last executing test programs: 35.777090754s ago: executing program 2 (id=1213): creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='minix\x00', 0x0, 0x0) 35.719290925s ago: executing program 2 (id=1214): keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='\x00', 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="020300030a000000000700000000000002000100000000000000020d0000f8ff030006000000000002004e210000008000000000000000000300050032530da539470db1161414000000000000000000199aeadaaae271bdbff1180b9a50ac335947081a395a22977f768d38959c6e24644c8da304ec7b55b1fe113194d337c691d0cb482599522b039acb79e4f73435"], 0x50}, 0x1, 0x7}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201f0bc8c7900701d57d9acd27e22c9d500220edf104c05c10687c274e36d57f4dac557d6df9d7f010102030108000000000000001f6b6fac9665dbd208128cb522"], 0x0) sendto$inet6(r3, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty, 0x10}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) shutdown(r3, 0x1) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfc, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000040)={'erspan0\x00', r5, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000400)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090295000301a0a0090904000000010100000a2401900c020201020c240202060203840c0008120daa471fcfda0a0007000500190c240803090034c5e5eb68a3082405010201013f0924030201030301"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x2d0, 0x7c0, 0x1, 0x3, 0xd59f80, 0x8, 0x5, 0xb, 0x9, 0x8, 0x80, 0xe72, 0x0, 0x9, 0x35, 0x1, {0x4, 0x8001}, 0x3, 0x5}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r7, 0xc008551c, &(0x7f00000020c0)=ANY=[@ANYBLOB="0400"/15]) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x24, 0x0, 0x2c81de66bcfd5aad, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x28, 0x3f7, 0x4, 0x70bc29, 0x35dfdbfd, {0x46, 0x30, './cgroup', './cgroup'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x200008c5}, 0x51) 32.62356604s ago: executing program 2 (id=1222): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000002000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r2, 0x3}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000300)={0x1d, r2, 0x3, {0x0, 0x0, 0x3}, 0x1}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r4, 0x1, 0x1, 0x6, @local}, 0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)={0x178, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x200480d0}, 0x40014) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x2, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000080)=ANY=[]) read(r1, 0x0, 0x0) r7 = creat(&(0x7f0000001380)='./file0\x00', 0x12c) sendto$inet(r7, &(0x7f0000000180)="cdac559ea311626d96cccde4ebdd932000613d3d94a05406e7b8a89826bd4ea06274a45aeb0a882ad11af72ace77fa24c4be28b30c215a4c3dc820aee113c69d1475a1512cbf20eb03c7a5c569acac4ffa2d77ca1bf3820798a4906c71de8ea9a8e682ec5600138c6077", 0x6a, 0x20020000, &(0x7f0000000200)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r8, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r10, r11, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r10) 31.712980266s ago: executing program 2 (id=1225): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r2 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r2, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x2, 0x2}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x16, 0x200000000000000, &(0x7f00000004c0)="e0"}) r4 = getpgid(r2) setpgid(0x0, r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) setuid(0xee01) r6 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/103, 0x67) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc0106442, &(0x7f0000000000)) ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendfile(r7, r7, 0x0, 0x7ffff000) 31.316127373s ago: executing program 2 (id=1226): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001980)={0x4c, r1, 0x101, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8, 0x3, 0x6, 0x0, {0x4, 0x10, 0x0, 0x9, 0x0, 0x1, 0x0, 0x1}, 0x8, 0xdd08, 0x5}}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x4c}, 0x1, 0x7000000}, 0x200000d0) 30.181473387s ago: executing program 2 (id=1228): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x8}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750471dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0"]}]}, 0x114}], 0x1}, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) 29.784163287s ago: executing program 32 (id=1228): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x8}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750471dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d770b57e0"]}]}, 0x114}], 0x1}, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) 8.232115952s ago: executing program 4 (id=1340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001980)={0x4c, r1, 0x101, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8, 0x3, 0x6, 0x0, {0x4, 0x10, 0x0, 0x9, 0x0, 0x1, 0x0, 0x1}, 0x8, 0xdd08, 0x5}}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x4c}, 0x1, 0x0, 0x300}, 0x200000d0) 8.179819519s ago: executing program 4 (id=1341): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f00005bc000/0x2000)=nil, 0x2000, 0x8, 0x10, r0, 0x325f9000) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x1d, 0x91, 0x67, 0x20, 0x174f, 0x6a31, 0x263f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x83, 0x3c, 0x8f}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 7.507889672s ago: executing program 1 (id=1347): prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0) (async) bind$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) (async) connect$inet(r3, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) (async) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x15, 0x80001088, 0x73}, 0x2c) (async) unshare(0x22020600) (async) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x0, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x3, '\x00', 0x7}, {0xf, 0x7, 0x5}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) personality(0x5400004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) set_robust_list(0x0, 0x0) 7.339793336s ago: executing program 1 (id=1349): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB], 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb311, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1001, 0x2, 0x4, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000480)=0x2) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0xfffffffffffffd77, &(0x7f0000000000)="00012c61020000001c11447298a9538f168516ff037f291e463685b0139216171afd0eafbd9c28d93b8b8fbdd59f3d473eb9d29d3de65dea17") r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000b40)={0x0, 0x0, 0xfffffffffffffffc}, 0x2000c880) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000200)={0x14, &(0x7f0000000140)={0x20, 0x6, 0x52, {0x52, 0xd, "d0f9a58e45b9ce7b5408c069c4915817300785146e91c3d1547de3b5202f4ed59f5487b150e8301750f99224047f37ed91813f303184b757f5d339b4df5d73923b31cce7139ac5abbb8a738cd203b4fe"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x40, 0xa, 0xb5, "0d2622075d073b9974280d4d3ffe4669a2296d24aeaa2b21bdc78eab430133ccd699a1b4c637f0d4dbf87d6b763bbd3a4970081af5df1d68a63df06d66dc397c09aa1d013e7ac174871b4bfa240baa4d5eadaf629c72afa6a956b5f4fd549387feb07765aa2fcbc8169e3bd2361daeaa41aaaa6139ecc1604a55fbf4a30b608ffdd30b070ec2e9803bd9115b8c873e3af05225454fcf34ef0c33578d65ab1af371212308e04f0f54d9be118725246d8f5ff8914624"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0x70, 0x3, 0x1, 0x9, 0xc, 0x7, 0xfc3, 0x2, 0x6, 0x7, 0x0, 0x360a}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x3ff}, &(0x7f0000000400)={0x20, 0x83, 0x2, 0x84d}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0x5}, &(0x7f00000004c0)={0x20, 0x89, 0x2, 0x1}}) 4.143566171s ago: executing program 1 (id=1358): mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="128d1e010001002021a70201020301090212000100ffc00009047d67e1ad0dbf30519f107d653df93bd8f37c31fba1e0a9ba379b9e6d74105af157b4b04b6a8821ecd936905cf2f467ba4c3160d8e9acb133b6c4bfbaf5510e865c60447280b9690b6ea9be07b4daaab5df84cb7dc73b69ccd7cfe060562d6b6079968df59b030cdf9e"], 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x52}}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x5f) syz_usb_disconnect(r0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x4, "53743ff6"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0600"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@multicast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20000000, 0x0, 0x0}, 0x296) stat(&(0x7f00000001c0)='./cgroup/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r3, r5) 3.424075965s ago: executing program 4 (id=1364): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="8a", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000008400000002000000000041000900000000000002", @ANYRES32=0x0, @ANYBLOB='0\x00'], 0x50}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) (async) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="8a", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000008400000002000000000041000900000000000002", @ANYRES32=0x0, @ANYBLOB='0\x00'], 0x50}, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) (async) 3.327589084s ago: executing program 4 (id=1365): ioprio_set$pid(0x1, 0x0, 0x0) sched_getscheduler(0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x11, r0, 0x2fffb000) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x82001, 0x52) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x118) 3.243989467s ago: executing program 4 (id=1366): setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @in6=@remote, 0x4e20, 0x9, 0x4e20, 0x1ff, 0x2, 0x20, 0x10, 0x2f}, {0x9, 0xb, 0x7, 0x2, 0x100, 0x97, 0x2, 0x7fffffff}, {0x7e, 0x4, 0xb2c1, 0x8}, 0x0, 0x6e6bb7, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d3, 0xff}, 0x2, @in=@local, 0x3503, 0x1, 0x2, 0x0, 0x5, 0x7, 0x6}}, 0xe8) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) close(0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r2 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) tkill(r2, 0x12) ptrace(0x4208, r2) tkill(r2, 0x10) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext3\x00', 0x400, 0x0) 2.951988993s ago: executing program 4 (id=1367): syz_emit_vhci(&(0x7f0000003fc0)=ANY=[@ANYBLOB="040427aaaaaaaaaa10be494601"], 0xd) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000)='exofs\x00', 0xa00406, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x22, 0x2, 0x4) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff}, 0x80) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r3 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0003840000000403"], 0x0, 0x0, 0x0}, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) syz_usb_ep_read(r3, 0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) lstat(&(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000340), 0x1300000, &(0x7f00000009c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@uid_eq={'uid', 0x3d, 0xee00}}, {@context={'context', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x8000000000000000}}, {@euid_lt={'euid<', r5}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xeb\\./[\\%.+*%'}}, {@uid_lt}]}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000300)={'sit0\x00', 0x0}) 2.612162521s ago: executing program 0 (id=1371): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000574000/0x1000)=nil, 0x1000, 0x3000002, 0x4000010, r0, 0x2000) 2.577058555s ago: executing program 0 (id=1372): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000000)=0x5, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 2.239581542s ago: executing program 0 (id=1373): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x60, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbcb25fc00000000000000000000000000004000000000000000000000ffff7f", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40}, {0x1, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) 2.111902605s ago: executing program 0 (id=1374): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000080)={0x3, @default, r1}) (async, rerun: 64) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r2, 0x2000) 1.798989721s ago: executing program 0 (id=1375): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x44}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x18c0}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HAS_DEVICE_ATTR(r6, 0x4018aee3, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)=0x4}) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000740)={0x0, @phonet={0x23, 0x7, 0x80, 0xc0}, @llc={0x1a, 0x30d, 0x7, 0x6, 0x2, 0x2}, @vsock={0x28, 0x0, 0x2710, @host}, 0x101, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000180), 0x35f, 0x400}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x5}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in={0x2, 0x4e21, @private=0xa010102}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x6c) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000700)='nsfs\x00', 0x1a00850, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000002c0)={0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="4023290000002904f4d25e1d2ee7b54f12f9f9df04607ced6a421042603974c68eea4e5e8c17548fad2faad71d8499"], &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, &(0x7f0000000440)={0x20, 0x17, 0x98, "5b39a12fab27d76553a2b46bcf1000f93333993862bd06b09c33932edb5d537c497e7a8a350009fea092ca9fd2950d652889df93b4efb0a033ed9954447890db739f4170b8e1a1005f3b29758d451897454a43266371673289c2b6ffd1cde70092fd8cba38bf9028038f748f82eb5a3092d27aac47aaf09777492879f22b248d9832b41f48fd2383b83f7c82aca50af8dbdc52ba5dd6d821"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x9, 0x8, 0x6, 0xff, 0x7f, 0x8, 0x8, 0x6, 0x3ff, 0x5, 0x2dbf, 0x66}}, &(0x7f0000000580)={0x20, 0x85, 0x4, 0x3}, &(0x7f00000005c0)={0x20, 0x83, 0x2}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0xf53}, &(0x7f0000000640)={0x20, 0x89, 0x2, 0x1}}) 1.219866075s ago: executing program 3 (id=1380): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x0, {0xfffffff9, 0x0, 0x8, 0x3, 0x3, 0xbb}}) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x9, 0x1, 0x2, 0x3}, 0x2, [0x5, 0x5, 0x81, 0x8, 0x4, 0x1000, 0x50000, 0x1, 0x10001, 0xffffa103, 0x3, 0x6, 0x6, 0x6, 0x7, 0x3, 0x6, 0x0, 0x40, 0x5, 0x1cac, 0x3eb, 0xb8f, 0x3, 0x400, 0x40, 0x6, 0x0, 0xfffffffa, 0xdc, 0xffffffff, 0xa1bc, 0x200, 0x7, 0x6, 0x5, 0x3, 0x1, 0x0, 0x0, 0x2, 0x400, 0x7a08, 0x200, 0x3, 0x6, 0x7ff, 0x7f, 0x1c, 0x7, 0xe, 0x9, 0x5, 0xa, 0x3, 0x2, 0xf7, 0xfff, 0x71, 0x5, 0x1ac0, 0x4f, 0x6, 0x8], [0x5, 0x3ff, 0x6, 0xea, 0x3, 0x0, 0xca, 0x1c5936c5, 0x9, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xa, 0x4, 0x2, 0x4, 0x5, 0x2, 0x0, 0x6, 0x9, 0x1, 0x9, 0x6, 0x5e5893ee, 0xfffffff7, 0x9, 0x10000, 0x3, 0x8001, 0x2e6d, 0x7ff, 0x1, 0x1000, 0x877, 0x9, 0x8, 0x8, 0x80000000, 0xfff, 0x5, 0x7, 0x8, 0x5, 0x75da, 0x2, 0x5, 0xe8, 0x3, 0x9, 0x5, 0x7, 0xb99c, 0x2, 0x1, 0x4, 0x4, 0x1, 0x1, 0x9, 0x2, 0xc406], [0x80000001, 0x2, 0x9, 0x9, 0x0, 0xb9, 0x897, 0x5, 0x3, 0x4, 0x2, 0x5, 0x3, 0x9, 0x9, 0x7, 0x9, 0x61, 0x9, 0x5, 0x9, 0x8, 0x2, 0x6, 0x8001, 0x4, 0xc, 0x80000000, 0x7fffffff, 0x1, 0x1, 0x6, 0x8, 0x3, 0x2, 0x5, 0x3, 0x2, 0x1, 0x24, 0x9, 0x2000000, 0x4, 0xff, 0x7, 0x3eef6cc9, 0x1, 0x7, 0x7, 0x8bd, 0x9, 0xfffffff9, 0x80000001, 0x5, 0xffffff1d, 0x6, 0x0, 0xa, 0xfff, 0xfff, 0x1, 0x1, 0x19ee, 0xfffffff9], [0x0, 0x10, 0x101, 0x2, 0x4, 0x9c500, 0xef, 0x8, 0xc61, 0x7, 0xd, 0x358, 0xd567, 0x1d5, 0xc8b, 0x658, 0xcbfd, 0x101, 0x6, 0x5, 0xb, 0x5, 0x6, 0x3, 0x75d6, 0xb26, 0x3ff, 0x6, 0x9, 0x0, 0x1, 0xf412, 0x2, 0x2, 0x2, 0x3, 0x3, 0x9, 0x3, 0x5, 0x3, 0x3, 0xfffffff3, 0x8000, 0x6, 0x6, 0xffff, 0x80, 0xf, 0xfff, 0xfff, 0xffff, 0xfffffffe, 0x80, 0xb975, 0x5, 0x5e1, 0xa, 0xffff58ee, 0x2, 0x2530, 0x4, 0x26da282, 0xc]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d80)={'syz0\x00', {0xb, 0x3, 0x4, 0x9}, 0x3, [0xfffff47e, 0x0, 0x0, 0x3, 0xf, 0x0, 0x7ff, 0xa, 0x5, 0x3, 0x5, 0x40, 0x1, 0x1, 0x100, 0x6, 0x0, 0x7, 0x1, 0xdef, 0x5, 0x7, 0x1ff, 0x5, 0x73c, 0x5, 0x4, 0x7f, 0x1, 0x6, 0xfffffff9, 0x8, 0x6, 0x4, 0x7, 0x7, 0x1939, 0x8, 0x7, 0x2, 0xe12c, 0x8162, 0x8, 0x3, 0x1, 0x41, 0x7, 0x10000, 0x101, 0x8, 0xc000, 0x6, 0x4, 0x4, 0x5, 0x6, 0xfff, 0x0, 0x104, 0xf8ac, 0x2, 0x3, 0x7fffdfff], [0xfffffff8, 0xff, 0x4, 0x8, 0x1e0f, 0xfffffff7, 0x5, 0x7, 0xffffffff, 0x0, 0x6, 0x100, 0x8, 0xe63, 0x1, 0xa3a5, 0x2, 0x2, 0xb9, 0x6, 0x3, 0x43d, 0x6, 0xe, 0x4, 0x3, 0x6, 0x9, 0x1, 0x11, 0x5, 0x4, 0x8, 0x30000, 0x81, 0xfffffe00, 0x0, 0x10001, 0x7ff, 0x9, 0x8, 0xffffa467, 0x5, 0xfffffffb, 0x0, 0xff, 0x9, 0x6aac, 0x0, 0x3, 0x4, 0xfff, 0x200, 0xc1a, 0xe456, 0x100, 0x2, 0x0, 0x1c00000, 0x6, 0x3, 0xfffffff6, 0xffff1068, 0xffff9241], [0x9, 0x611, 0x6, 0xff, 0x101, 0x5, 0x0, 0x2, 0x80000001, 0x96, 0x7, 0x1, 0xfffffffa, 0x1, 0x4, 0xfb, 0x10001, 0x8, 0x8, 0x3, 0x1, 0x100001, 0x1, 0x7, 0x3, 0x40000000, 0x8, 0x3, 0x5, 0x3, 0xb89, 0xf, 0x0, 0x9, 0x3, 0xff, 0x0, 0x2, 0x1ff, 0x4501, 0x9, 0x0, 0x9, 0x7, 0x966, 0x6, 0x10000, 0xf, 0xffffffff, 0x9, 0xe2, 0x1, 0x8, 0x1, 0x8, 0x3ff, 0x5, 0xfffeffff, 0x3, 0x0, 0x80, 0x6, 0x7, 0x9], [0x5, 0x7f, 0x7, 0x9, 0x2, 0x6, 0x45c, 0x5, 0xab73, 0x5, 0x7, 0x0, 0x5, 0xed5a, 0x9, 0x4, 0x9, 0x8, 0x8, 0x3, 0xeb, 0x6, 0x5, 0xff, 0xffffffff, 0x7fff, 0x4, 0xcb7, 0xa3, 0xffff, 0x8, 0x8000003f, 0x3, 0x1ff, 0xfffff26e, 0xf81e, 0x6, 0x9, 0x3, 0x8, 0x5, 0xe5, 0x2, 0x4, 0x4, 0x3, 0x0, 0xfffffff9, 0x7, 0x1ff, 0x204000, 0x5, 0x80, 0x9, 0x7, 0x5078, 0xd, 0x8001, 0x8000, 0x3000000, 0x200, 0x45, 0x0, 0x3]}, 0x45c) 1.169862988s ago: executing program 3 (id=1381): creat(&(0x7f0000001380)='./file0\x00', 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) mount(&(0x7f0000000040)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) 1.096541068s ago: executing program 3 (id=1382): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x14) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0x40000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x40000, 0x687, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x80000001, 0x0, 0x2, 0x51, 0xfffffffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, 0x4, 0x3, 0x1, 0x0, 0x3ff, 0x0, 0x5, 0x0, 0x0, 0x6], [0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x800000, 0x0, 0x0, 0xfffffffd, 0x2000000, 0x40, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x8000, 0x0, 0x3, 0xfffffffd, 0x0, 0x1, 0x0, 0x7, 0x40, 0x0, 0x2], [0x8, 0x0, 0x0, 0x0, 0x0, 0xbd8f, 0x2, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x7fe, 0xa, 0x0, 0x0, 0x800000, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0x3, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x7ff, 0x0, 0x5, 0x4, 0x2000000, 0x0, 0x7], [0x4, 0xfffffffc, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffd, 0x6d, 0x5, 0x0, 0x0, 0x0, 0x80, 0x4, 0xfffffffc, 0x3, 0x0, 0x0, 0x8f3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3]}, 0x45c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r2 = fanotify_init(0x20, 0x101000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r2, 0x61, 0x4800102a, r3, 0x0) fanotify_mark(r2, 0x80, 0x40001002, 0xffffffffffffffff, 0x0) write(r1, &(0x7f00000000c0)="8f2a0a65bd8c2c2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x1c9b}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000100)={r5, 0xfffffffd}, &(0x7f00000001c0)=0x8) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 1.016048475s ago: executing program 1 (id=1383): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000100)={0x100}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) ptrace(0x10, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000012, 0x22052, r0, 0x2000) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 942.174715ms ago: executing program 3 (id=1384): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0) timer_create(0xb, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r4, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_delete(r4) r5 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close_range(r5, r2, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) ioctl$sock_ax25_SIOCDELRT(r6, 0x890c, 0x0) pwritev(r3, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000001080)="2b97", 0x2}], 0x3, 0x0, 0xfffffffe) 646.493495ms ago: executing program 3 (id=1385): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='cpuset\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x401, 0x100, 0x400008, 0x0, 0x0, 0x2, 0xffffffff}}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a30000000002417038030"], 0x17d4}}, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r2, 0x0) listen(r3, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@initdev, @in6=@dev}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f00000003c0)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r4, r4, 0x0) socketpair(0x1e, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000cdff4752ac6db562695897dbb3cad5006faa93d9185d778c3233606dd6b762ac842a60b88c63495d4049a29df37a8c4a0ed39b1152ecddd7c2e18815eb1715dd71e71b47aba9ab8c72605278c33180dfd53951217a575296be6155f52a67772cb2d7a59c98ae4b128a0302b2e6f35f778c094cddda5a463c0705d50d98f13348d7e4240e66a0ee83db7c9b27d04d346223acf67cd9cd9e0f", @ANYRES16=r8, @ANYBLOB="01000000008000000000010000000c0002000000000000000000400007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018008000100", @ANYRES32=r6, @ANYRES64, @ANYRES32=r6, @ANYBLOB="0c40011b5ee301009ae289455d4468a76451c98904d11206366d87aa8c0f50c88943424c70b2a9ffa661c7482bb17c1a1fe73fbaae6f014c6b7e8c1f21e52b33a24488733fd47bb67aa64347bc075b439c040000009092dde400ede7e026a3d0b8135037cdd43e9e92f1", @ANYRES32=r6, @ANYBLOB="0c00018005000100", @ANYRES32=r6, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f0000000600), 0xf3e, 0x701001) fcntl$F_SET_RW_HINT(r9, 0x40c, &(0x7f0000000640)=0x1) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r10, 0xc01064b3, &(0x7f0000000040)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r11, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r11, &(0x7f0000004140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r11, &(0x7f0000000240)={0x18, 0x0, r12, {0x7}}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 440.110122ms ago: executing program 3 (id=1386): creat(&(0x7f0000001380)='./file0\x00', 0x12c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010101}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r1, 0x7}, 0x8) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000201c1b100c000000000001090224000100006000090400800203000000092103000000220500090581032000090807810b216f18228fd17d69da16a3361dfb247ef5f872b5bfedbcb4190f"], 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) 147.2619ms ago: executing program 1 (id=1387): creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@loop={'/dev/loop', 0x0}, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='pstore\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200020, 0x0) 59.714821ms ago: executing program 0 (id=1388): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000280)={0x1, @pix={0x0, 0x0, 0x32315559}}) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x1, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) ioctl$EVIOCRMFF(r2, 0x40085503, &(0x7f0000000000)=0x3) syz_usb_disconnect(r3) socket(0xb, 0xa, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) mremap(&(0x7f00006a2000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00004a6000/0x2000)=nil) 0s ago: executing program 1 (id=1389): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x0, {0xfffffff9, 0x0, 0x8, 0x3, 0x3, 0xbb}}) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x9, 0x1, 0x2, 0x3}, 0x2, [0x5, 0x5, 0x81, 0x8, 0x4, 0x1000, 0x50000, 0x1, 0x10001, 0xffffa103, 0x3, 0x6, 0x6, 0x6, 0x7, 0x3, 0x6, 0x0, 0x40, 0x5, 0x1cac, 0x3eb, 0xb8f, 0x3, 0x400, 0x40, 0x6, 0x0, 0xfffffffa, 0xdc, 0xffffffff, 0xa1bc, 0x200, 0x7, 0x6, 0x5, 0x3, 0x1, 0x0, 0x0, 0x2, 0x400, 0x7a08, 0x200, 0x3, 0x6, 0x7ff, 0x7f, 0x1c, 0x7, 0xe, 0x9, 0x5, 0xa, 0x3, 0x2, 0xf7, 0xfff, 0x71, 0x5, 0x1ac0, 0x4f, 0x6, 0x8], [0x5, 0x3ff, 0x6, 0xea, 0x3, 0x0, 0xca, 0x1c5936c5, 0x9, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xa, 0x4, 0x2, 0x4, 0x5, 0x2, 0x0, 0x6, 0x9, 0x1, 0x9, 0x6, 0x5e5893ee, 0xfffffff7, 0x9, 0x10000, 0x3, 0x8001, 0x2e6d, 0x7ff, 0x1, 0x1000, 0x877, 0x9, 0x8, 0x8, 0x80000000, 0xfff, 0x5, 0x7, 0x8, 0x5, 0x75da, 0x2, 0x5, 0xe8, 0x3, 0x9, 0x5, 0x7, 0xb99c, 0x2, 0x1, 0x4, 0x4, 0x1, 0x1, 0x9, 0x2, 0xc406], [0x80000001, 0x2, 0x9, 0x9, 0x0, 0xb9, 0x897, 0x5, 0x3, 0x4, 0x2, 0x5, 0x3, 0x9, 0x9, 0x7, 0x9, 0x61, 0x9, 0x5, 0x9, 0x8, 0x2, 0x6, 0x8001, 0x4, 0xc, 0x80000000, 0x7fffffff, 0x1, 0x1, 0x6, 0x8, 0x3, 0x2, 0x5, 0x3, 0x2, 0x1, 0x24, 0x9, 0x2000000, 0x4, 0xff, 0x7, 0x3eef6cc9, 0x1, 0x7, 0x7, 0x8bd, 0x9, 0xfffffff9, 0x80000001, 0x5, 0xffffff1d, 0x6, 0x0, 0xa, 0xfff, 0xfff, 0x1, 0x1, 0x19ee, 0xfffffff9], [0x0, 0x10, 0x101, 0x2, 0x4, 0x9c500, 0xef, 0x8, 0xc61, 0x7, 0xd, 0x358, 0xd567, 0x1d5, 0xc8b, 0x658, 0xcbfd, 0x101, 0x6, 0x5, 0xb, 0x5, 0x6, 0x3, 0x75d6, 0xb26, 0x3ff, 0x6, 0x9, 0x0, 0x1, 0xf412, 0x2, 0x2, 0x2, 0x3, 0x3, 0x9, 0x3, 0x5, 0x3, 0x3, 0xfffffff3, 0x8000, 0x6, 0x6, 0xffff, 0x80, 0xf, 0xfff, 0xfff, 0xffff, 0xfffffffe, 0x80, 0xb975, 0x5, 0x5e1, 0xa, 0xffff58ee, 0x2, 0x2530, 0x4, 0x26da282, 0xc]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d80)={'syz0\x00', {0xb, 0x3, 0x4, 0x9}, 0x3, [0xfffff47e, 0x0, 0x0, 0x3, 0xf, 0x0, 0x7ff, 0xa, 0x5, 0x3, 0x5, 0x40, 0x1, 0x1, 0x100, 0x6, 0x0, 0x7, 0x1, 0xdef, 0x5, 0x7, 0x1ff, 0x5, 0x73c, 0x5, 0x4, 0x7f, 0x1, 0x6, 0xfffffff9, 0x8, 0x6, 0x4, 0x7, 0x7, 0x1939, 0x8, 0x7, 0x2, 0xe12c, 0x8162, 0x8, 0x3, 0x1, 0x41, 0x7, 0x10000, 0x101, 0x8, 0xc000, 0x6, 0x4, 0x4, 0x5, 0x6, 0xfff, 0x0, 0x104, 0xf8ac, 0x2, 0x3, 0x7fffdfff], [0xfffffff8, 0xff, 0x4, 0x8, 0x1e0f, 0xfffffff7, 0x5, 0x7, 0xffffffff, 0x0, 0x6, 0x100, 0x8, 0xe63, 0x1, 0xa3a5, 0x2, 0x2, 0xb9, 0x6, 0x3, 0x43d, 0x6, 0xe, 0x4, 0x3, 0x6, 0x9, 0x1, 0x11, 0x5, 0x4, 0x8, 0x30000, 0x81, 0xfffffe00, 0x0, 0x10001, 0x7ff, 0x9, 0x8, 0xffffa467, 0x5, 0xfffffffb, 0x0, 0xff, 0x9, 0x6aac, 0x0, 0x3, 0x4, 0xfff, 0x200, 0xc1a, 0xe456, 0x100, 0x2, 0x0, 0x1c00000, 0x6, 0x3, 0xfffffff6, 0xffff1068, 0xffff9241], [0x9, 0x611, 0x6, 0xff, 0x101, 0x5, 0x0, 0x2, 0x80000001, 0x96, 0x7, 0x1, 0xfffffffa, 0x1, 0x4, 0xfb, 0x10001, 0x8, 0x8, 0x3, 0x1, 0x100001, 0x1, 0x7, 0x3, 0x40000000, 0x8, 0x3, 0x5, 0x3, 0xb89, 0xf, 0x0, 0x9, 0x3, 0xff, 0x0, 0x2, 0x1ff, 0x4501, 0x9, 0x0, 0x9, 0x7, 0x966, 0x6, 0x10000, 0xf, 0xffffffff, 0x9, 0xe2, 0x1, 0x8, 0x1, 0x8, 0x3ff, 0x5, 0xfffeffff, 0x3, 0x0, 0x80, 0x6, 0x7, 0x9], [0x5, 0x7f, 0x7, 0x9, 0x2, 0x6, 0x45c, 0x5, 0xab73, 0x5, 0x7, 0x0, 0x5, 0xed5a, 0x9, 0x4, 0x9, 0x8, 0x8, 0x3, 0xeb, 0x6, 0x5, 0xff, 0xffffffff, 0x7fff, 0x4, 0xcb7, 0xa3, 0xffff, 0x8, 0x80001100, 0x3, 0x1ff, 0xfffff26e, 0xf81e, 0x6, 0x9, 0x3, 0x8, 0x5, 0xe5, 0x2, 0x4, 0x4, 0x3, 0x0, 0xfffffff9, 0x7, 0x1ff, 0x204000, 0x5, 0x80, 0x9, 0x7, 0x5078, 0xd, 0x8001, 0x8000, 0x3000000, 0x200, 0x45, 0x0, 0x3]}, 0x45c) kernel console output (not intermixed with test programs): 1: new high-speed USB device number 49 using dummy_hcd [ 208.874043][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 208.883739][ T5923] usb 1-1: USB disconnect, device number 50 [ 208.897100][ T5902] usb 2-1: unable to get BOS descriptor or descriptor too short [ 208.910568][ T5902] usb 2-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 208.927981][ T5902] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 208.951701][ T5902] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.982133][ T5902] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 209.002413][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.015996][ T5902] usb 2-1: Product: syz [ 209.020509][ T5902] usb 2-1: Manufacturer: syz [ 209.025729][ T5902] usb 2-1: SerialNumber: syz [ 209.236587][ T8820] /dev/rnullb0: Can't open blockdev [ 209.701294][ T8838] /dev/rnullb0: Can't open blockdev [ 209.867127][ T8846] /dev/rnullb0: Can't open blockdev [ 210.091965][ T8855] /dev/rnullb0: Can't open blockdev [ 210.383518][ T5923] usb 4-1: reset high-speed USB device number 41 using dummy_hcd [ 210.554487][ T5923] usb 4-1: device firmware changed [ 210.567431][ T43] usb 4-1: USB disconnect, device number 41 [ 210.733434][ T43] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 210.900718][ T43] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 210.935319][ T43] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 210.958999][ T43] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 210.969598][ T43] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 210.985034][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.008865][ T8848] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 211.024830][ T43] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 211.045829][ T30] audit: type=1326 audit(1751568732.849:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8817 comm="syz.1.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9f38e929 code=0x7fc00000 [ 211.084520][ T5902] cdc_ncm 2-1:1.0: skipping garbage [ 211.096676][ T5902] cdc_ncm 2-1:1.0: skipping garbage [ 211.111125][ T5902] cdc_ncm 2-1:1.0: skipping garbage [ 211.134118][ T5902] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 211.147913][ T5902] cdc_ncm 2-1:1.0: bind() failure [ 211.171025][ T5902] usb 2-1: USB disconnect, device number 49 [ 211.307979][ T43] usb 4-1: USB disconnect, device number 42 [ 211.986367][ T8896] /dev/rnullb0: Can't open blockdev [ 212.063386][ T10] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 212.223916][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 212.232592][ T10] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 212.245930][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.266708][ T10] usb 1-1: config 0 descriptor?? [ 212.277605][ T10] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 212.478003][ T10] usb 1-1: Detected FT232B [ 212.553476][ T5953] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 212.686344][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 212.702841][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 212.710596][ T5953] usb 3-1: Using ep0 maxpacket: 32 [ 212.718956][ T5953] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 212.728142][ T10] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 212.736713][ T5953] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.749696][ T10] usb 1-1: USB disconnect, device number 51 [ 212.756676][ T5953] usb 3-1: config 0 has no interface number 0 [ 212.767876][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 212.777389][ T5953] usb 3-1: config 0 interface 196 altsetting 31 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.791935][ T10] ftdi_sio 1-1:0.0: device disconnected [ 212.798978][ T5953] usb 3-1: config 0 interface 196 has no altsetting 0 [ 212.817636][ T5953] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 212.827453][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.837312][ T5953] usb 3-1: Product: syz [ 212.841599][ T5953] usb 3-1: Manufacturer: syz [ 212.847299][ T5953] usb 3-1: SerialNumber: syz [ 212.854486][ T5953] usb 3-1: config 0 descriptor?? [ 212.871540][ T5953] ipheth 3-1:0.196: Unable to find alternate settings interface [ 212.951538][ T8911] /dev/rnullb0: Can't open blockdev [ 213.223566][ T43] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 213.238408][ T8915] /dev/rnullb0: Can't open blockdev [ 213.332490][ T8920] /dev/rnullb0: Can't open blockdev [ 213.396337][ T43] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 213.409366][ T43] usb 4-1: can't read configurations, error -61 [ 213.553450][ T43] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 213.717115][ T43] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 213.725314][ T43] usb 4-1: can't read configurations, error -61 [ 213.731927][ T43] usb usb4-port1: attempt power cycle [ 214.083465][ T43] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 214.106230][ T43] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 214.116497][ T43] usb 4-1: can't read configurations, error -61 [ 214.273501][ T43] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 214.306753][ T43] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 214.314620][ T43] usb 4-1: can't read configurations, error -61 [ 214.322827][ T43] usb usb4-port1: unable to enumerate USB device [ 214.471816][ T8942] afs: Bad value for 'source' [ 214.783471][ T5923] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 214.863500][ T43] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 214.934685][ T5923] usb 1-1: Using ep0 maxpacket: 8 [ 214.941867][ T5923] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 214.950453][ T5923] usb 1-1: config 0 has no interface number 0 [ 214.958689][ T5923] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 214.969682][ T5923] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 214.981302][ T5923] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 214.992393][ T5923] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 215.005600][ T5923] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 215.014849][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.033401][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 215.043638][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 215.053195][ T5923] usb 1-1: config 0 descriptor?? [ 215.058310][ T43] usb 2-1: config 7 has an invalid interface number: 80 but max is 0 [ 215.068704][ T43] usb 2-1: config 7 has no interface number 0 [ 215.079383][ T5923] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 215.087616][ T43] usb 2-1: config 7 interface 80 has no altsetting 0 [ 215.099204][ T43] usb 2-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=36.cc [ 215.109698][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.117767][ T43] usb 2-1: Product: syz [ 215.121923][ T43] usb 2-1: Manufacturer: syz [ 215.126612][ T43] usb 2-1: SerialNumber: syz [ 215.233403][ T5953] usb 3-1: USB disconnect, device number 46 [ 215.301844][ T5923] usb 1-1: USB disconnect, device number 52 [ 215.327415][ T5923] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 215.401198][ T8954] trusted_key: syz.1.896 sent an empty control message without MSG_MORE. [ 215.426203][ T8954] /dev/rnullb0: Can't open blockdev [ 216.106230][ T8963] input: syz0 as /devices/virtual/input/input67 [ 216.423468][ T5953] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 216.585508][ T5953] usb 4-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 216.608269][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.642653][ T5953] usb 4-1: config 0 descriptor?? [ 216.665481][ T5953] gspca_main: xirlink-cit-2.14.0 probing 0545:800d [ 216.686935][ T5953] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input68 [ 216.883885][ T5836] usb 4-1: USB disconnect, device number 47 [ 217.037187][ T8987] fuse: Bad value for 'group_id' [ 217.052925][ T8987] fuse: Bad value for 'group_id' [ 217.214554][ T8987] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 217.707967][ T43] pegasus 2-1:7.80: probe with driver pegasus failed with error -71 [ 217.741567][ T43] usb 2-1: USB disconnect, device number 50 [ 217.754950][ T8995] /dev/rnullb0: Can't open blockdev [ 217.960271][ T9003] /dev/rnullb0: Can't open blockdev [ 218.038508][ T9006] input: syz0 as /devices/virtual/input/input69 [ 219.553443][ T9052] input: syz0 as /devices/virtual/input/input70 [ 219.933391][ T931] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 220.043398][ T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 220.105961][ T931] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 220.134354][ T931] usb 4-1: can't read configurations, error -22 [ 220.217946][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 220.237101][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.263380][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 220.272416][ T931] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 220.287489][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 220.296714][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.304778][ T10] usb 2-1: Product: syz [ 220.308946][ T10] usb 2-1: Manufacturer: syz [ 220.313601][ T10] usb 2-1: SerialNumber: syz [ 220.333373][ T10] smsusb:smsusb_probe: board id=8, interface number 0 [ 220.340240][ T10] smsusb:smsusb_probe: Device initialized with return code -19 [ 220.445093][ T931] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 220.463886][ T931] usb 4-1: can't read configurations, error -22 [ 220.464449][ T5840] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 220.470333][ T5835] Bluetooth: hci4: command 0x1003 tx timeout [ 220.470547][ T931] usb usb4-port1: attempt power cycle [ 220.621172][ T5929] usb 2-1: USB disconnect, device number 51 [ 220.815006][ T931] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 220.836880][ T931] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 220.845540][ T931] usb 4-1: can't read configurations, error -22 [ 220.973470][ T931] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 220.997058][ T931] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 221.005885][ T931] usb 4-1: can't read configurations, error -22 [ 221.012362][ T931] usb usb4-port1: unable to enumerate USB device [ 221.254199][ T9088] FAULT_INJECTION: forcing a failure. [ 221.254199][ T9088] name failslab, interval 1, probability 0, space 0, times 0 [ 221.254221][ T9088] CPU: 0 UID: 0 PID: 9088 Comm: syz.0.934 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 221.254232][ T9088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.254238][ T9088] Call Trace: [ 221.254242][ T9088] [ 221.254246][ T9088] dump_stack_lvl+0x189/0x250 [ 221.254261][ T9088] ? __pfx____ratelimit+0x10/0x10 [ 221.254273][ T9088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.254284][ T9088] ? __pfx__printk+0x10/0x10 [ 221.254297][ T9088] ? __pfx___might_resched+0x10/0x10 [ 221.254309][ T9088] should_fail_ex+0x414/0x560 [ 221.254327][ T9088] should_failslab+0xa8/0x100 [ 221.254340][ T9088] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 221.254351][ T9088] ? __alloc_skb+0x112/0x2d0 [ 221.254367][ T9088] __alloc_skb+0x112/0x2d0 [ 221.254382][ T9088] nfc_genl_device_removed+0x84/0x330 [ 221.254394][ T9088] ? __pfx_nfc_genl_device_removed+0x10/0x10 [ 221.254402][ T9088] ? destroy_workqueue+0xb36/0xc70 [ 221.254414][ T9088] ? destroy_workqueue+0x894/0xc70 [ 221.254428][ T9088] nfc_unregister_device+0x32/0x2a0 [ 221.254446][ T9088] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 221.254464][ T9088] virtual_ncidev_close+0x56/0x90 [ 221.254483][ T9088] __fput+0x44c/0xa70 [ 221.254506][ T9088] task_work_run+0x1d1/0x260 [ 221.254527][ T9088] ? __pfx_task_work_run+0x10/0x10 [ 221.254552][ T9088] ? exit_to_user_mode_loop+0x40/0x110 [ 221.254571][ T9088] exit_to_user_mode_loop+0xec/0x110 [ 221.254585][ T9088] do_syscall_64+0x2bd/0x3b0 [ 221.254597][ T9088] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.254609][ T9088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.254617][ T9088] ? clear_bhb_loop+0x60/0xb0 [ 221.254629][ T9088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.254637][ T9088] RIP: 0033:0x7fd2d3f8e929 [ 221.254646][ T9088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.254654][ T9088] RSP: 002b:00007fd2d4dff038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 221.254665][ T9088] RAX: 0000000000000000 RBX: 00007fd2d41b5fa0 RCX: 00007fd2d3f8e929 [ 221.254672][ T9088] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 221.254677][ T9088] RBP: 00007fd2d4dff090 R08: 0000000000000000 R09: 0000000000000000 [ 221.254682][ T9088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.254687][ T9088] R13: 0000000000000000 R14: 00007fd2d41b5fa0 R15: 00007ffd37462658 [ 221.254702][ T9088] [ 221.415882][ T5929] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 221.657361][ T9111] /dev/rnullb0: Can't open blockdev [ 221.665195][ T9112] /dev/rnullb0: Can't open blockdev [ 221.753392][ T5923] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 221.761056][ T5836] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 221.798558][ T9114] /dev/rnullb0: Can't open blockdev [ 221.925371][ T5923] usb 2-1: config 1 interface 0 has no altsetting 0 [ 221.935965][ T5836] usb 1-1: config 0 has an invalid interface number: 101 but max is 0 [ 221.944526][ T5923] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 221.953752][ T5836] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.964032][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.972024][ T5923] usb 2-1: Product: syz [ 221.976363][ T5836] usb 1-1: config 0 has no interface number 0 [ 221.982450][ T5836] usb 1-1: config 0 interface 101 has no altsetting 0 [ 221.989670][ T5923] usb 2-1: Manufacturer: syz [ 221.996152][ T5923] usb 2-1: SerialNumber: syz [ 222.002279][ T5836] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 222.013898][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.025081][ T5836] usb 1-1: config 0 descriptor?? [ 222.420361][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.421118][ T9127] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 222.435137][ T9128] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 222.442136][ T9128] /dev/rnullb0: Can't open blockdev [ 222.450828][ T9127] /dev/rnullb0: Can't open blockdev [ 222.641650][ T5923] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 222.666381][ T5923] usb 2-1: USB disconnect, device number 52 [ 222.695648][ T9137] /dev/rnullb0: Can't open blockdev [ 222.702851][ T5923] usblp0: removed [ 222.783946][ T9141] input: syz0 as /devices/virtual/input/input71 [ 223.123177][ T9158] /dev/rnullb0: Can't open blockdev [ 223.194233][ T931] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 223.239446][ T9163] /dev/rnullb0: Can't open blockdev [ 223.263688][ T5840] Bluetooth: hci0: command tx timeout [ 223.309944][ T9165] input: syz1 as /devices/virtual/input/input72 [ 223.353980][ T931] usb 4-1: Using ep0 maxpacket: 8 [ 223.362689][ T931] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 223.378498][ T931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.399323][ T931] pvrusb2: Hardware description: Terratec Grabster AV400 [ 223.413160][ T931] pvrusb2: ********** [ 223.420476][ T931] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 223.431414][ T931] pvrusb2: Important functionality might not be entirely working. [ 223.440905][ T931] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 223.453167][ T931] pvrusb2: ********** [ 223.607846][ T2344] pvrusb2: Invalid write control endpoint [ 223.654337][ T2344] pvrusb2: Invalid write control endpoint [ 223.660086][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 223.672325][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 223.679951][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 223.690090][ T2344] pvrusb2: Device being rendered inoperable [ 223.696158][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 223.703204][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 223.712461][ T2344] pvrusb2: Attached sub-driver cx25840 [ 223.717996][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 223.728659][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 223.783505][ T5923] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 223.810867][ T9147] pvrusb2: Attempted to execute control transfer when device not ok [ 223.943179][ T9179] input: syz0 as /devices/virtual/input/input73 [ 223.953461][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 223.977634][ T5923] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 224.025379][ T5923] usb 2-1: config 1 interface 0 has no altsetting 0 [ 224.060744][ T5923] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.40 [ 224.082325][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.108839][ T5923] usb 2-1: Product: ⅃ᐼﵻ卙쯒⇶鑹ᘎᶵ∈ೂ듏謯槾띄Ḍ鑩㯭ت㈩勀欋禘馃ⷹώꔨ还ୣ蠕יִ㨩흖㐣䇀᎝뾤 [ 224.112471][ T931] usb 4-1: USB disconnect, device number 52 [ 224.162529][ T5923] usb 2-1: Manufacturer: 㐁 [ 224.168497][ T5923] usb 2-1: SerialNumber: ࠁ [ 224.371987][ T931] usb 1-1: USB disconnect, device number 53 [ 224.628124][ T10] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 224.789680][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 224.792917][ T9174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.808546][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 224.822893][ T9174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.831615][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.838840][ T9174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.843446][ T931] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 224.863641][ T10] usb 3-1: Product: syz [ 224.868457][ T10] usb 3-1: Manufacturer: syz [ 224.873053][ T10] usb 3-1: SerialNumber: syz [ 224.884038][ T9174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.917252][ T9174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.926420][ T9174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.948215][ T5923] usbhid 2-1:1.0: can't add hid device: -71 [ 224.969819][ T5923] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 224.995020][ T5923] usb 2-1: USB disconnect, device number 53 [ 225.034416][ T9215] input: syz0 as /devices/virtual/input/input74 [ 225.044201][ T931] usb 1-1: Using ep0 maxpacket: 8 [ 225.054688][ T931] usb 1-1: config 4 has an invalid interface number: 53 but max is 3 [ 225.073501][ T931] usb 1-1: config 4 has an invalid interface number: 40 but max is 3 [ 225.081854][ T931] usb 1-1: config 4 has an invalid interface number: 28 but max is 3 [ 225.112736][ T931] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 225.132124][ T931] usb 1-1: config 4 has an invalid interface number: 129 but max is 3 [ 225.142128][ T931] usb 1-1: config 4 has no interface number 0 [ 225.148410][ T931] usb 1-1: config 4 has no interface number 1 [ 225.156303][ T931] usb 1-1: config 4 has no interface number 2 [ 225.162406][ T931] usb 1-1: config 4 has no interface number 3 [ 225.168685][ T931] usb 1-1: config 4 interface 53 altsetting 11 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 225.181975][ T931] usb 1-1: config 4 interface 53 altsetting 11 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 225.193921][ T931] usb 1-1: config 4 interface 53 altsetting 11 has a duplicate endpoint with address 0xD, skipping [ 225.205349][ T931] usb 1-1: config 4 interface 53 altsetting 11 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 225.233412][ T931] usb 1-1: config 4 interface 53 altsetting 11 has a duplicate endpoint with address 0xA, skipping [ 225.249054][ T931] usb 1-1: config 4 interface 53 altsetting 11 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 225.275760][ T931] usb 1-1: config 4 interface 53 altsetting 11 endpoint 0x7 has invalid maxpacket 8777, setting to 64 [ 225.289225][ T931] usb 1-1: config 4 interface 40 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 225.300408][ T931] usb 1-1: config 4 interface 40 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 225.314544][ T931] usb 1-1: config 4 interface 40 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 225.326048][ T931] usb 1-1: config 4 interface 40 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.337117][ T931] usb 1-1: config 4 interface 40 altsetting 1 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.347551][ T931] usb 1-1: config 4 interface 40 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 225.359074][ T931] usb 1-1: config 4 interface 40 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0 [ 225.369450][ T931] usb 1-1: config 4 interface 40 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 225.381564][ T931] usb 1-1: config 4 interface 40 altsetting 1 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 225.413906][ T931] usb 1-1: config 4 interface 40 altsetting 1 endpoint 0x82 has invalid maxpacket 46688, setting to 64 [ 225.425499][ T931] usb 1-1: config 4 interface 40 altsetting 1 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 225.441264][ T931] usb 1-1: config 4 interface 28 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 225.452447][ T931] usb 1-1: config 4 interface 28 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 225.499569][ T931] usb 1-1: config 4 interface 28 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 225.524187][ T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 47 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 225.553378][ T931] usb 1-1: config 4 interface 28 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 225.569060][ T10] usb 3-1: USB disconnect, device number 47 [ 225.578313][ T931] usb 1-1: config 4 interface 28 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 225.592205][ T10] usblp0: removed [ 225.600547][ T931] usb 1-1: config 4 interface 28 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 225.614373][ T931] usb 1-1: config 4 interface 28 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 225.625455][ T931] usb 1-1: config 4 interface 28 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 225.637107][ T931] usb 1-1: config 4 interface 129 altsetting 216 has an invalid descriptor for endpoint zero, skipping [ 225.648559][ T931] usb 1-1: config 4 interface 129 altsetting 216 has an invalid descriptor for endpoint zero, skipping [ 225.665914][ T931] usb 1-1: config 4 interface 129 altsetting 216 has a duplicate endpoint with address 0x3, skipping [ 225.677290][ T931] usb 1-1: config 4 interface 129 altsetting 216 has a duplicate endpoint with address 0xD, skipping [ 225.689339][ T931] usb 1-1: config 4 interface 129 altsetting 216 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 225.703671][ T931] usb 1-1: config 4 interface 129 altsetting 216 endpoint 0x8F has an invalid bInterval 116, changing to 10 [ 225.719460][ T931] usb 1-1: config 4 interface 129 altsetting 216 endpoint 0x8F has invalid maxpacket 8196, setting to 1024 [ 225.817228][ T931] usb 1-1: config 4 interface 129 altsetting 216 has a duplicate endpoint with address 0xE, skipping [ 225.857159][ T931] usb 1-1: config 4 interface 129 altsetting 216 has a duplicate endpoint with address 0x2, skipping [ 225.889713][ T931] usb 1-1: config 4 interface 129 altsetting 216 has a duplicate endpoint with address 0x3, skipping [ 225.921437][ T931] usb 1-1: config 4 interface 129 altsetting 216 has an invalid descriptor for endpoint zero, skipping [ 225.940585][ T931] usb 1-1: config 4 interface 129 altsetting 216 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 225.954943][ T931] usb 1-1: config 4 interface 53 has no altsetting 0 [ 225.961983][ T931] usb 1-1: config 4 interface 40 has no altsetting 0 [ 225.969565][ T931] usb 1-1: config 4 interface 28 has no altsetting 0 [ 225.977116][ T931] usb 1-1: config 4 interface 129 has no altsetting 0 [ 225.991360][ T9232] hsr0: entered allmulticast mode [ 225.998685][ T9232] hsr_slave_0: entered allmulticast mode [ 226.007704][ T9232] hsr_slave_1: entered allmulticast mode [ 226.007967][ T931] usb 1-1: Dual-Role OTG device on HNP port [ 226.020389][ T931] usb 1-1: New USB device found, idVendor=0c52, idProduct=2831, bcdDevice=e8.8d [ 226.035575][ T931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.050809][ T931] usb 1-1: Product: syz [ 226.057899][ T931] usb 1-1: Manufacturer: ㈺덷驺䶏넖옇㴔䃪跱璚졚郷暓쪾衴嬨㏤腕ꌷ놶壻稘饷効谼ⶊ䦻翧㣎੠힊Ὄ㶪豛퓀挂삑덧﫵소巨⁞Ȏ㿤瘌ⱻ□᜸㝗ꑽ슟桴ﻚ畢ࡣ瘣둂⏲팗ꍬ嗔⾓뒻챔嶓琹겟蕨웑㵱는嬡䭭ᶾə凷隲䥟꿘왣푝㝘 [ 226.165479][ T931] usb 1-1: SerialNumber: syz [ 226.326364][ T9244] FAULT_INJECTION: forcing a failure. [ 226.326364][ T9244] name failslab, interval 1, probability 0, space 0, times 0 [ 226.339087][ T9244] CPU: 1 UID: 0 PID: 9244 Comm: syz.2.973 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 226.339111][ T9244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.339121][ T9244] Call Trace: [ 226.339129][ T9244] [ 226.339136][ T9244] dump_stack_lvl+0x189/0x250 [ 226.339159][ T9244] ? __pfx____ratelimit+0x10/0x10 [ 226.339179][ T9244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.339197][ T9244] ? __pfx__printk+0x10/0x10 [ 226.339220][ T9244] ? __pfx___might_resched+0x10/0x10 [ 226.339235][ T9244] ? fs_reclaim_acquire+0x7d/0x100 [ 226.339260][ T9244] should_fail_ex+0x414/0x560 [ 226.339287][ T9244] should_failslab+0xa8/0x100 [ 226.339308][ T9244] __kmalloc_cache_noprof+0x70/0x3d0 [ 226.339325][ T9244] ? kobject_uevent_env+0x27c/0x8c0 [ 226.339347][ T9244] ? devres_release_all+0x1ca/0x230 [ 226.339369][ T9244] ? __pfx_dev_uevent_name+0x10/0x10 [ 226.339390][ T9244] kobject_uevent_env+0x27c/0x8c0 [ 226.339425][ T9244] device_del+0x73a/0x8e0 [ 226.339452][ T9244] ? __pfx_device_del+0x10/0x10 [ 226.339473][ T9244] rfkill_unregister+0xba/0x220 [ 226.339488][ T9244] nfc_unregister_device+0x96/0x2a0 [ 226.339504][ T9244] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 226.339517][ T9244] virtual_ncidev_close+0x56/0x90 [ 226.339533][ T9244] __fput+0x44c/0xa70 [ 226.339560][ T9244] task_work_run+0x1d1/0x260 [ 226.339585][ T9244] ? __pfx_task_work_run+0x10/0x10 [ 226.339612][ T9244] ? exit_to_user_mode_loop+0x40/0x110 [ 226.339629][ T9244] exit_to_user_mode_loop+0xec/0x110 [ 226.339643][ T9244] do_syscall_64+0x2bd/0x3b0 [ 226.339657][ T9244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.339665][ T9244] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 226.339674][ T9244] ? clear_bhb_loop+0x60/0xb0 [ 226.339693][ T9244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.339709][ T9244] RIP: 0033:0x7ff53538e929 [ 226.339725][ T9244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.339739][ T9244] RSP: 002b:00007ff53613a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 226.339757][ T9244] RAX: 0000000000000000 RBX: 00007ff5355b5fa0 RCX: 00007ff53538e929 [ 226.339767][ T9244] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 226.339772][ T9244] RBP: 00007ff53613a090 R08: 0000000000000000 R09: 0000000000000000 [ 226.339778][ T9244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.339783][ T9244] R13: 0000000000000000 R14: 00007ff5355b5fa0 R15: 00007ffdcd48f828 [ 226.339798][ T9244] [ 226.430105][ T9242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.972'. [ 226.435860][ T5840] Bluetooth: hci1: command tx timeout [ 226.482124][ T9201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.622495][ T9201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.736231][ T9256] input: syz0 as /devices/virtual/input/input75 [ 226.788392][ T9258] /dev/rnullb0: Can't open blockdev [ 226.865774][ T931] ftdi_sio 1-1:4.53: FTDI USB Serial Device converter detected [ 226.882027][ T931] ftdi_sio ttyUSB0: unknown device type: 0xe88d [ 227.067861][ T931] ftdi_sio 1-1:4.40: FTDI USB Serial Device converter detected [ 227.077387][ T931] ftdi_sio ttyUSB1: unknown device type: 0xe88d [ 227.096714][ T931] ftdi_sio 1-1:4.28: FTDI USB Serial Device converter detected [ 227.114511][ T931] ftdi_sio ttyUSB2: unknown device type: 0xe88d [ 227.136831][ T931] ftdi_sio 1-1:4.129: FTDI USB Serial Device converter detected [ 227.154576][ T931] ftdi_sio ttyUSB3: unknown device type: 0xe88d [ 227.235090][ T931] usb 1-1: USB disconnect, device number 54 [ 227.243525][ T5923] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 227.260857][ T931] ftdi_sio 1-1:4.53: device disconnected [ 227.287795][ T931] ftdi_sio 1-1:4.40: device disconnected [ 227.298536][ T931] ftdi_sio 1-1:4.28: device disconnected [ 227.313433][ T931] ftdi_sio 1-1:4.129: device disconnected [ 227.406745][ T5923] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 227.423515][ T5923] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.434991][ T5929] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 227.451650][ T5923] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 227.461513][ T5923] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.474993][ T5923] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 227.484483][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 227.492487][ T5923] usb 3-1: Product: syz [ 227.498041][ T5923] usb 3-1: Manufacturer: syz [ 227.517346][ T5923] cdc_wdm 3-1:1.0: skipping garbage [ 227.523279][ T5923] cdc_wdm 3-1:1.0: skipping garbage [ 227.532617][ T5923] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 227.538898][ T5923] cdc_wdm 3-1:1.0: Unknown control protocol [ 227.595019][ T5929] usb 4-1: config 1 interface 0 has no altsetting 0 [ 227.604950][ T5929] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 227.617049][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.626042][ T5929] usb 4-1: Product: syz [ 227.630279][ T5929] usb 4-1: Manufacturer: syz [ 227.636495][ T5929] usb 4-1: SerialNumber: syz [ 227.972900][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE [ 228.005587][ T931] usb 3-1: USB disconnect, device number 48 [ 228.260267][ T5929] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 53 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 228.409681][ T9294] input: syz0 as /devices/virtual/input/input76 [ 228.412390][ T9296] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 229.606207][ T9337] input: syz0 as /devices/virtual/input/input77 [ 229.863405][ T931] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 229.963424][ T5929] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 230.013519][ T5925] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 230.022801][ T931] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 230.031510][ T931] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.041622][ T931] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 230.050785][ T931] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.063226][ T931] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 230.072307][ T931] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 230.080323][ T931] usb 2-1: Product: syz [ 230.084703][ T931] usb 2-1: Manufacturer: syz [ 230.099906][ T931] cdc_wdm 2-1:1.0: skipping garbage [ 230.103028][ T5923] usb 4-1: USB disconnect, device number 53 [ 230.105860][ T931] cdc_wdm 2-1:1.0: skipping garbage [ 230.125467][ T5929] usb 1-1: config 0 has no interfaces? [ 230.140964][ T5929] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 230.141487][ T931] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 230.150685][ T5923] usblp0: removed [ 230.168155][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.173511][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 230.183990][ T931] cdc_wdm 2-1:1.0: Unknown control protocol [ 230.196004][ T5925] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 230.203149][ T5929] usb 1-1: config 0 descriptor?? [ 230.218951][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.253181][ T5925] pvrusb2: Hardware description: Terratec Grabster AV400 [ 230.265561][ T5925] pvrusb2: ********** [ 230.270532][ T5925] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 230.287197][ T5925] pvrusb2: Important functionality might not be entirely working. [ 230.311047][ T5925] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 230.327247][ T5925] pvrusb2: ********** [ 230.375595][ T9358] /dev/rnullb0: Can't open blockdev [ 230.435137][ T9344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.449655][ T2344] pvrusb2: Invalid write control endpoint [ 230.456319][ T9344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.495592][ T5925] usb 1-1: USB disconnect, device number 55 [ 230.560058][ T2344] pvrusb2: Invalid write control endpoint [ 230.569747][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 230.579692][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 230.587493][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 230.598729][ T2344] pvrusb2: Device being rendered inoperable [ 230.606665][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 230.614196][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 230.628319][ T2344] pvrusb2: Attached sub-driver cx25840 [ 230.635634][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 230.646207][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 230.911277][ T5923] usb 3-1: USB disconnect, device number 49 [ 231.479372][ T5925] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 231.608759][ T9379] /dev/rnullb0: Can't open blockdev [ 231.653527][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 231.668090][ T5925] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 231.685100][ T5925] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 231.711190][ T5925] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 231.731888][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.732823][ T9389] input: syz0 as /devices/virtual/input/input78 [ 231.762455][ T5925] usb 1-1: Product: syz [ 231.782201][ T5925] usb 1-1: Manufacturer: syz [ 231.799052][ T5925] usb 1-1: SerialNumber: syz [ 231.882294][ T9394] /dev/rnullb0: Can't open blockdev [ 232.071172][ T9406] /dev/rnullb0: Can't open blockdev [ 232.078879][ T9407] /dev/rnullb0: Can't open blockdev [ 232.123455][ T10] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 232.244662][ T5925] usb 1-1: 0:2 : does not exist [ 232.275886][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 232.284782][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 232.293943][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.301935][ T10] usb 4-1: Product: syz [ 232.306466][ T10] usb 4-1: Manufacturer: syz [ 232.311070][ T10] usb 4-1: SerialNumber: syz [ 232.365156][ T5923] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 232.461282][ T5925] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 232.476552][ T5925] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 232.490062][ T5925] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 232.511135][ T5925] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 232.526435][ T5925] usb 1-1: USB disconnect, device number 56 [ 232.535076][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.549638][ T5923] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 232.578083][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.591650][ T5923] usb 3-1: config 0 descriptor?? [ 232.655505][ T931] usb 2-1: USB disconnect, device number 54 [ 232.962753][ T10] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 54 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 233.328665][ T5923] hid_parser_main: 5 callbacks suppressed [ 233.328905][ T5923] nintendo 0003:057E:200E.001F: unknown main item tag 0x0 [ 233.442512][ T5923] nintendo 0003:057E:200E.001F: unknown main item tag 0x0 [ 233.484542][ T5929] usb 4-1: USB disconnect, device number 54 [ 233.519421][ T9410] /dev/rnullb0: Can't open blockdev [ 233.527818][ T5923] nintendo 0003:057E:200E.001F: unknown main item tag 0x0 [ 233.536371][ T5923] nintendo 0003:057E:200E.001F: unknown main item tag 0x0 [ 233.545943][ T5929] usblp0: removed [ 233.551516][ T5923] nintendo 0003:057E:200E.001F: unknown main item tag 0x0 [ 233.559783][ T9426] /dev/rnullb0: Can't open blockdev [ 233.568054][ T5923] nintendo 0003:057E:200E.001F: unknown main item tag 0x0 [ 233.579469][ T5923] nintendo 0003:057E:200E.001F: item fetching failed at offset 6/7 [ 233.591059][ T5923] nintendo 0003:057E:200E.001F: HID parse failed [ 233.626018][ T9426] program syz.0.1017 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.636275][ T5923] nintendo 0003:057E:200E.001F: probe - fail = -22 [ 233.642891][ T5923] nintendo 0003:057E:200E.001F: probe with driver nintendo failed with error -22 [ 233.758984][ T5923] usb 3-1: USB disconnect, device number 50 [ 233.763248][ T9434] netlink: 'syz.0.1019': attribute type 5 has an invalid length. [ 233.772737][ T9434] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1019'. [ 233.832256][ T9428] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.855570][ T9440] /dev/rnullb0: Can't open blockdev [ 234.744578][ T931] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 234.753392][ T43] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 234.904238][ T931] usb 2-1: device descriptor read/64, error -71 [ 234.915213][ T43] usb 4-1: config 1 interface 0 has no altsetting 0 [ 234.932227][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 234.947063][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.963390][ T43] usb 4-1: Product: syz [ 234.972044][ T43] usb 4-1: Manufacturer: syz [ 234.983399][ T43] usb 4-1: SerialNumber: syz [ 235.143632][ T931] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 235.145701][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1030'. [ 235.293516][ T931] usb 2-1: device descriptor read/64, error -71 [ 235.403734][ T931] usb usb2-port1: attempt power cycle [ 235.615279][ T43] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 55 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 235.632076][ T9506] tmpfs: Bad value for 'mpol' [ 235.743964][ T931] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 235.785489][ T931] usb 2-1: device descriptor read/8, error -71 [ 235.883502][ T5925] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 236.044024][ T931] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 236.055999][ T5925] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 236.068159][ T5925] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.078577][ T5925] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 236.087675][ T5925] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.098875][ T931] usb 2-1: device descriptor read/8, error -71 [ 236.108325][ T5925] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 236.118969][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 236.127828][ T5925] usb 1-1: Product: syz [ 236.139488][ T5925] usb 1-1: Manufacturer: syz [ 236.152490][ T5925] cdc_wdm 1-1:1.0: skipping garbage [ 236.161668][ T5925] cdc_wdm 1-1:1.0: skipping garbage [ 236.171725][ T5925] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 236.177783][ T5925] cdc_wdm 1-1:1.0: Unknown control protocol [ 236.213751][ T931] usb usb2-port1: unable to enumerate USB device [ 236.362800][ T9511] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1036'. [ 236.713088][ T9518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.735344][ T9518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.033476][ T5929] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 237.193545][ T5929] usb 3-1: Using ep0 maxpacket: 8 [ 237.200642][ T5929] usb 3-1: unable to get BOS descriptor or descriptor too short [ 237.209707][ T5929] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.220062][ T5929] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.232113][ T5929] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 237.241446][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.249638][ T5929] usb 3-1: Product: syz [ 237.254051][ T5929] usb 3-1: Manufacturer: syz [ 237.259732][ T5929] usb 3-1: SerialNumber: syz [ 237.434976][ T931] usb 4-1: USB disconnect, device number 55 [ 237.546569][ T9526] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 237.590085][ T9528] /dev/rnullb0: Can't open blockdev [ 237.739451][ T9536] /dev/rnullb0: Can't open blockdev [ 237.954132][ T931] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 238.133818][ T931] usb 2-1: Invalid ep0 maxpacket: 32 [ 238.237442][ T5925] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 238.303379][ T931] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 238.417367][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.443431][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.453216][ T5925] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 238.473410][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.493379][ T931] usb 2-1: Invalid ep0 maxpacket: 32 [ 238.498935][ T931] usb usb2-port1: attempt power cycle [ 238.514944][ T5925] usb 4-1: config 0 descriptor?? [ 238.646017][ T9505] usblp0: removed [ 238.651643][ T5836] usb 1-1: USB disconnect, device number 57 [ 238.732043][ T5925] hid-steam 0003:28DE:1142.0020: item fetching failed at offset 3/5 [ 238.764374][ T5925] hid-steam 0003:28DE:1142.0020: steam_probe:parse of hid interface failed [ 238.773058][ T5925] hid-steam 0003:28DE:1142.0020: probe with driver hid-steam failed with error -22 [ 238.863593][ T931] usb 2-1: new low-speed USB device number 61 using dummy_hcd [ 238.884220][ T931] usb 2-1: Invalid ep0 maxpacket: 32 [ 238.926715][ T9551] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1048'. [ 238.943003][ T9544] /dev/sg0: Can't lookup blockdev [ 238.949006][ T9551] /dev/rnullb0: Can't open blockdev [ 238.961170][ T10] usb 4-1: USB disconnect, device number 56 [ 238.985813][ T9551] /dev/rnullb0: Can't open blockdev [ 238.991678][ T9551] /dev/rnullb0: Can't open blockdev [ 239.025136][ T9551] /dev/rnullb0: Can't open blockdev [ 239.031328][ T9551] /dev/rnullb0: Can't open blockdev [ 239.037026][ T931] usb 2-1: new low-speed USB device number 62 using dummy_hcd [ 239.049225][ T9551] /dev/rnullb0: Can't open blockdev [ 239.056918][ T9551] /dev/rnullb0: Can't open blockdev [ 239.063039][ T9551] /dev/rnullb0: Can't open blockdev [ 239.074610][ T931] usb 2-1: Invalid ep0 maxpacket: 32 [ 239.081822][ T9551] /dev/rnullb0: Can't open blockdev [ 239.091066][ T931] usb usb2-port1: unable to enumerate USB device [ 239.099369][ T9551] /dev/rnullb0: Can't open blockdev [ 239.111102][ T9551] /dev/rnullb0: Can't open blockdev [ 239.118531][ T9551] /dev/rnullb0: Can't open blockdev [ 239.125838][ T9551] /dev/rnullb0: Can't open blockdev [ 239.131928][ T9551] /dev/rnullb0: Can't open blockdev [ 239.138404][ T9551] /dev/rnullb0: Can't open blockdev [ 239.144658][ T9551] /dev/rnullb0: Can't open blockdev [ 239.150798][ T9551] /dev/rnullb0: Can't open blockdev [ 239.158428][ T9551] /dev/rnullb0: Can't open blockdev [ 239.165398][ T9551] /dev/rnullb0: Can't open blockdev [ 239.171449][ T9551] /dev/rnullb0: Can't open blockdev [ 239.178154][ T9551] /dev/rnullb0: Can't open blockdev [ 239.184885][ T9551] /dev/rnullb0: Can't open blockdev [ 239.190992][ T9551] /dev/rnullb0: Can't open blockdev [ 239.197583][ T9551] /dev/rnullb0: Can't open blockdev [ 239.206591][ T9551] /dev/rnullb0: Can't open blockdev [ 239.212636][ T9551] /dev/rnullb0: Can't open blockdev [ 239.219248][ T9551] /dev/rnullb0: Can't open blockdev [ 239.226354][ T9551] /dev/rnullb0: Can't open blockdev [ 239.232463][ T9551] /dev/rnullb0: Can't open blockdev [ 239.239383][ T9551] /dev/rnullb0: Can't open blockdev [ 239.246103][ T9551] /dev/rnullb0: Can't open blockdev [ 239.252126][ T9551] /dev/rnullb0: Can't open blockdev [ 239.258718][ T9551] /dev/rnullb0: Can't open blockdev [ 239.559914][ T9558] /dev/rnullb0: Can't open blockdev [ 239.606266][ T931] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 239.701391][ T5929] usb 3-1: 0:2 : does not exist [ 239.742501][ T5929] usb 3-1: USB disconnect, device number 51 [ 239.755464][ T9563] netlink: 'syz.3.1051': attribute type 1 has an invalid length. [ 239.780265][ T931] usb 1-1: config 1 interface 0 has no altsetting 0 [ 239.793140][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.817784][ T931] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 239.847888][ T931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.869666][ T931] usb 1-1: Product: syz [ 239.874057][ T931] usb 1-1: Manufacturer: syz [ 239.884321][ T931] usb 1-1: SerialNumber: syz [ 240.235109][ T5929] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 240.405151][ T5929] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 240.414520][ T5929] usb 4-1: config 0 has no interface number 0 [ 240.420629][ T5929] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 240.432712][ T5929] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 240.449234][ T5929] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 240.458802][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.468967][ T5929] usb 4-1: Product: syz [ 240.476353][ T5929] usb 4-1: Manufacturer: syz [ 240.481618][ T5929] usb 4-1: SerialNumber: syz [ 240.489853][ T5929] usb 4-1: config 0 descriptor?? [ 240.495962][ T9568] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 240.505408][ T5929] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 240.522520][ T5929] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 240.530568][ T931] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 58 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 240.951358][ T9568] cgroup: Invalid name [ 241.158156][ T5925] usb 4-1: USB disconnect, device number 57 [ 241.183101][ T5925] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 241.214426][ T5925] cyberjack 4-1:0.69: device disconnected [ 241.355892][ T9599] FAULT_INJECTION: forcing a failure. [ 241.355892][ T9599] name failslab, interval 1, probability 0, space 0, times 0 [ 241.369792][ T9599] CPU: 1 UID: 0 PID: 9599 Comm: syz.2.1061 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 241.369813][ T9599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 241.369822][ T9599] Call Trace: [ 241.369829][ T9599] [ 241.369834][ T9599] dump_stack_lvl+0x189/0x250 [ 241.369857][ T9599] ? __pfx____ratelimit+0x10/0x10 [ 241.369876][ T9599] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.369891][ T9599] ? __pfx__printk+0x10/0x10 [ 241.369912][ T9599] ? __pfx___might_resched+0x10/0x10 [ 241.369924][ T9599] ? fs_reclaim_acquire+0x7d/0x100 [ 241.369955][ T9599] should_fail_ex+0x414/0x560 [ 241.369981][ T9599] should_failslab+0xa8/0x100 [ 241.369999][ T9599] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 241.370016][ T9599] ? __alloc_skb+0x112/0x2d0 [ 241.370038][ T9599] __alloc_skb+0x112/0x2d0 [ 241.370060][ T9599] alloc_uevent_skb+0x7d/0x230 [ 241.370078][ T9599] kobject_uevent_net_broadcast+0x2fa/0x560 [ 241.370097][ T9599] kobject_uevent_env+0x55b/0x8c0 [ 241.370127][ T9599] device_del+0x73a/0x8e0 [ 241.370150][ T9599] ? __pfx_device_del+0x10/0x10 [ 241.370166][ T9599] ? kobject_put+0x43f/0x480 [ 241.370183][ T9599] ? nfc_llcp_unregister_device+0x1bc/0x280 [ 241.370206][ T9599] nfc_unregister_device+0x182/0x2a0 [ 241.370226][ T9599] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 241.370244][ T9599] virtual_ncidev_close+0x56/0x90 [ 241.370261][ T9599] __fput+0x44c/0xa70 [ 241.370285][ T9599] task_work_run+0x1d1/0x260 [ 241.370306][ T9599] ? __pfx_task_work_run+0x10/0x10 [ 241.370329][ T9599] ? exit_to_user_mode_loop+0x40/0x110 [ 241.370351][ T9599] exit_to_user_mode_loop+0xec/0x110 [ 241.370370][ T9599] do_syscall_64+0x2bd/0x3b0 [ 241.370386][ T9599] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.370403][ T9599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.370417][ T9599] ? clear_bhb_loop+0x60/0xb0 [ 241.370434][ T9599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.370447][ T9599] RIP: 0033:0x7ff53538e929 [ 241.370461][ T9599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.370473][ T9599] RSP: 002b:00007ff53613a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 241.370489][ T9599] RAX: 0000000000000000 RBX: 00007ff5355b5fa0 RCX: 00007ff53538e929 [ 241.370498][ T9599] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 241.370506][ T9599] RBP: 00007ff53613a090 R08: 0000000000000000 R09: 0000000000000000 [ 241.370515][ T9599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 241.370523][ T9599] R13: 0000000000000000 R14: 00007ff5355b5fa0 R15: 00007ffdcd48f828 [ 241.370548][ T9599] [ 241.802341][ T9609] /dev/rnullb0: Can't open blockdev [ 241.970332][ T5840] Bluetooth: hci0: ACL packet for unknown connection handle 3511 [ 242.043604][ T931] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 242.052117][ T9624] /dev/rnullb0: Can't open blockdev [ 242.213486][ T931] usb 3-1: Using ep0 maxpacket: 16 [ 242.227788][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1068'. [ 242.237537][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1068'. [ 242.247000][ T931] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.262113][ T931] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 242.272550][ T931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.281608][ T931] usb 3-1: Product: syz [ 242.286201][ T931] usb 3-1: Manufacturer: syz [ 242.290859][ T931] usb 3-1: SerialNumber: syz [ 242.301197][ T931] usb 3-1: config 0 descriptor?? [ 242.309490][ T931] cypress_m8 3-1:0.0: Nokia CA-42 V2 Adapter converter detected [ 242.320097][ T931] nokiaca42v2 ttyUSB0: required endpoint is missing [ 242.326818][ T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 242.336460][ T5836] usb 1-1: USB disconnect, device number 58 [ 242.353906][ T5836] usblp0: removed [ 242.486290][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 242.494256][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.505739][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.523744][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 242.545687][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.549450][ T5929] usb 3-1: USB disconnect, device number 52 [ 242.565921][ T5929] cypress_m8 3-1:0.0: device disconnected [ 242.577567][ T10] usb 4-1: config 0 descriptor?? [ 242.599606][ T10] hub 4-1:0.0: USB hub found [ 242.799077][ T10] hub 4-1:0.0: 2 ports detected [ 242.813524][ T5836] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 242.963490][ T5836] usb 2-1: Using ep0 maxpacket: 8 [ 242.972088][ T5836] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 242.981253][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.989336][ T5836] usb 2-1: Product: syz [ 242.994671][ T5836] usb 2-1: Manufacturer: syz [ 242.999265][ T5836] usb 2-1: SerialNumber: syz [ 243.005989][ T9626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.006604][ T5836] usb 2-1: config 0 descriptor?? [ 243.027519][ T9626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.042920][ T9626] /dev/rnullb0: Can't open blockdev [ 243.051213][ T10] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 243.063490][ T10] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 243.075351][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 243.081339][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 243.117622][ T9638] /dev/rnullb0: Can't open blockdev [ 243.125756][ T10] usb 4-1: USB disconnect, device number 58 [ 243.127807][ T9638] /dev/rnullb0: Can't open blockdev [ 243.225892][ T9647] trusted_key: encrypted_key: insufficient parameters specified [ 243.227783][ T5836] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 243.240345][ T9647] /dev/rnullb0: Can't open blockdev [ 243.258684][ T9641] FAULT_INJECTION: forcing a failure. [ 243.258684][ T9641] name failslab, interval 1, probability 0, space 0, times 0 [ 243.274597][ T9641] CPU: 1 UID: 0 PID: 9641 Comm: syz.2.1072 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 243.274619][ T9641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.274637][ T9641] Call Trace: [ 243.274644][ T9641] [ 243.274651][ T9641] dump_stack_lvl+0x189/0x250 [ 243.274673][ T9641] ? __pfx____ratelimit+0x10/0x10 [ 243.274696][ T9641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.274713][ T9641] ? __pfx__printk+0x10/0x10 [ 243.274743][ T9641] ? __pfx___might_resched+0x10/0x10 [ 243.274757][ T9641] ? fs_reclaim_acquire+0x7d/0x100 [ 243.274781][ T9641] should_fail_ex+0x414/0x560 [ 243.274810][ T9641] should_failslab+0xa8/0x100 [ 243.274829][ T9641] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 243.274847][ T9641] ? __alloc_skb+0x112/0x2d0 [ 243.274872][ T9641] __alloc_skb+0x112/0x2d0 [ 243.274896][ T9641] alloc_uevent_skb+0x7d/0x230 [ 243.274916][ T9641] kobject_uevent_net_broadcast+0x2fa/0x560 [ 243.274937][ T9641] kobject_uevent_env+0x55b/0x8c0 [ 243.274969][ T9641] device_del+0x73a/0x8e0 [ 243.274996][ T9641] ? __pfx_device_del+0x10/0x10 [ 243.275013][ T9641] ? kobject_put+0x43f/0x480 [ 243.275038][ T9641] nfc_unregister_device+0x182/0x2a0 [ 243.275062][ T9641] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 243.275082][ T9641] virtual_ncidev_close+0x56/0x90 [ 243.275101][ T9641] __fput+0x44c/0xa70 [ 243.275128][ T9641] task_work_run+0x1d1/0x260 [ 243.275150][ T9641] ? __pfx_task_work_run+0x10/0x10 [ 243.275175][ T9641] ? exit_to_user_mode_loop+0x40/0x110 [ 243.275200][ T9641] exit_to_user_mode_loop+0xec/0x110 [ 243.275220][ T9641] do_syscall_64+0x2bd/0x3b0 [ 243.275241][ T9641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.275256][ T9641] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 243.275271][ T9641] ? clear_bhb_loop+0x60/0xb0 [ 243.275290][ T9641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.275304][ T9641] RIP: 0033:0x7ff53538e929 [ 243.275318][ T9641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.275332][ T9641] RSP: 002b:00007ff53613a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 243.275349][ T9641] RAX: 0000000000000000 RBX: 00007ff5355b5fa0 RCX: 00007ff53538e929 [ 243.275360][ T9641] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 243.275368][ T9641] RBP: 00007ff53613a090 R08: 0000000000000000 R09: 0000000000000000 [ 243.275377][ T9641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 243.275386][ T9641] R13: 0000000000000000 R14: 00007ff5355b5fa0 R15: 00007ffdcd48f828 [ 243.275414][ T9641] [ 243.907291][ T9672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.918323][ T9672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.930583][ T9672] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1080'. [ 243.949733][ T9675] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 243.956900][ T9675] /dev/rnullb0: Can't open blockdev [ 243.973204][ T9677] fuse: Bad value for 'user_id' [ 243.978469][ T9677] fuse: Bad value for 'user_id' [ 244.035537][ T5923] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 244.051069][ T9679] /dev/rnullb0: Can't open blockdev [ 244.143610][ T10] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 244.164380][ T9636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.176847][ T9636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.203136][ T9636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.211782][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 244.232326][ T5923] usb 3-1: config 0 has an invalid interface number: 54 but max is 0 [ 244.240796][ T5923] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 244.250620][ T5923] usb 3-1: config 0 has no interface number 1 [ 244.257245][ T9636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.266786][ T9683] FAULT_INJECTION: forcing a failure. [ 244.266786][ T9683] name failslab, interval 1, probability 0, space 0, times 0 [ 244.279681][ T9683] CPU: 1 UID: 0 PID: 9683 Comm: syz.3.1084 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 244.279704][ T9683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.279713][ T9683] Call Trace: [ 244.279720][ T9683] [ 244.279728][ T9683] dump_stack_lvl+0x189/0x250 [ 244.279754][ T9683] ? __pfx____ratelimit+0x10/0x10 [ 244.279774][ T9683] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.279792][ T9683] ? __pfx__printk+0x10/0x10 [ 244.279816][ T9683] ? __pfx___might_resched+0x10/0x10 [ 244.279836][ T9683] should_fail_ex+0x414/0x560 [ 244.279866][ T9683] should_failslab+0xa8/0x100 [ 244.279887][ T9683] kmem_cache_alloc_noprof+0x73/0x3c0 [ 244.279904][ T9683] ? skb_clone+0x212/0x3a0 [ 244.279926][ T9683] skb_clone+0x212/0x3a0 [ 244.279941][ T9683] ? netlink_broadcast_filtered+0x64b/0x1140 [ 244.279966][ T9683] netlink_broadcast_filtered+0x659/0x1140 [ 244.280006][ T9683] netlink_broadcast+0x37/0x50 [ 244.280028][ T9683] kobject_uevent_net_broadcast+0x378/0x560 [ 244.280050][ T9683] kobject_uevent_env+0x55b/0x8c0 [ 244.280082][ T9683] device_del+0x73a/0x8e0 [ 244.280109][ T9683] ? __pfx_device_del+0x10/0x10 [ 244.280126][ T9683] ? kobject_put+0x43f/0x480 [ 244.280145][ T9683] ? nfc_llcp_unregister_device+0x1bc/0x280 [ 244.280170][ T9683] nfc_unregister_device+0x182/0x2a0 [ 244.280194][ T9683] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 244.280214][ T9683] virtual_ncidev_close+0x56/0x90 [ 244.280233][ T9683] __fput+0x44c/0xa70 [ 244.280260][ T9683] task_work_run+0x1d1/0x260 [ 244.280284][ T9683] ? __pfx_task_work_run+0x10/0x10 [ 244.280311][ T9683] ? exit_to_user_mode_loop+0x40/0x110 [ 244.280337][ T9683] exit_to_user_mode_loop+0xec/0x110 [ 244.280358][ T9683] do_syscall_64+0x2bd/0x3b0 [ 244.280377][ T9683] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.280396][ T9683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.280411][ T9683] ? clear_bhb_loop+0x60/0xb0 [ 244.280432][ T9683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.280447][ T9683] RIP: 0033:0x7f62a358e929 [ 244.280460][ T9683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.280473][ T9683] RSP: 002b:00007f62a4442038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 244.280489][ T9683] RAX: 0000000000000000 RBX: 00007f62a37b5fa0 RCX: 00007f62a358e929 [ 244.280499][ T9683] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 244.280508][ T9683] RBP: 00007f62a4442090 R08: 0000000000000000 R09: 0000000000000000 [ 244.280517][ T9683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 244.280526][ T9683] R13: 0000000000000000 R14: 00007f62a37b5fa0 R15: 00007ffe49a9fb98 [ 244.280556][ T9683] [ 244.281327][ T5923] usb 3-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 244.293477][ T10] usb 1-1: device descriptor read/64, error -71 [ 244.349935][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.596335][ T10] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 244.618441][ T5923] usb 3-1: config 0 descriptor?? [ 244.628770][ T5923] usb 3-1: bad CDC descriptors [ 244.773872][ T10] usb 1-1: device descriptor read/64, error -71 [ 244.838990][ T9665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.856235][ T9701] input: syz0 as /devices/virtual/input/input79 [ 244.869867][ T9665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.906042][ T10] usb usb1-port1: attempt power cycle [ 245.025281][ T5836] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 245.056069][ T9704] /dev/rnullb0: Can't open blockdev [ 245.253524][ T10] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 245.294913][ T10] usb 1-1: device descriptor read/8, error -71 [ 245.546799][ T9715] /dev/rnullb0: Can't open blockdev [ 245.562641][ T10] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 245.596646][ T10] usb 1-1: device descriptor read/8, error -71 [ 245.713753][ T10] usb usb1-port1: unable to enumerate USB device [ 246.733391][ T10] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 246.791982][ T9665] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 246.821472][ T5925] usb 3-1: USB disconnect, device number 53 [ 246.902081][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 246.927609][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 246.941909][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.968440][ T10] usb 4-1: config 0 descriptor?? [ 246.980836][ T10] gspca_main: sunplus-2.14.0 probing 041e:400b [ 246.986124][ T9735] input: syz0 as /devices/virtual/input/input81 [ 247.022424][ T9737] netlink: 'syz.0.1097': attribute type 10 has an invalid length. [ 247.113068][ T9737] team0: Port device team_slave_0 removed [ 247.153453][ T9738] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1097'. [ 247.182823][ T9738] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 247.370644][ T9733] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 247.420250][ T5923] usb 2-1: USB disconnect, device number 63 [ 247.463835][ T5836] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 247.573466][ T43] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 247.605022][ T5836] usb 3-1: device descriptor read/64, error -71 [ 247.737319][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 247.763555][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 247.793460][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 247.813406][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 247.843873][ T43] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.858205][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.868628][ T5836] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 247.894567][ T43] usb 1-1: config 0 descriptor?? [ 248.013686][ T5836] usb 3-1: device descriptor read/64, error -71 [ 248.113587][ T10] gspca_sunplus: reg_w_riv err -110 [ 248.118905][ T10] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 248.136083][ T5836] usb usb3-port1: attempt power cycle [ 248.230872][ T9764] /dev/sg0: Can't lookup blockdev [ 248.327066][ T43] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 248.341182][ T43] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 248.366588][ T43] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 248.390274][ T43] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 248.420219][ T43] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 248.439491][ T43] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 248.458397][ T43] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 248.473540][ T5836] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 248.484352][ T43] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 248.505002][ T43] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 248.518712][ T5836] usb 3-1: device descriptor read/8, error -71 [ 248.533799][ T43] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 248.553981][ T43] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 248.607636][ T43] usb 1-1: USB disconnect, device number 63 [ 248.763590][ T5836] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 248.783526][ T5889] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 248.796612][ T5836] usb 3-1: device descriptor read/8, error -71 [ 248.916290][ T5836] usb usb3-port1: unable to enumerate USB device [ 248.964230][ T5889] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 248.972859][ T5889] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.007101][ T5889] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 249.026522][ T5889] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.070082][ T5889] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 249.080018][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 249.094912][ T5889] usb 2-1: Product: syz [ 249.099089][ T5889] usb 2-1: Manufacturer: syz [ 249.128633][ T5889] cdc_wdm 2-1:1.0: skipping garbage [ 249.143251][ T5889] cdc_wdm 2-1:1.0: skipping garbage [ 249.158259][ T5889] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 249.180195][ T5889] cdc_wdm 2-1:1.0: Unknown control protocol [ 249.361670][ T5836] usb 4-1: USB disconnect, device number 59 [ 249.397822][ T9778] /dev/rnullb0: Can't open blockdev [ 250.105590][ T9781] /dev/rnullb0: Can't open blockdev [ 250.192075][ T9783] input: syz0 as /devices/virtual/input/input82 [ 250.359189][ T9790] /dev/rnullb0: Can't open blockdev [ 250.464010][ T9799] /dev/rnullb0: Can't open blockdev [ 250.547355][ T9801] lo: entered promiscuous mode [ 250.624784][ T5925] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 250.639272][ T9798] lo: left promiscuous mode [ 250.718123][ T9806] /dev/rnullb0: Can't open blockdev [ 250.797129][ T5925] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.821830][ T5925] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 250.850568][ T5925] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 250.860065][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.869372][ T5925] usb 3-1: Product: syz [ 250.879207][ T5925] usb 3-1: Manufacturer: syz [ 250.883987][ T5925] usb 3-1: SerialNumber: syz [ 250.907298][ T5925] cdc_mbim 3-1:1.0: skipping garbage [ 251.103799][ T9785] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 251.126742][ T10] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 251.285194][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 251.319017][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 251.350416][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 251.376413][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 251.396416][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.406999][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.420531][ T9823] input: syz0 as /devices/virtual/input/input83 [ 251.436404][ T10] usb 1-1: config 0 descriptor?? [ 251.503139][ T5953] usb 2-1: USB disconnect, device number 64 [ 251.540717][ C1] Unknown status report in ack skb [ 251.581846][ T9827] /dev/rnullb0: Can't open blockdev [ 251.622927][ T9828] /dev/rnullb0: Can't open blockdev [ 251.716253][ T9831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1122'. [ 251.726610][ T9831] ALSA: mixer_oss: invalid OSS volume '' [ 251.749141][ T9785] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 251.764945][ T5925] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 251.792856][ T5925] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 251.851797][ T5925] wwan wwan0: port wwan0mbim0 attached [ 251.859973][ T10] plantronics 0003:047F:FFFF.0022: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 251.884236][ T5925] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, be:81:6c:e2:bf:76 [ 251.979376][ T9785] syz.2.1108: attempt to access beyond end of device [ 251.979376][ T9785] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 251.992681][ T9785] syz.2.1108: attempt to access beyond end of device [ 251.992681][ T9785] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 252.014731][ T9785] Mount JFS Failure: -5 [ 252.046433][ T9813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.058634][ T9813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.068921][ T5836] usb 1-1: USB disconnect, device number 64 [ 252.585030][ T9846] /dev/rnullb0: Can't open blockdev [ 252.602862][ T9847] /dev/rnullb0: Can't open blockdev [ 252.610737][ T10] usb 3-1: USB disconnect, device number 58 [ 252.632332][ T10] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 252.788125][ T10] wwan wwan0: port wwan0mbim0 disconnected [ 252.814397][ T9853] input: syz0 as /devices/virtual/input/input84 [ 253.005321][ T9856] /dev/rnullb0: Can't open blockdev [ 253.153760][ T10] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 253.341720][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 253.383332][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.413474][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 253.440820][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.530366][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 253.554447][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 253.582759][ T10] usb 3-1: Product: syz [ 253.592871][ T10] usb 3-1: Manufacturer: syz [ 253.634783][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 253.653329][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 253.674015][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 253.679935][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 254.198091][ T9877] input: syz0 as /devices/virtual/input/input85 [ 254.208374][ T9879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.220016][ T9879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.993820][ T43] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 255.134038][ T5889] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 255.170537][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 255.188596][ T43] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.209733][ T43] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.230241][ T43] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 255.254475][ T43] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 255.275304][ T43] usb 2-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 255.299193][ T43] usb 2-1: config 7 interface 0 has no altsetting 0 [ 255.307893][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 255.323395][ T43] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 255.344530][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.353444][ T5889] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 255.361613][ T5889] usb 1-1: config 1 has no interface number 0 [ 255.375655][ T5889] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 255.404968][ T5889] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 255.425331][ T5889] usb 1-1: config 1 interface 105 has no altsetting 0 [ 255.445424][ T5889] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 255.454706][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.462719][ T5889] usb 1-1: Product: syz [ 255.476981][ T5889] usb 1-1: Manufacturer: syz [ 255.481620][ T5889] usb 1-1: SerialNumber: syz [ 255.492593][ T9907] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 255.513533][ T9907] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 255.543548][ T9909] input: syz0 as /devices/virtual/input/input86 [ 255.628629][ T9911] /dev/rnullb0: Can't open blockdev [ 255.668613][ T9911] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 255.773663][ T10] usb 3-1: USB disconnect, device number 59 [ 255.850425][ T43] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.0/0003:0458:5010.0023/input/input87 [ 255.937711][ T9907] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 255.942711][ T9920] /dev/rnullb0: Can't open blockdev [ 255.953815][ T9907] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 255.964172][ T43] kye 0003:0458:5010.0023: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 255.989281][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.996840][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.009508][ T9901] /dev/rnullb0: Can't open blockdev [ 256.022807][ T43] usb 2-1: USB disconnect, device number 65 [ 256.043828][ T5929] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 256.196394][ T5929] usb 4-1: device descriptor read/64, error -71 [ 256.378308][ T5889] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 256.443647][ T5929] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 256.583468][ T5929] usb 4-1: device descriptor read/64, error -71 [ 256.602435][ T9907] /dev/rnullb0: Can't open blockdev [ 256.608953][ T5889] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 256.658235][ T5889] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41 [ 256.687031][ T5889] usb 1-1: USB disconnect, device number 65 [ 256.694444][ T5929] usb usb4-port1: attempt power cycle [ 256.707534][ T5889] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 256.761504][ T9934] input: syz0 as /devices/virtual/input/input88 [ 256.795632][ T5889] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 256.813485][ T5889] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 256.841047][ T5889] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 257.073394][ T5929] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 257.107957][ T5929] usb 4-1: device descriptor read/8, error -71 [ 257.153461][ T5953] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 257.234445][ T9940] /dev/rnullb0: Can't open blockdev [ 257.326009][ T5953] usb 2-1: Using ep0 maxpacket: 16 [ 257.346636][ T5953] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.353412][ T5929] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 257.370592][ T5953] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.384141][ T5929] usb 4-1: device descriptor read/8, error -71 [ 257.401146][ T5953] usb 2-1: config 0 interface 0 has no altsetting 0 [ 257.415049][ T5953] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 257.434660][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.457167][ T5953] usb 2-1: config 0 descriptor?? [ 257.493935][ T5929] usb usb4-port1: unable to enumerate USB device [ 257.899231][ T5953] usbhid 2-1:0.0: can't add hid device: -71 [ 257.914561][ T5953] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 257.938142][ T5953] usb 2-1: USB disconnect, device number 66 [ 258.257706][ T9966] /dev/rnullb0: Can't open blockdev [ 258.305396][ T9968] input: syz0 as /devices/virtual/input/input89 [ 258.998300][ T9983] /dev/rnullb0: Can't open blockdev [ 259.201077][T10002] input: syz0 as /devices/virtual/input/input90 [ 259.739181][ T10] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 259.915729][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 259.944498][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 259.977405][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 260.010174][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 260.171778][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 260.243540][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.385090][ T10] usb 1-1: config 0 descriptor?? [ 260.586927][T10016] netlink: 'syz.3.1178': attribute type 2 has an invalid length. [ 260.671957][T10016] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1178'. [ 260.827309][ T10] hid_parser_main: 20 callbacks suppressed [ 260.827339][ T10] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 260.871722][ T10] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 260.892011][ T10] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 260.912329][ T10] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 260.922471][ T10] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 260.942806][ T10] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 260.952531][ T10] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 260.967825][ T10] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 260.993520][ T10] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 261.021487][ T10] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 261.056438][ T10] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 261.107849][ T10] usb 1-1: USB disconnect, device number 66 [ 261.860680][T10028] /dev/rnullb0: Can't open blockdev [ 261.867915][T10025] /dev/rnullb0: Can't open blockdev [ 262.061632][T10035] input: syz0 as /devices/virtual/input/input91 [ 262.543719][ T5889] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 262.710681][ T5889] usb 1-1: config 1 interface 0 has no altsetting 0 [ 262.722901][ T5889] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 262.752956][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.773563][ T5889] usb 1-1: Product: syz [ 262.777951][ T5889] usb 1-1: Manufacturer: syz [ 262.782548][ T5889] usb 1-1: SerialNumber: syz [ 263.038615][T10074] /dev/rnullb0: Can't open blockdev [ 263.044136][ T5953] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 263.215324][ T5953] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 263.227655][ T5953] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.253337][ T5953] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 263.276808][ T5953] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.307817][ T5953] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 263.317622][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 263.337389][ T5953] usb 2-1: Product: syz [ 263.344982][ T5953] usb 2-1: Manufacturer: syz [ 263.365085][ T5953] cdc_wdm 2-1:1.0: skipping garbage [ 263.371130][ T5953] cdc_wdm 2-1:1.0: skipping garbage [ 263.390341][ T5953] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 263.400344][ T5953] cdc_wdm 2-1:1.0: Unknown control protocol [ 263.433978][ T5889] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 67 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 263.590443][T10086] tmpfs: Unknown parameter 'audit' [ 263.927114][T10093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.949274][T10093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.986938][T10095] /dev/rnullb0: Can't open blockdev [ 264.117848][T10097] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 264.125094][T10097] /dev/rnullb0: Can't open blockdev [ 264.366000][T10104] /dev/rnullb0: Can't open blockdev [ 264.532898][T10107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.566016][T10107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.725100][T10117] /dev/rnullb0: Can't open blockdev [ 264.763411][ T5929] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 264.778795][T10119] /dev/rnullb0: Can't open blockdev [ 264.933542][ T5929] usb 4-1: Using ep0 maxpacket: 8 [ 264.948790][ T5929] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 264.962826][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.972318][ T5929] usb 4-1: Product: syz [ 264.979290][ T5929] usb 4-1: Manufacturer: syz [ 264.985271][ T5929] usb 4-1: SerialNumber: syz [ 264.996668][ T5929] usb 4-1: config 0 descriptor?? [ 265.043399][ T5953] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 265.193468][ T5953] usb 3-1: device descriptor read/64, error -71 [ 265.208389][ T5929] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 265.235684][ T10] usb 1-1: USB disconnect, device number 67 [ 265.254135][ T10] usblp1: removed [ 265.453512][ T5953] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 265.594706][ T5953] usb 3-1: device descriptor read/64, error -71 [ 265.693364][ T10] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 265.715199][ T5953] usb usb3-port1: attempt power cycle [ 265.818619][ T5836] usb 2-1: USB disconnect, device number 67 [ 265.839041][ T10] usb 1-1: device descriptor read/64, error -71 [ 266.093704][ T5953] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 266.101406][ T10] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 266.144233][ T5953] usb 3-1: device descriptor read/8, error -71 [ 266.186149][ T5836] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 266.253506][ T10] usb 1-1: device descriptor read/64, error -71 [ 266.348301][ T5836] usb 2-1: Using ep0 maxpacket: 32 [ 266.355948][ T5836] usb 2-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config [ 266.368477][ T5836] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 266.380177][ T10] usb usb1-port1: attempt power cycle [ 266.382195][ T5836] usb 2-1: config 0 interface 0 has no altsetting 0 [ 266.390235][ T5953] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 266.410192][ T5836] usb 2-1: New USB device found, idVendor=07d0, idProduct=10b8, bcdDevice=de.8e [ 266.420379][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.430773][ T5836] usb 2-1: Product: syz [ 266.437549][ T5836] usb 2-1: Manufacturer: syz [ 266.446763][ T5836] usb 2-1: SerialNumber: syz [ 266.451709][ T5953] usb 3-1: device descriptor read/8, error -71 [ 266.456350][ T5836] usb 2-1: config 0 descriptor?? [ 266.563655][ T5953] usb usb3-port1: unable to enumerate USB device [ 266.743551][ T10] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 266.785189][ T10] usb 1-1: device descriptor read/8, error -71 [ 266.858188][ T5929] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 266.879884][ T5929] dvbdev: DVB: registering new adapter (Terratec H7) [ 266.888455][ T5929] usb 4-1: media controller created [ 266.916539][ T5953] usb 2-1: USB disconnect, device number 68 [ 267.046661][ T10] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 267.047406][ T5929] usb read operation failed. (-71) [ 267.071415][ T5929] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 267.085373][ T10] usb 1-1: device descriptor read/8, error -71 [ 267.089382][ T5929] usb 4-1: USB disconnect, device number 64 [ 267.203505][ T10] usb usb1-port1: unable to enumerate USB device [ 267.908179][T10143] /dev/rnullb0: Can't open blockdev [ 268.013490][ T5836] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 268.165607][ T5836] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 268.177650][ T5836] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.188748][ T5889] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 268.206322][ T5836] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 268.216618][ T5836] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.232357][ T5836] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 268.242760][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 268.255402][ T5836] usb 2-1: Product: syz [ 268.259678][ T5836] usb 2-1: Manufacturer: syz [ 268.271607][ T5836] cdc_wdm 2-1:1.0: skipping garbage [ 268.279468][ T5836] cdc_wdm 2-1:1.0: skipping garbage [ 268.290835][ T5836] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 268.298572][ T5836] cdc_wdm 2-1:1.0: Unknown control protocol [ 268.359419][ T5889] usb 4-1: config 1 interface 0 has no altsetting 0 [ 268.375316][ T5889] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 268.398679][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.411147][ T5889] usb 4-1: Product: syz [ 268.420792][ T5889] usb 4-1: Manufacturer: syz [ 268.427794][ T5889] usb 4-1: SerialNumber: syz [ 268.992749][T10158] dvmrp0: entered allmulticast mode [ 269.046577][ T5889] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 65 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 270.399233][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.524885][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.630708][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.751415][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.783213][T10165] /dev/rnullb0: Can't open blockdev [ 270.878653][ T5836] usb 2-1: USB disconnect, device number 69 [ 270.928083][ T5889] usb 4-1: USB disconnect, device number 65 [ 270.958359][ T5889] usblp1: removed [ 271.066431][ T36] bridge_slave_1: left allmulticast mode [ 271.072593][ T36] bridge_slave_1: left promiscuous mode [ 271.085454][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.141211][ T36] bridge_slave_0: left promiscuous mode [ 271.161466][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.577528][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.586321][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.594994][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.605899][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.614286][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.160796][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.181636][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.192494][ T36] bond0 (unregistering): Released all slaves [ 272.500511][T10206] /dev/rnullb0: Can't open blockdev [ 272.741705][T10213] openvswitch: netlink: Message has 16 unknown bytes. [ 272.766194][T10213] /dev/rnullb0: Can't open blockdev [ 272.968261][T10223] /dev/rnullb0: Can't open blockdev [ 273.088662][ T36] hsr_slave_0: left promiscuous mode [ 273.109444][ T36] hsr_slave_1: left promiscuous mode [ 273.126070][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.142771][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.182072][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.201756][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.242405][ T36] veth1_macvtap: left promiscuous mode [ 273.252423][ T36] veth0_macvtap: left promiscuous mode [ 273.258873][ T36] veth1_vlan: left allmulticast mode [ 273.267994][ T36] veth1_vlan: left promiscuous mode [ 273.273986][ T36] veth0_vlan: left promiscuous mode [ 273.608223][ T36] team0 (unregistering): Port device macvlan0 removed [ 273.666354][ T5840] Bluetooth: hci1: command tx timeout [ 274.233188][ T36] team0 (unregistering): Port device team_slave_1 removed [ 274.276728][ T36] team0 (unregistering): Port device team_slave_0 removed [ 274.793680][T10222] mkiss: ax0: crc mode is auto. [ 275.011251][T10247] /dev/rnullb0: Can't open blockdev [ 275.017355][T10188] chnl_net:caif_netlink_parms(): no params data found [ 275.336466][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1252'. [ 275.432600][T10188] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.456312][T10188] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.475224][T10188] bridge_slave_0: entered allmulticast mode [ 275.493464][T10188] bridge_slave_0: entered promiscuous mode [ 275.560090][T10188] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.572241][T10188] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.592110][T10188] bridge_slave_1: entered allmulticast mode [ 275.611584][T10188] bridge_slave_1: entered promiscuous mode [ 275.757720][ T5840] Bluetooth: hci1: command tx timeout [ 275.817699][T10188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.846037][T10188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.926082][T10188] team0: Port device team_slave_0 added [ 275.945722][T10188] team0: Port device team_slave_1 added [ 276.012887][T10266] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1255'. [ 276.048462][T10188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.063033][T10188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.102717][ T5902] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 276.153410][T10188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.174840][T10188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.181804][T10188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.273376][T10188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.284029][ T5902] usb 2-1: device descriptor read/64, error -71 [ 276.313474][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1255'. [ 276.523371][ T5902] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 276.542900][T10188] hsr_slave_0: entered promiscuous mode [ 276.549517][T10282] overlayfs: workdir and upperdir must reside under the same mount [ 276.554379][T10188] hsr_slave_1: entered promiscuous mode [ 276.584097][T10188] debugfs: 'hsr0' already exists in 'hsr' [ 276.589841][T10188] Cannot create hsr debugfs directory [ 276.653405][ T5902] usb 2-1: device descriptor read/64, error -71 [ 276.723522][T10285] random: crng reseeded on system resumption [ 276.765032][ T5902] usb usb2-port1: attempt power cycle [ 276.787552][T10286] fuse: Bad value for 'fd' [ 276.792278][T10286] fuse: Bad value for 'fd' [ 276.990556][T10290] input: syz0 as /devices/virtual/input/input92 [ 277.134103][ T5902] usb 2-1: new low-speed USB device number 72 using dummy_hcd [ 277.173811][ T5902] usb 2-1: device descriptor read/8, error -71 [ 277.346197][T10188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 277.425292][ T5902] usb 2-1: new low-speed USB device number 73 using dummy_hcd [ 277.439429][T10188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 277.514174][ T5902] usb 2-1: device descriptor read/8, error -71 [ 277.528802][T10188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 277.565579][T10188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 277.624097][ T5902] usb usb2-port1: unable to enumerate USB device [ 277.674128][ T10] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 277.790625][T10188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.820815][T10188] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.828831][ T10] usb 1-1: device descriptor read/64, error -71 [ 277.834335][ T5840] Bluetooth: hci1: command tx timeout [ 277.847060][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.855088][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.910485][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.917729][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.099218][ T10] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 278.271947][ T10] usb 1-1: device descriptor read/64, error -71 [ 278.409776][ T10] usb usb1-port1: attempt power cycle [ 278.457384][T10345] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1267'. [ 278.492560][T10345] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1267'. [ 278.588745][T10188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.658307][T10355] input: syz0 as /devices/virtual/input/input93 [ 278.784552][ T10] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 278.816167][ T10] usb 1-1: device descriptor read/8, error -71 [ 278.894606][ T931] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 279.043735][ T931] usb 4-1: device descriptor read/64, error -71 [ 279.061682][ T10] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 279.072714][T10188] veth0_vlan: entered promiscuous mode [ 279.091606][T10188] veth1_vlan: entered promiscuous mode [ 279.161189][T10188] veth0_macvtap: entered promiscuous mode [ 279.165540][ T10] usb 1-1: device descriptor read/8, error -71 [ 279.179008][T10188] veth1_macvtap: entered promiscuous mode [ 279.210627][T10188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.257808][T10188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.285441][ T931] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 279.293904][ T10] usb usb1-port1: unable to enumerate USB device [ 279.300460][T10333] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.322174][T10333] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.335449][T10333] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.350718][T10333] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.433413][ T931] usb 4-1: device descriptor read/64, error -71 [ 279.451616][ T4105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.469612][ T4105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.512780][ T4105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.528074][ T4105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.548752][ T931] usb usb4-port1: attempt power cycle [ 279.823597][ T10] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 279.880367][T10377] netlink: 'syz.4.1274': attribute type 29 has an invalid length. [ 279.891717][T10377] netlink: 'syz.4.1274': attribute type 29 has an invalid length. [ 279.904886][ T5840] Bluetooth: hci1: command tx timeout [ 279.910051][ T931] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 279.915484][T10377] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1274'. [ 279.948467][ T931] usb 4-1: device descriptor read/8, error -71 [ 279.983567][ T10] usb 1-1: device descriptor read/64, error -71 [ 280.079916][T10385] XFS (nullb0): Invalid superblock magic number [ 280.194457][ T931] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 280.197686][T10392] /dev/rnullb0: Can't open blockdev [ 280.225787][ T931] usb 4-1: device descriptor read/8, error -71 [ 280.243432][ T10] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 280.287389][T10394] input: syz0 as /devices/virtual/input/input94 [ 280.333893][ T931] usb usb4-port1: unable to enumerate USB device [ 280.373493][ T10] usb 1-1: device descriptor read/64, error -71 [ 280.449029][T10398] random: crng reseeded on system resumption [ 280.493881][ T10] usb usb1-port1: attempt power cycle [ 281.430363][T10408] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1283'. [ 281.490973][T10411] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1283'. [ 281.522787][T10410] netlink: 'syz.1.1284': attribute type 25 has an invalid length. [ 281.542491][T10410] netlink: 'syz.1.1284': attribute type 28 has an invalid length. [ 281.565042][ T5840] Bluetooth: hci1: unexpected event 0x10 length: 10 > 1 [ 281.566740][ T5840] Bluetooth: hci1: hardware error 0x55 [ 281.583697][T10410] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1284'. [ 281.615339][T10411] /dev/rnullb0: Can't open blockdev [ 281.650838][T10408] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1283'. [ 281.994268][T10410] input: syz0 as /devices/virtual/input/input95 [ 282.036349][T10427] binder: 10426:10427 ioctl 400c620e 2000000014c0 returned -22 [ 282.083384][ T931] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 282.255340][ T931] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 282.273501][ T931] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.294478][ T931] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 282.327492][ T931] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.398979][ T931] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 282.413076][ T931] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 282.451393][ T931] usb 4-1: Product: syz [ 282.461506][ T931] usb 4-1: Manufacturer: syz [ 282.489600][ T931] cdc_wdm 4-1:1.0: skipping garbage [ 282.497510][ T931] cdc_wdm 4-1:1.0: skipping garbage [ 282.515060][ T931] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 282.521423][ T931] cdc_wdm 4-1:1.0: Unknown control protocol [ 282.563768][ T5953] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 282.717076][ T5953] usb 1-1: device descriptor read/64, error -71 [ 282.963440][ T5953] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 283.031459][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1292'. [ 283.042430][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1292'. [ 283.113656][ T5953] usb 1-1: device descriptor read/64, error -71 [ 283.235691][ T5953] usb usb1-port1: attempt power cycle [ 283.633659][ T5953] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 283.666283][ T5840] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 283.678236][ T5953] usb 1-1: device descriptor read/8, error -71 [ 283.953526][ T5953] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 283.997159][ T5953] usb 1-1: device descriptor read/8, error -71 [ 284.023943][ T5902] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 284.036246][ T5889] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 284.123627][ T5953] usb usb1-port1: unable to enumerate USB device [ 284.196249][ T5889] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 284.208735][ T5889] usb 5-1: can't read configurations, error -61 [ 284.208850][ T5902] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 284.229763][ T5902] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.240358][ T5902] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 284.252853][ T5902] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.278410][ T5902] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 284.291640][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 284.300730][ T5902] usb 2-1: Product: syz [ 284.309126][ T5902] usb 2-1: Manufacturer: syz [ 284.320474][ T5902] cdc_wdm 2-1:1.0: skipping garbage [ 284.328847][ T5902] cdc_wdm 2-1:1.0: skipping garbage [ 284.337118][ T5902] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 284.343080][ T5902] cdc_wdm 2-1:1.0: Unknown control protocol [ 284.353367][ T5889] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 284.515923][ T5889] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 284.533356][ T5889] usb 5-1: can't read configurations, error -61 [ 284.541245][ T5889] usb usb5-port1: attempt power cycle [ 284.748705][ T5902] usb 4-1: USB disconnect, device number 70 [ 284.883920][ T5889] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 284.899438][T10455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.911334][T10455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.930042][ T5889] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 284.941833][ T5889] usb 5-1: can't read configurations, error -61 [ 285.093534][ T5889] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 285.126217][ T5889] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 285.134325][ T5889] usb 5-1: can't read configurations, error -61 [ 285.146199][ T5889] usb usb5-port1: unable to enumerate USB device [ 285.273655][ T5902] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 285.433623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 285.443049][ T5902] usb 4-1: Using ep0 maxpacket: 32 [ 285.452832][ T5902] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 285.463704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 285.480933][ T5902] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 285.497934][ T5902] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 48, changing to 9 [ 285.512045][ T5902] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8348, setting to 1024 [ 285.524751][ T5902] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 285.541426][ T5902] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 285.544694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 285.561834][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.579674][ T5902] usb 4-1: Product: syz [ 285.591500][ T5902] usb 4-1: Manufacturer: syz [ 285.601185][ T5902] usb 4-1: SerialNumber: syz [ 285.629149][ T5902] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input96 [ 285.756351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 285.768169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 285.772798][T10468] /dev/rnullb0: Can't open blockdev [ 285.917714][T10458] block nbd3: shutting down sockets [ 285.981031][T10458] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1299'. [ 286.008338][T10471] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1299'. [ 286.009235][T10458] /dev/rnullb0: Can't open blockdev [ 286.039108][T10474] kAFS: unable to lookup cell '' [ 286.048462][T10475] /dev/rnullb0: Can't open blockdev [ 286.121219][ T5902] imon:send_packet: packet tx failed (-71) [ 286.154063][ T5902] imon 4-1:155.0: panel buttons/knobs setup failed [ 286.172335][ T5902] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 286.188462][ T5902] (id 0x00) [ 286.259871][T10478] input: syz0 as /devices/virtual/input/input98 [ 286.283698][ T5902] rc_core: IR keymap rc-imon-pad not found [ 286.308756][ T5902] Registered IR keymap rc-empty [ 286.314987][ T5902] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 286.331460][ T5902] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 286.343219][ T5902] imon:send_packet: packet tx failed (-71) [ 286.367613][ T5902] imon 4-1:155.0: remote input dev register failed [ 286.390686][ T5902] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 286.444586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 286.444893][ T5902] imon 4-1:155.0: unable to initialize intf0, err 0 [ 286.460130][ T5902] imon:imon_probe: failed to initialize context! [ 286.468531][ T5902] imon 4-1:155.0: unable to register, err -19 [ 286.479144][ T5902] usb 4-1: USB disconnect, device number 71 [ 286.663575][ T931] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 286.675229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 286.686250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 286.695121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 286.830720][ T5953] usb 2-1: USB disconnect, device number 74 [ 286.843430][ T931] usb 1-1: device descriptor read/64, error -71 [ 287.113365][ T931] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 287.123638][ T5889] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 287.148319][T10492] /dev/rnullb0: Can't open blockdev [ 287.193537][ T5836] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 287.283386][ T931] usb 1-1: device descriptor read/64, error -71 [ 287.368709][ T5836] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 287.381765][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.394804][ T931] usb usb1-port1: attempt power cycle [ 287.397547][ T5836] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 287.411515][ T5836] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 287.422056][ T5836] usb 5-1: Manufacturer: syz [ 287.438052][ T5836] usb 5-1: config 0 descriptor?? [ 287.493574][ T5902] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 287.516110][ T5836] rc_core: IR keymap rc-hauppauge not found [ 287.522192][ T5836] Registered IR keymap rc-empty [ 287.532017][ T5836] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 287.550104][ T5836] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input99 [ 287.657847][ T5902] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 287.670204][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.678978][ T5902] usb 2-1: Product: syz [ 287.683153][ T5902] usb 2-1: Manufacturer: syz [ 287.690917][ T5902] usb 2-1: SerialNumber: syz [ 287.698830][ T5902] usb 2-1: config 0 descriptor?? [ 287.739826][ T931] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 287.788301][ T931] usb 1-1: device descriptor read/8, error -71 [ 287.861358][T10497] rc rc0: two consecutive events of type space [ 287.981567][ T9] usb 2-1: USB disconnect, device number 75 [ 288.034725][ T931] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 288.064333][T10503] input: syz0 as /devices/virtual/input/input100 [ 288.065590][T10490] /dev/rnullb0: Can't open blockdev [ 288.078815][ T931] usb 1-1: device descriptor read/8, error -71 [ 288.095599][ T10] usb 5-1: USB disconnect, device number 6 [ 288.192378][T10509] /dev/rnullb0: Can't open blockdev [ 288.214124][ T931] usb usb1-port1: unable to enumerate USB device [ 288.346798][T10513] capability: warning: `syz.3.1318' uses 32-bit capabilities (legacy support in use) [ 288.748628][T10521] netlink: 'syz.3.1321': attribute type 12 has an invalid length. [ 288.823526][ T5902] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 289.069166][T10531] input: syz0 as /devices/virtual/input/input101 [ 289.257304][T10533] /dev/rnullb0: Can't open blockdev [ 289.542914][T10543] /dev/rnullb0: Can't open blockdev [ 289.632586][T10546] fuseblk: Bad value for 'fd' [ 289.944723][ T931] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 290.118316][ T931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.174473][ T931] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 290.195681][ T931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.215284][ T931] usb 2-1: config 0 descriptor?? [ 290.239371][ T931] pwc: Askey VC010 type 2 USB webcam detected. [ 290.483402][ T9] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 290.638697][ T931] pwc: recv_control_msg error -32 req 02 val 2b00 [ 290.646167][ T931] pwc: recv_control_msg error -32 req 02 val 2700 [ 290.658266][ T9] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 290.671866][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.691421][ T9] usb 1-1: Product: syz [ 290.701223][ T9] usb 1-1: Manufacturer: syz [ 290.782274][ T9] usb 1-1: SerialNumber: syz [ 290.914739][T10546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.983939][T10546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.224375][ T9] usb 1-1: config 0 descriptor?? [ 291.303179][ T931] pwc: recv_control_msg error -71 req 04 val 1000 [ 291.310251][ T931] pwc: recv_control_msg error -71 req 04 val 1300 [ 291.317206][ T931] pwc: recv_control_msg error -71 req 04 val 1400 [ 291.333932][ T931] pwc: recv_control_msg error -71 req 02 val 2000 [ 291.549521][ T931] pwc: recv_control_msg error -71 req 02 val 2100 [ 291.563511][ T931] pwc: recv_control_msg error -71 req 04 val 1500 [ 291.570407][ T931] pwc: recv_control_msg error -71 req 02 val 2500 [ 291.583812][ T931] pwc: recv_control_msg error -71 req 02 val 2400 [ 291.593415][ T931] pwc: recv_control_msg error -71 req 02 val 2600 [ 291.613399][ T931] pwc: recv_control_msg error -71 req 02 val 2900 [ 291.623434][ T931] pwc: recv_control_msg error -71 req 02 val 2800 [ 291.643448][ T931] pwc: recv_control_msg error -71 req 04 val 1100 [ 291.650362][ T931] pwc: recv_control_msg error -71 req 04 val 1200 [ 291.679207][ T931] pwc: Registered as video103. [ 291.705538][ T931] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input102 [ 291.723580][ T9] usb 1-1: Firmware: major: 223, minor: 162, hardware type: ATUSB (1) [ 291.764056][ T931] usb 2-1: USB disconnect, device number 76 [ 291.786905][T10558] input: syz0 as /devices/virtual/input/input103 [ 291.931388][T10560] netlink: 'syz.3.1337': attribute type 29 has an invalid length. [ 291.933841][ T9] usb 1-1: failed to fetch extended address, random address set [ 291.948753][T10561] /dev/rnullb0: Can't open blockdev [ 292.046598][ T9] usb 1-1: USB disconnect, device number 87 [ 292.055647][T10565] netlink: 'syz.4.1338': attribute type 29 has an invalid length. [ 292.102592][T10567] /dev/sg0: Can't lookup blockdev [ 292.120656][T10565] netlink: 'syz.4.1338': attribute type 29 has an invalid length. [ 292.138671][T10565] /dev/rnullb0: Can't open blockdev [ 292.362393][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030685000: rx timeout, send abort [ 292.379165][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888030686400: rx timeout, send abort [ 292.633482][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 292.777349][T10581] input: syz0 as /devices/virtual/input/input104 [ 292.804638][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 292.828130][ T9] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 292.843494][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.862025][ T9] usb 5-1: Product: syz [ 292.872978][ T9] usb 5-1: Manufacturer: syz [ 292.881513][ T9] usb 5-1: SerialNumber: syz [ 292.905576][ T9] usb 5-1: config 0 descriptor?? [ 292.922644][T10583] /dev/rnullb0: Can't open blockdev [ 292.932238][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 293.425328][ T5836] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 293.584081][ T5889] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 293.599279][ T5836] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 293.618798][ T5836] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.647417][ T5836] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 293.668290][ T5836] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.700995][ T5836] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 293.720709][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 293.731341][ T5836] usb 2-1: Product: syz [ 293.736676][ T5836] usb 2-1: Manufacturer: syz [ 293.762160][ T5836] cdc_wdm 2-1:1.0: skipping garbage [ 293.767967][ T5836] cdc_wdm 2-1:1.0: skipping garbage [ 293.784296][ T5836] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 293.792368][ T5889] usb 4-1: config 1 interface 0 has no altsetting 0 [ 293.815339][ T5889] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 293.834932][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.842945][ T5889] usb 4-1: Product: syz [ 293.857602][ T5889] usb 4-1: Manufacturer: syz [ 293.862219][ T5889] usb 4-1: SerialNumber: syz [ 294.166766][ T43] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 294.330508][ T43] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 294.340566][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.352058][ T43] usb 1-1: Product: syz [ 294.357424][ T43] usb 1-1: Manufacturer: syz [ 294.362276][ T43] usb 1-1: SerialNumber: syz [ 294.374876][ T43] usb 1-1: config 0 descriptor?? [ 294.791502][ T43] usb 1-1: Firmware: major: 223, minor: 162, hardware type: ATUSB (1) [ 294.992560][ T43] usb 1-1: failed to fetch extended address, random address set [ 295.075891][ T43] usb 1-1: USB disconnect, device number 88 [ 295.729445][T10611] /dev/rnullb0: Can't open blockdev [ 295.861854][T10614] /dev/rnullb0: Can't open blockdev [ 296.277357][ T5929] usb 2-1: USB disconnect, device number 77 [ 296.308645][ T5889] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 74 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 296.336788][T10622] /dev/rnullb0: Can't open blockdev [ 296.344452][ T5889] usb 4-1: USB disconnect, device number 74 [ 296.375422][ T5889] usblp0: removed [ 296.381183][ T9] gspca_stk1135: reg_w 0x18 err -71 [ 296.390304][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 296.392652][T10624] fuseblk: Unknown parameter 'nM { V3.X>{#{7r7_e0b_~1雩۾2508fB*K.6Pf6h?KEb<~-Ht8f?!Lx6+bQwG[%;\' [ 296.423578][ T9] gspca_stk1135: Sensor write failed [ 296.436939][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 296.457057][ T9] gspca_stk1135: Sensor write failed [ 296.466816][T10627] /dev/rnullb0: Can't open blockdev [ 296.478806][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 296.494324][ T9] gspca_stk1135: Sensor read failed [ 296.499563][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 296.533531][ T9] gspca_stk1135: Sensor read failed [ 296.538756][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 296.563344][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 296.569693][ T9] gspca_stk1135: Sensor read failed [ 296.593204][T10634] /dev/rnullb0: Can't open blockdev [ 296.599716][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 296.608432][ T9] gspca_stk1135: Sensor read failed [ 296.628549][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 296.653523][ T9] gspca_stk1135: Sensor write failed [ 296.658884][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 296.673455][ T5929] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 296.693380][ T9] gspca_stk1135: Sensor write failed [ 296.708468][ T9] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 296.745860][T10630] could not allocate digest TFM handle blake2s-256-generic [ 296.747003][ T9] usb 5-1: USB disconnect, device number 7 [ 296.762354][T10639] /dev/rnullb0: Can't open blockdev [ 296.823458][ T5929] usb 2-1: device descriptor read/64, error -71 [ 296.837081][T10641] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1363'. [ 297.088168][T10643] /dev/rnullb0: Can't open blockdev [ 297.097250][T10643] /dev/rnullb0: Can't open blockdev [ 297.104836][ T5929] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 297.283382][ T5929] usb 2-1: device descriptor read/64, error -71 [ 297.308566][T10650] usb usb8: usbfs: process 10650 (syz.4.1366) did not claim interface 0 before use [ 297.393878][ T5929] usb usb2-port1: attempt power cycle [ 297.404993][T10650] /dev/rnullb0: Can't open blockdev [ 297.753645][ T5929] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 297.794084][ T5929] usb 2-1: device descriptor read/8, error -71 [ 297.903719][ T5889] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 298.033544][ T5929] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 298.058444][ T5889] usb 5-1: config 1 interface 0 has no altsetting 0 [ 298.066454][ T5929] usb 2-1: device descriptor read/8, error -71 [ 298.081016][ T5889] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 298.114193][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.122212][ T5889] usb 5-1: Product: syz [ 298.133696][ T5889] usb 5-1: Manufacturer: syz [ 298.138324][ T5889] usb 5-1: SerialNumber: syz [ 298.173784][ T5929] usb usb2-port1: unable to enumerate USB device [ 298.278527][T10673] /dev/rnullb0: Can't open blockdev [ 298.963596][ T5929] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 299.118844][T10688] /dev/rnullb0: Can't open blockdev [ 299.133624][ T5929] usb 1-1: Using ep0 maxpacket: 8 [ 299.157470][ T5929] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 299.173369][ T5929] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 299.183171][ T5929] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 299.223403][ T5929] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.243179][T10691] input: syz0 as /devices/virtual/input/input105 [ 299.249162][ T5929] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 299.273395][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.338038][T10693] /dev/rnullb0: Can't open blockdev [ 299.458267][T10695] /dev/rnullb0: Can't open blockdev [ 299.505786][T10679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.531183][T10679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.569578][ T5929] usb 1-1: GET_CAPABILITIES returned 0 [ 299.584685][ T5929] usbtmc 1-1:16.0: can't read capabilities [ 299.847000][ T9] usb 1-1: USB disconnect, device number 89 [ 299.919776][T10704] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1385'. [ 300.275128][ T931] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 300.450149][ T931] usb 4-1: Using ep0 maxpacket: 32 [ 300.471653][ T931] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 300.496868][ T931] usb 4-1: config 0 interface 0 has no altsetting 0 [ 300.507254][ T931] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 300.518228][ T931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.531155][ T931] usb 4-1: config 0 descriptor?? [ 300.541468][T10713] input: syz0 as /devices/virtual/input/input106 [ 300.556703][ T931] usbhid 4-1:0.0: can't add hid device: -22 [ 300.567722][ T931] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 300.567776][ T5889] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 300.586654][ C1] ================================================================== [ 300.586669][ C1] BUG: KASAN: slab-use-after-free in flush_tlb_func+0x23d/0x6c0 [ 300.586696][ C1] Write of size 8 at addr ffff88807f08aa40 by task kworker/1:5/5889 [ 300.586711][ C1] [ 300.586721][ C1] CPU: 1 UID: 0 PID: 5889 Comm: kworker/1:5 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 300.586741][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 300.586752][ C1] Workqueue: usb_hub_wq hub_event [ 300.586775][ C1] Call Trace: [ 300.586781][ C1] [ 300.586789][ C1] dump_stack_lvl+0x189/0x250 [ 300.586808][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 300.586827][ C1] ? rcu_is_watching+0x15/0xb0 [ 300.586844][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.586861][ C1] ? rcu_is_watching+0x15/0xb0 [ 300.586877][ C1] ? lock_release+0x4b/0x3e0 [ 300.586902][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 300.586920][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 300.586940][ C1] print_report+0xd2/0x2b0 [ 300.586962][ C1] ? flush_tlb_func+0x23d/0x6c0 [ 300.586980][ C1] kasan_report+0x118/0x150 [ 300.587000][ C1] ? flush_tlb_func+0x23d/0x6c0 [ 300.587021][ C1] kasan_check_range+0x2b0/0x2c0 [ 300.587041][ C1] flush_tlb_func+0x23d/0x6c0 [ 300.587064][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 300.587083][ C1] ? sched_clock_cpu+0x74/0x430 [ 300.587100][ C1] ? rcu_is_watching+0x15/0xb0 [ 300.587116][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 300.587136][ C1] __flush_smp_call_function_queue+0x370/0xaa0 [ 300.587153][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 300.587174][ C1] __sysvec_call_function_single+0xa8/0x3d0 [ 300.587196][ C1] sysvec_call_function_single+0x9e/0xc0 [ 300.587216][ C1] [ 300.587223][ C1] [ 300.587229][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 300.587246][ C1] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 300.587263][ C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 b5 36 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 a6 36 1f 00 eb 06 e8 9f 36 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 0a 4a 83 00 48 8b 1b 48 8b 44 24 [ 300.587277][ C1] RSP: 0018:ffffc900042a6580 EFLAGS: 00000287 [ 300.587292][ C1] RAX: 1ffffffff1d78ef3 RBX: ffffffff8ebc7798 RCX: 0000000000100000 [ 300.587305][ C1] RDX: ffffc90017995000 RSI: 000000000005f204 RDI: 000000000005f205 [ 300.587317][ C1] RBP: ffffc900042a66d0 R08: ffffffff8fc29e37 R09: 1ffffffff1f853c6 [ 300.587330][ C1] R10: dffffc0000000000 R11: fffffbfff1f853c7 R12: dffffc0000000000 [ 300.587349][ C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8ebc7740 [ 300.587368][ C1] ? console_flush_all+0x13a/0xc40 [ 300.587390][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 300.587413][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 300.587435][ C1] console_unlock+0xc4/0x270 [ 300.587452][ C1] ? __pfx_console_unlock+0x10/0x10 [ 300.587468][ C1] ? vprintk_emit+0x400/0x7a0 [ 300.587485][ C1] ? vprintk_emit+0x587/0x7a0 [ 300.587501][ C1] ? vprintk_emit+0x444/0x7a0 [ 300.587515][ C1] ? vprintk_emit+0x444/0x7a0 [ 300.587531][ C1] vprintk_emit+0x5b7/0x7a0 [ 300.587546][ C1] ? vprintk_emit+0x444/0x7a0 [ 300.587562][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 300.587580][ C1] ? __pfx_snprintf+0x10/0x10 [ 300.587596][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 300.587620][ C1] dev_vprintk_emit+0x337/0x3f0 [ 300.587640][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 300.587661][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 300.587683][ C1] dev_printk_emit+0xe0/0x130 [ 300.587705][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 300.587724][ C1] ? usb_register_dev+0x42a/0x5a0 [ 300.587747][ C1] ? __dev_printk+0x131/0x190 [ 300.587766][ C1] _dev_info+0x10a/0x160 [ 300.587783][ C1] ? usb_register_dev+0x42a/0x5a0 [ 300.587804][ C1] ? __pfx__dev_info+0x10/0x10 [ 300.587826][ C1] usblp_probe+0x1320/0x17f0 [ 300.587859][ C1] ? __pfx_usblp_probe+0x10/0x10 [ 300.587878][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 300.587896][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 300.587914][ C1] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 300.587933][ C1] ? pm_runtime_enable+0x1f3/0x340 [ 300.587953][ C1] usb_probe_interface+0x637/0xbf0 [ 300.587979][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 300.587998][ C1] really_probe+0x26a/0x9a0 [ 300.588019][ C1] __driver_probe_device+0x18c/0x2f0 [ 300.588038][ C1] driver_probe_device+0x4f/0x430 [ 300.588058][ C1] __device_attach_driver+0x2ce/0x530 [ 300.588078][ C1] bus_for_each_drv+0x251/0x2e0 [ 300.588100][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 300.588118][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 300.588146][ C1] __device_attach+0x2b8/0x400 [ 300.588165][ C1] ? __pfx___device_attach+0x10/0x10 [ 300.588184][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 300.588205][ C1] bus_probe_device+0x185/0x260 [ 300.588226][ C1] device_add+0x7b6/0xb50 [ 300.588244][ C1] usb_set_configuration+0x1a87/0x20e0 [ 300.588275][ C1] usb_generic_driver_probe+0x8d/0x150 [ 300.588296][ C1] usb_probe_device+0x1c1/0x390 [ 300.588314][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 300.588331][ C1] really_probe+0x26a/0x9a0 [ 300.588360][ C1] __driver_probe_device+0x18c/0x2f0 [ 300.588380][ C1] driver_probe_device+0x4f/0x430 [ 300.588399][ C1] __device_attach_driver+0x2ce/0x530 [ 300.588418][ C1] bus_for_each_drv+0x251/0x2e0 [ 300.588440][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 300.588459][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 300.588484][ C1] __device_attach+0x2b8/0x400 [ 300.588502][ C1] ? __pfx___device_attach+0x10/0x10 [ 300.588522][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 300.588540][ C1] bus_probe_device+0x185/0x260 [ 300.588562][ C1] device_add+0x7b6/0xb50 [ 300.588578][ C1] usb_new_device+0xa39/0x16f0 [ 300.588596][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 300.588612][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 300.588631][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.588652][ C1] hub_event+0x2941/0x4a00 [ 300.588667][ C1] ? __lock_acquire+0xab9/0xd20 [ 300.588707][ C1] ? __pfx_hub_event+0x10/0x10 [ 300.588724][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 300.588752][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 300.588768][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 300.588792][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 300.588816][ C1] process_scheduled_works+0xae1/0x17b0 [ 300.588852][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 300.588883][ C1] worker_thread+0x8a0/0xda0 [ 300.588899][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 300.588922][ C1] ? __kthread_parkme+0x7b/0x200 [ 300.588941][ C1] kthread+0x70e/0x8a0 [ 300.588961][ C1] ? __pfx_worker_thread+0x10/0x10 [ 300.588977][ C1] ? __pfx_kthread+0x10/0x10 [ 300.588995][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 300.589012][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.589029][ C1] ? __pfx_kthread+0x10/0x10 [ 300.589045][ C1] ret_from_fork+0x3fc/0x770 [ 300.589060][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 300.589076][ C1] ? __switch_to_asm+0x39/0x70 [ 300.589095][ C1] ? __switch_to_asm+0x33/0x70 [ 300.589114][ C1] ? __pfx_kthread+0x10/0x10 [ 300.589132][ C1] ret_from_fork_asm+0x1a/0x30 [ 300.589157][ C1] [ 300.589164][ C1] [ 300.589178][ C1] Allocated by task 10188: [ 300.589186][ C1] kasan_save_track+0x3e/0x80 [ 300.589203][ C1] __kasan_slab_alloc+0x6c/0x80 [ 300.589218][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 300.589234][ C1] copy_mm+0xdb/0x4b0 [ 300.589249][ C1] copy_process+0x1706/0x3c00 [ 300.589264][ C1] kernel_clone+0x21e/0x870 [ 300.589279][ C1] __x64_sys_clone+0x18b/0x1e0 [ 300.589296][ C1] do_syscall_64+0xfa/0x3b0 [ 300.589317][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.589331][ C1] [ 300.589342][ C1] Freed by task 10660: [ 300.589350][ C1] kasan_save_track+0x3e/0x80 [ 300.589365][ C1] kasan_save_free_info+0x46/0x50 [ 300.589386][ C1] __kasan_slab_free+0x62/0x70 [ 300.589402][ C1] kmem_cache_free+0x18f/0x400 [ 300.589418][ C1] exit_mm+0x1da/0x2c0 [ 300.589435][ C1] do_exit+0x648/0x2300 [ 300.589452][ C1] do_group_exit+0x21c/0x2d0 [ 300.589471][ C1] get_signal+0x1286/0x1340 [ 300.589492][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 300.589514][ C1] exit_to_user_mode_loop+0x75/0x110 [ 300.589535][ C1] do_syscall_64+0x2bd/0x3b0 [ 300.589553][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.589568][ C1] [ 300.589572][ C1] The buggy address belongs to the object at ffff88807f08a040 [ 300.589572][ C1] which belongs to the cache mm_struct of size 2584 [ 300.589587][ C1] The buggy address is located 2560 bytes inside of [ 300.589587][ C1] freed 2584-byte region [ffff88807f08a040, ffff88807f08aa58) [ 300.589606][ C1] [ 300.589611][ C1] The buggy address belongs to the physical page: [ 300.589620][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f088 [ 300.589637][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 300.589651][ C1] memcg:ffff88806f78f401 [ 300.589659][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 300.589682][ C1] page_type: f5(slab) [ 300.589698][ C1] raw: 00fff00000000040 ffff88801a84bb40 dead000000000100 dead000000000122 [ 300.589714][ C1] raw: 0000000000000000 00000000000b000b 00000000f5000000 ffff88806f78f401 [ 300.589730][ C1] head: 00fff00000000040 ffff88801a84bb40 dead000000000100 dead000000000122 [ 300.589746][ C1] head: 0000000000000000 00000000000b000b 00000000f5000000 ffff88806f78f401 [ 300.589761][ C1] head: 00fff00000000003 ffffea0001fc2201 00000000ffffffff 00000000ffffffff [ 300.589776][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 300.589787][ C1] page dumped because: kasan: bad access detected [ 300.589800][ C1] page_owner tracks the page as allocated [ 300.589806][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5188, tgid 5188 (rcS), ts 31676174961, free_ts 29574750756 [ 300.589836][ C1] post_alloc_hook+0x240/0x2a0 [ 300.589855][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 300.589877][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 300.589898][ C1] alloc_pages_mpol+0x232/0x4a0 [ 300.589915][ C1] allocate_slab+0x8a/0x370 [ 300.589935][ C1] ___slab_alloc+0xbeb/0x1410 [ 300.589954][ C1] kmem_cache_alloc_noprof+0x283/0x3c0 [ 300.589969][ C1] mm_alloc+0x23/0xd0 [ 300.589981][ C1] alloc_bprm+0x378/0x5b0 [ 300.589997][ C1] do_execveat_common+0x1b3/0x6a0 [ 300.590015][ C1] __x64_sys_execve+0x94/0xb0 [ 300.590032][ C1] do_syscall_64+0xfa/0x3b0 [ 300.590051][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.590067][ C1] page last free pid 1 tgid 1 stack trace: [ 300.590076][ C1] __free_frozen_pages+0xb80/0xd80 [ 300.590094][ C1] free_contig_range+0x1bd/0x4a0 [ 300.590116][ C1] destroy_args+0x7e/0x5d0 [ 300.590134][ C1] debug_vm_pgtable+0x3fa/0x430 [ 300.590150][ C1] do_one_initcall+0x233/0x820 [ 300.590168][ C1] do_initcall_level+0x137/0x1f0 [ 300.590189][ C1] do_initcalls+0x69/0xd0 [ 300.590209][ C1] kernel_init_freeable+0x3d9/0x570 [ 300.590230][ C1] kernel_init+0x1d/0x1d0 [ 300.590244][ C1] ret_from_fork+0x3fc/0x770 [ 300.590257][ C1] ret_from_fork_asm+0x1a/0x30 [ 300.590276][ C1] [ 300.590281][ C1] Memory state around the buggy address: [ 300.590291][ C1] ffff88807f08a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 300.590303][ C1] ffff88807f08a980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 300.590315][ C1] >ffff88807f08aa00: fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc [ 300.590325][ C1] ^ [ 300.590341][ C1] ffff88807f08aa80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 300.590352][ C1] ffff88807f08ab00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 300.590362][ C1] ================================================================== [ 300.590376][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 300.590389][ C1] CPU: 1 UID: 0 PID: 5889 Comm: kworker/1:5 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 300.590410][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 300.590422][ C1] Workqueue: usb_hub_wq hub_event [ 300.590442][ C1] Call Trace: [ 300.590449][ C1] [ 300.590456][ C1] dump_stack_lvl+0x99/0x250 [ 300.590475][ C1] ? __asan_memcpy+0x40/0x70 [ 300.590490][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.590508][ C1] ? __pfx__printk+0x10/0x10 [ 300.590532][ C1] panic+0x2db/0x790 [ 300.590550][ C1] ? __pfx_panic+0x10/0x10 [ 300.590567][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 300.590586][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 300.590604][ C1] ? print_memory_metadata+0x314/0x400 [ 300.590628][ C1] ? flush_tlb_func+0x23d/0x6c0 [ 300.590647][ C1] check_panic_on_warn+0x89/0xb0 [ 300.590668][ C1] ? flush_tlb_func+0x23d/0x6c0 [ 300.590686][ C1] end_report+0x78/0x160 [ 300.590705][ C1] kasan_report+0x129/0x150 [ 300.590724][ C1] ? flush_tlb_func+0x23d/0x6c0 [ 300.590748][ C1] kasan_check_range+0x2b0/0x2c0 [ 300.590768][ C1] flush_tlb_func+0x23d/0x6c0 [ 300.590792][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 300.590811][ C1] ? sched_clock_cpu+0x74/0x430 [ 300.590829][ C1] ? rcu_is_watching+0x15/0xb0 [ 300.590844][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 300.590864][ C1] __flush_smp_call_function_queue+0x370/0xaa0 [ 300.590881][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 300.590903][ C1] __sysvec_call_function_single+0xa8/0x3d0 [ 300.590925][ C1] sysvec_call_function_single+0x9e/0xc0 [ 300.590944][ C1] [ 300.590950][ C1] [ 300.590958][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 300.590976][ C1] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 300.590996][ C1] Code: 48 21 c3 0f 85 e9 01 00 00 e8 b5 36 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 a6 36 1f 00 eb 06 e8 9f 36 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 0a 4a 83 00 48 8b 1b 48 8b 44 24 [ 300.591011][ C1] RSP: 0018:ffffc900042a6580 EFLAGS: 00000287 [ 300.591026][ C1] RAX: 1ffffffff1d78ef3 RBX: ffffffff8ebc7798 RCX: 0000000000100000 [ 300.591039][ C1] RDX: ffffc90017995000 RSI: 000000000005f204 RDI: 000000000005f205 [ 300.591052][ C1] RBP: ffffc900042a66d0 R08: ffffffff8fc29e37 R09: 1ffffffff1f853c6 [ 300.591065][ C1] R10: dffffc0000000000 R11: fffffbfff1f853c7 R12: dffffc0000000000 [ 300.591079][ C1] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8ebc7740 [ 300.591101][ C1] ? console_flush_all+0x13a/0xc40 [ 300.591124][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 300.591148][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 300.591171][ C1] console_unlock+0xc4/0x270 [ 300.591190][ C1] ? __pfx_console_unlock+0x10/0x10 [ 300.591205][ C1] ? vprintk_emit+0x400/0x7a0 [ 300.591220][ C1] ? vprintk_emit+0x587/0x7a0 [ 300.591236][ C1] ? vprintk_emit+0x444/0x7a0 [ 300.591251][ C1] ? vprintk_emit+0x444/0x7a0 [ 300.591268][ C1] vprintk_emit+0x5b7/0x7a0 [ 300.591282][ C1] ? vprintk_emit+0x444/0x7a0 [ 300.591299][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 300.591317][ C1] ? __pfx_snprintf+0x10/0x10 [ 300.591343][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 300.591369][ C1] dev_vprintk_emit+0x337/0x3f0 [ 300.591391][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 300.591413][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 300.591437][ C1] dev_printk_emit+0xe0/0x130 [ 300.591460][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 300.591479][ C1] ? usb_register_dev+0x42a/0x5a0 [ 300.591504][ C1] ? __dev_printk+0x131/0x190 [ 300.591525][ C1] _dev_info+0x10a/0x160 [ 300.591544][ C1] ? usb_register_dev+0x42a/0x5a0 [ 300.591568][ C1] ? __pfx__dev_info+0x10/0x10 [ 300.591592][ C1] usblp_probe+0x1320/0x17f0 [ 300.591628][ C1] ? __pfx_usblp_probe+0x10/0x10 [ 300.591650][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 300.591669][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 300.591688][ C1] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 300.591708][ C1] ? pm_runtime_enable+0x1f3/0x340 [ 300.591728][ C1] usb_probe_interface+0x637/0xbf0 [ 300.591754][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 300.591774][ C1] really_probe+0x26a/0x9a0 [ 300.591797][ C1] __driver_probe_device+0x18c/0x2f0 [ 300.591817][ C1] driver_probe_device+0x4f/0x430 [ 300.591839][ C1] __device_attach_driver+0x2ce/0x530 [ 300.591861][ C1] bus_for_each_drv+0x251/0x2e0 [ 300.591885][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 300.591906][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 300.591933][ C1] __device_attach+0x2b8/0x400 [ 300.591953][ C1] ? __pfx___device_attach+0x10/0x10 [ 300.591973][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 300.591995][ C1] bus_probe_device+0x185/0x260 [ 300.592019][ C1] device_add+0x7b6/0xb50 [ 300.592037][ C1] usb_set_configuration+0x1a87/0x20e0 [ 300.592069][ C1] usb_generic_driver_probe+0x8d/0x150 [ 300.592090][ C1] usb_probe_device+0x1c1/0x390 [ 300.592111][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 300.592131][ C1] really_probe+0x26a/0x9a0 [ 300.592154][ C1] __driver_probe_device+0x18c/0x2f0 [ 300.592175][ C1] driver_probe_device+0x4f/0x430 [ 300.592197][ C1] __device_attach_driver+0x2ce/0x530 [ 300.592218][ C1] bus_for_each_drv+0x251/0x2e0 [ 300.592242][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 300.592263][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 300.592291][ C1] __device_attach+0x2b8/0x400 [ 300.592310][ C1] ? __pfx___device_attach+0x10/0x10 [ 300.592331][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 300.592358][ C1] bus_probe_device+0x185/0x260 [ 300.592383][ C1] device_add+0x7b6/0xb50 [ 300.592402][ C1] usb_new_device+0xa39/0x16f0 [ 300.592423][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 300.592440][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 300.592459][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.592481][ C1] hub_event+0x2941/0x4a00 [ 300.592500][ C1] ? __lock_acquire+0xab9/0xd20 [ 300.592543][ C1] ? __pfx_hub_event+0x10/0x10 [ 300.592562][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 300.592588][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 300.592605][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 300.592630][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 300.592655][ C1] process_scheduled_works+0xae1/0x17b0 [ 300.592691][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 300.592724][ C1] worker_thread+0x8a0/0xda0 [ 300.592741][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 300.592764][ C1] ? __kthread_parkme+0x7b/0x200 [ 300.592785][ C1] kthread+0x70e/0x8a0 [ 300.592805][ C1] ? __pfx_worker_thread+0x10/0x10 [ 300.592821][ C1] ? __pfx_kthread+0x10/0x10 [ 300.592841][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 300.592860][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.592879][ C1] ? __pfx_kthread+0x10/0x10 [ 300.592899][ C1] ret_from_fork+0x3fc/0x770 [ 300.592915][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 300.592932][ C1] ? __switch_to_asm+0x39/0x70 [ 300.592952][ C1] ? __switch_to_asm+0x33/0x70 [ 300.592971][ C1] ? __pfx_kthread+0x10/0x10 [ 300.592991][ C1] ret_from_fork_asm+0x1a/0x30 [ 300.593018][ C1] [ 300.593276][ C1] Kernel Offset: disabled