last executing test programs: 2m27.550013391s ago: executing program 1 (id=35): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000040)={0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0]}) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000040)={0x2000, 0x8000, 0x8}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x20000000000004) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f00000001c0)=@x86={0x5, 0x5, 0x17, 0x0, 0x4000003, 0xfc, 0x2, 0x81, 0xfd, 0x8, 0x6, 0xff, 0x0, 0x7, 0x5, 0xfc, 0x3, 0x7, 0xfa, '\x00', 0x0, 0x9}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m27.395067968s ago: executing program 1 (id=37): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x29, 0x4d, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000005780)={{0x1, 0x0, 0x80, {0xdddd1000, 0xffff1000}}, "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", "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"}) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSREP(r3, 0x40084503, 0x0) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f0000000000)=""/139, 0x8b}], 0x2}}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/96, 0x60}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000004740)=""/4106, 0x100a}], 0x3}, 0x8}], 0x3, 0x2, 0x0) 2m27.350509573s ago: executing program 1 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000003800)={0x2020}, 0x2020) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) futex(&(0x7f0000000080), 0x5, 0x0, 0x0, 0x0, 0x14fffffd) 2m27.174677527s ago: executing program 1 (id=39): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) futex(&(0x7f0000000080), 0x5, 0x0, 0x0, 0x0, 0x14fffffd) 2m26.9681098s ago: executing program 1 (id=40): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f00000005c0)={0xa0, 0x0, 0x0, {{0x1, 0x3, 0x1, 0x845, 0xfffffffa, 0x2c, {0x0, 0x7fffffff, 0x5, 0xa, 0x3, 0x8000000000000001, 0x4, 0x7, 0x101, 0x2000, 0x8e5, 0x0, 0x0, 0x7f, 0xffff}}, {0x0, 0x13}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x123201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000200)=0x12) close_range(r4, 0xffffffffffffffff, 0x0) read$FUSE(r3, 0x0, 0xeffd) syz_usb_connect(0x0, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="12011400c7f36d088d0e0020c621000000010902290001000000000904000000db02ef00052406"], 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x1c9e01) ioctl$USBDEVFS_FREE_STREAMS(r6, 0xc0105500, 0xffffffffffffffff) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000440)={0x50, 0x0, r8, {0x7, 0x2b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}}, 0x50) write$FUSE_POLL(r2, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r8, {0xfffff6a0}}, 0x18) 2m25.673094929s ago: executing program 1 (id=45): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000070000000000000000"}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 2m22.95674792s ago: executing program 0 (id=60): socket$pptp(0x18, 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2049c1, 0x40) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x8) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x2080, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) io_setup(0x4, &(0x7f0000010440)=0x0) io_submit(r2, 0x1, &(0x7f00000019c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xfdfe, 0x100000000000000, 0x0, 0x4000}]) 2m22.788146257s ago: executing program 0 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) (async) chdir(&(0x7f00000000c0)='./file0\x00') mount$fuse(0x0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x20000, 0x0) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81}) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f00000000c0)) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) read$FUSE(r2, 0x0, 0x3) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) 2m22.670719216s ago: executing program 0 (id=62): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x1, 0x0, &(0x7f0000000380)=[{0xfffffffffffffffe, 0xffffffffffffffff}]}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0xf0ffffff}) 2m22.65518325s ago: executing program 0 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x3a000000, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 2m22.593003322s ago: executing program 0 (id=64): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0) setpgid(0x0, r0) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0xffeb) 2m21.666682328s ago: executing program 0 (id=72): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) open(0x0, 0x14927e, 0x20) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x6002}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x3, 0x2f, 0x0, @loopback, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) getsockopt$rose(r2, 0x104, 0x2, 0x0, &(0x7f0000000340)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @loopback}, {0x1}, 0x28, {0x2, 0x4e24, @remote}, 'pim6reg0\x00'}) 2m10.486351634s ago: executing program 32 (id=45): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000070000000000000000"}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 2m5.838080303s ago: executing program 33 (id=72): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) open(0x0, 0x14927e, 0x20) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x6002}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x3, 0x2f, 0x0, @loopback, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) getsockopt$rose(r2, 0x104, 0x2, 0x0, &(0x7f0000000340)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @loopback}, {0x1}, 0x28, {0x2, 0x4e24, @remote}, 'pim6reg0\x00'}) 1m53.042005296s ago: executing program 4 (id=183): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f000000a980)=[{0x1000000, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)="e6e7", 0x2}], 0x1, 0x0, 0x0, 0x40}], 0x1, 0x40c0855) 1m52.917551365s ago: executing program 4 (id=184): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'vlan0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x8100, r2, 0x1, 0xe0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioprio_set$pid(0x6, 0x0, 0x6000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000b00090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a00000609000073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000008000140000001100010000000000000000000100000a00"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000001180)=""/4084, 0xff4}], 0x1, 0x304, 0x21000008) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1m52.887595925s ago: executing program 4 (id=185): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000640)=ANY=[@ANYBLOB="204da30496aa22a5c951"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f00000000c0)={0x40, 0xa, 0xb3, {0xb3, 0x3, "46a9d3ee11dd291ed274af690d88fe5ef64544a8f6240e8df8dd922d815c8339e9893356fffdb3f653a804ee011e6f1fc443bcc227a03ec3bd55ac8fef086b34d02d6576416fe5421a6e281616e592ea5c361838288d38705b3a0992440e043cca5cbac1afa6b0ae89f06d8e07b145c2bbe1d0ccd47e68176ed029994d5a2fdbb9c61864fbdd2957674df85819be5d9c62c38905e81d79abbc56159b94e13608eb87a89faf1a738fa99b9de9d1ee4537cb"}}, &(0x7f00000001c0)={0x0, 0x3, 0xeb, @string={0xeb, 0x3, "588b0225e0a27fc776b98e48208e19a7c3a6aa86a63aea4cec6d748c2c5a67fa72fdc64bb5a49aae8add122d75c5e89229ad249b17d546ec95d06cea87665e320cf0921b70c9c7bc8b221d022b2e8baf8217e743408bc060da575774f60167cad43ebd733593d5b0038a227d73f36b1bae76a519319bb1874be68ffbe4c6b29ac88cfdeda222ba88daa0ecb29b53b433dbfe0789b7a00a4ef0ee80e9a24561eced0a9a98415d1a22985b8e32103c0b75da300e1bec634ff16cbc9bdc25b9548783ea00a361b70659bb573a241320afcb490a697acb79a8d08aa5fd86f164d7cc1bf3e78c3e397864d6"}}, &(0x7f0000000000)={0x0, 0x22, 0x16, {[@main=@item_4={0x3, 0x0, 0x9, "e518f0fc"}, @main=@item_4={0x3, 0x0, 0xb, "82e7aa00"}, @local=@item_012={0x1, 0x2, 0x3, "0f"}, @global=@item_4={0x3, 0x1, 0x6, "09ffc75c"}, @local=@item_4={0x3, 0x2, 0x2, "49fd34d0"}]}}, &(0x7f0000000040)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0xf9, 0x1, {0x22, 0x67a}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x0, 0x13, 0x19, "c551a9544dae19b054ad61c12b57c2e34936200bb70f73066a"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000580)=ANY=[@ANYBLOB="2001d602ef652926f4387d7e000000bc1a43f98d4a691a8236d946adbcc847b819d34f53af46469717fc6a1a6ddc7e2d7f60246d55b2705d7252a15140b57f684722f590110401f8df89cc369754d7b4238b0abf7e49014ee518818fa0d3da06601902d20da0496ebfd32b5545ce3225b6077ed6ed7812198f028cce9af6e63bc0ed8f07601509bb8214055bd2"], &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x7}}) 1m49.782627131s ago: executing program 4 (id=197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000000c0)={'wlan0\x00'}) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x1a9) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000640)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x1c, 0x7, 0x0, @in6={0xa, 0x0, 0x0, @remote}, @in={0x2, 0x0, @private}}}, 0x118) io_setup(0x9, &(0x7f0000000280)) io_setup(0x10000, &(0x7f00000001c0)) io_setup(0x5, &(0x7f0000000100)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x4010, 0xffffffffffffffff, 0x0) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) 1m49.699430712s ago: executing program 4 (id=198): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0xffeb) 1m49.65765564s ago: executing program 4 (id=199): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000003c0)={"447b1c937ccb25b448817937c262e63d", r1, r2, {0x9, 0x5}, {0xd4b0, 0x1}, 0x0, [0x8, 0x2, 0x6, 0x2ce6, 0x5, 0x39f, 0xf60b, 0x14, 0x6b740e9d, 0x65, 0x4, 0x4, 0x4, 0xd5e, 0xffffffffffffff81, 0x5]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m45.350379973s ago: executing program 2 (id=213): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x2000000) 1m45.252598982s ago: executing program 2 (id=214): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x40015b19, &(0x7f0000000040)) 1m44.714460105s ago: executing program 2 (id=218): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1008030, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_nofollow}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000380)='./file1\x00') mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/nfsfs\x00') getdents64(r1, &(0x7f0000000380)=""/190, 0xbe) r2 = socket(0x1e, 0x5, 0x0) ioctl$SIOCGETVIFCNT(r2, 0x89e0, &(0x7f0000000080)) getdents(r1, 0x0, 0x0) syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$FIONCLEX(r4, 0x5450) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r5, 0x10c, 0x3, 0x0, 0x0) shutdown(r3, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') open$dir(&(0x7f0000000180)='./bus\x00', 0x111801, 0x14d) openat2(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x200000, 0xcc}, 0x18) faccessat(r0, &(0x7f0000000000)='./bus\x00', 0x100) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 1m43.383481107s ago: executing program 2 (id=224): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) ioctl$SIOCSIFMTU(r1, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x10000}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x21, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x5, 0x1, 0x0, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0x6, 0xffffeadb, 0x3, 0x1003c, 0x8, 0x80000001, 0x8000000, 0x5]}) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000200)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000040)={{r4, 0x5, 0x7eb00000, 0xfffffffffffffffb, 0x2, 0x1, 0x100000001, 0x8001, 0x0, 0x20000, 0x7ff, 0xad, 0x6, 0xfffffffffffffff3, 0x1}, 0x8, [0x0]}) mount(0x0, 0x0, 0x0, 0x200000, 0x0) 1m43.218669985s ago: executing program 2 (id=226): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x40015b19, &(0x7f0000000040)) 1m42.715115965s ago: executing program 2 (id=227): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000120, 0x0, 0x0, 0x0) 1m38.896002046s ago: executing program 3 (id=238): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000040)={0x2000, 0x8000, 0x8, 0xfd7f}) 1m38.811469996s ago: executing program 3 (id=239): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x35) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x6, 0xfffffffffffffffd, 0x0, 0x3, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3}) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0]) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xe9) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m38.690628384s ago: executing program 3 (id=240): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x1) socket$alg(0x26, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f04fa800e04f0a49a96f015ae23b9417536d72ee41d4b43c4360333e96df771695f9f10b3cf20c9314c7cd4d6b339325b005fc463a60908c6fdf962247e084302a745b168b946ef8e46235960d3a28c27de7cda7a8e5c27b2a7077993ce4c8764d5f17081bc7ebdac61ba1ab5f86e0ad7c7ed8766152b3aff0d40be2e9e31602b409d0eec62fbbf86f466ea3dcc6423ef9f28a17eebd46419ea7f4405d003125a60c2fcdda194032c", @ANYRESOCT=0x0], 0x6) 1m38.687736452s ago: executing program 3 (id=241): syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0xec, 0xe1, 0x64, 0x8, 0x6e1, 0x709, 0x204, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x80, 0x20, 0x0, 0xf8, [{{0x9, 0x4, 0x6f, 0x0, 0x0, 0xf2, 0x7e, 0x20}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x1) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x18}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x4, 0x5, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000000)={r3}) 1m37.460437137s ago: executing program 3 (id=242): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000280)={0x0, 0xea60}, 0x10) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = mq_open(&(0x7f00000000c0)='\xaa\xaa\xaa\xaa\xaa', 0x2, 0x148, &(0x7f0000000100)={0x1, 0x5fe, 0x5}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="3c000280380001"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001400)={'ip6_vti0\x00', &(0x7f0000001380)={'ip6_vti0\x00', 0x0, 0x2b, 0xb4, 0x2, 0x100, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x8000, 0x7, 0x55, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)={0x48, r3, 0x205, 0x7fffff, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008040}, 0x48810) mq_notify(r1, &(0x7f0000000200)={0x0, 0x8, 0x2, @thr={&(0x7f0000000140)="ae51b20096877a33d0a3451ab8f686acaf3a4413ab0e123b5047d86927b8c9d135c0d5901f3f67c711e036b81d24870f542f5b393e7e191ea6968d14fa99f17fd0b643cf80ed4380756dc517e7c00c71903ca5f998d7eba042acd7215aa531a0868ebb0b412eb58a05e236d78f93a7fefc034b03b67744c2e99d75da855a9a4abff468026ab44fac8ea5fcc59f9e85a40e1850d0be052acf19768630ee359ddf3f708e4d6c1d836d1514c3a08b183eee94db5a40e26ef2e56118b539473a92", &(0x7f0000000340)="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"}}) sendmmsg(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="a3", 0x1}], 0x1}}], 0x1, 0x0) 1m37.261454218s ago: executing program 3 (id=243): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000140)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x10}, 0x1, 0x0, 0x0, 0x48004}, 0x4000040) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200)={0x0, 0x1}, &(0x7f0000000240)=0x8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000300000000000800014000000001080002400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) ioctl$TCSETS(r5, 0x89f0, &(0x7f0000000100)={0x4, 0x0, 0x1003, 0x4, 0x12, "bb40af00008000"}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000280)={r4, 0x5}, &(0x7f00000002c0)=0xc) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r7 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x2, 0x1, 0x2, {0xa, 0x4e23, 0x80000001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}, 0x3a) dup3(r7, r2, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$setregset(0x4205, r9, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r9, 0x200, &(0x7f0000000140)={0x0, 0x30}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 1m34.07019213s ago: executing program 34 (id=199): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000003c0)={"447b1c937ccb25b448817937c262e63d", r1, r2, {0x9, 0x5}, {0xd4b0, 0x1}, 0x0, [0x8, 0x2, 0x6, 0x2ce6, 0x5, 0x39f, 0xf60b, 0x14, 0x6b740e9d, 0x65, 0x4, 0x4, 0x4, 0xd5e, 0xffffffffffffff81, 0x5]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m27.014469239s ago: executing program 35 (id=227): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000120, 0x0, 0x0, 0x0) 1m21.490280469s ago: executing program 36 (id=243): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000140)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x10}, 0x1, 0x0, 0x0, 0x48004}, 0x4000040) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200)={0x0, 0x1}, &(0x7f0000000240)=0x8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000300000000000800014000000001080002400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) ioctl$TCSETS(r5, 0x89f0, &(0x7f0000000100)={0x4, 0x0, 0x1003, 0x4, 0x12, "bb40af00008000"}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000280)={r4, 0x5}, &(0x7f00000002c0)=0xc) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r7 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x2, 0x1, 0x2, {0xa, 0x4e23, 0x80000001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}, 0x3a) dup3(r7, r2, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$setregset(0x4205, r9, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r9, 0x200, &(0x7f0000000140)={0x0, 0x30}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 6.276160689s ago: executing program 8 (id=393): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x3, "abe763"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000640)=ANY=[@ANYBLOB="204da30496aa22a5c951"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f00000000c0)={0x40, 0xa, 0xb3, {0xb3, 0x3, "46a9d3ee11dd291ed274af690d88fe5ef64544a8f6240e8df8dd922d815c8339e9893356fffdb3f653a804ee011e6f1fc443bcc227a03ec3bd55ac8fef086b34d02d6576416fe5421a6e281616e592ea5c361838288d38705b3a0992440e043cca5cbac1afa6b0ae89f06d8e07b145c2bbe1d0ccd47e68176ed029994d5a2fdbb9c61864fbdd2957674df85819be5d9c62c38905e81d79abbc56159b94e13608eb87a89faf1a738fa99b9de9d1ee4537cb"}}, &(0x7f00000001c0)={0x0, 0x3, 0xeb, @string={0xeb, 0x3, "588b0225e0a27fc776b98e48208e19a7c3a6aa86a63aea4cec6d748c2c5a67fa72fdc64bb5a49aae8add122d75c5e89229ad249b17d546ec95d06cea87665e320cf0921b70c9c7bc8b221d022b2e8baf8217e743408bc060da575774f60167cad43ebd733593d5b0038a227d73f36b1bae76a519319bb1874be68ffbe4c6b29ac88cfdeda222ba88daa0ecb29b53b433dbfe0789b7a00a4ef0ee80e9a24561eced0a9a98415d1a22985b8e32103c0b75da300e1bec634ff16cbc9bdc25b9548783ea00a361b70659bb573a241320afcb490a697acb79a8d08aa5fd86f164d7cc1bf3e78c3e397864d6"}}, &(0x7f0000000000)={0x0, 0x22, 0x16, {[@main=@item_4={0x3, 0x0, 0x9, "e518f0fc"}, @main=@item_4={0x3, 0x0, 0xb, "82e7aa00"}, @local=@item_012={0x1, 0x2, 0x3, "0f"}, @global=@item_4={0x3, 0x1, 0x6, "09ffc75c"}, @local=@item_4={0x3, 0x2, 0x2, "49fd34d0"}]}}, &(0x7f0000000040)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0xf9, 0x1, {0x22, 0x67a}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x0, 0x13, 0x19, "c551a9544dae19b054ad61c12b57c2e34936200bb70f73066a"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000580)=ANY=[@ANYBLOB="2001d602ef652926f4387d7e000000bc1a43f98d4a691a8236d946adbcc847b819d34f53af46469717fc6a1a6ddc7e2d7f60246d55b2705d7252a15140b57f684722f590110401f8df89cc369754d7b4238b0abf7e49014ee518818fa0d3da06601902d20da0496ebfd32b5545ce3225b6077ed6ed7812198f028cce9af6e63bc0ed8f07601509bb8214055bd2"], &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x7}}) 6.159570201s ago: executing program 5 (id=395): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b19, &(0x7f0000000040)) 4.460090168s ago: executing program 7 (id=409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) 4.370587668s ago: executing program 7 (id=410): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xfffffffe}, 0x1c) (async) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 4.365703363s ago: executing program 7 (id=411): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {}, {0x3e000000}, {}, {}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x106, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) 4.327588922s ago: executing program 7 (id=412): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x2, {0x2, 0x1000000000000, 0x0, 0x3, 0x4000, 0x0, {0x200000000000003, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, r2, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203843, 0x0, [0x2], [0x800], [], [0x8]}) write$FUSE_INIT(r0, &(0x7f0000001240)={0x50, 0x0, r1, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) 4.249393251s ago: executing program 7 (id=413): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0) setpgid(0x0, r0) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0xffff) 3.48777169s ago: executing program 6 (id=416): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f00000002c0)=@in6={0x2, 0x4e22, 0x0, @dev, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0xffffff97) 3.390627883s ago: executing program 6 (id=417): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f04fa800e04f0a49a96f015ae23b9417536d72ee41d4b43c4360333e96df771695f9f10b3cf20c9314c7cd4d6b339325b005fc463a60908c6fdf962247e084302a745b168b946ef8e46235960d3a28c27de7cda"], 0x6) 3.386375373s ago: executing program 6 (id=418): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f00000000c0)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) landlock_restrict_self(r0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000001640), 0x0, 0x80a80) r3 = socket$inet(0x2, 0x802, 0x1) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x1088, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x3554, 0x4) sendto$inet6(r4, 0x0, 0xfc96, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) write(r3, &(0x7f0000000440)="08008edf773c8000", 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x7000000) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) preadv(r6, &(0x7f0000000c40), 0x0, 0x70, 0x9) ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f0000000000)={0x2, {0x9, 0x63e8, 0x1}, {0x10001, 0x540, 0xffdfffff, 0x7f}, {0x1d, 0x4}}) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400191809004beafd0d3602028447000b4e230f02000500a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x84}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0xc0189436, 0x0) r10 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="0002000000000006cb060600eb9a0102030109022400010000000009040001020a16d100090507bf"], 0x0) syz_usb_control_io$printer(r10, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0x71, &(0x7f00000008c0)=ANY=[@ANYBLOB="12011003000000206b1d010140000102030109025f0023018000090904000000010100000a2401050055020102090401000001020000090401010101020000090501090800000509072501800da70209040200000102000009040201010102000009058209000205004007250102080800"], &(0x7f0000000bc0)={0x0, 0x0, 0x41, &(0x7f0000000a00)={0x5, 0xf, 0x41, 0x1, [@generic={0x3c, 0x10, 0xa, "7ccbe48677133ba571fbe257ca14fc3d47c1f46fb975ec2f2f36b079ff1b38701af44a3372ca536c5fa64159d77eb538949806af4b60f2b440"}]}}) 3.338233345s ago: executing program 7 (id=419): mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9aec, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000340)={0x2, @pix={0x8, 0x3, 0x34325258, 0x5, 0xffffffff, 0x4, 0x7, 0x4, 0x1, 0x0, 0x1}}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x400000b4, 0x0, 0x32feb97c}]}) setpgid(r0, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) setpgid(r5, r5) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) 3.208583705s ago: executing program 8 (id=420): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f0000000500)=""/227, 0xe3, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 3.118510561s ago: executing program 8 (id=421): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x2, {0x2, 0x1000000000000, 0x0, 0x3, 0x4000, 0x0, {0x200000000000003, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, r2, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203843, 0x0, [0x2], [0x800], [], [0x8]}) write$FUSE_INIT(r0, &(0x7f0000001240)={0x50, 0x0, r1, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) 3.105192452s ago: executing program 8 (id=422): r0 = syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c090003042402020424"], 0x0) syz_usb_connect(0x2, 0xf5, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES16=r0, @ANYBLOB="d645eac6bc38654129ab7e82626bf9ef188077082df9f570d71d9b551c3075ab8a64d2a8f3e92ef244045318d638d4bd2ec0a0a68c2c7e26ba5120b0753482a0adbe1bea1f2979779037d98a9217114dd6ae3410543375a5769997839521213409a3b7f953dc4fc5ffe307ddac0914c8dd5174153ee573966a38f8944b625702394ca62ebf9e88e72670451cb51117aaa029ce2b7aeb5735953c18906422b0682fe3a0c4e22d6ec3b86a12de96804a30a53f129805f1fa307d469d9325f36efd35fb05d4b91a93610e7ec3e106b0c41439ee0113e11afe9ec4a6e726bd580c6f7bddbd35c1b02ba252ca3968", @ANYRES8], 0x0) 3.087707344s ago: executing program 5 (id=423): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x70bd2d, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}}, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) open_by_handle_at(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="1500"], 0x1) r5 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x10) write$tun(r5, &(0x7f0000000240)={@void, @val={0x1, 0x4, 0x9, 0x4, 0xcc11, 0x101}, @x25={0x3, 0xca, 0x0, "a5151de383a76810716c8f20748b4e02aef616e1f2d83892156ea4ee1b390a8ef688879f83dea5fc82958d46a2a43871f6be68958b7a01acd1ec9463dec9ab570eda41e38e68639e7665e822581344c4b62ec041aaa6cd71377e9a45f7c1f31c05d9ab979a02221507b7f2f61044d464fb235abf073bf4c55e01318d897162d4c3299e644fc138352fa086fbce092074d88402d2a586f77d1a3d340c1713"}}, 0xab) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, 0x0, &(0x7f0000000180)) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 2.878788084s ago: executing program 5 (id=424): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r4 = socket$isdn(0x22, 0x3, 0x23) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 2.767985897s ago: executing program 6 (id=425): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0x8000000, 0x6751, 0x0, 0xb, 0x2}) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c24"], 0x0) (async) setreuid(0x0, 0xee01) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) (async) r5 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='wchan\x00') r10 = ioctl$KVM_GET_STATS_FD_cpu(r9, 0xaece) close_range(r6, 0xffffffffffffffff, 0x0) (async) sendmsg$key(r5, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r10, @ANYRESDEC=r9], 0x58}, 0x1, 0x7}, 0x200000d5) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8001, 0x0) accept$inet6(r9, &(0x7f0000000380)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000240)=0x1c) (async) close_range(r11, r6, 0x2) (async) r12 = socket$inet6(0xa, 0x2, 0x3a) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xffd8}}, 0x4000000) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) (async) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYRES8=r3, @ANYRES16=r1, @ANYBLOB="210f26bd7000000000002000000008000300", @ANYRES32=r14, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x6ca233c682056cf7) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) 2.646392356s ago: executing program 6 (id=426): sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0xa17, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x44200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000000)={0x10000, 0x4, 0x9, 0x0, 0x9}) add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f00000000c0)="1080", 0x2, 0xffffffffffffffff) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x1, 0xffff, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000006c0)={0x30, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x4c, r6, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xfb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x850}, 0x1) 2.458714129s ago: executing program 5 (id=427): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f04fa800e04f0a49a96f015ae23b9417536d72ee41d4b43c4360333e96df771695f9f10b3cf20c9314c7cd4d6b339325b005fc463a60908c6fdf962247e084302a745b168b946ef8e46235960d3a28c27de7cda"], 0x6) 2.435319541s ago: executing program 5 (id=428): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002540)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x296d0961, @empty, 0x4}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x1200}}, {{&(0x7f0000000400)={0xa, 0x4e20, 0x8, @mcast2, 0x299}, 0x1c, 0x0, 0x0, &(0x7f00000016c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x18}}], 0x2, 0x4004) 2.389168591s ago: executing program 5 (id=429): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x3, "abe763"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000640)=ANY=[@ANYBLOB="204da30496aa22a5c951"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f00000000c0)={0x40, 0xa, 0xb3, {0xb3, 0x3, "46a9d3ee11dd291ed274af690d88fe5ef64544a8f6240e8df8dd922d815c8339e9893356fffdb3f653a804ee011e6f1fc443bcc227a03ec3bd55ac8fef086b34d02d6576416fe5421a6e281616e592ea5c361838288d38705b3a0992440e043cca5cbac1afa6b0ae89f06d8e07b145c2bbe1d0ccd47e68176ed029994d5a2fdbb9c61864fbdd2957674df85819be5d9c62c38905e81d79abbc56159b94e13608eb87a89faf1a738fa99b9de9d1ee4537cb"}}, &(0x7f00000001c0)={0x0, 0x3, 0xeb, @string={0xeb, 0x3, "588b0225e0a27fc776b98e48208e19a7c3a6aa86a63aea4cec6d748c2c5a67fa72fdc64bb5a49aae8add122d75c5e89229ad249b17d546ec95d06cea87665e320cf0921b70c9c7bc8b221d022b2e8baf8217e743408bc060da575774f60167cad43ebd733593d5b0038a227d73f36b1bae76a519319bb1874be68ffbe4c6b29ac88cfdeda222ba88daa0ecb29b53b433dbfe0789b7a00a4ef0ee80e9a24561eced0a9a98415d1a22985b8e32103c0b75da300e1bec634ff16cbc9bdc25b9548783ea00a361b70659bb573a241320afcb490a697acb79a8d08aa5fd86f164d7cc1bf3e78c3e397864d6"}}, &(0x7f0000000000)={0x0, 0x22, 0x16, {[@main=@item_4={0x3, 0x0, 0x9, "e518f0fc"}, @main=@item_4={0x3, 0x0, 0xb, "82e7aa00"}, @local=@item_012={0x1, 0x2, 0x3, "0f"}, @global=@item_4={0x3, 0x1, 0x6, "09ffc75c"}, @local=@item_4={0x3, 0x2, 0x2, "49fd34d0"}]}}, &(0x7f0000000040)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0xf9, 0x1, {0x22, 0x67a}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x0, 0x13, 0x19, "c551a9544dae19b054ad61c12b57c2e34936200bb70f73066a"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000580)=ANY=[@ANYBLOB="2001d602ef652926f4387d7e000000bc1a43f98d4a691a8236d946adbcc847b819d34f53af46469717fc6a1a6ddc7e2d7f60246d55b2705d7252a15140b57f684722f590110401f8df89cc369754d7b4238b0abf7e49014ee518818fa0d3da06601902d20da0496ebfd32b5545ce3225b6077ed6ed7812198f028cce9af6e63bc0ed8f07601509bb8214055bd2"], &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x7}}) 2.310562465s ago: executing program 6 (id=430): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_unix(0x0, &(0x7f0000006100)='./file0\x00', 0x0, 0x2228000, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9, 0x2, 0x1, 0x4, 0x9176, 0x5}, 0x20) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000200)={'sit0\x00'}) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x40080, 0x2, 0x21}, 0x18) symlinkat(&(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') r2 = accept4$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10, 0x80000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4000}) bind$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @local}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a700000000000905", @ANYRES32], 0x0) 44.266314ms ago: executing program 8 (id=431): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x2, {0x2, 0x1000000000000, 0x0, 0x3, 0x4000, 0x0, {0x200000000000003, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, r2, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203843, 0x0, [0x2], [0x800], [], [0x8]}) write$FUSE_INIT(r0, &(0x7f0000001240)={0x50, 0x0, r1, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) 0s ago: executing program 8 (id=432): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b19, &(0x7f0000000040)) kernel console output (not intermixed with test programs): USB device number 12 using dummy_hcd [ 106.726041][ T6368] comedi comedi3: 8255: I/O port conflict (0x400009,4) [ 106.726093][ T6368] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 106.747852][ T6368] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 106.754492][ T6368] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 106.785190][ T3542] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.883181][ T3542] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.890758][ T6371] FAULT_INJECTION: forcing a failure. [ 106.890758][ T6371] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 106.908329][ T6371] CPU: 1 UID: 0 PID: 6371 Comm: syz.3.145 Not tainted syzkaller #0 PREEMPT(full) [ 106.908350][ T6371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 106.908360][ T6371] Call Trace: [ 106.908367][ T6371] [ 106.908374][ T6371] dump_stack_lvl+0x189/0x250 [ 106.908396][ T6371] ? __pfx____ratelimit+0x10/0x10 [ 106.908414][ T6371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.908430][ T6371] ? __pfx__printk+0x10/0x10 [ 106.908466][ T6371] should_fail_ex+0x414/0x560 [ 106.908492][ T6371] __kvm_read_guest_page+0x18d/0x240 [ 106.908514][ T6371] kvm_fetch_guest_virt+0x12b/0x170 [ 106.908537][ T6371] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 106.908559][ T6371] __do_insn_fetch_bytes+0x2fc/0x6d0 [ 106.908581][ T6371] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 106.908602][ T6371] ? x86_decode_insn+0xf80/0x5310 [ 106.908620][ T6371] x86_decode_insn+0x33c/0x5310 [ 106.908634][ T6371] ? kvm_is_mmio_pfn+0x169/0x730 [ 106.908685][ T6371] ? __pfx_x86_decode_insn+0x10/0x10 [ 106.908702][ T6371] ? kvm_tdp_mmu_map+0x308/0x1d30 [ 106.908728][ T6371] ? __asan_memset+0x22/0x50 [ 106.908747][ T6371] ? init_decode_cache+0x78/0x90 [ 106.908764][ T6371] ? init_emulate_ctxt+0x4d6/0x660 [ 106.908790][ T6371] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 106.908817][ T6371] ? trace_rcu_utilization+0x47/0x1d0 [ 106.908843][ T6371] x86_emulate_instruction+0x61b/0x1f90 [ 106.908873][ T6371] ? _raw_read_unlock+0x28/0x50 [ 106.908889][ T6371] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 106.908902][ T6371] ? __get_current_cr3_fast+0x90/0x150 [ 106.908916][ T6371] ? clear_bhb_loop+0x60/0xb0 [ 106.908930][ T6371] ? clear_bhb_loop+0x60/0xb0 [ 106.908945][ T6371] ? vmx_vcpu_run+0xe92/0x2b70 [ 106.908961][ T6371] ? __vmx_complete_interrupts+0xe7/0x690 [ 106.908992][ T6371] handle_ud+0x142/0x590 [ 106.909016][ T6371] ? __pfx_handle_ud+0x10/0x10 [ 106.909034][ T6371] ? vmx_handle_exit_irqoff+0x61e/0x940 [ 106.909053][ T6371] ? __pfx_current_save_fsgs+0x10/0x10 [ 106.909082][ T6371] ? __lock_acquire+0xab9/0xd20 [ 106.909102][ T6371] ? __pfx_handle_exception_nmi+0x10/0x10 [ 106.909119][ T6371] vmx_handle_exit+0x10a4/0x18c0 [ 106.909135][ T6371] ? vcpu_run+0x361b/0x7040 [ 106.909160][ T6371] vcpu_run+0x43aa/0x7040 [ 106.909184][ T6371] ? vcpu_run+0x361b/0x7040 [ 106.909238][ T6371] ? __pfx_vcpu_run+0x10/0x10 [ 106.909252][ T6371] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 106.909264][ T6371] ? complete_emulated_mmio+0x18e/0x7a0 [ 106.909284][ T6371] ? __asan_memcpy+0x40/0x70 [ 106.909298][ T6371] ? complete_emulated_mmio+0x4d2/0x7a0 [ 106.909318][ T6371] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 106.909335][ T6371] ? __mutex_trylock_common+0x153/0x260 [ 106.909355][ T6371] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 106.909368][ T6371] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 106.909383][ T6371] ? rcu_is_watching+0x15/0xb0 [ 106.909399][ T6371] ? trace_contention_end+0x39/0x120 [ 106.909415][ T6371] ? __mutex_lock+0x335/0x1350 [ 106.909435][ T6371] ? kasan_quarantine_put+0xdd/0x220 [ 106.909449][ T6371] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.909462][ T6371] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 106.909477][ T6371] ? __pfx___mutex_lock+0x10/0x10 [ 106.909492][ T6371] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 106.909508][ T6371] ? do_vfs_ioctl+0xbe8/0x1430 [ 106.909522][ T6371] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 106.909536][ T6371] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 106.909554][ T6371] kvm_vcpu_ioctl+0x95c/0xe90 [ 106.909572][ T6371] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 106.909601][ T6371] ? __fget_files+0x2a/0x420 [ 106.909617][ T6371] ? __fget_files+0x3a0/0x420 [ 106.909627][ T6371] ? __fget_files+0x2a/0x420 [ 106.909641][ T6371] ? bpf_lsm_file_ioctl+0x9/0x20 [ 106.909653][ T6371] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 106.909665][ T6371] __se_sys_ioctl+0xfc/0x170 [ 106.909682][ T6371] do_syscall_64+0xfa/0xfa0 [ 106.909695][ T6371] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.909708][ T6371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.909719][ T6371] ? clear_bhb_loop+0x60/0xb0 [ 106.909734][ T6371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.909746][ T6371] RIP: 0033:0x7ff0bc18eba9 [ 106.909759][ T6371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.909770][ T6371] RSP: 002b:00007ff0bd0b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.909784][ T6371] RAX: ffffffffffffffda RBX: 00007ff0bc3d5fa0 RCX: 00007ff0bc18eba9 [ 106.909793][ T6371] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 106.909800][ T6371] RBP: 00007ff0bd0b7090 R08: 0000000000000000 R09: 0000000000000000 [ 106.909808][ T6371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.909815][ T6371] R13: 00007ff0bc3d6038 R14: 00007ff0bc3d5fa0 R15: 00007fffb4da21f8 [ 106.909838][ T6371] [ 106.921065][ T6361] chnl_net:caif_netlink_parms(): no params data found [ 106.935022][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.210050][ T5971] usb 5-1: USB disconnect, device number 2 [ 107.215210][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 107.419718][ T5913] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 107.432610][ T5913] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 107.441941][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.480874][ T5913] usb 3-1: config 0 descriptor?? [ 107.545054][ T6377] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.642667][ T6377] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.763071][ T6392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.774017][ T6377] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.778667][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 107.790767][ T6392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.866067][ T6361] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.874075][ T6361] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.881974][ T6361] bridge_slave_0: entered allmulticast mode [ 107.895173][ T6361] bridge_slave_0: entered promiscuous mode [ 107.895616][ T52] Bluetooth: hci4: command tx timeout [ 107.916652][ T3542] bridge_slave_1: left allmulticast mode [ 107.924285][ T3542] bridge_slave_1: left promiscuous mode [ 107.932366][ T3542] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.946461][ T3542] : left allmulticast mode [ 107.952408][ T3542] : left promiscuous mode [ 107.958115][ T3542] bridge0: port 1() entered disabled state [ 107.966274][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.977015][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 107.987413][ T9] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 107.999029][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.015535][ T9] usb 5-1: config 0 descriptor?? [ 108.060839][ T5954] usb 3-1: USB disconnect, device number 12 [ 108.098997][ T5913] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 108.260439][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 108.281060][ T5913] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 108.309042][ T5913] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 108.324985][ T5913] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.335102][ T5913] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.348181][ T5913] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 108.357552][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.484187][ T3542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.497622][ T3542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.516594][ T3542] bond0 (unregistering): Released all slaves [ 108.533546][ T52] Bluetooth: hci2: command tx timeout [ 108.567577][ T6377] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.624556][ T5913] usb 4-1: GET_CAPABILITIES returned 0 [ 108.625598][ T6361] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.637375][ T5913] usbtmc 4-1:16.0: can't read capabilities [ 108.646264][ T6361] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.669213][ T6361] bridge_slave_1: entered allmulticast mode [ 108.685560][ T6361] bridge_slave_1: entered promiscuous mode [ 108.817193][ T6361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.834895][ T6361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.840094][ T5913] usb 4-1: USB disconnect, device number 19 [ 109.037129][ T6361] team0: Port device team_slave_0 added [ 109.057518][ T76] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.080230][ T6361] team0: Port device team_slave_1 added [ 109.101920][ T76] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.147673][ T3467] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.196357][ T3542] hsr_slave_0: left promiscuous mode [ 109.203673][ T3542] hsr_slave_1: left promiscuous mode [ 109.211328][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.220858][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.230101][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.237750][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.268758][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 109.276713][ T3542] veth1_macvtap: left promiscuous mode [ 109.292657][ T3542] veth0_macvtap: left promiscuous mode [ 109.298520][ T3542] veth1_vlan: left promiscuous mode [ 109.304845][ T3542] veth0_vlan: left promiscuous mode [ 109.436267][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 109.445685][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 109.465323][ T24] usb 3-1: config 7 has an invalid interface number: 58 but max is 0 [ 109.485525][ T24] usb 3-1: config 7 has no interface number 0 [ 109.496802][ T24] usb 3-1: config 7 interface 58 altsetting 3 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 109.509404][ T24] usb 3-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.528210][ T24] usb 3-1: config 7 interface 58 has no altsetting 0 [ 109.548075][ T24] usb 3-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 109.557510][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.565618][ T24] usb 3-1: Product: syz [ 109.577580][ T24] usb 3-1: Manufacturer: syz [ 109.584915][ T24] usb 3-1: SerialNumber: syz [ 109.708745][ T5921] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 109.842475][ T24] usb 3-1: USB disconnect, device number 13 [ 109.871266][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 109.894608][ T5921] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 109.903221][ T5921] usb 4-1: config 0 has no interface number 0 [ 109.911105][ T5921] usb 4-1: config 0 interface 184 has no altsetting 0 [ 109.920546][ T5921] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 109.932448][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.940678][ T5921] usb 4-1: Product: syz [ 109.944932][ T5921] usb 4-1: Manufacturer: syz [ 109.949667][ T5921] usb 4-1: SerialNumber: syz [ 109.959950][ T5921] usb 4-1: config 0 descriptor?? [ 109.971687][ T52] Bluetooth: hci4: command tx timeout [ 109.978007][ T5921] smsc75xx v1.0.0 [ 109.983030][ T3542] team0 (unregistering): Port device team_slave_1 removed [ 110.019282][ T3542] team0 (unregistering): Port device team_slave_0 removed [ 110.389017][ T5921] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 110.405419][ T5921] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 110.415750][ T5921] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 110.427803][ T5921] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 110.440487][ T6435] FAULT_INJECTION: forcing a failure. [ 110.440487][ T6435] name failslab, interval 1, probability 0, space 0, times 0 [ 110.454607][ T6435] CPU: 1 UID: 0 PID: 6435 Comm: syz.2.154 Not tainted syzkaller #0 PREEMPT(full) [ 110.454628][ T6435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 110.454638][ T6435] Call Trace: [ 110.454645][ T6435] [ 110.454652][ T6435] dump_stack_lvl+0x189/0x250 [ 110.454672][ T6435] ? __pfx____ratelimit+0x10/0x10 [ 110.454689][ T6435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.454702][ T6435] ? __pfx__printk+0x10/0x10 [ 110.454727][ T6435] ? __pfx___might_resched+0x10/0x10 [ 110.454751][ T6435] should_fail_ex+0x414/0x560 [ 110.454777][ T6435] should_failslab+0xa8/0x100 [ 110.454800][ T6435] __kmalloc_cache_noprof+0x6f/0x6f0 [ 110.454819][ T6435] ? __kasan_kmalloc+0x93/0xb0 [ 110.454836][ T6435] ? fuse_file_alloc+0x56/0x230 [ 110.454858][ T6435] fuse_file_alloc+0x56/0x230 [ 110.454875][ T6435] fuse_create_open+0x1fc/0xc80 [ 110.454907][ T6435] ? do_raw_spin_unlock+0x122/0x240 [ 110.454931][ T6435] ? __pfx_fuse_create_open+0x10/0x10 [ 110.454942][ T6435] ? fuse_change_entry_timeout+0x2d2/0x430 [ 110.454975][ T6435] ? fuse_lookup+0x553/0x640 [ 110.455020][ T6435] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 110.455039][ T6435] ? from_kgid+0x1b0/0x650 [ 110.455058][ T6435] fuse_atomic_open+0x294/0x440 [ 110.455076][ T6435] ? __pfx_fuse_atomic_open+0x10/0x10 [ 110.455090][ T6435] path_openat+0xf66/0x3830 [ 110.455135][ T6435] ? __pfx_path_openat+0x10/0x10 [ 110.455167][ T6435] do_filp_open+0x1fa/0x410 [ 110.455181][ T6435] ? __lock_acquire+0xab9/0xd20 [ 110.455198][ T6435] ? __pfx_do_filp_open+0x10/0x10 [ 110.455232][ T6435] ? _raw_spin_unlock+0x28/0x50 [ 110.455244][ T6435] ? alloc_fd+0x64c/0x6c0 [ 110.455271][ T6435] do_sys_openat2+0x121/0x1c0 [ 110.455287][ T6435] ? __pfx_do_sys_openat2+0x10/0x10 [ 110.455302][ T6435] ? ksys_write+0x22a/0x250 [ 110.455320][ T6435] ? __pfx_ksys_write+0x10/0x10 [ 110.455340][ T6435] __x64_sys_creat+0x8f/0xc0 [ 110.455357][ T6435] do_syscall_64+0xfa/0xfa0 [ 110.455370][ T6435] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.455383][ T6435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.455395][ T6435] ? clear_bhb_loop+0x60/0xb0 [ 110.455412][ T6435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.455425][ T6435] RIP: 0033:0x7fbdcad8eba9 [ 110.455439][ T6435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.455450][ T6435] RSP: 002b:00007fbdcbc96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 110.455465][ T6435] RAX: ffffffffffffffda RBX: 00007fbdcafd6090 RCX: 00007fbdcad8eba9 [ 110.455474][ T6435] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 110.455482][ T6435] RBP: 00007fbdcbc96090 R08: 0000000000000000 R09: 0000000000000000 [ 110.455489][ T6435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.455496][ T6435] R13: 00007fbdcafd6128 R14: 00007fbdcafd6090 R15: 00007fff93f37508 [ 110.455521][ T6435] [ 110.753939][ T52] Bluetooth: hci2: command tx timeout [ 110.762251][ T6361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.769848][ T6361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.796294][ T6361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.889748][ T76] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.901766][ T6361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.909339][ T6361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.937347][ T6361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.046784][ T9] Bluetooth: Can't get state to change to load configuration err [ 111.047737][ T6361] hsr_slave_0: entered promiscuous mode [ 111.056319][ T9] Bluetooth: Loading sysconfig file failed [ 111.062578][ T6361] hsr_slave_1: entered promiscuous mode [ 111.073044][ T6361] debugfs: 'hsr0' already exists in 'hsr' [ 111.078830][ T6361] Cannot create hsr debugfs directory [ 111.121055][ T9] ath3k 5-1:0.0: probe with driver ath3k failed with error -16 [ 111.168378][ T9] usb 5-1: USB disconnect, device number 3 [ 111.424324][ T6453] sctp: [Deprecated]: syz.2.158 (pid 6453) Use of int in max_burst socket option. [ 111.424324][ T6453] Use struct sctp_assoc_value instead [ 111.465656][ T6361] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.490582][ T6361] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 111.513004][ T6361] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 111.531114][ T6361] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 111.579030][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 111.644264][ T6361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.672998][ T6361] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.686724][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.693940][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.711227][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.718404][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.732733][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.746500][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 111.758996][ T5877] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 111.776941][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.814623][ T9] usb 5-1: config 0 descriptor?? [ 111.923577][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.940548][ T5877] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 111.959764][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.981539][ T5877] usb 3-1: config 0 descriptor?? [ 112.112170][ T6361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.241755][ T9] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 112.284897][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0002/input/input8 [ 112.397827][ T6458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.426050][ T6458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.459933][ T5877] hid_mf 0003:0079:1846.0003: unknown main item tag 0x4 [ 112.488637][ T5877] hid_mf 0003:0079:1846.0003: item fetching failed at offset 6/7 [ 112.517124][ T5920] usb 4-1: USB disconnect, device number 20 [ 112.525301][ T5877] hid_mf 0003:0079:1846.0003: HID parse failed. [ 112.554481][ T9] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 112.568509][ T5877] hid_mf 0003:0079:1846.0003: probe with driver hid_mf failed with error -22 [ 112.656373][ T5877] usb 3-1: USB disconnect, device number 14 [ 112.681965][ T9] usb 5-1: USB disconnect, device number 4 [ 112.768919][ T52] Bluetooth: hci2: command tx timeout [ 112.774123][ T6361] veth0_vlan: entered promiscuous mode [ 112.793808][ T6498] fido_id[6498]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 112.813645][ T6361] veth1_vlan: entered promiscuous mode [ 112.891800][ T6361] veth0_macvtap: entered promiscuous mode [ 112.925791][ T6361] veth1_macvtap: entered promiscuous mode [ 112.962556][ T6361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.985840][ T6361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.993566][ T5920] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 113.009583][ T3542] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.020309][ T3542] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.048873][ T3542] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.058079][ T3542] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.134011][ T3542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.142626][ T3542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.150991][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 113.162713][ T5920] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 113.191410][ T5920] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 113.214140][ T5920] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.229357][ T5920] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.231159][ T3467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.265253][ T5920] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.291113][ T3467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.301300][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.620669][ T52] Bluetooth: hci1: unexpected event 0x0f length: 3 < 4 [ 113.674159][ T5920] usb 4-1: GET_CAPABILITIES returned 0 [ 113.683190][ T5920] usbtmc 4-1:16.0: can't read capabilities [ 113.709379][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 113.870640][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 113.903851][ T10] usb 4-1: USB disconnect, device number 21 [ 113.920170][ T9] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 113.940441][ T9] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 113.951616][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 113.964540][ T9] usb 6-1: config 1 has no interface number 0 [ 113.977401][ T9] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.991907][ T9] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 114.009766][ T9] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 114.019065][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.039932][ T9] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 114.208845][ T5971] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 114.248387][ T9] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 114.381901][ T5971] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 114.391242][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.408844][ T5971] usb 3-1: Product: syz [ 114.413050][ T5971] usb 3-1: Manufacturer: syz [ 114.420894][ T5971] usb 3-1: SerialNumber: syz [ 114.444295][ T5971] usb 3-1: config 0 descriptor?? [ 114.450665][ T30] audit: type=1326 audit(1758140323.865:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.3.168" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff0bc18eba9 code=0x0 [ 114.499696][ T6535] netlink: 'syz.3.168': attribute type 4 has an invalid length. [ 114.507502][ T6535] netlink: 17 bytes leftover after parsing attributes in process `syz.3.168'. [ 114.548697][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 114.683763][ T6517] vxcan1 speed is unknown, defaulting to 1000 [ 114.693591][ T6517] vxcan1 speed is unknown, defaulting to 1000 [ 114.698804][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 114.702881][ T6517] vxcan1 speed is unknown, defaulting to 1000 [ 114.707861][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 114.721768][ T9] usb 5-1: config 0 has no interface number 0 [ 114.728002][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 114.740415][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 114.749966][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.758076][ T9] usb 5-1: Product: syz [ 114.763229][ T9] usb 5-1: Manufacturer: syz [ 114.767945][ T9] usb 5-1: SerialNumber: syz [ 114.780482][ T9] usb 5-1: config 0 descriptor?? [ 114.792373][ T9] smsc75xx v1.0.0 [ 114.861377][ T52] Bluetooth: hci2: command tx timeout [ 114.876445][ T6528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.889993][ T6528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.912153][ T6517] infiniband syz2: set active [ 114.917452][ T6517] infiniband syz2: added vxcan1 [ 114.918252][ T5954] vxcan1 speed is unknown, defaulting to 1000 [ 114.982272][ T6517] RDS/IB: syz2: added [ 114.986964][ T6517] smc: adding ib device syz2 with port count 1 [ 114.996356][ T6517] smc: ib device syz2 port 1 has no pnetid [ 115.004793][ T5913] vxcan1 speed is unknown, defaulting to 1000 [ 115.013417][ T6517] vxcan1 speed is unknown, defaulting to 1000 [ 115.105504][ T5971] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 115.120115][ T5971] asix 3-1:0.0: probe with driver asix failed with error -71 [ 115.141572][ T5971] usb 3-1: USB disconnect, device number 15 [ 115.200021][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 115.211043][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 115.221793][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 115.233892][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 115.250237][ T5934] snd_usb_pod 6-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 115.269698][ T6517] vxcan1 speed is unknown, defaulting to 1000 [ 115.586818][ T6517] vxcan1 speed is unknown, defaulting to 1000 [ 115.927800][ T6517] vxcan1 speed is unknown, defaulting to 1000 [ 115.958640][ T5971] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 116.129250][ T5971] usb 3-1: Using ep0 maxpacket: 32 [ 116.145286][ T5971] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 116.161824][ T5971] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 116.188779][ T5971] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 116.213453][ T5971] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 116.244537][ T5971] usb 3-1: config 0 interface 0 has no altsetting 0 [ 116.265363][ T5971] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 116.280904][ T5971] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 116.300816][ T5971] usb 3-1: Product: syz [ 116.309510][ T5971] usb 3-1: Manufacturer: syz [ 116.319736][ T5971] usb 3-1: SerialNumber: syz [ 116.342527][ T5971] usb 3-1: config 0 descriptor?? [ 116.360256][ T5971] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 116.364642][ T6517] vxcan1 speed is unknown, defaulting to 1000 [ 116.380689][ T5971] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 116.736076][ T52] Bluetooth: hci0: unexpected event 0x0f length: 3 < 4 [ 116.797061][ T5971] usb 6-1: USB disconnect, device number 2 [ 116.816665][ T5971] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 117.111587][ T6557] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 117.111832][ T5971] usb 3-1: USB disconnect, device number 16 [ 117.118850][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 117.135901][ T5971] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 117.198731][ T5934] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 117.320234][ T5913] usb 5-1: USB disconnect, device number 5 [ 117.355435][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.360351][ T5954] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 117.373671][ T5934] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 117.378064][ T30] audit: type=1326 audit(1758140326.795:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6571 comm="syz.4.177" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e5118eba9 code=0x0 [ 117.405872][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.408690][ T5934] usb 4-1: config 0 descriptor?? [ 117.588698][ T5954] usb 6-1: Using ep0 maxpacket: 8 [ 117.596215][ T5954] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 117.607512][ T5954] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 117.617642][ T5954] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.627725][ T5954] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.641381][ T5954] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.650660][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.769211][ T5913] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 117.845810][ T5934] aquacomputer_d5next 0003:0C70:F00B.0004: unknown main item tag 0x0 [ 117.854246][ T5934] aquacomputer_d5next 0003:0C70:F00B.0004: unknown main item tag 0x0 [ 117.867764][ T5934] aquacomputer_d5next 0003:0C70:F00B.0004: hidraw0: USB HID v0.04 Device [HID 0c70:f00b] on usb-dummy_hcd.3-1/input0 [ 117.880925][ T5954] usb 6-1: usb_control_msg returned -71 [ 117.897576][ T5954] usbtmc 6-1:16.0: can't read capabilities [ 117.919423][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 117.929706][ T5954] usb 6-1: USB disconnect, device number 3 [ 117.942522][ T5913] usb 5-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 117.953237][ T5921] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 117.971199][ T5913] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 117.985311][ T5913] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 117.998974][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.007151][ T5913] usb 5-1: Product: syz [ 118.015710][ T5913] usb 5-1: Manufacturer: syz [ 118.020553][ T5913] usb 5-1: SerialNumber: syz [ 118.027673][ T5913] usb 5-1: config 0 descriptor?? [ 118.108677][ T5921] usb 3-1: device descriptor read/64, error -71 [ 118.239715][ T6576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.248915][ T6576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.352315][ T5954] usb 5-1: USB disconnect, device number 6 [ 118.358653][ T5921] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 118.509010][ T5921] usb 3-1: device descriptor read/64, error -71 [ 118.619732][ T5921] usb usb3-port1: attempt power cycle [ 118.688870][ T5934] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 118.706710][ T5954] usb 4-1: USB disconnect, device number 22 [ 118.803670][ T52] Bluetooth: hci0: unexpected event 0x0f length: 3 < 4 [ 118.860799][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.872670][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.895110][ T5934] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 118.906851][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.920075][ T5934] usb 6-1: config 0 descriptor?? [ 118.935586][ T6595] netlink: 'syz.3.182': attribute type 83 has an invalid length. [ 118.968950][ T5921] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 119.000891][ T5921] usb 3-1: device descriptor read/8, error -71 [ 119.259598][ T5921] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 119.279269][ T5921] usb 3-1: device descriptor read/8, error -71 [ 119.318700][ T5954] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 119.389281][ T5921] usb usb3-port1: unable to enumerate USB device [ 119.478702][ T5954] usb 5-1: Using ep0 maxpacket: 32 [ 119.486116][ T5954] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 119.494471][ T5954] usb 5-1: config 0 has no interface number 0 [ 119.500627][ T5954] usb 5-1: config 0 interface 184 has no altsetting 0 [ 119.510922][ T5954] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 119.520340][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.528342][ T5954] usb 5-1: Product: syz [ 119.534158][ T5954] usb 5-1: Manufacturer: syz [ 119.538877][ T5954] usb 5-1: SerialNumber: syz [ 119.546392][ T5954] usb 5-1: config 0 descriptor?? [ 119.554868][ T5954] smsc75xx v1.0.0 [ 119.589931][ T5934] razer 0003:1532:010E.0005: failed to enable macro keys: -71 [ 119.600957][ T5934] razer 0003:1532:010E.0005: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.5-1/input0 [ 119.618446][ T5934] usb 6-1: USB disconnect, device number 4 [ 119.657836][ T6606] fido_id[6606]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 119.958502][ T5954] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 119.969495][ T5954] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 119.979221][ T5954] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 119.989890][ T5954] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 120.078697][ T5934] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 120.249393][ T5934] usb 4-1: not running at top speed; connect to a high speed hub [ 120.260354][ T5934] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.275395][ T5934] usb 4-1: config 1 interface 0 has no altsetting 0 [ 120.283961][ T5934] usb 4-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.40 [ 120.293083][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.301160][ T5934] usb 4-1: Product: 渰朗䫨ï½éƒ‘ᾲ᭓蛪頞롥㌃ [ 120.307933][ T5934] usb 4-1: Manufacturer: Ñ‹ [ 120.312462][ T5934] usb 4-1: SerialNumber: à°„ [ 120.488714][ T5954] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 120.527649][ T5934] usbhid 4-1:1.0: can't add hid device: -71 [ 120.534163][ T5934] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 120.544536][ T5934] usb 4-1: USB disconnect, device number 23 [ 120.648685][ T5954] usb 6-1: Using ep0 maxpacket: 8 [ 120.655018][ T5954] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 120.667982][ T5954] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 120.678069][ T5954] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.688051][ T5954] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.701239][ T5954] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 120.710350][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.902560][ T6622] overlayfs: missing 'workdir' [ 120.934716][ T5954] usb 6-1: usb_control_msg returned -71 [ 120.946940][ T5954] usbtmc 6-1:16.0: can't read capabilities [ 120.972427][ T5954] usb 6-1: USB disconnect, device number 5 [ 121.023684][ T52] Bluetooth: hci1: unexpected event 0x0f length: 3 < 4 [ 121.181081][ T6631] vxcan1 speed is unknown, defaulting to 1000 [ 121.754582][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 121.924559][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.935047][ T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 121.944331][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.954566][ T24] usb 6-1: config 0 descriptor?? [ 121.964227][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 122.089347][ T5954] usb 5-1: USB disconnect, device number 7 [ 122.365728][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 122.373459][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 122.380619][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 122.387669][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 122.596017][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 122.612979][ T52] Bluetooth: hci1: unexpected event 0x0f length: 3 < 4 [ 122.809878][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 122.816796][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 122.823671][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 122.830939][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 122.837775][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 122.845428][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 122.852681][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 122.860028][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 122.867140][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 122.876241][ T24] pwc: Registered as video103. [ 122.884471][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input9 [ 122.894007][ T5954] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 122.927845][ T24] usb 6-1: USB disconnect, device number 6 [ 123.048788][ T5954] usb 3-1: Using ep0 maxpacket: 8 [ 123.055521][ T5954] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 123.066804][ T5954] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 123.076971][ T5954] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.087107][ T5954] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.100918][ T5954] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 123.110112][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.329501][ T5954] usb 3-1: usb_control_msg returned -71 [ 123.336021][ T5954] usbtmc 3-1:16.0: can't read capabilities [ 123.357792][ T5954] usb 3-1: USB disconnect, device number 21 [ 123.498414][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.204'. [ 123.515069][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.204'. [ 123.525774][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.204'. [ 123.535235][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.204'. [ 123.544797][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.204'. [ 123.554342][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.204'. [ 123.563835][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.204'. [ 123.573611][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.204'. [ 123.583149][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.204'. [ 123.592578][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.204'. [ 123.988753][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 124.139253][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 124.139879][ T5954] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 124.148163][ T9] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 124.160685][ T9] usb 6-1: config 0 has no interface number 0 [ 124.166786][ T9] usb 6-1: config 0 interface 184 has no altsetting 0 [ 124.176113][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 124.185249][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.193345][ T9] usb 6-1: Product: syz [ 124.197507][ T9] usb 6-1: Manufacturer: syz [ 124.202286][ T9] usb 6-1: SerialNumber: syz [ 124.209150][ T9] usb 6-1: config 0 descriptor?? [ 124.218442][ T9] smsc75xx v1.0.0 [ 124.308682][ T5954] usb 3-1: Using ep0 maxpacket: 32 [ 124.315927][ T5954] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 124.325407][ T5954] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 124.337048][ T5954] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 124.354872][ T5954] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 124.372966][ T5954] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.381814][ T5954] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 124.391026][ T5954] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 124.399748][ T5954] usb 3-1: Product: syz [ 124.404031][ T5954] usb 3-1: Manufacturer: syz [ 124.408868][ T5954] usb 3-1: SerialNumber: syz [ 124.421342][ T5954] usb 3-1: config 0 descriptor?? [ 124.430309][ T5954] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 124.441917][ T5954] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 124.621042][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 124.632039][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 124.642035][ T9] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 124.653515][ T9] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 124.909071][ T5954] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 125.058808][ T5954] usb 4-1: Using ep0 maxpacket: 8 [ 125.072254][ T5954] usb 4-1: unable to get BOS descriptor or descriptor too short [ 125.084528][ T5954] usb 4-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 12288, setting to 1024 [ 125.096250][ T5954] usb 4-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024 [ 125.106471][ T5954] usb 4-1: config 8 interface 0 has no altsetting 0 [ 125.115286][ T5954] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 125.124741][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.133648][ T5954] usb 4-1: Product: syz [ 125.137997][ T5954] usb 4-1: Manufacturer: syz [ 125.145076][ T5954] usb 4-1: SerialNumber: syz [ 125.187451][ T5934] usb 3-1: USB disconnect, device number 22 [ 125.193510][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 125.200775][ T6708] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 125.232784][ T5934] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 125.364178][ T5954] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 125.374681][ T5954] usb 4-1: selecting invalid altsetting 0 [ 125.404989][ T5954] usb 4-1: USB disconnect, device number 24 [ 125.538656][ T5934] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 125.693817][ T5934] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 125.702952][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.711004][ T5934] usb 3-1: Product: syz [ 125.715274][ T5934] usb 3-1: Manufacturer: syz [ 125.720017][ T5934] usb 3-1: SerialNumber: syz [ 125.929403][ T5934] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 125.974884][ T5934] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 126.003004][ T5934] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 126.046096][ T5934] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 126.069826][ T5934] usb 3-1: USB disconnect, device number 23 [ 126.238974][ T52] Bluetooth: hci0: unexpected event 0x0f length: 3 < 4 [ 126.558710][ T5934] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 126.709911][ T5934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.721034][ T5934] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 126.730143][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.740767][ T5934] usb 4-1: config 0 descriptor?? [ 126.749924][ T5934] pwc: Askey VC010 type 2 USB webcam detected. [ 126.772533][ T24] usb 6-1: USB disconnect, device number 7 [ 127.150503][ T5934] pwc: recv_control_msg error -32 req 02 val 2b00 [ 127.157538][ T5934] pwc: recv_control_msg error -32 req 02 val 2700 [ 127.165181][ T5934] pwc: recv_control_msg error -32 req 02 val 2c00 [ 127.174086][ T5934] pwc: recv_control_msg error -32 req 04 val 1000 [ 127.181527][ T5934] pwc: recv_control_msg error -32 req 04 val 1300 [ 127.188680][ T5934] pwc: recv_control_msg error -32 req 04 val 1400 [ 127.195814][ T5934] pwc: recv_control_msg error -32 req 02 val 2000 [ 127.202950][ T5934] pwc: recv_control_msg error -32 req 02 val 2100 [ 127.218717][ T5934] pwc: recv_control_msg error -32 req 04 val 1500 [ 127.225926][ T5934] pwc: recv_control_msg error -32 req 02 val 2500 [ 127.234491][ T5934] pwc: recv_control_msg error -32 req 02 val 2400 [ 127.243126][ T5934] pwc: recv_control_msg error -32 req 02 val 2600 [ 127.250694][ T5934] pwc: recv_control_msg error -32 req 02 val 2900 [ 127.259542][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 127.414216][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.427224][ T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 127.436432][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.447681][ T24] usb 6-1: config 0 descriptor?? [ 127.459337][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 127.462373][ T6741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.474789][ T6741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.487746][ T5934] pwc: recv_control_msg error -71 req 04 val 1100 [ 127.495824][ T5934] pwc: recv_control_msg error -71 req 04 val 1200 [ 127.503936][ T5934] pwc: Registered as video103. [ 127.508967][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 127.520558][ T5934] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 127.544737][ T5934] usb 4-1: USB disconnect, device number 25 [ 127.688648][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 127.696968][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.708346][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.719484][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 127.729884][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 127.739990][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.754201][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 127.763975][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 127.772141][ T9] usb 3-1: Manufacturer: syz [ 127.784336][ T9] usb 3-1: config 0 descriptor?? [ 127.857057][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 127.864432][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 127.871579][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 127.878777][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 127.885759][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 127.893044][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 127.902079][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 127.909857][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 127.916643][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 127.923751][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 127.932760][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 127.939649][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 127.946432][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 127.953682][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 127.960832][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 127.967609][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 127.977110][ T24] pwc: Registered as video103. [ 127.985745][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input11 [ 128.058937][ T24] usb 6-1: USB disconnect, device number 8 [ 128.130433][ T9] rc_core: IR keymap rc-hauppauge not found [ 128.141710][ T9] Registered IR keymap rc-empty [ 128.147560][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.174966][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.201582][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 128.217081][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 128.236705][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.247976][ T52] Bluetooth: hci0: unexpected event 0x0f length: 3 < 4 [ 128.259241][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.280068][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.298815][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.319417][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.338778][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.359589][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.383151][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.408718][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.428717][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.451412][ T9] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 128.460804][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 128.488668][ T9] usb 3-1: USB disconnect, device number 24 [ 128.575214][ T6778] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 128.582458][ T6778] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 128.590048][ T6778] comedi comedi3: 8255: I/O port conflict (0x21,4) [ 128.596712][ T6778] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 128.604029][ T6778] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 128.610653][ T6778] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 128.617339][ T6778] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 128.625463][ T6778] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 128.748670][ T5982] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 128.908696][ T5982] usb 4-1: Using ep0 maxpacket: 32 [ 128.915503][ T5982] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 128.923862][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 128.931490][ T5982] usb 4-1: config 0 has no interface number 0 [ 128.937593][ T5982] usb 4-1: config 0 interface 184 has no altsetting 0 [ 128.946822][ T5982] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 128.957270][ T5982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.965334][ T5982] usb 4-1: Product: syz [ 128.969538][ T5982] usb 4-1: Manufacturer: syz [ 128.974118][ T5982] usb 4-1: SerialNumber: syz [ 128.980759][ T5982] usb 4-1: config 0 descriptor?? [ 128.987782][ T5982] smsc75xx v1.0.0 [ 129.098889][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 129.105612][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 129.116891][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 129.127030][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 129.137010][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.150078][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.161247][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.376204][ T24] usb 6-1: GET_CAPABILITIES returned 0 [ 129.381843][ T24] usbtmc 6-1:16.0: can't read capabilities [ 129.395556][ T5982] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 129.407623][ T5982] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 129.417995][ T5982] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 129.428474][ T5982] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 129.931130][ T6788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.940001][ T6788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.517150][ T5982] usb 4-1: USB disconnect, device number 26 [ 131.653853][ T6792] __nla_validate_parse: 55 callbacks suppressed [ 131.653865][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.229'. [ 131.692524][ T5954] usb 6-1: USB disconnect, device number 9 [ 131.807475][ T52] Bluetooth: hci2: unexpected event 0x0f length: 3 < 4 [ 131.947841][ T6802] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 132.088385][ T6810] kvm: MWAIT instruction emulated as NOP! [ 132.094558][ T6646] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 132.258044][ T6646] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 132.270053][ T6646] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 132.284192][ T6646] usb 4-1: Product: syz [ 132.288449][ T6646] usb 4-1: Manufacturer: syz [ 132.294138][ T6646] usb 4-1: SerialNumber: syz [ 132.300833][ T6646] usb 4-1: config 0 descriptor?? [ 132.308212][ T6646] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 132.316872][ T6646] dvb-usb: bulk message failed: -22 (2/0) [ 132.328080][ T6646] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 132.340995][ T6646] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 132.349070][ T6646] usb 4-1: media controller created [ 132.377655][ T6646] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.508333][ T6646] cxusb: set interface failed [ 132.513283][ T6646] dvb-usb: bulk message failed: -22 (1/0) [ 132.540287][ T6646] DVB: Unable to find symbol mt352_attach() [ 132.546710][ T6646] dvb-usb: bulk message failed: -22 (5/0) [ 132.552845][ T6646] zl10353_read_register: readreg error (reg=127, ret==-121) [ 132.560370][ T6646] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 132.618696][ T6646] rc_core: IR keymap rc-dvico-mce not found [ 132.624631][ T6646] Registered IR keymap rc-empty [ 132.630427][ T6646] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 132.643276][ T6646] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input13 [ 132.658219][ T6646] dvb-usb: schedule remote query interval to 100 msecs. [ 132.665267][ T6646] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 132.676764][ T6646] usb 4-1: USB disconnect, device number 27 [ 132.736044][ T6646] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 132.853548][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.860157][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.208736][ T5934] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 133.215571][ T52] Bluetooth: hci0: unexpected event 0x0f length: 3 < 4 [ 133.358753][ T5934] usb 6-1: Using ep0 maxpacket: 32 [ 133.366120][ T5934] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 133.374464][ T5934] usb 6-1: config 0 has no interface number 0 [ 133.380739][ T5934] usb 6-1: config 0 interface 184 has no altsetting 0 [ 133.389988][ T5934] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 133.399110][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.407172][ T5934] usb 6-1: Product: syz [ 133.411918][ T5934] usb 6-1: Manufacturer: syz [ 133.416516][ T5934] usb 6-1: SerialNumber: syz [ 133.422955][ T5934] usb 6-1: config 0 descriptor?? [ 133.433579][ T5934] smsc75xx v1.0.0 [ 133.498690][ T6646] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 133.653754][ T6646] usb 4-1: Using ep0 maxpacket: 8 [ 133.664441][ T6646] usb 4-1: unable to get BOS descriptor or descriptor too short [ 133.673993][ T6646] usb 4-1: config 128 has an invalid interface number: 111 but max is 0 [ 133.682416][ T6646] usb 4-1: config 128 has no interface number 0 [ 133.691214][ T6646] usb 4-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04 [ 133.700322][ T6646] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.708305][ T6646] usb 4-1: Product: syz [ 133.712597][ T6646] usb 4-1: Manufacturer: syz [ 133.717202][ T6646] usb 4-1: SerialNumber: syz [ 133.835486][ T5934] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 133.846393][ T5934] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 133.856120][ T5934] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 133.868270][ T5934] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61 [ 133.954607][ T6646] go7007 4-1:128.111: probe with driver go7007 failed with error -12 [ 133.965184][ T6646] usb 4-1: USB disconnect, device number 28 [ 134.587780][ T6834] netlink: 52 bytes leftover after parsing attributes in process `syz.3.242'. [ 134.596931][ T6834] netlink: 52 bytes leftover after parsing attributes in process `syz.3.242'. [ 135.993577][ T5982] usb 6-1: USB disconnect, device number 10 [ 136.924245][ T52] Bluetooth: hci2: unexpected event 0x0f length: 3 < 4 [ 138.068698][ T5971] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 138.142112][ T5879] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 138.150425][ T5879] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 138.158100][ T5879] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 138.166870][ T5879] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 138.177453][ T5879] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 138.210928][ T6867] vxcan1 speed is unknown, defaulting to 1000 [ 138.242565][ T5971] usb 6-1: Using ep0 maxpacket: 8 [ 138.250390][ T5971] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 138.266584][ T5971] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 138.283036][ T5971] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 138.303297][ T3467] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.315501][ T5971] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 138.334638][ T5971] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 138.355245][ T5971] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 138.364662][ T5971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.374681][ T5971] usb 6-1: Product: syz [ 138.379177][ T5971] usb 6-1: Manufacturer: syz [ 138.383780][ T5971] usb 6-1: SerialNumber: syz [ 138.393435][ T5971] usb 6-1: config 0 descriptor?? [ 138.444804][ T3467] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.489016][ T5971] rc_core: IR keymap rc-imon-rsc not found [ 138.494860][ T5971] Registered IR keymap rc-empty [ 138.502828][ T5971] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 138.515721][ T5971] input: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input14 [ 138.527534][ T3467] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.591109][ T3467] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.611904][ T5954] usb 6-1: USB disconnect, device number 11 [ 138.637301][ T6867] chnl_net:caif_netlink_parms(): no params data found [ 138.778362][ T6867] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.787213][ T6867] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.794715][ T6867] bridge_slave_0: entered allmulticast mode [ 138.803773][ T6867] bridge_slave_0: entered promiscuous mode [ 138.818538][ T6867] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.826592][ T6867] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.834741][ T6867] bridge_slave_1: entered allmulticast mode [ 138.842190][ T6867] bridge_slave_1: entered promiscuous mode [ 138.874480][ T3467] bridge_slave_1: left allmulticast mode [ 138.880184][ T3467] bridge_slave_1: left promiscuous mode [ 138.886614][ T3467] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.896230][ T3467] bridge_slave_0: left allmulticast mode [ 138.903258][ T3467] bridge_slave_0: left promiscuous mode [ 138.909164][ T3467] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.215831][ T3467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.226982][ T3467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.236915][ T3467] bond0 (unregistering): Released all slaves [ 139.256272][ T6867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.274289][ T6867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.325566][ T6867] team0: Port device team_slave_0 added [ 139.337779][ T6867] team0: Port device team_slave_1 added [ 139.398426][ T6867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.405851][ T6867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.435040][ T6867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.485418][ T6867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.495395][ T6867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.526798][ T6867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.646147][ T6867] hsr_slave_0: entered promiscuous mode [ 139.665042][ T6867] hsr_slave_1: entered promiscuous mode [ 139.680651][ T6867] debugfs: 'hsr0' already exists in 'hsr' [ 139.686424][ T6867] Cannot create hsr debugfs directory [ 139.962065][ T3467] hsr_slave_0: left promiscuous mode [ 139.976913][ T3467] hsr_slave_1: left promiscuous mode [ 139.983706][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.991505][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.000894][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.008301][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.031750][ T3467] veth1_macvtap: left promiscuous mode [ 140.037335][ T3467] veth0_macvtap: left promiscuous mode [ 140.052007][ T3467] veth1_vlan: left promiscuous mode [ 140.057360][ T3467] veth0_vlan: left promiscuous mode [ 140.222178][ T5879] Bluetooth: hci4: command tx timeout [ 140.724741][ T3467] team0 (unregistering): Port device team_slave_1 removed [ 140.770106][ T3467] team0 (unregistering): Port device team_slave_0 removed [ 141.222327][ T5879] Bluetooth: hci2: unexpected event 0x0f length: 3 < 4 [ 141.470925][ T6867] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 141.509936][ T6867] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 141.525162][ T6867] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 141.543383][ T6867] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 141.673536][ T6867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.698275][ T6867] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.715440][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.722860][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.742764][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.749952][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.024745][ T6867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.289219][ T5879] Bluetooth: hci4: command tx timeout [ 142.346842][ T6867] veth0_vlan: entered promiscuous mode [ 142.362205][ T6867] veth1_vlan: entered promiscuous mode [ 142.426265][ T6867] veth0_macvtap: entered promiscuous mode [ 142.441621][ T6867] veth1_macvtap: entered promiscuous mode [ 142.466145][ T6867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.498007][ T6867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.521452][ T3542] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.537631][ T3542] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.549952][ T3542] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.560305][ T3542] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.671161][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.687375][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.732110][ T3467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.750519][ T3467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.119241][ T6646] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 143.283144][ T6646] usb 7-1: Using ep0 maxpacket: 32 [ 143.301778][ T6646] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 143.318718][ T6646] usb 7-1: config 0 has no interface number 0 [ 143.339535][ T6646] usb 7-1: config 0 interface 184 has no altsetting 0 [ 143.365430][ T6646] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 143.375208][ T6646] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.383511][ T6646] usb 7-1: Product: syz [ 143.387766][ T6646] usb 7-1: Manufacturer: syz [ 143.397907][ T6646] usb 7-1: SerialNumber: syz [ 143.423835][ T6646] usb 7-1: config 0 descriptor?? [ 143.442727][ T6646] smsc75xx v1.0.0 [ 143.839993][ T6646] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 143.850955][ T6646] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 143.860835][ T6646] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 143.878730][ T6646] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -61 [ 144.178682][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 144.328633][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 144.337349][ T9] usb 6-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 144.346695][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.354815][ T9] usb 6-1: Product: syz [ 144.359795][ T9] usb 6-1: Manufacturer: syz [ 144.364377][ T9] usb 6-1: SerialNumber: syz [ 144.370213][ T5879] Bluetooth: hci4: command tx timeout [ 144.377521][ T9] usb 6-1: config 0 descriptor?? [ 144.387912][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 144.411409][ T9] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 144.436561][ T6135] udevd[6135]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.607895][ T9] usb 6-1: USB disconnect, device number 12 [ 145.084144][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 145.094808][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 145.103301][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 145.112168][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 145.120452][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 145.178118][ T6998] vxcan1 speed is unknown, defaulting to 1000 [ 145.264635][ T7002] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 145.284534][ T7001] overlayfs: failed lookup in lower (/, name='memory.swap.current', err=-66): unsupported object type [ 145.429840][ T6998] chnl_net:caif_netlink_parms(): no params data found [ 145.503956][ T6998] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.511285][ T6998] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.518463][ T6998] bridge_slave_0: entered allmulticast mode [ 145.525902][ T6998] bridge_slave_0: entered promiscuous mode [ 145.534083][ T6998] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.542907][ T6998] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.550764][ T6998] bridge_slave_1: entered allmulticast mode [ 145.557787][ T6998] bridge_slave_1: entered promiscuous mode [ 145.586865][ T6998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.600740][ T6998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.633821][ T6998] team0: Port device team_slave_0 added [ 145.641671][ T6998] team0: Port device team_slave_1 added [ 145.672340][ T6998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.679584][ T6998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.705934][ T6998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.719667][ T6998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.726645][ T6998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.753672][ T6998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.794861][ T6998] hsr_slave_0: entered promiscuous mode [ 145.801379][ T6998] hsr_slave_1: entered promiscuous mode [ 145.807646][ T6998] debugfs: 'hsr0' already exists in 'hsr' [ 145.813812][ T6998] Cannot create hsr debugfs directory [ 145.893603][ T6646] usb 7-1: USB disconnect, device number 2 [ 145.962399][ T7012] netlink: 132 bytes leftover after parsing attributes in process `syz.6.269'. [ 146.199990][ T6998] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 146.226647][ T6998] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 146.240934][ T6998] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 146.250910][ T6998] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 146.293069][ T6998] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.300498][ T6998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.307969][ T6998] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.315229][ T6998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.410481][ T6998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.427865][ T3599] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.437270][ T3599] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.448714][ T5879] Bluetooth: hci4: command tx timeout [ 146.457941][ T6998] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.468031][ T6646] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 146.476491][ T3599] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.483686][ T3599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.497719][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.505023][ T3599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.624264][ T6646] usb 7-1: device descriptor read/64, error -71 [ 146.654117][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 146.665587][ T6998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.808655][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 146.817494][ T9] usb 6-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=81.67 [ 146.834591][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.843763][ T9] usb 6-1: Product: syz [ 146.848473][ T9] usb 6-1: Manufacturer: syz [ 146.856063][ T9] usb 6-1: SerialNumber: syz [ 146.862650][ T6998] veth0_vlan: entered promiscuous mode [ 146.875385][ T9] usb 6-1: config 0 descriptor?? [ 146.878774][ T6646] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 146.891611][ T6998] veth1_vlan: entered promiscuous mode [ 146.892401][ T9] ipw 6-1:0.0: IPWireless converter converter detected [ 146.925164][ T6998] veth0_macvtap: entered promiscuous mode [ 146.937925][ T6998] veth1_macvtap: entered promiscuous mode [ 146.957205][ T6998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.972844][ T6998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.986751][ T3467] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.996797][ T3467] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.006440][ T3467] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.015872][ T3467] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.029257][ T6646] usb 7-1: device descriptor read/64, error -71 [ 147.084764][ T3542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.093196][ T3542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.109564][ T7043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.118482][ T7043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.133531][ T3467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.142778][ T6646] usb usb7-port1: attempt power cycle [ 147.149314][ T9] usb 6-1: USB disconnect, device number 13 [ 147.156998][ T3467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.172438][ T9] ipw 6-1:0.0: device disconnected [ 147.175930][ T5879] Bluetooth: hci5: command tx timeout [ 147.269064][ T5879] Bluetooth: hci5: unexpected event 0x0f length: 3 < 4 [ 147.321279][ T7050] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 147.508863][ T6646] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 147.530251][ T6646] usb 7-1: device descriptor read/8, error -71 [ 147.538873][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 147.689224][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 147.696401][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 147.708079][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 147.718535][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 147.730079][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.743320][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 147.752820][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.788719][ T6646] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 147.819284][ T6646] usb 7-1: device descriptor read/8, error -71 [ 147.929004][ T6646] usb usb7-port1: unable to enumerate USB device [ 147.967303][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 147.973120][ T9] usbtmc 6-1:16.0: can't read capabilities [ 148.172543][ T5934] usb 6-1: USB disconnect, device number 14 [ 148.949130][ T5934] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 149.098752][ T5934] usb 6-1: Using ep0 maxpacket: 16 [ 149.104897][ T5934] usb 6-1: no configurations [ 149.109582][ T5934] usb 6-1: can't read configurations, error -22 [ 149.238791][ T5934] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 149.249051][ T5879] Bluetooth: hci5: command tx timeout [ 149.311092][ T7060] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 149.414824][ T5934] usb 6-1: Using ep0 maxpacket: 16 [ 149.423923][ T5934] usb 6-1: no configurations [ 149.428170][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.6.280'. [ 149.433184][ T5934] usb 6-1: can't read configurations, error -22 [ 149.446346][ T5934] usb usb6-port1: attempt power cycle [ 149.551080][ T7067] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 149.633836][ T7070] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 149.798815][ T5934] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 149.829244][ T5934] usb 6-1: Using ep0 maxpacket: 16 [ 149.834945][ T5934] usb 6-1: no configurations [ 149.840698][ T5934] usb 6-1: can't read configurations, error -22 [ 149.989550][ T5934] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 150.009475][ T5934] usb 6-1: Using ep0 maxpacket: 16 [ 150.019431][ T5934] usb 6-1: no configurations [ 150.024047][ T5934] usb 6-1: can't read configurations, error -22 [ 150.048972][ T5934] usb usb6-port1: unable to enumerate USB device [ 150.528280][ T5879] Bluetooth: hci5: unexpected event 0x0f length: 3 < 4 [ 150.785872][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 150.794096][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 150.803020][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 150.812275][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 150.819989][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 150.855093][ T7085] vxcan1 speed is unknown, defaulting to 1000 [ 150.882628][ T7087] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 150.988787][ T5982] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 151.128975][ T5982] usb 7-1: device descriptor read/64, error -71 [ 151.184882][ T7085] chnl_net:caif_netlink_parms(): no params data found [ 151.281285][ T7085] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.288478][ T7085] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.296080][ T7085] bridge_slave_0: entered allmulticast mode [ 151.303550][ T7085] bridge_slave_0: entered promiscuous mode [ 151.313274][ T7085] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.320649][ T7085] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.327855][ T7085] bridge_slave_1: entered allmulticast mode [ 151.335668][ T5879] Bluetooth: hci5: command tx timeout [ 151.342897][ T7085] bridge_slave_1: entered promiscuous mode [ 151.368648][ T5982] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 151.390125][ T7085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.402711][ T7085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.445192][ T7085] team0: Port device team_slave_0 added [ 151.454022][ T7085] team0: Port device team_slave_1 added [ 151.501183][ T7085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.508289][ T7085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.534697][ T7085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.535043][ T5982] usb 7-1: device descriptor read/64, error -71 [ 151.547931][ T7085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.559547][ T7085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.592950][ T7085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.667566][ T7085] hsr_slave_0: entered promiscuous mode [ 151.669356][ T5982] usb usb7-port1: attempt power cycle [ 151.674713][ T7085] hsr_slave_1: entered promiscuous mode [ 151.687739][ T7085] debugfs: 'hsr0' already exists in 'hsr' [ 151.694176][ T7085] Cannot create hsr debugfs directory [ 152.015950][ T7085] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 152.030563][ T5982] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 152.044630][ T7085] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 152.053223][ T5982] usb 7-1: device descriptor read/8, error -71 [ 152.062042][ T7085] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 152.073997][ T7085] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 152.089249][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 152.107514][ T7085] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.114684][ T7085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.122154][ T7085] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.129278][ T7085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.191906][ T7085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.207913][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.217775][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.233504][ T7085] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.245653][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.252834][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.263315][ T10] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 152.277583][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.277614][ T10] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 152.284780][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.300710][ T5982] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 152.303993][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.317949][ T10] usb 6-1: Product: syz [ 152.322637][ T10] usb 6-1: Manufacturer: syz [ 152.327245][ T10] usb 6-1: SerialNumber: syz [ 152.330668][ T5982] usb 7-1: device descriptor read/8, error -71 [ 152.342940][ T10] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 152.439057][ T5982] usb usb7-port1: unable to enumerate USB device [ 152.501437][ T7085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.560799][ T10] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 152.572480][ T10] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 152.583232][ T10] usb 6-1: media controller created [ 152.616395][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.748370][ T10] usb 6-1: USB disconnect, device number 19 [ 152.803331][ T7085] veth0_vlan: entered promiscuous mode [ 152.821714][ T7085] veth1_vlan: entered promiscuous mode [ 152.845869][ T7085] veth0_macvtap: entered promiscuous mode [ 152.851922][ T5879] Bluetooth: hci6: command tx timeout [ 152.858592][ T7085] veth1_macvtap: entered promiscuous mode [ 152.875837][ T7085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.891251][ T7085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.904707][ T3542] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.915620][ T3542] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.929812][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.940294][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.995390][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.008749][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.036074][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.045383][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.339928][ T981] usb 3-1: [UEAGLE-ATM] firmware is not available [ 153.408969][ T5879] Bluetooth: hci5: command tx timeout [ 153.417299][ T5982] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 153.588875][ T5982] usb 6-1: Using ep0 maxpacket: 32 [ 153.601444][ T5982] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 153.620761][ T5982] usb 6-1: config 0 has no interface number 0 [ 153.626939][ T5982] usb 6-1: config 0 interface 184 has no altsetting 0 [ 153.671056][ T5982] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 153.684899][ T5982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.708391][ T5982] usb 6-1: Product: syz [ 153.717266][ T5982] usb 6-1: Manufacturer: syz [ 153.717285][ T5982] usb 6-1: SerialNumber: syz [ 153.741005][ T5982] usb 6-1: config 0 descriptor?? [ 153.763081][ T5982] smsc75xx v1.0.0 [ 153.795605][ T7144] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 153.826674][ T5879] Bluetooth: hci4: unexpected event 0x0f length: 3 < 4 [ 153.964975][ T7156] netlink: 32 bytes leftover after parsing attributes in process `syz.8.296'. [ 154.090655][ T7161] FAULT_INJECTION: forcing a failure. [ 154.090655][ T7161] name failslab, interval 1, probability 0, space 0, times 0 [ 154.104085][ T7161] CPU: 0 UID: 0 PID: 7161 Comm: syz.8.298 Not tainted syzkaller #0 PREEMPT(full) [ 154.104109][ T7161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 154.104119][ T7161] Call Trace: [ 154.104126][ T7161] [ 154.104133][ T7161] dump_stack_lvl+0x189/0x250 [ 154.104160][ T7161] ? __pfx____ratelimit+0x10/0x10 [ 154.104178][ T7161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.104193][ T7161] ? __pfx__printk+0x10/0x10 [ 154.104218][ T7161] ? __pfx___might_resched+0x10/0x10 [ 154.104237][ T7161] ? fs_reclaim_acquire+0x7d/0x100 [ 154.104262][ T7161] should_fail_ex+0x414/0x560 [ 154.104288][ T7161] should_failslab+0xa8/0x100 [ 154.104311][ T7161] kmem_cache_alloc_noprof+0x74/0x6e0 [ 154.104330][ T7161] ? security_file_alloc+0x34/0x330 [ 154.104358][ T7161] security_file_alloc+0x34/0x330 [ 154.104384][ T7161] init_file+0x93/0x2f0 [ 154.104405][ T7161] alloc_empty_backing_file+0x38/0xc0 [ 154.104424][ T7161] backing_file_open+0x24/0x90 [ 154.104444][ T7161] ovl_open_realfile+0x23e/0x3e0 [ 154.104472][ T7161] ovl_open+0x1d9/0x2f0 [ 154.104495][ T7161] ? __pfx_apparmor_file_open+0x10/0x10 [ 154.104521][ T7161] ? __pfx_ovl_open+0x10/0x10 [ 154.104539][ T7161] ? tomoyo_file_open+0x165/0x220 [ 154.104560][ T7161] ? fsnotify_open_perm_and_set_mode+0x11a/0x610 [ 154.104581][ T7161] ? __pfx_ovl_open+0x10/0x10 [ 154.104597][ T7161] do_dentry_open+0x953/0x13f0 [ 154.104630][ T7161] vfs_open+0x3b/0x340 [ 154.104645][ T7161] ? path_openat+0x2ecd/0x3830 [ 154.104667][ T7161] path_openat+0x2ee5/0x3830 [ 154.104719][ T7161] ? __pfx_path_openat+0x10/0x10 [ 154.104758][ T7161] do_filp_open+0x1fa/0x410 [ 154.104775][ T7161] ? __lock_acquire+0xab9/0xd20 [ 154.104794][ T7161] ? __pfx_do_filp_open+0x10/0x10 [ 154.104835][ T7161] ? _raw_spin_unlock+0x28/0x50 [ 154.104849][ T7161] ? alloc_fd+0x64c/0x6c0 [ 154.104883][ T7161] do_sys_openat2+0x121/0x1c0 [ 154.104904][ T7161] ? __pfx_do_sys_openat2+0x10/0x10 [ 154.104926][ T7161] ? ksys_write+0x22a/0x250 [ 154.104949][ T7161] ? __pfx_ksys_write+0x10/0x10 [ 154.104972][ T7161] __x64_sys_openat+0x138/0x170 [ 154.104994][ T7161] do_syscall_64+0xfa/0xfa0 [ 154.105010][ T7161] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.105027][ T7161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.105041][ T7161] ? clear_bhb_loop+0x60/0xb0 [ 154.105061][ T7161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.105077][ T7161] RIP: 0033:0x7f17bfd8eba9 [ 154.105092][ T7161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.105106][ T7161] RSP: 002b:00007f17c0cf1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 154.105125][ T7161] RAX: ffffffffffffffda RBX: 00007f17bffd5fa0 RCX: 00007f17bfd8eba9 [ 154.105137][ T7161] RDX: 000000000000f000 RSI: 0000200000000040 RDI: 0000000000000003 [ 154.105148][ T7161] RBP: 00007f17c0cf1090 R08: 0000000000000000 R09: 0000000000000000 [ 154.105158][ T7161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 154.105167][ T7161] R13: 00007f17bffd6038 R14: 00007f17bffd5fa0 R15: 00007ffd3b7a7588 [ 154.105194][ T7161] [ 154.160621][ T5982] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 154.436849][ T5982] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 154.446627][ T5982] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 154.477718][ T5982] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61 [ 154.838716][ T5982] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 154.931669][ T5879] Bluetooth: hci6: command tx timeout [ 154.990519][ T5982] usb 9-1: not running at top speed; connect to a high speed hub [ 154.999518][ T5982] usb 9-1: config index 0 descriptor too short (expected 40616, got 27) [ 155.008472][ T5982] usb 9-1: config 36 has too many interfaces: 205, using maximum allowed: 32 [ 155.019653][ T5982] usb 9-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 155.030071][ T5982] usb 9-1: config 36 has 0 interfaces, different from the descriptor's value: 205 [ 155.041594][ T5982] usb 9-1: New USB device found, idVendor=08ca, idProduct=2022, bcdDevice=f4.af [ 155.050767][ T5982] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.058852][ T5982] usb 9-1: Product: syz [ 155.063034][ T5982] usb 9-1: Manufacturer: syz [ 155.069674][ T5982] usb 9-1: SerialNumber: syz [ 155.860001][ T5879] Bluetooth: hci4: unexpected event 0x0f length: 3 < 4 [ 156.182397][ T5913] usb 6-1: USB disconnect, device number 20 [ 156.831495][ T5879] Bluetooth: Unexpected start frame (len 16) [ 156.905039][ T7232] overlayfs: failed to resolve './file0:volatile': -2 [ 156.967176][ T30] audit: type=1400 audit(1758140366.385:7): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=7233 comm="syz.6.310" [ 157.010961][ T5879] Bluetooth: hci6: command tx timeout [ 157.022171][ T7236] binder: 7235:7236 ioctl c0306201 200000000080 returned -14 [ 157.318677][ T5971] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 157.398850][ T5913] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 157.448662][ T5971] usb 7-1: device descriptor read/64, error -71 [ 157.559460][ T5913] usb 6-1: Using ep0 maxpacket: 32 [ 157.565711][ T5982] usb 9-1: USB disconnect, device number 2 [ 157.577533][ T5913] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 157.596730][ T5913] usb 6-1: config 0 has no interface number 0 [ 157.626186][ T5913] usb 6-1: config 0 interface 184 has no altsetting 0 [ 157.645912][ T5913] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 157.657848][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.666469][ T5913] usb 6-1: Product: syz [ 157.672206][ T5913] usb 6-1: Manufacturer: syz [ 157.676904][ T5913] usb 6-1: SerialNumber: syz [ 157.692629][ T5913] usb 6-1: config 0 descriptor?? [ 157.700248][ T5971] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 157.717526][ T5913] smsc75xx v1.0.0 [ 157.840691][ T5971] usb 7-1: device descriptor read/64, error -71 [ 157.949019][ T5971] usb usb7-port1: attempt power cycle [ 157.977939][ T7251] pvfs2: Unknown parameter 'ö' [ 158.119945][ T5913] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 158.132829][ T5913] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 158.144353][ T5913] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 158.154989][ T5913] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61 [ 158.298689][ T5971] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 158.319125][ T5971] usb 7-1: device descriptor read/8, error -71 [ 158.558731][ T5971] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 158.591750][ T5971] usb 7-1: device descriptor read/8, error -71 [ 158.670724][ T7262] FAULT_INJECTION: forcing a failure. [ 158.670724][ T7262] name failslab, interval 1, probability 0, space 0, times 0 [ 158.685062][ T7262] CPU: 1 UID: 0 PID: 7262 Comm: syz.8.323 Not tainted syzkaller #0 PREEMPT(full) [ 158.685084][ T7262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 158.685095][ T7262] Call Trace: [ 158.685102][ T7262] [ 158.685108][ T7262] dump_stack_lvl+0x189/0x250 [ 158.685129][ T7262] ? __pfx____ratelimit+0x10/0x10 [ 158.685147][ T7262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.685162][ T7262] ? __pfx__printk+0x10/0x10 [ 158.685190][ T7262] ? __pfx___might_resched+0x10/0x10 [ 158.685214][ T7262] should_fail_ex+0x414/0x560 [ 158.685239][ T7262] should_failslab+0xa8/0x100 [ 158.685262][ T7262] __kmalloc_noprof+0xcb/0x7f0 [ 158.685280][ T7262] ? do_handle_open+0x4d4/0x8f0 [ 158.685304][ T7262] do_handle_open+0x4d4/0x8f0 [ 158.685326][ T7262] ? __pfx_do_handle_open+0x10/0x10 [ 158.685344][ T7262] ? ksys_write+0x22a/0x250 [ 158.685368][ T7262] ? __pfx_ksys_write+0x10/0x10 [ 158.685392][ T7262] ? do_syscall_64+0xbe/0xfa0 [ 158.685413][ T7262] do_syscall_64+0xfa/0xfa0 [ 158.685429][ T7262] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.685446][ T7262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.685463][ T7262] ? clear_bhb_loop+0x60/0xb0 [ 158.685483][ T7262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.685498][ T7262] RIP: 0033:0x7f17bfd8eba9 [ 158.685512][ T7262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.685527][ T7262] RSP: 002b:00007f17c0cf1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 158.685545][ T7262] RAX: ffffffffffffffda RBX: 00007f17bffd5fa0 RCX: 00007f17bfd8eba9 [ 158.685557][ T7262] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 158.685566][ T7262] RBP: 00007f17c0cf1090 R08: 0000000000000000 R09: 0000000000000000 [ 158.685577][ T7262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.685586][ T7262] R13: 00007f17bffd6038 R14: 00007f17bffd5fa0 R15: 00007ffd3b7a7588 [ 158.685615][ T7262] [ 158.699112][ T5971] usb usb7-port1: unable to enumerate USB device [ 159.099013][ T5879] Bluetooth: hci6: command tx timeout [ 159.268656][ T5913] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 159.398640][ T5913] usb 9-1: device descriptor read/64, error -71 [ 159.649301][ T5913] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 159.778711][ T5913] usb 9-1: device descriptor read/64, error -71 [ 159.890211][ T5913] usb usb9-port1: attempt power cycle [ 160.157142][ T5971] usb 6-1: USB disconnect, device number 21 [ 160.231162][ T5913] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 160.245008][ T7275] FAULT_INJECTION: forcing a failure. [ 160.245008][ T7275] name failslab, interval 1, probability 0, space 0, times 0 [ 160.259720][ T7275] CPU: 1 UID: 0 PID: 7275 Comm: syz.5.328 Not tainted syzkaller #0 PREEMPT(full) [ 160.259745][ T7275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 160.259754][ T7275] Call Trace: [ 160.259761][ T7275] [ 160.259768][ T7275] dump_stack_lvl+0x189/0x250 [ 160.259789][ T7275] ? __pfx____ratelimit+0x10/0x10 [ 160.259807][ T7275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.259822][ T7275] ? __pfx__printk+0x10/0x10 [ 160.259850][ T7275] ? __pfx___might_resched+0x10/0x10 [ 160.259869][ T7275] ? fs_reclaim_acquire+0x7d/0x100 [ 160.259895][ T7275] should_fail_ex+0x414/0x560 [ 160.259921][ T7275] should_failslab+0xa8/0x100 [ 160.259945][ T7275] kmem_cache_alloc_noprof+0x74/0x6e0 [ 160.259964][ T7275] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 160.259993][ T7275] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 160.260028][ T7275] mmu_topup_memory_caches+0x21/0x170 [ 160.260054][ T7275] kvm_mmu_load+0x9d/0x2300 [ 160.260076][ T7275] ? pic_update_irq+0x5c6/0x800 [ 160.260101][ T7275] ? vmx_get_rflags+0x20c/0x3f0 [ 160.260119][ T7275] ? kvm_apic_has_interrupt+0x4b1/0x770 [ 160.260148][ T7275] vcpu_run+0x48a8/0x7040 [ 160.260238][ T7275] ? __pfx_vcpu_run+0x10/0x10 [ 160.260262][ T7275] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 160.260288][ T7275] ? rcu_is_watching+0x15/0xb0 [ 160.260312][ T7275] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 160.260336][ T7275] ? __mutex_trylock_common+0x153/0x260 [ 160.260361][ T7275] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 160.260379][ T7275] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 160.260399][ T7275] ? rcu_is_watching+0x15/0xb0 [ 160.260419][ T7275] ? trace_contention_end+0x39/0x120 [ 160.260439][ T7275] ? look_up_lock_class+0x74/0x170 [ 160.260459][ T7275] ? register_lock_class+0x51/0x320 [ 160.260484][ T7275] ? __lock_acquire+0xab9/0xd20 [ 160.260536][ T7275] kvm_vcpu_ioctl+0x95c/0xe90 [ 160.260560][ T7275] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 160.260599][ T7275] ? __fget_files+0x2a/0x420 [ 160.260618][ T7275] ? __fget_files+0x3a0/0x420 [ 160.260630][ T7275] ? __fget_files+0x2a/0x420 [ 160.260648][ T7275] ? bpf_lsm_file_ioctl+0x9/0x20 [ 160.260663][ T7275] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 160.260679][ T7275] __se_sys_ioctl+0xfc/0x170 [ 160.260703][ T7275] do_syscall_64+0xfa/0xfa0 [ 160.260717][ T7275] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.260732][ T7275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.260747][ T7275] ? clear_bhb_loop+0x60/0xb0 [ 160.260763][ T7275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.260779][ T7275] RIP: 0033:0x7f84bb78eba9 [ 160.260794][ T7275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.260808][ T7275] RSP: 002b:00007f84b99ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.260826][ T7275] RAX: ffffffffffffffda RBX: 00007f84bb9d5fa0 RCX: 00007f84bb78eba9 [ 160.260839][ T7275] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 160.260849][ T7275] RBP: 00007f84b99ee090 R08: 0000000000000000 R09: 0000000000000000 [ 160.260858][ T7275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 160.260866][ T7275] R13: 00007f84bb9d6038 R14: 00007f84bb9d5fa0 R15: 00007ffc3a9ac3d8 [ 160.260893][ T7275] [ 160.261334][ T5913] usb 9-1: device descriptor read/8, error -71 [ 160.828679][ T5913] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 160.849590][ T5913] usb 9-1: device descriptor read/8, error -71 [ 160.942093][ T5971] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 160.959172][ T5913] usb usb9-port1: unable to enumerate USB device [ 161.101779][ T5971] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 161.111072][ T5971] usb 6-1: config 0 has no interface number 0 [ 161.117231][ T5971] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 161.129422][ T5971] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 8224, setting to 8 [ 161.140364][ T5971] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 161.151996][ T5971] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 161.163110][ T5971] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 161.174279][ T5971] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 161.187605][ T5971] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 161.212501][ T5971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.239063][ T5971] usb 6-1: config 0 descriptor?? [ 161.254972][ T7286] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 161.262666][ T7286] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 161.281526][ T5971] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 161.475873][ T7286] ldusb 6-1:0.55: Write buffer overflow, 45 bytes dropped [ 161.484109][ T5982] usb 6-1: USB disconnect, device number 22 [ 161.495939][ T5982] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 161.518813][ T5913] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 161.668665][ T5913] usb 7-1: Using ep0 maxpacket: 16 [ 161.675142][ T5913] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 161.685009][ T5913] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 161.696174][ T5913] usb 7-1: config 0 interface 0 has no altsetting 0 [ 161.706138][ T5913] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 161.715262][ T5913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.725392][ T5913] usb 7-1: Product: syz [ 161.730331][ T5913] usb 7-1: Manufacturer: syz [ 161.734936][ T5913] usb 7-1: SerialNumber: syz [ 161.741555][ T5913] usb 7-1: config 0 descriptor?? [ 161.952253][ T7294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.962683][ T7294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.968742][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 161.987614][ T5913] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input15 [ 162.194516][ T5879] Bluetooth: hci6: hcon ffff888022f1c000 sent 1 < count 65529 [ 162.196278][ T7311] UHID_CREATE from different security context by process 37 (syz.8.338), this is not allowed. [ 162.284760][ T5982] usb 7-1: USB disconnect, device number 15 [ 162.311326][ T7313] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 162.338641][ T5971] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 162.347313][ T5879] Bluetooth: hci6: unexpected event 0x0f length: 3 < 4 [ 162.509187][ T5971] usb 6-1: Using ep0 maxpacket: 32 [ 162.516487][ T5971] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 162.525516][ T5971] usb 6-1: config 0 has no interface number 0 [ 162.532658][ T5971] usb 6-1: config 0 interface 184 has no altsetting 0 [ 162.553167][ T5971] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 162.564008][ T5971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.582709][ T5971] usb 6-1: Product: syz [ 162.586916][ T5971] usb 6-1: Manufacturer: syz [ 162.600425][ T5971] usb 6-1: SerialNumber: syz [ 162.624691][ T5971] usb 6-1: config 0 descriptor?? [ 162.645661][ T5971] smsc75xx v1.0.0 [ 162.916142][ T7329] could not allocate digest TFM handle crct10dif-pclmul [ 163.037280][ T5971] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 163.049876][ T5971] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 163.062763][ T5971] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 163.073716][ T5971] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61 [ 163.248722][ T5954] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 163.388915][ T5954] usb 7-1: device descriptor read/64, error -71 [ 163.410378][ T7341] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input16 [ 163.433656][ T7341] netlink: 'syz.7.348': attribute type 29 has an invalid length. [ 163.443089][ T7341] netlink: 'syz.7.348': attribute type 29 has an invalid length. [ 163.455105][ T7341] netlink: 500 bytes leftover after parsing attributes in process `syz.7.348'. [ 163.638717][ T5954] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 163.782839][ T5954] usb 7-1: device descriptor read/64, error -71 [ 163.844359][ T7352] netlink: 64 bytes leftover after parsing attributes in process `syz.8.352'. [ 163.910831][ T5954] usb usb7-port1: attempt power cycle [ 164.248827][ T5913] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 164.258945][ T5954] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 164.279042][ T5954] usb 7-1: device descriptor read/8, error -71 [ 164.400120][ T5913] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 164.408863][ T5913] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 164.419113][ T5913] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 164.428250][ T5913] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 164.440093][ T5913] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 164.454355][ T5913] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 164.463718][ T5913] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 164.472158][ T5913] usb 9-1: Product: syz [ 164.476345][ T5913] usb 9-1: Manufacturer: syz [ 164.489101][ T5913] cdc_wdm 9-1:1.0: skipping garbage [ 164.494371][ T5913] cdc_wdm 9-1:1.0: skipping garbage [ 164.501412][ T5913] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 164.507350][ T5913] cdc_wdm 9-1:1.0: Unknown control protocol [ 164.528715][ T5954] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 164.550636][ T5954] usb 7-1: device descriptor read/8, error -71 [ 164.659377][ T5954] usb usb7-port1: unable to enumerate USB device [ 165.114004][ T5921] usb 6-1: USB disconnect, device number 23 [ 167.034112][ T5921] usb 9-1: USB disconnect, device number 7 [ 194.298053][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.306090][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.375456][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 196.375847][ T5871] Bluetooth: hci0: command 0x0406 tx timeout [ 196.383495][ T5868] Bluetooth: hci1: command 0x0406 tx timeout [ 221.210795][ T7382] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 221.235169][ T7382] FAULT_INJECTION: forcing a failure. [ 221.235169][ T7382] name failslab, interval 1, probability 0, space 0, times 0 [ 221.289629][ T7382] CPU: 1 UID: 0 PID: 7382 Comm: syz.7.360 Not tainted syzkaller #0 PREEMPT(full) [ 221.289653][ T7382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 221.289664][ T7382] Call Trace: [ 221.289671][ T7382] [ 221.289678][ T7382] dump_stack_lvl+0x189/0x250 [ 221.289711][ T7382] ? __pfx____ratelimit+0x10/0x10 [ 221.289729][ T7382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.289744][ T7382] ? __pfx__printk+0x10/0x10 [ 221.289772][ T7382] ? __pfx___might_resched+0x10/0x10 [ 221.289797][ T7382] should_fail_ex+0x414/0x560 [ 221.289822][ T7382] should_failslab+0xa8/0x100 [ 221.289847][ T7382] __kmalloc_cache_noprof+0x6f/0x6f0 [ 221.289866][ T7382] ? alloc_fs_context+0x61/0x7d0 [ 221.289886][ T7382] alloc_fs_context+0x61/0x7d0 [ 221.289901][ T7382] ? do_raw_read_unlock+0x3d/0x80 [ 221.289924][ T7382] ? _raw_read_unlock+0x28/0x50 [ 221.289940][ T7382] ? get_fs_type+0x407/0x480 [ 221.289966][ T7382] do_new_mount+0x172/0xa10 [ 221.289988][ T7382] ? apparmor_capable+0x137/0x1b0 [ 221.290013][ T7382] ? security_capable+0x7e/0x2e0 [ 221.290030][ T7382] ? __pfx_do_new_mount+0x10/0x10 [ 221.290052][ T7382] ? ns_capable+0x8a/0xf0 [ 221.290073][ T7382] ? path_mount+0x61c/0xfe0 [ 221.290094][ T7382] ? kmem_cache_free+0x19b/0x690 [ 221.290123][ T7382] __se_sys_mount+0x313/0x410 [ 221.290151][ T7382] ? __pfx___se_sys_mount+0x10/0x10 [ 221.290178][ T7382] ? do_syscall_64+0xbe/0xfa0 [ 221.290194][ T7382] ? __x64_sys_mount+0x20/0xc0 [ 221.290218][ T7382] do_syscall_64+0xfa/0xfa0 [ 221.290233][ T7382] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.290250][ T7382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.290267][ T7382] ? clear_bhb_loop+0x60/0xb0 [ 221.290286][ T7382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.290302][ T7382] RIP: 0033:0x7fd38dd8eba9 [ 221.290325][ T7382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.290339][ T7382] RSP: 002b:00007fd38ebac038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 221.290360][ T7382] RAX: ffffffffffffffda RBX: 00007fd38dfd5fa0 RCX: 00007fd38dd8eba9 [ 221.290370][ T7382] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 221.290380][ T7382] RBP: 00007fd38ebac090 R08: 00002000000004c0 R09: 0000000000000000 [ 221.290390][ T7382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.290398][ T7382] R13: 00007fd38dfd6038 R14: 00007fd38dfd5fa0 R15: 00007fffbcba5de8 [ 221.290421][ T7382] [ 221.657689][ T7390] binder: 7389:7390 ioctl c0306201 200000000080 returned -14 [ 221.671596][ T7390] binder: 7389:7390 ioctl b704 200000000bc0 returned -22 [ 221.705479][ T7395] Cache volume key already in use (9p,(null),) [ 221.706622][ T7383] syzkaller1: entered promiscuous mode [ 221.715913][ T7390] binder: BINDER_SET_CONTEXT_MGR bad uid 16832 != 0 [ 221.727508][ T7390] binder: 7389:7390 ioctl 4018620d 200000000040 returned -1 [ 221.752779][ T7383] syzkaller1: entered allmulticast mode [ 221.825914][ T7399] netlink: 144 bytes leftover after parsing attributes in process `syz.5.365'. [ 222.169020][ T5913] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 222.350828][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.361886][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.372190][ T5913] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 222.385180][ T5913] usb 6-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 222.388661][ T5921] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 222.394271][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.411711][ T5913] usb 6-1: config 0 descriptor?? [ 222.458706][ T5971] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 222.548684][ T5921] usb 7-1: Using ep0 maxpacket: 32 [ 222.559362][ T5921] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 222.567554][ T5921] usb 7-1: config 0 has no interface number 0 [ 222.581507][ T5921] usb 7-1: config 0 interface 184 has no altsetting 0 [ 222.589184][ T5971] usb 9-1: device descriptor read/64, error -71 [ 222.597777][ T5921] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 222.607253][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.616664][ T5921] usb 7-1: Product: syz [ 222.621672][ T5921] usb 7-1: Manufacturer: syz [ 222.626375][ T5921] usb 7-1: SerialNumber: syz [ 222.634609][ T5921] usb 7-1: config 0 descriptor?? [ 222.644342][ T5921] smsc75xx v1.0.0 [ 222.702507][ T7414] FAULT_INJECTION: forcing a failure. [ 222.702507][ T7414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.716316][ T7414] CPU: 0 UID: 0 PID: 7414 Comm: syz.7.372 Not tainted syzkaller #0 PREEMPT(full) [ 222.716331][ T7414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 222.716337][ T7414] Call Trace: [ 222.716341][ T7414] [ 222.716347][ T7414] dump_stack_lvl+0x189/0x250 [ 222.716368][ T7414] ? __pfx____ratelimit+0x10/0x10 [ 222.716390][ T7414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.716406][ T7414] ? __pfx__printk+0x10/0x10 [ 222.716440][ T7414] should_fail_ex+0x414/0x560 [ 222.716455][ T7414] _copy_to_user+0x31/0xb0 [ 222.716466][ T7414] simple_read_from_buffer+0xe1/0x170 [ 222.716482][ T7414] proc_fail_nth_read+0x1b3/0x220 [ 222.716495][ T7414] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.716517][ T7414] ? rw_verify_area+0x2a6/0x4d0 [ 222.716537][ T7414] ? __lock_acquire+0xab9/0xd20 [ 222.716553][ T7414] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.716574][ T7414] vfs_read+0x200/0xa30 [ 222.716591][ T7414] ? fdget_pos+0x247/0x320 [ 222.716601][ T7414] ? __pfx___mutex_lock+0x10/0x10 [ 222.716612][ T7414] ? __pfx_vfs_read+0x10/0x10 [ 222.716625][ T7414] ? __fget_files+0x2a/0x420 [ 222.716635][ T7414] ? __fget_files+0x3a0/0x420 [ 222.716642][ T7414] ? __fget_files+0x2a/0x420 [ 222.716668][ T7414] ksys_read+0x145/0x250 [ 222.716692][ T7414] ? __pfx_ksys_read+0x10/0x10 [ 222.716717][ T7414] ? do_syscall_64+0xbe/0xfa0 [ 222.716744][ T7414] do_syscall_64+0xfa/0xfa0 [ 222.716754][ T7414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.716763][ T7414] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 222.716772][ T7414] ? clear_bhb_loop+0x60/0xb0 [ 222.716782][ T7414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.716791][ T7414] RIP: 0033:0x7fd38dd8d5bc [ 222.716805][ T7414] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 222.716819][ T7414] RSP: 002b:00007fd38ebac030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 222.716837][ T7414] RAX: ffffffffffffffda RBX: 00007fd38dfd5fa0 RCX: 00007fd38dd8d5bc [ 222.716850][ T7414] RDX: 000000000000000f RSI: 00007fd38ebac0a0 RDI: 0000000000000006 [ 222.716861][ T7414] RBP: 00007fd38ebac090 R08: 0000000000000000 R09: 0000000014fffffd [ 222.716871][ T7414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.716881][ T7414] R13: 00007fd38dfd6038 R14: 00007fd38dfd5fa0 R15: 00007fffbcba5de8 [ 222.716899][ T7414] [ 222.968940][ T7401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.977774][ T7401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.993373][ T5913] uclogic 0003:28BD:0074.0006: interface is invalid, ignoring [ 223.065627][ T5971] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 223.188495][ T7401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.197505][ T7401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.209132][ T5971] usb 9-1: device descriptor read/64, error -71 [ 223.243409][ T9] usb 6-1: USB disconnect, device number 24 [ 223.250920][ T5921] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 223.283108][ T5921] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 223.297540][ T5921] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 223.318200][ T5921] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -61 [ 223.814467][ T5971] usb usb9-port1: attempt power cycle [ 224.095278][ T7433] sit0: entered promiscuous mode [ 224.104814][ T7433] netlink: 'syz.7.377': attribute type 1 has an invalid length. [ 224.119794][ T7433] netlink: 1 bytes leftover after parsing attributes in process `syz.7.377'. [ 224.129894][ T7433] : renamed from dummy0 (while UP) [ 224.181115][ T5971] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 224.223544][ T5971] usb 9-1: device descriptor read/8, error -71 [ 224.468710][ T5971] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 224.492207][ T5971] usb 9-1: device descriptor read/8, error -71 [ 224.609350][ T5971] usb usb9-port1: unable to enumerate USB device [ 224.689246][ T5971] IPVS: starting estimator thread 0... [ 224.799361][ T7451] IPVS: using max 52 ests per chain, 124800 per kthread [ 225.147895][ T5971] usb 7-1: USB disconnect, device number 20 [ 225.254222][ T7455] netlink: 12 bytes leftover after parsing attributes in process `syz.6.386'. [ 225.316202][ T5879] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 225.651648][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz.6.392'. [ 225.725956][ T7478] netlink: 76 bytes leftover after parsing attributes in process `syz.5.394'. [ 225.928695][ T5971] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 225.960726][ T30] audit: type=1804 audit(1758140435.375:8): pid=7482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.396" name="/newroot/35/bus/file0" dev="overlay" ino=231 res=1 errno=0 [ 226.049019][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 226.089579][ T5971] usb 9-1: Using ep0 maxpacket: 32 [ 226.096533][ T5971] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 226.107972][ T5971] usb 9-1: config 0 has no interface number 0 [ 226.111508][ T7484] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.119311][ T5971] usb 9-1: config 0 interface 184 has no altsetting 0 [ 226.137152][ T5971] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 226.146481][ T5971] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.157771][ T5971] usb 9-1: Product: syz [ 226.162509][ T5971] usb 9-1: Manufacturer: syz [ 226.167315][ T5971] usb 9-1: SerialNumber: syz [ 226.180138][ T5971] usb 9-1: config 0 descriptor?? [ 226.191789][ T5971] smsc75xx v1.0.0 [ 226.194440][ T7486] program syz.6.398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.208816][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 226.217512][ T9] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 226.235047][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 226.245712][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.344907][ T7490] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 226.531851][ T7496] fuse: Bad value for 'group_id' [ 226.536819][ T7496] fuse: Bad value for 'group_id' [ 226.596100][ T5971] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 226.608158][ T5971] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 226.622686][ T5971] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 226.633804][ T5971] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -61 [ 226.712696][ T7502] binder: 7501:7502 ioctl c0306201 200000000080 returned -14 [ 226.998708][ T5913] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 227.148895][ T5913] usb 7-1: Using ep0 maxpacket: 16 [ 227.159113][ T5913] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 227.172445][ T5913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.180610][ T5913] usb 7-1: Product: syz [ 227.184789][ T5913] usb 7-1: Manufacturer: syz [ 227.189431][ T5913] usb 7-1: SerialNumber: syz [ 227.200120][ T5913] r8152-cfgselector 7-1: Unknown version 0x0000 [ 227.206392][ T5913] r8152-cfgselector 7-1: config 0 descriptor?? [ 227.613678][ T7520] fuse: Bad value for 'group_id' [ 227.620930][ T7520] fuse: Bad value for 'group_id' [ 227.627145][ T7504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.636539][ T7504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.654097][ T5913] r8152-cfgselector 7-1: USB disconnect, device number 21 [ 228.507570][ T5879] Bluetooth: hci4: unexpected event 0x0f length: 3 < 4 [ 228.564231][ T7537] netlink: 112 bytes leftover after parsing attributes in process `syz.6.418'. [ 228.695950][ T5913] usb 9-1: USB disconnect, device number 12 [ 228.774042][ T7541] fuse: Bad value for 'group_id' [ 228.781865][ T7541] fuse: Bad value for 'group_id' [ 228.817086][ T5971] usb 6-1: USB disconnect, device number 25 [ 228.890404][ T7545] syzkaller1: entered promiscuous mode [ 228.896790][ T7545] syzkaller1: entered allmulticast mode [ 229.145469][ T7537] syz.6.418 (7537) used greatest stack depth: 17832 bytes left [ 229.187816][ T5913] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 229.328700][ T5913] usb 9-1: device descriptor read/64, error -71 [ 229.438517][ T5879] Bluetooth: hci2: unexpected event 0x0f length: 3 < 4 [ 229.592176][ T7568] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 229.603039][ T7568] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 229.608876][ T5913] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 229.758734][ T5913] usb 9-1: device descriptor read/64, error -71 [ 229.798756][ T5982] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 229.858708][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 229.869556][ T5913] usb usb9-port1: attempt power cycle [ 229.948951][ T5982] usb 6-1: Using ep0 maxpacket: 32 [ 229.955532][ T5982] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 229.963946][ T5982] usb 6-1: config 0 has no interface number 0 [ 229.970161][ T5982] usb 6-1: config 0 interface 184 has no altsetting 0 [ 229.980574][ T5982] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 229.989732][ T5982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.997719][ T5982] usb 6-1: Product: syz [ 230.001924][ T5982] usb 6-1: Manufacturer: syz [ 230.001979][ T9] usb 7-1: device descriptor read/64, error -71 [ 230.006510][ T5982] usb 6-1: SerialNumber: syz [ 230.019630][ T5982] usb 6-1: config 0 descriptor?? [ 230.029366][ T5982] smsc75xx v1.0.0 [ 230.218711][ T5913] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 230.248695][ T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 230.249253][ T5913] usb 9-1: device descriptor read/8, error -71 [ 230.378816][ T9] usb 7-1: device descriptor read/64, error -71 [ 230.433981][ T5982] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 230.445078][ T5982] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 230.455166][ T5982] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 230.465765][ T5982] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61 [ 230.489861][ T9] usb usb7-port1: attempt power cycle [ 230.508822][ T5913] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 230.531036][ T5913] usb 9-1: device descriptor read/8, error -71 [ 230.648848][ T5913] usb usb9-port1: unable to enumerate USB device [ 230.828800][ T9] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 230.849191][ T9] usb 7-1: device descriptor read/8, error -71 [ 231.091194][ T9] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 231.120711][ T9] usb 7-1: device descriptor read/8, error -71 [ 231.230395][ T9] usb usb7-port1: unable to enumerate USB device [ 232.051365][ T31] INFO: task syz-executor:5865 blocked for more than 143 seconds. [ 232.059336][ T31] Not tainted syzkaller #0 [ 232.064283][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 232.073908][ T31] task:syz-executor state:D stack:19496 pid:5865 tgid:5865 ppid:1 task_flags:0x400140 flags:0x00080002 [ 232.085946][ T31] Call Trace: [ 232.089316][ T31] [ 232.092340][ T31] __schedule+0x1798/0x4cc0 [ 232.096838][ T31] ? do_raw_spin_lock+0x121/0x290 [ 232.101929][ T31] ? __lock_acquire+0xab9/0xd20 [ 232.106945][ T31] ? __pfx___schedule+0x10/0x10 [ 232.111920][ T31] ? schedule+0x91/0x360 [ 232.116164][ T31] schedule+0x165/0x360 [ 232.120413][ T31] v9fs_evict_inode+0x170/0x320 [ 232.125275][ T31] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 232.130949][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 232.136499][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 232.142182][ T31] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 232.147640][ T31] evict+0x504/0x9c0 [ 232.151843][ T31] ? __pfx_evict+0x10/0x10 [ 232.156276][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 232.161526][ T31] evict_inodes+0x64c/0x6d0 [ 232.166030][ T31] ? __pfx_evict_inodes+0x10/0x10 [ 232.172984][ T31] generic_shutdown_super+0x9a/0x2c0 [ 232.178313][ T31] kill_anon_super+0x3b/0x70 [ 232.182973][ T31] v9fs_kill_super+0x4c/0x90 [ 232.187565][ T31] deactivate_locked_super+0xbc/0x130 [ 232.192990][ T31] cleanup_mnt+0x425/0x4c0 [ 232.197406][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.202673][ T31] task_work_run+0x1d4/0x260 [ 232.207267][ T31] ? __pfx_task_work_run+0x10/0x10 [ 232.212472][ T31] ? __x64_sys_umount+0x122/0x160 [ 232.217534][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 232.223043][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 232.228335][ T31] do_syscall_64+0x2bd/0xfa0 [ 232.232985][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.238186][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.244322][ T31] ? clear_bhb_loop+0x60/0xb0 [ 232.249046][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.254945][ T31] RIP: 0033:0x7f90d258fed7 [ 232.259454][ T31] RSP: 002b:00007ffc60e6a9b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 232.267889][ T31] RAX: 0000000000000000 RBX: 00007f90d2611c05 RCX: 00007f90d258fed7 [ 232.277188][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc60e6aa70 [ 232.278662][ T5913] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 232.285496][ T31] RBP: 00007ffc60e6aa70 R08: 0000000000000000 R09: 0000000000000000 [ 232.301189][ T31] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc60e6bb00 [ 232.309379][ T31] R13: 00007f90d2611c05 R14: 0000000000014f53 R15: 00007ffc60e6bb40 [ 232.317894][ T31] [ 232.321934][ T31] [ 232.321934][ T31] Showing all locks held in the system: [ 232.329840][ T31] 1 lock held by khungtaskd/31: [ 232.334710][ T31] #0: ffffffff8e53d360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 232.344664][ T31] 2 locks held by getty/5627: [ 232.349379][ T31] #0: ffff88814d4350a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 232.359204][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 232.369650][ T31] 1 lock held by syz-executor/5865: [ 232.374903][ T31] #0: ffff8880708940e0 (&type->s_umount_key#54){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 232.386029][ T31] 6 locks held by kworker/1:4/5913: [ 232.391292][ T31] #0: ffff888020ed1548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 232.402844][ T31] #1: ffffc90004517ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 232.414899][ T31] #2: ffff8881457c1198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 232.423969][ T31] #3: ffff8881457c4518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 232.434159][ T31] #4: ffff8881437e9b68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 232.444040][ T31] #5: ffff8880b873a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 232.454068][ T31] 1 lock held by syz.2.227/6785: [ 232.459075][ T31] #0: ffff8880708940e0 (&type->s_umount_key#54){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 [ 232.459269][ T5913] usb 9-1: Using ep0 maxpacket: 8 [ 232.470262][ T31] 1 lock held by syz.3.243/6836: [ 232.480006][ T31] #0: ffff8880708940e0 (&type->s_umount_key#54){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 [ 232.481619][ T5913] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 232.490213][ T31] 1 lock held by syz.3.243/6838: [ 232.500526][ T5913] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 232.507627][ T31] #0: ffff8880708940e0 (&type->s_umount_key#54){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 [ 232.517358][ T5913] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.524830][ T31] [ 232.535358][ T31] ============================================= [ 232.535358][ T31] [ 232.543965][ T31] NMI backtrace for cpu 0 [ 232.543983][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 232.544000][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 232.544009][ T31] Call Trace: [ 232.544015][ T31] [ 232.544022][ T31] dump_stack_lvl+0x189/0x250 [ 232.544046][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.544062][ T31] ? __pfx__printk+0x10/0x10 [ 232.544094][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 232.544118][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 232.544141][ T31] ? __pfx__printk+0x10/0x10 [ 232.544164][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 232.544182][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 232.544203][ T31] watchdog+0xf60/0xfa0 [ 232.544221][ T31] ? watchdog+0x1e2/0xfa0 [ 232.544242][ T31] kthread+0x711/0x8a0 [ 232.544266][ T31] ? __pfx_watchdog+0x10/0x10 [ 232.544281][ T31] ? __pfx_kthread+0x10/0x10 [ 232.544303][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 232.544317][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.544331][ T31] ? __pfx_kthread+0x10/0x10 [ 232.544351][ T31] ret_from_fork+0x4bc/0x870 [ 232.544368][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 232.544390][ T31] ? __switch_to_asm+0x39/0x70 [ 232.544405][ T31] ? __switch_to_asm+0x33/0x70 [ 232.544418][ T31] ? __pfx_kthread+0x10/0x10 [ 232.544438][ T31] ret_from_fork_asm+0x1a/0x30 [ 232.544469][ T31] [ 232.544475][ T31] Sending NMI from CPU 0 to CPUs 1: [ 232.631719][ T5913] usb 6-1: USB disconnect, device number 26 [ 232.634440][ C1] NMI backtrace for cpu 1 [ 232.634470][ C1] CPU: 1 UID: 0 PID: 5913 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 232.634489][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 232.634500][ C1] Workqueue: usb_hub_wq hub_event [ 232.634524][ C1] RIP: 0010:mark_lock+0xa0/0x190 [ 232.634544][ C1] Code: c7 c7 ad 95 e9 8d 48 c7 c6 7b c1 d8 8d e8 c8 9c e5 ff 90 0f 0b 90 90 90 31 c9 4c 89 fe 4c 89 f7 b8 01 00 00 00 85 69 60 74 10 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 91 06 f1 09 cc 49 89 fe 49 89 f7 [ 232.634558][ C1] RSP: 0018:ffffc90000a08a98 EFLAGS: 00000002 [ 232.634571][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff93910330 [ 232.634582][ C1] RDX: 0000000000000000 RSI: ffff888078c42a10 RDI: ffff888078c41e40 [ 232.634593][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff84dd60ca [ 232.634604][ C1] R10: ffffc90000a08cb0 R11: fffff52000141198 R12: 0000000000000002 [ 232.634615][ C1] R13: 0000000000000002 R14: ffff888078c42a10 R15: 0000000000000000 [ 232.634625][ C1] FS: 0000000000000000(0000) GS:ffff88812589c000(0000) knlGS:0000000000000000 [ 232.634638][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 232.634649][ C1] CR2: 00007f17bfd71fe0 CR3: 00000000269e6000 CR4: 00000000003526f0 [ 232.634663][ C1] Call Trace: [ 232.634671][ C1] [ 232.634680][ C1] __lock_acquire+0x65a/0xd20 [ 232.634699][ C1] ? debug_object_deactivate+0x9a/0x250 [ 232.634717][ C1] lock_acquire+0x120/0x360 [ 232.634733][ C1] ? debug_object_deactivate+0x9a/0x250 [ 232.634756][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 232.634772][ C1] ? debug_object_deactivate+0x9a/0x250 [ 232.634790][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 232.634805][ C1] ? __lock_acquire+0xab9/0xd20 [ 232.634823][ C1] debug_object_deactivate+0x9a/0x250 [ 232.634844][ C1] debug_deactivate+0x1d/0x200 [ 232.634865][ C1] __hrtimer_run_queues+0x2b0/0xc60 [ 232.634889][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 232.634906][ C1] ? read_tsc+0x9/0x20 [ 232.634925][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 232.634957][ C1] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 232.634978][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 232.634995][ C1] [ 232.635000][ C1] [ 232.635006][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 232.635024][ C1] RIP: 0010:vprintk_emit+0x49d/0x590 [ 232.635044][ C1] Code: 0f 84 34 ff ff ff e8 12 9b 1f 00 fb eb 44 e8 0a 9b 1f 00 e8 75 90 eb 09 4d 85 f6 74 94 e8 fb 9a 1f 00 fb 48 c7 c7 80 13 53 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 6b 3b [ 232.635056][ C1] RSP: 0018:ffffc900045172a0 EFLAGS: 00000287 [ 232.635069][ C1] RAX: ffffffff81a081a5 RBX: ffffffff81a07ffe RCX: 0000000000100000 [ 232.635080][ C1] RDX: ffffc90016322000 RSI: 00000000000165bf RDI: ffffffff8e531380 [ 232.635092][ C1] RBP: ffffc900045173b0 R08: ffffffff8fe58337 R09: 1ffffffff1fcb066 [ 232.635104][ C1] R10: dffffc0000000000 R11: fffffbfff1fcb067 R12: 0000000000000000 [ 232.635114][ C1] R13: 0000000000000029 R14: 0000000000000200 R15: 1ffff920008a2e58 [ 232.635126][ C1] ? vprintk_emit+0x2ee/0x590 [ 232.635145][ C1] ? vprintk_emit+0x495/0x590 [ 232.635168][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 232.635189][ C1] ? __pfx_snprintf+0x10/0x10 [ 232.635210][ C1] ? __lock_acquire+0xab9/0xd20 [ 232.635228][ C1] dev_vprintk_emit+0x337/0x3f0 [ 232.635245][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 232.635266][ C1] dev_printk_emit+0xe0/0x130 [ 232.635284][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 232.635300][ C1] ? __queue_work+0x102/0xfb0 [ 232.635320][ C1] ? __dev_printk+0x131/0x190 [ 232.635342][ C1] _dev_info+0x10a/0x160 [ 232.635359][ C1] ? __pfx__dev_info+0x10/0x10 [ 232.635373][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 232.635392][ C1] ? kernfs_notify+0x2ee/0x370 [ 232.635415][ C1] usb_disconnect+0xdd/0x950 [ 232.635433][ C1] hub_event+0x1cf5/0x4a20 [ 232.635450][ C1] ? cpuacct_charge+0x117/0x320 [ 232.635476][ C1] ? do_raw_spin_lock+0x121/0x290 [ 232.635498][ C1] ? register_lock_class+0x51/0x320 [ 232.635519][ C1] ? __pfx_hub_event+0x10/0x10 [ 232.635537][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 232.635557][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 232.635571][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 232.635588][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 232.635606][ C1] process_scheduled_works+0xae1/0x17b0 [ 232.635635][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 232.635658][ C1] worker_thread+0x8a0/0xda0 [ 232.635685][ C1] kthread+0x711/0x8a0 [ 232.635707][ C1] ? __pfx_worker_thread+0x10/0x10 [ 232.635725][ C1] ? __pfx_kthread+0x10/0x10 [ 232.635746][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 232.635760][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.635775][ C1] ? __pfx_kthread+0x10/0x10 [ 232.635796][ C1] ret_from_fork+0x4bc/0x870 [ 232.635814][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 232.635833][ C1] ? __switch_to_asm+0x39/0x70 [ 232.635849][ C1] ? __switch_to_asm+0x33/0x70 [ 232.635865][ C1] ? __pfx_kthread+0x10/0x10 [ 232.635886][ C1] ret_from_fork_asm+0x1a/0x30 [ 232.635909][ C1] [ 232.668832][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 232.668852][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 232.668871][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 232.668882][ T31] Call Trace: [ 232.668890][ T31] [ 232.668897][ T31] dump_stack_lvl+0x99/0x250 [ 232.668918][ T31] ? __asan_memcpy+0x40/0x70 [ 232.668937][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.668953][ T31] ? __pfx__printk+0x10/0x10 [ 232.668986][ T31] vpanic+0x237/0x6d0 [ 232.669006][ T31] ? __pfx_vpanic+0x10/0x10 [ 232.669025][ T31] ? preempt_schedule_common+0x83/0xd0 [ 232.669048][ T31] panic+0xb9/0xc0 [ 232.669066][ T31] ? __pfx_panic+0x10/0x10 [ 232.669086][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 232.669112][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 232.669136][ T31] watchdog+0xf9f/0xfa0 [ 232.669158][ T31] ? watchdog+0x1e2/0xfa0 [ 232.669180][ T31] kthread+0x711/0x8a0 [ 232.669206][ T31] ? __pfx_watchdog+0x10/0x10 [ 232.669222][ T31] ? __pfx_kthread+0x10/0x10 [ 232.669246][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 232.669261][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.669277][ T31] ? __pfx_kthread+0x10/0x10 [ 232.669300][ T31] ret_from_fork+0x4bc/0x870 [ 232.669321][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 232.669346][ T31] ? __switch_to_asm+0x39/0x70 [ 232.669362][ T31] ? __switch_to_asm+0x33/0x70 [ 232.669378][ T31] ? __pfx_kthread+0x10/0x10 [ 232.669401][ T31] ret_from_fork_asm+0x1a/0x30 [ 232.669432][ T31] [ 232.670733][ T31] Kernel Offset: disabled