm_exc_invalid_op+0x1a/0x20 [ 791.617278][ T5931] RIP: 0010:dev_shutdown+0x3e1/0x440 [ 791.622605][ T5931] Code: 55 a5 9c f8 49 83 7d 00 00 75 19 e8 b9 57 39 f8 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 96 45 fb 01 cc e8 a0 57 39 f8 90 <0f> 0b 90 eb e1 e8 95 57 39 f8 4c 89 e7 be 03 00 00 00 e8 e8 c9 47 [ 791.642247][ T5931] RSP: 0018:ffffc9000471f180 EFLAGS: 00010287 [ 791.648871][ T5931] RAX: ffffffff8986aa10 RBX: ffff88805e59c4c8 RCX: 0000000000100000 [ 791.656854][ T5931] RDX: ffffc90015c95000 RSI: 0000000000004cd7 RDI: 0000000000004cd8 [ 791.664834][ T5931] RBP: 0000000000000001 R08: ffffc9000471ef67 R09: 1ffff920008e3dec [ 791.672817][ T5931] R10: dffffc0000000000 R11: fffff520008e3ded R12: ffffffff8f981a90 [ 791.680793][ T5931] R13: ffff88805e59c5a8 R14: 1ffff1100bcb3899 R15: ffffffff8f981a80 [ 791.688781][ T5931] ? dev_shutdown+0x3e0/0x440 [ 791.693520][ T5931] unregister_netdevice_many_notify+0xe0f/0x1ff0 [ 791.699883][ T5931] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 791.706657][ T5931] ? rtnl_net_dev_lock+0x257/0x2f0 [ 791.711793][ T5931] ? __pfx___mutex_lock+0x10/0x10 [ 791.716836][ T5931] unregister_netdevice_queue+0x33c/0x380 [ 791.722566][ T5931] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 791.728825][ T5931] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 791.733949][ T5931] unregister_netdev+0x1f/0x60 [ 791.738718][ T5931] usbnet_disconnect+0xcd/0x380 [ 791.743579][ T5931] usb_unbind_interface+0x26b/0x910 [ 791.748801][ T5931] ? __pfx_usb_unbind_interface+0x10/0x10 [ 791.754538][ T5931] device_release_driver_internal+0x4d9/0x800 [ 791.760653][ T5931] bus_remove_device+0x34d/0x410 [ 791.765626][ T5931] device_del+0x511/0x8e0 [ 791.769968][ T5931] ? __pm_runtime_barrier+0x212/0x460 [ 791.775352][ T5931] ? __pfx_device_del+0x10/0x10 [ 791.780210][ T5931] ? __pfx___mutex_lock+0x10/0x10 [ 791.785424][ T5931] usb_disable_device+0x3e9/0x8a0 [ 791.790464][ T5931] usb_disconnect+0x330/0x950 [ 791.795151][ T5931] hub_event+0x1cf5/0x4a20 [ 791.799603][ T5931] ? do_raw_spin_lock+0x121/0x290 [ 791.804687][ T5931] ? register_lock_class+0x51/0x320 [ 791.810106][ T5931] ? __pfx_hub_event+0x10/0x10 [ 791.814896][ T5931] ? process_scheduled_works+0x9ef/0x17b0 [ 791.820633][ T5931] ? _raw_spin_unlock_irq+0x23/0x50 [ 791.825836][ T5931] ? process_scheduled_works+0x9ef/0x17b0 [ 791.831566][ T5931] ? process_scheduled_works+0x9ef/0x17b0 [ 791.837299][ T5931] process_scheduled_works+0xae1/0x17b0 [ 791.842919][ T5931] ? __pfx_process_scheduled_works+0x10/0x10 [ 791.848968][ T5931] worker_thread+0x8a0/0xda0 [ 791.853606][ T5931] ? __kthread_parkme+0x7b/0x200 [ 791.858586][ T5931] kthread+0x70e/0x8a0 [ 791.862679][ T5931] ? __pfx_worker_thread+0x10/0x10 [ 791.867809][ T5931] ? __pfx_kthread+0x10/0x10 [ 791.872414][ T5931] ? _raw_spin_unlock_irq+0x23/0x50 [ 791.877711][ T5931] ? lockdep_hardirqs_on+0x9c/0x150 [ 791.882918][ T5931] ? __pfx_kthread+0x10/0x10 [ 791.887526][ T5931] ret_from_fork+0x3f9/0x770 [ 791.892131][ T5931] ? __pfx_ret_from_fork+0x10/0x10 [ 791.897345][ T5931] ? __switch_to_asm+0x39/0x70 [ 791.902142][ T5931] ? __switch_to_asm+0x33/0x70 [ 791.906911][ T5931] ? __pfx_kthread+0x10/0x10 [ 791.912300][ T5931] ret_from_fork_asm+0x1a/0x30 [ 791.917085][ T5931] [ 791.920362][ T5931] Kernel Offset: disabled [ 791.924700][ T5931] Rebooting in 86400 seconds..