last executing test programs: 49.918866562s ago: executing program 1 (id=1419): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40000, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x8000001, 0x0, 0x0, 0x1, 0x2}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2001}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x14, r5, 0x1}, 0x14}}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0xc0884123, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) 49.75591232s ago: executing program 1 (id=1420): syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f00e500000087"], 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect$uac1(0x6, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x38, &(0x7f0000000840)=@string={0x38, 0x3, "039a5be3e16b9e15fb4f85d90731d190bd50a7e6ec79ae515c5bfc20785f6ed71d3b4e2d3ca09e90933ed765d44e61bd0e20292ff6a8"}}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x0, 0xfffffffffffffffd, 0x4, 0x3, 0x6, 0x4002004c4, 0x1004, 0x54d351bd, 0xc595, 0xd10, 0x2, 0xf7, 0x0, 0x7f, 0x3], 0xeefe0000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 4) 48.575938234s ago: executing program 1 (id=1424): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x4, [0xb, 0x6], 0x7}, 0x10) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x44, 0x14, 0xe0, 0x10, 0x86a, 0x1, 0xf06e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3d, 0x2, 0x2, 0xaa, 0x28, 0x47, 0xff, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) 47.125816266s ago: executing program 1 (id=1431): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000600)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000080)={0x0, 0xb, 0x2, {0x2, 0x21}}, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003a1000000a10318d478c631eb6ec0a4e56e013dad1c105fa3982fb4d22eb63b604294c9af6f7227ed71db1642be516436c7ac0de0fae3864285251ac44067ddb4caaa7e769eea4f5414191a12f8fb40db46f88b2217a096f3f8777c04301fc66a21de6b1eccfb78f747517f34ec434fad4ff210bfeda0225a36774617ac7cf54a2b83f06b22245a838eee02423be572c4087433284430e3a1b3c9bd049b956c58914a79f8"], &(0x7f0000000380)={0x0, 0x22, 0xc, {[@global, @global=@item_012={0x2, 0x1, 0x1, "4c8f"}, @global=@item_012={0x2, 0x1, 0x8, "8cb3"}, @main=@item_012={0x2, 0x0, 0xb, "af6d"}, @local=@item_012={0x0, 0x2, 0x8}, @local=@item_012={0x0, 0x2, 0x8}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x40, 0x1, 0x1, {0x22, 0x489}}}}, &(0x7f0000000340)={0x2c, &(0x7f0000000240)={0x20, 0x1, 0x33, "75032af907b506dd667c6052292957a74bb50eba6acbd1e307f2c2902d60ec61857de27bf1db46d2de24c5a1f24a13a1d839c8"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xa}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x23}, &(0x7f0000000440)={0x20, 0x1, 0xc8, "da22da186e5e10a92782b158469bbd8ca8b8aa0c5e87e06b361810e7075c7d446434185125880d40283a6a15bb539015e3624d8bc6211a66e4b97ac444f81456cbd4eb5e8ebf0e709fc3445d7b9ba4b798a122eabed5a89d22ddc29cb3cbf0762a40260350de2a17ec7cf254e80bcb7cef6f06e2aed8d5cc48923f0826b8bc5a68d0426fc020c3d785aab24610a0f661cf0a8c21273d70869eb654551ceab0e7d56bebcace1a994d0d067874485c738505add5fe0f133227d85d9942c24beec44bcd1c546620d024"}, &(0x7f0000000300)={0x20, 0x3, 0x1, 0x6}}) 44.392440594s ago: executing program 1 (id=1451): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x201, 0x18, 0x8b, 0x70, 0x40, 0x458, 0x7005, 0x8a7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x3, 0xa0, 0x5, [{{0x9, 0x4, 0x71, 0x9, 0x0, 0xd5, 0xb0, 0xec, 0xe2}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x1e, &(0x7f00000002c0)=@string={0x1e, 0x3, "7d3a77dc250e416e07909b3bee0c902e6474278f29fa07d4a085e249"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x440a}}]}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)={[{0x2b, 'pids'}]}, 0x6) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x6, &(0x7f00000000c0)={0x11, {{0x29, 0x0, 0x2000000, @empty, 0x3}}}, 0x88) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, 0x0) setpgid(0x0, r6) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x800, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480480001800a000100696e6e6572000000380002800800024000000084080003400000000708000440000000360800014000000000140005800c0001007061790700000000040002800900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) 42.691300463s ago: executing program 1 (id=1456): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x20) write$cgroup_int(r0, &(0x7f0000000000)=0xb00, 0x12) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d8000000100081", 0x7}], 0x1}, 0x20000880) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000b5f000/0x4000)=nil, 0x4000, 0x100000d, 0x2012, r2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x301400, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x20) (async) write$cgroup_int(r0, &(0x7f0000000000)=0xb00, 0x12) (async) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d8000000100081", 0x7}], 0x1}, 0x20000880) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) (async) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) mmap(&(0x7f0000b5f000/0x4000)=nil, 0x4000, 0x100000d, 0x2012, r2, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x301400, 0x0) (async) 27.572028135s ago: executing program 32 (id=1456): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x20) write$cgroup_int(r0, &(0x7f0000000000)=0xb00, 0x12) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d8000000100081", 0x7}], 0x1}, 0x20000880) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000b5f000/0x4000)=nil, 0x4000, 0x100000d, 0x2012, r2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x301400, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x20) (async) write$cgroup_int(r0, &(0x7f0000000000)=0xb00, 0x12) (async) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d8000000100081", 0x7}], 0x1}, 0x20000880) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) (async) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) mmap(&(0x7f0000b5f000/0x4000)=nil, 0x4000, 0x100000d, 0x2012, r2, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x301400, 0x0) (async) 4.574265039s ago: executing program 3 (id=1683): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x2}, @broadcast, @broadcast, @from_mac=@device_b, {0xe, 0x7}, @value=@ver_80211n={0x0, 0x7, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x200, @random, 0x9050, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x80}, @void, @val={0x6, 0x2, 0x3ed}, @val={0x2d, 0x1a, {0x20, 0x1, 0x4, 0x0, {0xfffffffffffffffd, 0x1, 0x0, 0x10, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x1, 0x1, 0x5}}, @void, @void, [{0xdd, 0x9f, "a685df8355843223130accf6575cac3ae5eeb289e86925ed809edae3f7fce67e992f56762b633eaae93ec7b96225e0fd1871eeb7cba07510a6fc0c12f2c73f7fa0d12f0e64c6d31e7025d603cba7f523df653334179f5cc2dd57ebe0462fe3b9841e7da6a6942fd0cade27d67016588792c37ac60937f0c177190cee1b7c0b135c1a88e3615d5da063b4aad85670176703527f9086bd0a7f7d4dc334891d75"}]}, 0xf4) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r3, 0x1) flock(r3, 0x2) close(0x3) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) 4.572247364s ago: executing program 4 (id=1685): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x42}}}}}, 0x20}}, 0xc020) recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/17, 0x11}, {&(0x7f0000000ac0)=""/4096, 0x1000}], 0x2}, 0x40) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x400, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=bind:7', @ANYRESDEC=0x0]) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r3, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000) 4.135892896s ago: executing program 4 (id=1688): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="66b9800000c00f326635000400000f30660f3800cfd8ecf80fa3920000f30fa7e8360f7475000f1c4ee60f01c8b8ee000f00d0", 0x33}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x2}) 3.937007055s ago: executing program 4 (id=1690): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000380)="3d95", 0x2}], 0x1, 0xbf26, 0x7d) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'bridge_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x7e000, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) close(0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x9b3, 0x1c200) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r8, 0xc00464c9, &(0x7f0000000140)={r9}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r7, 0xc00464c9, &(0x7f0000000300)={r9}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000003b58b38f91654eab", @ANYRES16=r5, @ANYBLOB="f1e92bbd7000fbdbdf251200000008000300", @ANYRES32=r6, @ANYBLOB="0800a400030000000a000600ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x4048010) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000a7c02511f5b4540c2b7167f220113bd07c88e152115cacc32abe329ab6ff3a9e0086a64c501eebb92b838b51b83e5dfc4d1bfbc025d271343b9883a5a557a91413ad3d9fd4c31eea3de1050863205c6f2eb866031cb71ca9876e436b5ba6b5871b5580d68d25b4274b703d4cbd83de0e2066d97daa2702336158e4b70b8e54b1de8259def37c118b6bfc0ff3b9c795e981738cba4c100f4387cfdc", @ANYBLOB="52eaadaff42a467fd69fbd47c065f927e57aa0f9b97335b31885e259142339680f8525f299b433e77bece2b1f4dd6385ebcce3651bcd9f4d6992a18f504385288f59f1ed5da36ab311e563d75661dc88ec1182a6b2caebced309240425fc310074b4b7fa2e00b732c29f323e482aee72ea6c7d37e9b237", @ANYBLOB="010000000d0000000000010000170000000001410000001c866200080000000000000000006574683a73797aff070000657230f005a749ed63f4f675215f81cf1450570aeb871309bed7a76567a72451b863339baae05779"], 0x38}}, 0x404c804) writev(r4, &(0x7f0000000540)=[{&(0x7f00000006c0)="89e7ee2c78dad9b4b473fec988ca8ae7493b591ca5adce1610829251c06ba93fbf6c6fd1fbe33562468f37fed2df8394daddca8bb5350418b7375cad08dc9f78590c48acbb56aca1e158f5341f8d82703a8f53ff03915550d2171318ce868ecb91025baad8ed60b1caab6f416b8abb7751c44155915c484e1b89236e738c2189c5fc46d2e3f860cb202dac6aca88c0f2d704d6697fa04f407de287a4063399001f2b130f8c3805f0d81b19f534debd7096f53adc1ea0a30f45784e4b1981399ae083a339b17f00d8f3a8f4e135bb5206913023342dc4ed6f2e53a430847855ae0bc857d1e3fbbb54eaf52752f2755ee9ae020a4c661895a8946c352e0758ad382472b9a6891f018ddd29dd16a59d68919fcf56993cb0554e0634783a21ae10ee7280b04ab7c387605c68f4dd15673edb18ceab8d7ea86ca8b70d9693426574ba3abb294379f50434cadf1daf9158ece749e5fe10db4f", 0x156}, {&(0x7f0000000680)='\x00'/11, 0xb}], 0x2) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x208000, 0x0) 3.399846359s ago: executing program 4 (id=1692): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000e00)={0x58, 0x13, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x4, 0xbc}, @typed={0x9, 0x12c, 0x0, 0x0, @str='[#/+\x00'}, @nested={0x4, 0x4f}, @nested={0x34, 0x34, 0x0, 0x1, [@generic="bfddd412b905810d93a8a7ebf5dcef1ebdf639ff47407fee5da27a98c81beba5a811b985146e5e6d0a1fbb3295f77b47"]}]}, 0x58}], 0x1, 0x0, 0x0, 0x8800}, 0x8880) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") (async) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 3.213415263s ago: executing program 3 (id=1693): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x93) 3.038905602s ago: executing program 3 (id=1695): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000500)={0x0, 0x7, 0x2, 'r\\'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x4803, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x18, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000801) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002c0000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x40041}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000180)={0x20, 0x10, 0x45, {0x45, 0xc, "6769eac943a3c854a01c82467e590e0326568c56f17873a8441eb2b7d5a3d99de800688d32223736b6318202d67a2349a6e02aed2e9d44f16a60da74ce7ac6a0ae26c1"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}, &(0x7f0000000200)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0xa, '0'}, @main=@item_012={0x2, 0x0, 0xb, '#t'}, @global=@item_012={0x1, 0x1, 0x9, 'A'}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x6, 0x1, {0x22, 0xf5e}}}}, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x40, 0xb, 0xd3, "df1db48a2d2403be708dd6e3efdefac5d2ddc5add5f9ff4dcb67ac1b25e3cdb38f5e43ee77f4e6fcb78d951840bdeb1ce174352cdf96123af17c0d54b7528f8a4c1273c684bc92901982e16f040548d818be02e6715ccb668867189a1691170b22b9d245b020925e993cc942f9add2172d748aa5a28d00cbaab349ea35addd91d0c0173a2838f868ba9aa1aa0cda90723f8ebf31ba37fa977b1e7183dcfa05118137eec25deb9e897b2e310beff78acbdb7d676580929087cd44d72eeacc0d8f6cad6835512823a5580cdda3a0815ad97c2638"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000540)={0x20, 0x1, 0xc9, "f2702e32ef4676693d068c87e08b3857f7c42aa3da9885e9c609f6d5e3898f70bd41f888022da58a77351f0d3deb9b9d26e0b163d57e971570b3f867b571074b19bbdab041406d4b2c499ea997dadc6c934112a1a2ca386bd5a77ab21291581e55ef90771b6f3c007c3a840a310a9fc149157c072bc3bcd08de70333f006baf620588f133d939492d9bab775dfa91b30adbd8397d1a1eb5f091bb9fd72a9eca3b1ed52b9e0bbde541b059c39f6548b4e42b51a54f1055c92a531585339234e56160caa5a41c63749a7"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x9}}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.323818631s ago: executing program 3 (id=1699): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="78030000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r3], 0x378}}, 0x0) 2.276339668s ago: executing program 2 (id=1701): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x2002) syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x1, 0x0, &(0x7f0000000080)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000000), 0x4) r3 = syz_io_uring_setup(0x5d02, &(0x7f0000000000)={0x0, 0x6f3, 0x80, 0x1, 0x51}, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x500, &(0x7f0000000080)={0x0, 0x0, 0xb2, 0x0, 0x4, 0x0, r3}, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r5}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac00400020208000c000300010004000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) 2.147648413s ago: executing program 3 (id=1702): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000200)={0x2, @long}, 0x14) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0xc0384707, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000200)={0x30, r2, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) connect$802154_dgram(r0, &(0x7f0000000200)={0x2, @long}, 0x14) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) (async) ioctl$TCSETS(r3, 0xc0384707, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000200)={0x30, r2, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) (async) 2.055771454s ago: executing program 3 (id=1703): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000080)={0x8, 0x3, 0x7f, 0x3, 0x2}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x80, 0x9, 0x8002, 0x4, 0x3}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100090a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x200c405a) setsockopt$sock_int(r3, 0x29, 0x8, 0x0, 0x0) syz_usb_connect(0x6, 0x35, &(0x7f0000000000)=ANY=[@ANYRES32=r4], 0x0) 1.939670972s ago: executing program 4 (id=1704): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) r0 = socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x82200, 0x0) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) socket$inet6(0xa, 0x5, 0x0) socket(0x10, 0x803, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) socket$alg(0x26, 0x5, 0x0) (async) r1 = creat(&(0x7f0000002180)='./file0\x00', 0x2) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) (async) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x1, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2, 0x400000000000003, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0xc8}}, 0x0) (async) r3 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, &(0x7f00000001c0)={0x2c, &(0x7f00000002c0)={0x40, 0x21, 0xc4, {0xc4, 0x10, "d487a491c07e0e30061be0c40624347fec47f681cb54786363814194f9e3df31960d3f0bbfeb7c9403e77b5dbd3800bc03634151ca9c5dbf1143c0de1e4920fd9621c45ce6e170f2901157f2ec7715322d03673bd5928832adb5ee276200d7beabad03e475e1d9f821761629714676a8a3df71c0cc67bd229f78d0c19a809cb36a4ec075ce0dcd9e1e737c0676a37cf0fc11b11b9152ae16e98f82f3f549e88fc649a12cbce35dc45ca7f6636306597894f33feaaa83c48fd9be70b7b5e7607eed91"}}, &(0x7f0000000a40)={0x0, 0x3, 0xc1, @string={0xc1, 0x3, "aff84a1ee06204164b088778ad2e022676a1e6ca102654c88bad2688fa1277f99a2426a7772d2931ce46f63bcbdc8d22c3236a0801a04d264167e8891067b2de5986d4b4e13657b93fe3be2c62a254045e7d94b523365b974aa96959604557eda4da0c3a64be59162f49c526d24f172d3098ce4234584077584acef1dbf218b831a024ecab3ec153fc13a969fba88c24e814a17c6c15f40226b04664c9e045a80ccdf3153f3181d91ed4a4b65edfa211cc8a45b37f5816c478593b73e59c6a"}}, &(0x7f0000000080)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x98, 0x7f, 0x9, "fbff250a", "7040cf77"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x0, 0xe1, 0x6, 0x3, 0x1}}}, &(0x7f0000000980)={0x84, &(0x7f0000000500)={0x20, 0x14, 0x8e, "fe9c54588281f07eac4f6ba108ceb38a9eeabeffba421ff7db44c802c7b4e9116aec5ce912959e41f3f3ef2f4c6cefc441de56b5f51336d206509d5e1eb8072e2267bc67fbc960aad2f715091470758114c1e065cf4d4ee82a552eb3eb08eed29314c9ef4704a5d6982e34976cb0a8baf582976c433e0b3b4c3141a420bdf2e6765f2081d8cceae3e3464d3789e4"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000400)={0x20, 0x0, 0x4}, &(0x7f00000005c0)={0x20, 0x0, 0x8, {0x100, 0x40, [0x0]}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0xd6}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x6c}, &(0x7f0000000680)={0x40, 0xb, 0x2, "6ad8"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000700)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000740)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000780)={0x40, 0x19, 0x2, "a1de"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000008c0)={0x40, 0x1c, 0x1}, &(0x7f0000000900)={0x40, 0x1e, 0x1}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x34}}) (async) syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r3, 0x0, &(0x7f0000000440)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "f89e"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="00040300000020"], 0x0, 0x0}) 1.771859464s ago: executing program 4 (id=1705): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r1}, 0x8) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000086d040ec2000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x44, 0x5, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20008010) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0xa}, @main=@item_4={0x3, 0x0, 0xa, "0fcc8741"}, @global=@item_012={0x0, 0x1, 0x3}]}}, 0x0}, 0x0) 1.581966622s ago: executing program 2 (id=1706): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x4, 0x0, 0xf7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xfffffffffffffd5e}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0x4, 0x4}, {0x6, 0x24, 0x1a, 0xc, 0x14}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xe, 0x9f, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xa, 0xb, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xb, 0x3, 0x7}}}}}}}]}}, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) (async) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x4, r4}, 0x10) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r1, 0x4, 0x6d, &(0x7f00000002c0)="f41751695a74cb3ad735eaa6b4d5e3cabe22f14595f932da131064f8182de01cef20d97d116558d609f654c7c038bb0cbbe1dd3629d3ed5d68e0f894cc4b90268b08d10a80c377768de4faefde20dcae1637c264024e2e31c8f170ee45b3ffc1bde4dcc84a2f116665a358ee61") syz_usb_disconnect(r1) (async) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x0, 0x0, 0x83, 0xec}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000540)={0x24, &(0x7f0000000340)={0x20, 0x5, 0x9d, {0x9d, 0x11, "7c68332241416c8f20a0fa76331b60cd1eeafd36dd0a61b3d900fa4d44d1c22fd3ab2507ad6f2fa9f4a555fec5f88401982d1d4f4e7048eddcc1dce5c8dcd350512554884164f23d567c5660583df32e0cafa10761ab8ebe968182f0d54c3925f2f7ff24229f93327fd3d2ca33e65cf8ffa92e3b379f94fb1d2a6de4de9ae0314dcf20505254f5564887be8ee613699f2fffa68cbd68e4d837de1c"}}, &(0x7f0000000400)={0x0, 0x3, 0x42, @string={0x42, 0x3, "53787723447331d5a21c0047c01175d7236f64a5691883ea215e1384c80a51673e8bad997b4c6117546a780b41ffc764d6382962be5107798ac49f710718f7ff"}}, &(0x7f00000004c0)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x4, "3209fa07"}, @global=@item_4={0x3, 0x1, 0x5, "27d7e84f"}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4dd8, 0xfb, 0x1, {0x22, 0x65d}}}}, &(0x7f0000000740)={0x2c, &(0x7f0000000580)={0x60, 0xd, 0x3, "108e3b"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000680)={0x20, 0x1, 0x53, "09fd31312a8c3ce5a15c9d0ab0b48389c78ac002dcc3251acdd46e6e18011cfc6cca50ace8407c6609114d865c4db58a926817cc18752444c7d676278ae1179cf7e49e690c6c8190847f5080970215ed8a4a97"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0xd}}) (async) syz_usb_control_io$uac1(r5, 0x0, 0x0) (async) accept4(r0, 0x0, 0x0, 0x0) (async) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x101000) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0x1) (async) close(0x3) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$char_usb(0xc, 0xb4, 0x6) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, &(0x7f0000000040)=0x8) syz_usb_connect(0x5, 0x2b5, &(0x7f0000000780)={{0x12, 0x1, 0x310, 0x86, 0x6a, 0x5, 0x20, 0x19d2, 0x1088, 0xdc1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2a3, 0x3, 0x9, 0x2, 0xb0, 0x9, [{{0x9, 0x4, 0xdc, 0x7f, 0x8, 0xff, 0xff, 0xff, 0x80, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "ca8586c7"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x2, 0x0, 0x4}, [@acm={0x4, 0x24, 0x2, 0xb}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x8}]}], [{{0x9, 0x5, 0xd, 0x10, 0x400, 0x80, 0x7f, 0x7, [@generic={0x3a, 0x24, "bbce9f5e08a9df9b40a28200f6afaf85913c9c674184c7490e9a5107482b91be018e8a8db65b9ddba5f7efecdd2397b98a0b424de3646291"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x400, 0x4, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x6}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x40, 0x5, 0xc}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x8, 0x6, 0x1}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0x0, 0xb, 0xa6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x3}]}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0x9, 0x54, 0x2}}, {{0x9, 0x5, 0xe, 0x2, 0x400, 0x0, 0x2, 0x9, [@generic={0x8f, 0x7, "3adc097ec5c014f3819a8be4e58e04ce7e2d4454e019668f9361b43c1ff9e5fbb3d5c8ca289d3a1311fb7f45509f9408737e0ef09e7610765bac7e537469b77c6f6a0d23162d160e0144c7e9557a10fb59402c13f2d36cee98d29579c2bf2321055cd45b33239f8a2dcd5334b4a2ca0221581073d1a262255291114639278a8187ba9790447d84ecbb746dac35"}, @generic={0x6a, 0x22, "e66e2c4f8efa0e49acd62f0968d6dd51390d2c8f96c6187c4e3f568bba0c6e9a387f693fc7105250429abdbd22d10637327c538124abe074126e110fe6921c43eac821b34655647d0cc7df7f51f36f76582217c278a602acb62544bde6d82b8cbf04310a31fbe7ba"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x87, 0x4, 0x1}}]}}, {{0x9, 0x4, 0x71, 0x7, 0x5, 0xf6, 0xca, 0x24, 0x6, [@uac_as], [{{0x9, 0x5, 0xc, 0xc, 0x0, 0x5, 0x3, 0xc5}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0x1, 0x2, 0x5}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0x40, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x9a}]}}, {{0x9, 0x5, 0x0, 0x8, 0x400, 0x10, 0x9, 0x80, [@generic={0x27, 0x21, "f5e233cceb99d12e5a920a1e4c413a90e483eb4a5287324015557ee109fc481c34c87faf7e"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xf9, 0x3}]}}, {{0x9, 0x5, 0xc, 0x3, 0x200, 0xfb, 0x6, 0x2, [@generic={0x59, 0x7, "80219e930052657d18d0be442bdf285cf7a4a41cd3758c3ba7223dd4e81a49ce44dcd601520808e608db8fbec3c816bac6d1196b6a131ce3fd9ec887a9edd3bc443b6054b1aed174d843f28f970e6878ab31b29095d9db"}]}}]}}, {{0x9, 0x4, 0x5e, 0x9, 0x1, 0xac, 0xe5, 0xc2, 0x3, [@uac_as], [{{0x9, 0x5, 0x0, 0x1, 0x400, 0xfb, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x4, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0xfff}]}}]}}]}}]}}, &(0x7f0000000b40)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x300, 0xfa, 0x9, 0x1, 0x20, 0xc8}, 0x3a, &(0x7f0000000a80)=ANY=[@ANYBLOB="050f3a000503100b14100a082201000000000999003f0000f000000010100a0121670e0000f0d50fc00000000b100108a800076a03000703100b"], 0x1, [{0x7b, &(0x7f0000000ac0)=@string={0x7b, 0x3, "81a43b529079c30b5339fd6ffe9671d7598e37913134c0e0507f3eda6c533864052e5da567707a880792c493b008967dd69fd0b697423baa6f128def4f6fae3a74fb01bd714dd5ecdff76fe455d5a653cd8178410ce7c921b3597fa3e8015047cfbba1a657be416fe984a83f8dc41cd9c8eb1c7ad7c224f50a"}}]}) request_key(&(0x7f0000000040)='big_key\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000080)='\x8e\x00\x9e\xbb\x1e\x1av\xb7 H\x0e\\\xcd\xe2\x82\x00\x00\x00\x00\t<\xe5\xf5\xedA\xa7\nT\xdd\xd1{\xff\xcb\xdb\xb1\xfc\xf4\xbc\xc3\x83\xdd31\xc2s\xcb\xbd\xcc\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x14\x185\xa6- \xe6uK\xe1D\xa9\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\x06\x02\t\x17o\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\xfc\xe8\x1a\xe9\x9es\x00\xb7R\xd24\xeb\xb5\xc2\xd8?\xdaD\x00\x01dA\xa52\xb6\xb9\xab\xa0\xe8\x19\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@', 0xffffffffffffffff) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000500)={0x2020}, 0x2020) 1.395754923s ago: executing program 0 (id=1708): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000002c0)={0x4, "421ae3543785259649154c631fb18e6a2ba2b1000000000000000000000007ee"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000002c0)={0x4, "421ae3543785259649154c631fb18e6a2ba2b1000000000000000000000007ee"}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r3 = dup(r1) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)="93", 0x1}], 0x1}}], 0x1, 0x40) (async) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)="93", 0x1}], 0x1}}], 0x1, 0x40) shutdown(r1, 0x1) shutdown(r3, 0x1) (async) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x7fffffff, 0x7, 0x5b34, 0x4, 0x20, 0x1ff, 0x9}, 0x9c) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x3, "99bdb1b0c7251b080600f0230a74bd856e3c10db57c3f7484d9ed4190dbc00f3"}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) dup(r4) (async) dup(r4) 1.380690721s ago: executing program 2 (id=1709): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) (async) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2100, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000002600)=0x5, 0x2) (async, rerun: 64) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x7040, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000003d000900000000000000000001000000040000001c0001"], 0x3c}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x44088) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}}, 0x84) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (rerun: 64) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000691000/0x1000)=nil, 0x1000}, 0x1}) (async) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) 1.270733755s ago: executing program 2 (id=1710): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b086d, [{{0x9, 0x2, 0xfffffffffffffec2}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="200c010000f2a23b1cbc"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000b80)={0x2c, &(0x7f0000000940)={0x40, 0x1, 0x3f, {0x3f, 0x3f, "6cd0c6c77bec1b6c903a75a102d13e49148969dfc7c81cc9f1d2303848b602ed6b0f729e6cd07264200b9d64eeeaf7b963d7fd338034894d60f8f106e0"}}, &(0x7f0000000840)={0x0, 0x3, 0x33, @string={0x33, 0x3, "172c7890bac23bca1c4da23850e6804cd85840860c4a727bf5c42ec0ca01961ab42b5df4c386d529db7e9a969ddc99bb1a"}}, &(0x7f00000009c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000ac0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0xb, 0x8, "804f3ba6", "5562a1a6"}}, &(0x7f0000000b40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0xdb, 0x6, 0xf7, 0x6, 0x401}}}, &(0x7f0000001080)={0x84, &(0x7f0000000bc0)={0x0, 0x1, 0xb1, "ed78377e028960d3ecaef5e6bb46f3f27e2b9e71070f73cab28785ba8828cd93e81470be1cef24a76e0b84800cb88bc420ab3f15daac55dc9e7c5e4eff620e8f340c02c1f6884f3f56400f5c4e6ad1b8e88867de50b2990f4e07666deb74689f1329311449cd1027fdbfef5128ae9b68ff99f228b25126f91b1217771c3d3411f6bc05c907da7418e926163c990fba7fb1b6949d01bb213e81fa48d6a411cae2e2e8fa6e641f6377fd9ab076d6e54106f8"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0xfe}, &(0x7f0000000d00)={0x20, 0x0, 0x4}, &(0x7f0000000d40)={0x20, 0x0, 0x8, {0x80, 0x20, [0x0]}}, &(0x7f0000000d80)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000e00)={0x40, 0x9, 0x1, 0xc5}, &(0x7f0000000e40)={0x40, 0xb, 0x2, "3b9c"}, &(0x7f0000000e80)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000ec0)={0x40, 0x13, 0x6, @random="6ba7f0f04eb7"}, &(0x7f0000000f00)={0x40, 0x17, 0x6, @local}, &(0x7f0000000f40)={0x40, 0x19, 0x2, 'cI'}, &(0x7f0000000f80)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000000fc0)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000001000)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001040)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000080)={0x0, 0x6, 0xf8, {0xf8, 0x4, "289527ab69a51eb6a414b27e6aea8732f1ae03a38acd8b8e022e2bd75db30e9fbc6442ea417e505f723c78846a382aa14281492fecd0ca0d5956163dfc644095fc91b05446a7b7b4dcda8410aeb8800ed62350d397286bab46a69933352276db0901643f124b838b2a08fa17218fb859f8bc926eb37db76a1706a9f047892c3baafd65b7ca7c2bfd9680ac3aeb1cba76abbb4860e424d49a65eb39e8856f4b4c83bccab4a1489c4daf67f2be8d6f7a70afe4433b9746f73efbaaca928f527a84e8cec26eda60e5a8eb5399ab64f75df63817f3c938202ed02345949dbd279af491818f01940d25187e8fddb080945c64958e1312d780"}}, &(0x7f0000000180)={0x0, 0x3, 0x5, @string={0x5, 0x3, "e4275b"}}, &(0x7f00000001c0)={0x0, 0xf, 0x30, {0x5, 0xf, 0x30, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "2bd6f5a90d3b7f86b59e278636243325"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0x9, 0x9}, @ssp_cap={0x10, 0x10, 0xa, 0x10, 0x1, 0xffff, 0x0, 0x9, [0x3f00]}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x60, 0xd, 0x7, "d3940c5e", "81e241ee"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x80, 0xff, 0x6, 0x21, 0xe, 0xd559}}}, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x0, 0x10, 0x26, "1a0f32606f2a0ae1d15fbb3484d32f1534d2ae503e821e37d0f75f76f54ed69983347f2208a7"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x400, 0x8}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x1}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0xeb}, &(0x7f0000000500)={0x40, 0xb, 0x2, "3482"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0xfffa}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @random="d840a9cd4620"}, &(0x7f0000000640)={0x40, 0x19, 0x2, 'zb'}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000100)=""/1, 0x1}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x20, 0x16, 0x2, "2ba5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.207777998s ago: executing program 0 (id=1711): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="78030000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r3], 0x378}}, 0x0) 1.080785552s ago: executing program 0 (id=1712): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="179d92526b7fbff36a986b632ac00203fe77c8e32010097267f65e1dbca2ae4aa725f25aa6d8ee6f954dfb1ade84", 0x2e, 0x90, &(0x7f0000000100)={0xa, 0x4e22, 0xffff7fff, @local, 0x1}, 0x1c) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xd) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) setpriority(0x1, r1, 0x9) syz_usb_control_io$hid(r0, 0x0, 0x0) 427.644147ms ago: executing program 0 (id=1713): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000180)="4f2ef2e1dd05fe80000000008e1b0000000f23d00f21f835000000010f23f836362e6726af440f20c0350e000000440f22c0b805000000b900980000b805000000b96d0000000f01d9b96b0b0000b81c900000ba000000000f3065470f01c4410f79d226450f01cb", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 327.889866ms ago: executing program 2 (id=1714): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x20, 0xb, 0x54, "fa6e686a46763856918c01aaf67b15c58262320a3ae6edd6b420875103ccd1a998e71a7b2d268cba1ece8343814a546754425919184ad3efd74c4a93e6c6fd993594113d18ace4628190ec8db0d7f9e42f7c701e"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x5}, 0x0, 0x0, &(0x7f00000002c0)}) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x45, &(0x7f0000000140)=0x8000000, 0x4) (async) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) (async) ioctl$TCFLSH(r3, 0x540b, 0x2) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000280)={0x5}) (async, rerun: 64) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x48a82, 0x0) (rerun: 64) write$sysctl(r4, &(0x7f0000000100)='0\x00', 0x2) 259.1695ms ago: executing program 2 (id=1715): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000600)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000080)={0x0, 0xb, 0x2, {0x2, 0x21}}, 0x0, &(0x7f0000000380), &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x40, 0x1, 0x1, {0x22, 0x489}}}}, &(0x7f0000000340)={0x2c, &(0x7f0000000240)={0x20, 0x1, 0x1a, "75032af907b506dd667c6052292957a74bb50eba6acbd1e307f2"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xa}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x23}, &(0x7f0000000440)={0x20, 0x1, 0xc8, "da22da186e5e10a92782b158469bbd8ca8b8aa0c5e87e06b361810e7075c7d446434185125880d40283a6a15bb539015e3624d8bc6211a66e4b97ac444f81456cbd4eb5e8ebf0e709fc3445d7b9ba4b798a122eabed5a89d22ddc29cb3cbf0762a40260350de2a17ec7cf254e80bcb7cef6f06e2aed8d5cc48923f0826b8bc5a68d0426fc020c3d785aab24610a0f661cf0a8c21273d70869eb654551ceab0e7d56bebcace1a994d0d067874485c738505add5fe0f133227d85d9942c24beec44bcd1c546620d024"}, &(0x7f0000000300)={0x20, 0x3, 0x1, 0x6}}) 170.499918ms ago: executing program 0 (id=1716): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x108}], 0x1, &(0x7f00000000c0)={r1, r2+10000000}, &(0x7f0000000100)={[0x2]}, 0x8) clock_settime(0x2, &(0x7f0000000140)={0x77359400}) r3 = syz_io_uring_complete(0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r3, 0x5521) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000180)) (async) r4 = geteuid() quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, r4, &(0x7f0000000280)={0x9, 0x9, 0x1}) (async) getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80000001, 0xa}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}}, 0x80c1) (async) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) clock_settime(0x0, &(0x7f00000004c0)={r6, r7+10000000}) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000500)={[0x8]}, &(0x7f0000000540), &(0x7f0000000600)={r8, r9+60000000}, 0x8) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000640)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) socket(0x26, 0x800, 0xe) sendmsg$NFT_BATCH(r3, &(0x7f0000000a80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x248, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xfb, 0x6, "5d60210e2bba27575a96b899db43b5240164c66bf2c086c10cf8cc09c266e10ee140c94b85577ae57cc55303a3598dcd121c62b7b73a169b116cbf9d23f8ef3d1c62749ba9ba9c4f0e1218db595a4d081b935c677bc3efdc075a56289f6bccf83603cd52dbee1260b0accc0b99b9a8111bd6c9141a595b1aff3cd7cdcd29685f8a05f4342097c343e31f9ebe5374dc28336d22115c426be868714c19f1d1ca6e70f2e0fa37ea29989756469cd84e18b4b25ff5cf8921b8ddc2226e733ff18d0ed92d390363276e65cef2e0d829d76726d1ff300f404fedaa24216aa7d6be3f46e877964a75ac85c8a3dc6390a8d9f1a7b3afb1cd90036c"}, @NFTA_TABLE_USERDATA={0x102, 0x6, "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"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0xdc, 0x9, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_EXPRESSIONS={0xc8, 0x12, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}]}}}, {0x38, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x36c}, 0x1, 0x0, 0x0, 0xc089}, 0x40000) inotify_add_watch(r3, &(0x7f0000000ac0)='./file0\x00', 0x144) (async) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000d80)={&(0x7f0000000b00), 0xc, &(0x7f0000000d40)={&(0x7f0000000b40)={0x1d8, 0xa, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'bridge0\x00'}}]}, @IPSET_ATTR_ADT={0x7c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7fff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x2}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x94}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x94, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_virt_wifi\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x81}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}}]}, @IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_COMMENT={0xf, 0x1a, '.-)[-!}.-{\x00'}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x16db}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20000000}, 0xc8c5) socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r10, 0x541b, &(0x7f0000000dc0)) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), r3) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000e80)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r11, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x4c, r12, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r13}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x20000804) (async, rerun: 32) syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f0000000fc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (rerun: 32) tkill(0xffffffffffffffff, 0x6) 0s ago: executing program 0 (id=1717): r0 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x7, 0x2) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x14) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x14) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000b40)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{}, {}, {}, {}, {0x4000}]}}) kernel console output (not intermixed with test programs): T5926] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 377.956170][ T5926] usb 2-1: USB disconnect, device number 104 [ 377.978201][ T5926] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 378.174945][ T9760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.183899][ T9760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.214494][ T5968] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 378.280798][ T9762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.290354][ T9762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.394364][ T5968] usb 3-1: Using ep0 maxpacket: 8 [ 378.402510][ T5968] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 378.410880][ T5968] usb 3-1: config 0 has no interface number 0 [ 378.417229][ T5968] usb 3-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 378.430362][ T5968] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 378.441715][ T5968] usb 3-1: config 0 interface 200 has no altsetting 0 [ 378.451373][ T5968] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 378.460643][ T5968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.469378][ T5968] usb 3-1: Product: syz [ 378.473666][ T5968] usb 3-1: Manufacturer: syz [ 378.479345][ T5968] usb 3-1: SerialNumber: syz [ 378.489955][ T5968] usb 3-1: config 0 descriptor?? [ 378.570826][ T9765] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1128'. [ 378.726364][ T9758] syzkaller1: entered promiscuous mode [ 378.733330][ T9758] syzkaller1: entered allmulticast mode [ 378.861054][ T5968] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input30 [ 378.884416][ T983] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 378.884427][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 378.885910][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 378.899579][ T5968] usb 3-1: USB disconnect, device number 127 [ 378.906468][ C1] usb 3-1: hanwang_irq - usb_submit_urb failed with result -19 [ 379.086208][ T983] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 379.095540][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.111098][ T983] usb 2-1: config 0 descriptor?? [ 379.295324][ T9775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.305203][ T9775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.674366][ T5926] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 379.824435][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 379.835969][ T5926] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.846922][ T5926] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 379.865493][ T5926] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 379.876129][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 379.885140][ T5926] usb 3-1: SerialNumber: syz [ 379.919294][ T5926] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 380.257742][ T5906] usb 3-1: USB disconnect, device number 2 [ 380.329189][ T9787] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1137'. [ 380.479357][ T983] usb 2-1: Cannot set autoneg [ 380.487407][ T983] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 380.494466][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 380.494489][ T30] audit: type=1326 audit(1758852382.324:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9790 comm="syz.0.1138" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55b798eec9 code=0x0 [ 380.537158][ T983] usb 2-1: USB disconnect, device number 105 [ 381.173954][ T983] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 381.329922][ T983] usb 3-1: Using ep0 maxpacket: 16 [ 381.351199][ T983] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 381.370602][ T983] usb 3-1: config 0 has no interface number 0 [ 381.385049][ T983] usb 3-1: config 0 interface 107 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 255 [ 381.404336][ T9809] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.408112][ T983] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 381.411559][ T9809] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.426569][ T983] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 381.435703][ T983] usb 3-1: Product: syz [ 381.441072][ T983] usb 3-1: Manufacturer: syz [ 381.446363][ T983] usb 3-1: SerialNumber: syz [ 381.465719][ T5906] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 381.485140][ T983] usb 3-1: config 0 descriptor?? [ 381.494130][ T9800] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 381.604890][ T9817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.622858][ T9817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.663984][ T5906] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 381.686427][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.707010][ T5906] usb 2-1: Product: syz [ 381.716954][ T983] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 381.733529][ T5906] usb 2-1: Manufacturer: syz [ 381.739977][ T5906] usb 2-1: SerialNumber: syz [ 381.747221][ T983] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 381.761377][ T9819] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1146'. [ 381.781980][ T983] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 381.802908][ T983] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 381.815904][ T983] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 381.831172][ T983] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 381.860819][ T983] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 381.881412][ T983] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 381.922818][ T983] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 381.936087][ T983] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 381.956356][ T983] usb 3-1: USB disconnect, device number 3 [ 382.023647][ T983] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 382.071351][ T983] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 382.112614][ T983] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 382.135366][ T983] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 382.148260][ T983] keyspan 3-1:0.107: device disconnected [ 382.257607][ T9827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.303402][ T9827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.396842][ T9827] syzkaller1: entered promiscuous mode [ 382.402679][ T9827] syzkaller1: entered allmulticast mode [ 382.666459][ T9842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.675281][ T5968] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 382.680723][ T9842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.765289][ T9842] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 382.772327][ T9842] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 382.786667][ T9842] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 382.793290][ T9842] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 382.836993][ T5968] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 382.847607][ T5968] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 382.861912][ T5968] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 382.876601][ T5968] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 382.893060][ T5968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.902010][ T5968] usb 3-1: Product: syz [ 382.906681][ T5968] usb 3-1: Manufacturer: syz [ 382.911366][ T5968] usb 3-1: SerialNumber: syz [ 382.921275][ T5968] usb 3-1: config 0 descriptor?? [ 382.952660][ T9831] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 382.961520][ T9831] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 382.973287][ T5968] usb 3-1: ucan: probing device on interface #0 [ 383.175526][ T9831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.184819][ T9831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.201115][ T5968] usb 3-1: ucan: could not read protocol version, ret=-71 [ 383.208961][ T5968] usb 3-1: ucan: probe failed; try to update the device firmware [ 383.230354][ T9845] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1154'. [ 383.252595][ T5968] usb 3-1: USB disconnect, device number 4 [ 383.412471][ T9849] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1155'. [ 383.422109][ T9831] netlink: 'syz.2.1151': attribute type 12 has an invalid length. [ 383.430445][ T9831] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1151'. [ 383.521401][ T9851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.530543][ T9851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.542243][ T9851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.552895][ T9851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.996823][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.082929][ T9857] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1160'. [ 384.233508][ T9865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.262136][ T9865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.311507][ T9868] 9pnet: Unknown protocol version 9 [ 384.318519][ T9855] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1159'. [ 384.337609][ T9868] overlay: Unknown parameter 'obj_user' [ 384.441340][ T9870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.456582][ T9870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.473134][ T9870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.482352][ T9870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.598700][ T5906] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 384.613022][ T5906] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 384.630097][ T5906] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -EPROTO [ 384.642731][ T5906] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 384.653482][ T5906] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 384.663919][ T5906] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 384.677002][ T5906] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 384.696069][ T5906] usb 2-1: USB disconnect, device number 106 [ 384.784358][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 384.864478][ T5875] Bluetooth: hci2: command 0x0406 tx timeout [ 384.870765][ T52] Bluetooth: hci1: command 0x0405 tx timeout [ 384.911486][ T9873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.920758][ T9873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.108128][ T9878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.129675][ T9878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.514329][ T983] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 385.529254][ T9890] netlink: 'syz.3.1171': attribute type 27 has an invalid length. [ 385.541720][ T9890] lo: entered promiscuous mode [ 385.547224][ T9890] lo: entered allmulticast mode [ 385.554010][ T9890] tunl0: entered promiscuous mode [ 385.559822][ T9890] tunl0: entered allmulticast mode [ 385.566807][ T9890] gre0: entered promiscuous mode [ 385.571905][ T9890] gre0: entered allmulticast mode [ 385.579555][ T9890] gretap0: entered promiscuous mode [ 385.586402][ T9890] gretap0: entered allmulticast mode [ 385.596380][ T9890] erspan0: entered promiscuous mode [ 385.601756][ T9890] erspan0: entered allmulticast mode [ 385.613123][ T9891] /dev/sg0: Can't lookup blockdev [ 385.621032][ T9890] ip_vti0: entered promiscuous mode [ 385.629642][ T9890] ip_vti0: entered allmulticast mode [ 385.636575][ T9890] ip6_vti0: entered promiscuous mode [ 385.642241][ T9890] ip6_vti0: entered allmulticast mode [ 385.649754][ T9890] sit0: entered promiscuous mode [ 385.655216][ T9890] sit0: entered allmulticast mode [ 385.662237][ T9890] ip6tnl0: entered promiscuous mode [ 385.671106][ T9890] ip6tnl0: entered allmulticast mode [ 385.678320][ T9890] ip6gre0: entered promiscuous mode [ 385.683981][ T9890] ip6gre0: entered allmulticast mode [ 385.690023][ T983] usb 2-1: Using ep0 maxpacket: 8 [ 385.700714][ T983] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.711594][ T983] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 385.723275][ T9890] syz_tun: entered promiscuous mode [ 385.744506][ T9890] syz_tun: entered allmulticast mode [ 385.758872][ T9890] ip6gretap0: entered promiscuous mode [ 385.766876][ T983] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 385.783245][ T9890] ip6gretap0: entered allmulticast mode [ 385.790764][ T9890] bridge0: entered promiscuous mode [ 385.798465][ T983] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 385.813261][ T9893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.823636][ T9890] bridge0: entered allmulticast mode [ 385.831912][ T983] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 385.852418][ T9890] vcan0: entered promiscuous mode [ 385.859373][ T9893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.866988][ T9890] vcan0: entered allmulticast mode [ 385.873224][ T9890] bond0: entered promiscuous mode [ 385.878315][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.889028][ T983] hub 2-1:1.0: bad descriptor, ignoring hub [ 385.898155][ T983] hub 2-1:1.0: probe with driver hub failed with error -5 [ 385.910757][ T983] cdc_wdm 2-1:1.0: skipping garbage [ 385.914872][ T9890] bond_slave_0: entered promiscuous mode [ 385.918049][ T983] cdc_wdm 2-1:1.0: skipping garbage [ 385.925873][ T9890] bond_slave_1: entered promiscuous mode [ 385.933536][ T9890] bond0: entered allmulticast mode [ 385.950467][ T983] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 385.956802][ T983] cdc_wdm 2-1:1.0: Unknown control protocol [ 385.962838][ T9890] bond_slave_0: entered allmulticast mode [ 385.974063][ T9890] bond_slave_1: entered allmulticast mode [ 385.982990][ T9890] team0: entered promiscuous mode [ 385.989569][ T9890] team_slave_0: entered promiscuous mode [ 386.015012][ T9890] team_slave_1: entered promiscuous mode [ 386.026611][ T9890] geneve0: entered promiscuous mode [ 386.032475][ T9890] team0: entered allmulticast mode [ 386.038103][ T9890] team_slave_0: entered allmulticast mode [ 386.044143][ T9890] team_slave_1: entered allmulticast mode [ 386.050157][ T9890] geneve0: entered allmulticast mode [ 386.060785][ T9890] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.068618][ T9890] batman_adv: batadv0: Interface activated: team0 [ 386.078279][ T9890] nlmon0: entered promiscuous mode [ 386.084494][ T9890] nlmon0: entered allmulticast mode [ 386.108123][ T9890] caif0: entered promiscuous mode [ 386.113407][ T9890] caif0: entered allmulticast mode [ 386.118762][ T9890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 386.194545][ T983] usb 2-1: USB disconnect, device number 107 [ 386.285329][ T9898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.302573][ T9898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.864349][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 386.893506][ T9922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1177'. [ 386.974516][ T24] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 387.148498][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 387.189204][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 387.209631][ T24] usb 2-1: config 6 has an invalid interface number: 106 but max is 0 [ 387.219707][ T24] usb 2-1: config 6 has no interface number 0 [ 387.226595][ T24] usb 2-1: config 6 interface 106 has no altsetting 0 [ 387.240031][ T24] usb 2-1: New USB device found, idVendor=0bda, idProduct=0139, bcdDevice=f8.29 [ 387.250431][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.259021][ T24] usb 2-1: Product: syz [ 387.263835][ T24] usb 2-1: Manufacturer: syz [ 387.269473][ T24] usb 2-1: SerialNumber: syz [ 387.278164][ T983] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 387.364061][ T9938] netlink: 'syz.3.1187': attribute type 1 has an invalid length. [ 387.413069][ T9941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.428742][ T9941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.444269][ T983] usb 3-1: Using ep0 maxpacket: 8 [ 387.454031][ T983] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 387.480788][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.505151][ T9946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.525215][ T983] usb 3-1: Product: syz [ 387.525748][ T24] rtsx_usb 2-1:6.106: probe with driver rtsx_usb failed with error -22 [ 387.529562][ T983] usb 3-1: Manufacturer: syz [ 387.529582][ T983] usb 3-1: SerialNumber: syz [ 387.549212][ T9946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.566283][ T983] usb 3-1: config 0 descriptor?? [ 387.579288][ T24] usb 2-1: USB disconnect, device number 108 [ 387.705799][ T9950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.717548][ T9950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.780331][ T983] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 387.997786][ T9921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.007021][ T9921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.022259][ T983] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 388.118427][ T9953] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1192'. [ 388.129907][ T9953] x_tables: ip_tables: TPROXY.0 target: invalid size 16 (kernel) != (user) 24 [ 388.202119][ T9955] trusted_key: encrypted_key: insufficient parameters specified [ 388.271911][ T9958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.288381][ T9958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.504571][ T983] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 388.547061][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1198'. [ 388.590383][ T9966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.599723][ T9966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.667058][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.677088][ T983] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 388.690394][ T983] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 388.699956][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.712545][ T983] usb 2-1: config 0 descriptor?? [ 389.140287][ T983] kovaplus 0003:1E7D:2D50.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 389.265918][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1199'. [ 389.284811][ T9969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.296435][ T9969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.331114][ T983] kovaplus 0003:1E7D:2D50.001F: couldn't init struct kovaplus_device [ 389.352446][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1199'. [ 389.353361][ T9971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.371097][ T983] kovaplus 0003:1E7D:2D50.001F: couldn't install mouse [ 389.377186][ T9973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.391769][ T9973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.392153][ T983] kovaplus 0003:1E7D:2D50.001F: probe with driver kovaplus failed with error -71 [ 389.401492][ T9971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.435714][ T983] usb 2-1: USB disconnect, device number 109 [ 389.852152][ T983] usb 3-1: USB disconnect, device number 5 [ 390.002969][ T9982] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 390.055920][ T9975] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 390.112077][ T9985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.127358][ T9985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.928725][ T9999] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1207'. [ 390.954380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 391.004906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 391.225225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 391.236895][T10003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.273968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 391.288075][ T5926] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 391.315198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 391.325378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 391.333835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 391.343024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 391.345399][T10003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.352578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 391.368558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 391.560811][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 391.572387][ T5926] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.603550][ T5926] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 391.628236][ T5926] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 391.638208][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 391.653885][ T5926] usb 2-1: SerialNumber: syz [ 391.691509][ T5926] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 391.869255][T10005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.912741][T10005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.007001][ T5906] usb 2-1: USB disconnect, device number 110 [ 392.056220][T10008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.068511][T10008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.613861][T10019] netlink: 'syz.0.1218': attribute type 21 has an invalid length. [ 392.672313][T10022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1217'. [ 392.674241][T10019] netlink: 'syz.0.1218': attribute type 5 has an invalid length. [ 392.693847][ T5926] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 392.723781][T10019] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1218'. [ 392.753170][ T5906] kernel read not supported for file [fscontext] (pid: 5906 comm: kworker/0:4) [ 392.777924][T10024] netlink: 'syz.3.1219': attribute type 1 has an invalid length. [ 392.795959][T10024] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1219'. [ 392.816955][T10024] netlink: 'syz.3.1219': attribute type 1 has an invalid length. [ 392.828526][T10024] netlink: 'syz.3.1219': attribute type 2 has an invalid length. [ 392.874438][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 392.891913][ T5926] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 392.919718][ T5926] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 392.954767][ T5926] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 392.972655][ T5926] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 392.987772][ T5926] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 392.998775][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.095225][T10033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.108292][T10033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.225271][ T5926] usb 3-1: GET_CAPABILITIES returned 0 [ 393.231587][ T5926] usbtmc 3-1:16.0: can't read capabilities [ 393.294356][ T983] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 393.470579][ T983] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 393.482933][ T983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.491420][ T983] usb 2-1: Product: syz [ 393.512376][T10038] netlink: 'syz.2.1215': attribute type 1 has an invalid length. [ 393.520378][ T983] usb 2-1: Manufacturer: syz [ 393.526305][T10038] netlink: 10916 bytes leftover after parsing attributes in process `syz.2.1215'. [ 393.535722][ T983] usb 2-1: SerialNumber: syz [ 393.539441][T10039] fuse: Unknown parameter 'zs' [ 393.543710][ T983] usb 2-1: config 0 descriptor?? [ 393.551580][T10038] nbd: couldn't find device at index 53 [ 393.578695][ T5968] usb 3-1: USB disconnect, device number 6 [ 393.950360][T10041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.959548][T10041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.405500][ T5968] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 394.586072][ T5968] usb 3-1: Using ep0 maxpacket: 16 [ 394.596836][ T5968] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.630664][ T5968] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 394.656036][ T5968] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 394.668715][ T5968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 394.688559][ T5968] usb 3-1: SerialNumber: syz [ 394.720952][ T5968] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 395.086851][ T5968] usb 3-1: USB disconnect, device number 7 [ 395.883101][T10054] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 395.908665][T10054] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 396.333254][T10066] netlink: 'syz.3.1230': attribute type 1 has an invalid length. [ 396.558871][T10069] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 396.582152][T10069] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 396.695095][T10072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.720224][T10072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.794424][T10074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.812597][T10074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.326425][T10079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.346773][T10079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.794387][ T5906] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 397.965234][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 397.972780][ T5906] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.995144][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 398.024544][ T5906] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 398.079327][ T5906] usb 3-1: New USB device found, idVendor=fb29, idProduct=0005, bcdDevice=14.a8 [ 398.120372][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.136339][ T5906] usb 3-1: Product: syz [ 398.140625][ T5906] usb 3-1: Manufacturer: syz [ 398.171798][ T5906] usb 3-1: SerialNumber: syz [ 398.201024][ T5906] usb 3-1: config 0 descriptor?? [ 398.421774][T10096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.440815][T10096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.485178][T10096] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 398.486259][T10101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.516437][ T9] usb 3-1: USB disconnect, device number 8 [ 398.551366][T10101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.944314][ T9] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 399.001611][ T983] mos7840 2-1:0.0: required endpoints missing [ 399.029255][ T983] usb 2-1: USB disconnect, device number 111 [ 399.128496][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 399.158377][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.194421][ T9] usb 3-1: Product: syz [ 399.198655][ T9] usb 3-1: Manufacturer: syz [ 399.211096][ T9] usb 3-1: SerialNumber: syz [ 399.237570][ T9] usb 3-1: config 0 descriptor?? [ 399.278946][T10107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.308047][T10107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.308408][T10108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.335690][T10107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.339237][T10108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.372743][T10107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.383370][T10105] sctp: [Deprecated]: syz.3.1247 (pid 10105) Use of struct sctp_assoc_value in delayed_ack socket option. [ 399.383370][T10105] Use struct sctp_sack_info instead [ 399.449132][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 399.579929][T10108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.596520][T10108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.028592][T10111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.046967][T10111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.354469][ T983] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 400.491344][T10118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.501123][T10118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.874217][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 400.906187][T10124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.924753][ T9] usb 3-1: USB disconnect, device number 9 [ 400.945000][T10124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.108667][ T30] audit: type=1326 audit(1758852402.944:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10123 comm="syz.3.1252" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72c5b8eec9 code=0x0 [ 401.684285][ T5906] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 401.774351][ T983] usb 2-1: device descriptor read/64, error -71 [ 401.844275][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 401.856683][ T5906] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 401.865971][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.875926][ T5906] usb 3-1: Product: syz [ 401.880245][ T5906] usb 3-1: Manufacturer: syz [ 401.885875][ T5906] usb 3-1: SerialNumber: syz [ 401.897940][ T5906] usb 3-1: config 0 descriptor?? [ 402.014342][ T983] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 402.154307][ T983] usb 2-1: device descriptor read/64, error -71 [ 402.264624][ T983] usb usb2-port1: attempt power cycle [ 402.311353][ T5906] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 402.327810][ T5906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 402.356230][ T5906] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 402.374324][ T5906] usb 3-1: media controller created [ 402.426180][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 402.494375][T10142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.504091][T10142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.513486][ T5906] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 402.526716][T10142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.537355][ T5906] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 402.547205][T10142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.624851][ T983] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 402.676266][ T983] usb 2-1: device descriptor read/8, error -71 [ 402.721191][ T9] usb 3-1: USB disconnect, device number 10 [ 402.747557][T10148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.770272][T10148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.771364][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 402.924284][ T983] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 402.946891][ T983] usb 2-1: device descriptor read/8, error -71 [ 403.056925][ T983] usb usb2-port1: unable to enumerate USB device [ 403.411788][T10152] kvm: emulating exchange as write [ 404.074336][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 404.224750][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 404.247284][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.264487][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 404.306055][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 404.324654][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 404.344546][ T9] usb 3-1: SerialNumber: syz [ 404.355545][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 404.438339][T10159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.458336][T10159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.501984][ T30] audit: type=1326 audit(1758852406.334:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10162 comm="syz.1.1265" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f5c58eec9 code=0x0 [ 404.558938][T10164] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1265'. [ 404.627567][ T9] usb 3-1: USB disconnect, device number 11 [ 405.309460][T10173] fuse: Unknown parameter '00000000000000000003' [ 405.452717][T10180] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 405.933003][T10189] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1273'. [ 406.020100][T10189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.029135][T10189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.050060][T10193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.062626][T10193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.185954][T10191] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 406.200618][T10191] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 406.428410][T10199] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.1276'. [ 406.824291][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 407.019948][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.054274][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 407.086360][ T24] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 407.096606][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 407.106785][ T24] usb 3-1: SerialNumber: syz [ 407.113545][T10221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.123827][T10221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.345347][ T24] usb 3-1: 0:2 : does not exist [ 407.368373][ T24] usb 3-1: USB disconnect, device number 12 [ 407.407099][ T9825] udevd[9825]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 408.705893][T10242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.722041][T10242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.272151][T10258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.288217][T10258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.344438][ T24] usb 2-1: new low-speed USB device number 116 using dummy_hcd [ 409.507978][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.524276][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 409.554390][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 409.572656][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.599736][ T24] usb 2-1: config 0 descriptor?? [ 409.722827][T10262] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1296'. [ 409.824826][ T24] usb 2-1: string descriptor 0 read error: -71 [ 409.849841][ T24] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input32 [ 409.909671][ T5222] bcm5974 2-1:0.0: could not read from device [ 409.929213][ T5222] bcm5974 2-1:0.0: could not read from device [ 409.932268][ T24] usb 2-1: USB disconnect, device number 116 [ 410.022235][ T983] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 410.136063][T10266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.145966][ T5875] Bluetooth: hci1: command 0x0405 tx timeout [ 410.159154][T10266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.185993][ T983] usb 3-1: config 0 has an invalid interface number: 154 but max is 0 [ 410.195100][ T983] usb 3-1: config 0 has no interface number 0 [ 410.201242][ T983] usb 3-1: too many endpoints for config 0 interface 154 altsetting 236: 84, using maximum allowed: 30 [ 410.212618][ T983] usb 3-1: config 0 interface 154 altsetting 236 has 0 endpoint descriptors, different from the interface descriptor's value: 84 [ 410.226337][ T983] usb 3-1: config 0 interface 154 has no altsetting 0 [ 410.233265][ T983] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 410.243026][ T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.255263][ T983] usb 3-1: config 0 descriptor?? [ 410.579469][T10275] netlink: 3230 bytes leftover after parsing attributes in process `syz.2.1296'. [ 410.617299][T10275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.646647][T10275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.839994][T10288] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1305'. [ 410.874537][ T5906] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 411.091587][T10294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.111046][T10295] binder: 10291:10295 ioctl 9408 0 returned -22 [ 411.137137][T10294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.182160][ T5906] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 411.187687][T10294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.193580][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.213104][T10294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.219392][ T5906] usb 2-1: config 0 descriptor?? [ 411.418734][T10304] netlink: 'syz.0.1311': attribute type 10 has an invalid length. [ 411.445912][ T5906] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 411.451868][T10304] batman_adv: batadv0: Adding interface: team0 [ 411.463365][T10304] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.493489][T10304] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 411.530735][T10306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.547129][T10306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.647893][T10280] qrtr: Invalid version 43 [ 411.661189][ T5906] [drm:udl_init] *ERROR* Selecting channel failed [ 411.705451][ T5906] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 411.722516][ T5906] [drm] Initialized udl on minor 2 [ 411.737640][ T5906] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 411.748729][T10307] loop6: detected capacity change from 0 to 7 [ 411.757915][T10307] Dev loop6: unable to read RDB block 7 [ 411.763593][T10307] loop6: unable to read partition table [ 411.769857][ T5906] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 411.790162][ T5906] usb 2-1: USB disconnect, device number 117 [ 411.796806][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 411.808489][T10307] loop6: partition table beyond EOD, truncated [ 411.815734][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 411.842117][T10307] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 411.970763][T10308] syz_tun: entered allmulticast mode [ 411.978337][T10308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.990687][T10308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.364975][T10316] sctp: [Deprecated]: syz.1.1313 (pid 10316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 412.364975][T10316] Use struct sctp_sack_info instead [ 412.397903][T10316] syzkaller1: entered promiscuous mode [ 412.403841][T10316] syzkaller1: entered allmulticast mode [ 412.757639][ T983] usb 3-1: string descriptor 0 read error: -71 [ 412.797449][ T983] asix 3-1:0.154 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 412.831671][ T983] asix 3-1:0.154: probe with driver asix failed with error -71 [ 412.861609][ T983] usb 3-1: USB disconnect, device number 13 [ 412.994516][ T24] usb 2-1: new low-speed USB device number 118 using dummy_hcd [ 413.174376][ T983] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 413.187307][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 413.204281][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 413.215014][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 413.227673][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 413.240586][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 413.263116][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 413.271863][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 413.303176][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 413.324377][ T983] usb 3-1: Using ep0 maxpacket: 8 [ 413.333871][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 413.338934][ T983] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.347686][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 413.371895][ T983] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 413.373037][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 413.381728][ T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.394362][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 413.410641][T10325] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 413.417901][T10325] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 413.424338][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 413.430388][ T983] usb 3-1: config 0 descriptor?? [ 413.450032][ T983] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 413.460698][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 413.478034][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 413.494617][ T24] usb 2-1: string descriptor 0 read error: -22 [ 413.501720][ T24] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 413.511034][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.549783][ T24] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 413.838285][ T24] usb 2-1: USB disconnect, device number 118 [ 413.963299][T10333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1320'. [ 414.182909][T10337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.194838][T10337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.672247][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1315'. [ 414.719219][ T983] gspca_vc032x: reg_w err -71 [ 414.731161][ T983] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 414.742171][T10347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.765872][ T983] usb 3-1: USB disconnect, device number 14 [ 414.803025][T10347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.833003][T10347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.846270][T10347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.856512][T10354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.869964][T10354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.005499][T10360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.013086][T10360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.024566][ T938] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 415.036297][T10360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.044546][T10360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.054135][T10360] batman_adv: batadv0: Removing interface: team0 [ 415.184480][ T938] usb 2-1: Using ep0 maxpacket: 16 [ 415.198555][ T938] usb 2-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59 [ 415.214408][ T938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.222599][ T938] usb 2-1: Product: syz [ 415.234246][ T938] usb 2-1: Manufacturer: syz [ 415.238913][ T938] usb 2-1: SerialNumber: syz [ 415.248018][ T938] usb 2-1: config 0 descriptor?? [ 415.276256][ T938] pwc: Logitech QuickCam 4000 Pro USB webcam detected. [ 415.488668][ T938] pwc: Failed to set LED on/off time (-71) [ 415.514508][ T938] pwc: send_video_command error -71 [ 415.519780][ T938] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 415.536673][ T938] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 415.553841][ T938] usb 2-1: USB disconnect, device number 119 [ 415.624411][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 415.806922][ T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 415.816330][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.829333][ T24] usb 3-1: config 0 descriptor?? [ 415.840601][ T24] cp210x 3-1:0.0: cp210x converter detected [ 416.039463][ T24] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 416.048025][ T24] cp210x 3-1:0.0: querying part number failed [ 416.069506][ T24] usb 3-1: cp210x converter now attached to ttyUSB0 [ 416.191386][T10375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.203441][T10375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.294382][ T938] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 416.443717][T10383] netlink: 'syz.3.1340': attribute type 2 has an invalid length. [ 416.452676][T10383] netlink: 'syz.3.1340': attribute type 8 has an invalid length. [ 416.460604][T10383] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1340'. [ 416.461295][ T938] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 416.481793][ T938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.490046][ T938] usb 2-1: Product: syz [ 416.494422][ T938] usb 2-1: Manufacturer: syz [ 416.499281][ T938] usb 2-1: SerialNumber: syz [ 416.507538][ T938] usb 2-1: config 0 descriptor?? [ 416.721226][ T938] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 417.358603][T10389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.366476][T10389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.378447][T10389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.386209][T10389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.397337][T10389] batman_adv: batadv0: Interface deactivated: team0 [ 417.404582][T10389] batman_adv: batadv0: Removing interface: team0 [ 417.812618][T10401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.830747][T10401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.055892][T10406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1345'. [ 418.065996][T10406] bridge_slave_1: left allmulticast mode [ 418.071925][T10406] bridge_slave_1: left promiscuous mode [ 418.078739][T10406] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.094367][T10406] bridge_slave_0: left allmulticast mode [ 418.100389][T10406] bridge_slave_0: left promiscuous mode [ 418.107052][T10406] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.138801][ T938] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 418.163998][ T938] usb 2-1: USB disconnect, device number 120 [ 418.239117][ T1343] Bluetooth: hci4: Frame reassembly failed (-84) [ 418.262437][T10412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.271163][T10413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.280721][T10413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.281413][T10412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.302700][T10412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.315335][T10413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.321548][T10412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.327426][T10413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.396287][ T938] usb 3-1: USB disconnect, device number 15 [ 418.411275][ T938] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 418.436145][ T938] cp210x 3-1:0.0: device disconnected [ 418.755179][ T938] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 418.884520][ T938] usb 3-1: device descriptor read/64, error -71 [ 418.919555][T10420] sctp: [Deprecated]: syz.0.1351 (pid 10420) Use of struct sctp_assoc_value in delayed_ack socket option. [ 418.919555][T10420] Use struct sctp_sack_info instead [ 418.944472][ T983] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 419.029470][T10425] vivid-000: disconnect [ 419.044924][T10425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.054125][T10425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.063790][T10424] vivid-000: reconnect [ 419.094973][ T983] usb 2-1: device descriptor read/64, error -71 [ 419.124345][ T938] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 419.254358][ T938] usb 3-1: device descriptor read/64, error -71 [ 419.335362][ T983] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 419.364695][ T938] usb usb3-port1: attempt power cycle [ 419.474336][ T983] usb 2-1: device descriptor read/64, error -71 [ 419.584748][ T983] usb usb2-port1: attempt power cycle [ 419.704458][ T938] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 419.727286][ T938] usb 3-1: device descriptor read/8, error -71 [ 419.924388][ T983] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 419.945123][ T983] usb 2-1: device descriptor read/8, error -71 [ 419.964364][ T938] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 419.985085][ T938] usb 3-1: device descriptor read/8, error -71 [ 420.095015][ T938] usb usb3-port1: unable to enumerate USB device [ 420.184370][ T983] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 420.205072][ T983] usb 2-1: device descriptor read/8, error -71 [ 420.304350][ T52] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 420.304384][ T5875] Bluetooth: hci4: command 0x1003 tx timeout [ 420.318874][ T983] usb usb2-port1: unable to enumerate USB device [ 421.553697][T10433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.557988][T10432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.571337][T10432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.579411][T10433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.592700][T10433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.601237][T10433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.114575][ T983] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 422.134310][ T43] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 422.162841][T10442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.174977][T10442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.276417][ T983] usb 2-1: config 119 has too many interfaces: 106, using maximum allowed: 32 [ 422.286690][ T983] usb 2-1: config 119 has an invalid descriptor of length 1, skipping remainder of the config [ 422.297204][ T983] usb 2-1: config 119 has 0 interfaces, different from the descriptor's value: 106 [ 422.304468][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 422.310076][ T983] usb 2-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 422.317053][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.322995][ T983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.333111][ T43] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 422.342451][ T983] usb 2-1: Product: syz [ 422.359478][ T983] usb 2-1: Manufacturer: syz [ 422.364944][ T983] usb 2-1: SerialNumber: syz [ 422.365178][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 422.380772][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 422.390004][ T43] usb 3-1: SerialNumber: syz [ 422.413578][ T43] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 422.426831][T10428] block nbd3: shutting down sockets [ 422.490524][T10444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.503604][T10444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.590170][T10446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.600584][T10446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.661927][ T43] usb 2-1: USB disconnect, device number 125 [ 422.723027][T10450] netlink: 'syz.1.1360': attribute type 1 has an invalid length. [ 422.735541][ T983] usb 3-1: USB disconnect, device number 20 [ 422.742767][T10450] netlink: 'syz.1.1360': attribute type 101 has an invalid length. [ 422.754046][T10450] netlink: 552 bytes leftover after parsing attributes in process `syz.1.1360'. [ 423.072062][T10461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.084128][T10461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.094772][ T43] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 423.274392][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 423.285756][ T43] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 423.297875][ T43] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 423.309023][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 423.319248][ T43] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 423.328630][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.336955][ T43] usb 2-1: Product: syz [ 423.341242][ T43] usb 2-1: Manufacturer: syz [ 423.346077][ T43] usb 2-1: SerialNumber: syz [ 423.355313][ T43] usb 2-1: config 0 descriptor?? [ 423.773775][ T983] usb 2-1: USB disconnect, device number 126 [ 424.365125][T10468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.372803][T10468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.383760][T10468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.392591][T10468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.497859][T10479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.508022][T10479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.529898][T10479] mkiss: ax0: crc mode is auto. [ 424.539815][T10479] comedi comedi0: dac02: I/O port conflict (0x4,8) [ 424.547536][T10479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1370'. [ 424.585047][ T983] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 424.744332][ T983] usb 3-1: Using ep0 maxpacket: 16 [ 424.755710][ T983] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 424.784273][ T983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 424.798350][ T983] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 424.814291][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.822344][ T983] usb 3-1: Product: syz [ 424.834219][ T983] usb 3-1: Manufacturer: syz [ 424.838925][ T983] usb 3-1: SerialNumber: syz [ 424.856161][ T983] usb 3-1: config 0 descriptor?? [ 424.868569][ T983] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 424.887343][ T983] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 425.124620][ T983] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 425.134333][ T983] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 425.144347][ T983] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 425.151447][ T983] em28xx 3-1:0.0: No AC97 audio processor [ 425.177769][ T983] usb 3-1: USB disconnect, device number 21 [ 425.185968][ T983] em28xx 3-1:0.0: Disconnecting em28xx [ 425.205260][ T983] em28xx 3-1:0.0: Freeing device [ 425.411047][T10490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.420497][T10490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.166186][T10494] netlink: 'syz.3.1376': attribute type 1 has an invalid length. [ 426.280083][T10498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.323716][T10498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.369546][T10498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.394704][T10498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.481803][T10498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.524825][T10498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.545247][T10498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.592660][T10498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.686647][T10506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.722623][T10506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.114277][ T9] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 427.305076][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 427.334308][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.352774][ T9] usb 2-1: Product: syz [ 427.382477][ T9] usb 2-1: Manufacturer: syz [ 427.399423][ T9] usb 2-1: SerialNumber: syz [ 427.435431][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 427.483655][ T9] r8152-cfgselector 2-1: config 0 descriptor?? [ 427.779787][T10519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.819155][T10520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.820099][T10519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.859568][T10520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.547639][T10526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.571446][T10526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.674337][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 428.834378][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 428.842274][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 428.854573][ T24] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 428.863824][ T24] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 428.873521][ T24] usb 3-1: Product: syz [ 428.878293][ T24] usb 3-1: Manufacturer: syz [ 428.883115][ T24] usb 3-1: SerialNumber: syz [ 429.112776][T10524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.122125][T10524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.131305][ T24] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 429.140065][ T24] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 429.148223][ T24] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 429.156310][ T24] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 429.228243][T10531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.239423][T10531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.271357][T10531] FAULT_INJECTION: forcing a failure. [ 429.271357][T10531] name failslab, interval 1, probability 0, space 0, times 0 [ 429.285218][T10531] CPU: 0 UID: 0 PID: 10531 Comm: syz.0.1388 Not tainted syzkaller #0 PREEMPT(full) [ 429.285246][T10531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 429.285264][T10531] Call Trace: [ 429.285272][T10531] [ 429.285282][T10531] dump_stack_lvl+0x189/0x250 [ 429.285318][T10531] ? __pfx____ratelimit+0x10/0x10 [ 429.285351][T10531] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.285382][T10531] ? __pfx__printk+0x10/0x10 [ 429.285416][T10531] ? __pfx___might_resched+0x10/0x10 [ 429.285440][T10531] ? fs_reclaim_acquire+0x7d/0x100 [ 429.285465][T10531] should_fail_ex+0x414/0x560 [ 429.285499][T10531] should_failslab+0xa8/0x100 [ 429.285521][T10531] __kmalloc_noprof+0xcb/0x7f0 [ 429.285550][T10531] ? tomoyo_encode+0x28b/0x550 [ 429.285580][T10531] tomoyo_encode+0x28b/0x550 [ 429.285611][T10531] tomoyo_realpath_from_path+0x58d/0x5d0 [ 429.285637][T10531] ? tomoyo_domain+0xd9/0x130 [ 429.285666][T10531] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 429.285691][T10531] tomoyo_path_number_perm+0x1e8/0x5a0 [ 429.285725][T10531] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 429.285800][T10531] ? __fget_files+0x2a/0x420 [ 429.285829][T10531] ? __fget_files+0x3a0/0x420 [ 429.285861][T10531] ? __fget_files+0x2a/0x420 [ 429.285881][T10531] security_file_ioctl+0xcb/0x2d0 [ 429.285913][T10531] __se_sys_ioctl+0x47/0x170 [ 429.285948][T10531] do_syscall_64+0xfa/0xfa0 [ 429.285967][T10531] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.285986][T10531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.286006][T10531] ? clear_bhb_loop+0x60/0xb0 [ 429.286029][T10531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.286053][T10531] RIP: 0033:0x7f55b798eec9 [ 429.286067][T10531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.286083][T10531] RSP: 002b:00007f55b8802038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.286106][T10531] RAX: ffffffffffffffda RBX: 00007f55b7be5fa0 RCX: 00007f55b798eec9 [ 429.286120][T10531] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 429.286133][T10531] RBP: 00007f55b8802090 R08: 0000000000000000 R09: 0000000000000000 [ 429.286145][T10531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.286157][T10531] R13: 00007f55b7be6038 R14: 00007f55b7be5fa0 R15: 00007ffccace80f8 [ 429.286191][T10531] [ 429.286336][T10531] ERROR: Out of memory at tomoyo_realpath_from_path. [ 429.423998][ T24] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 429.545271][ T24] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 429.560262][ T24] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 429.575354][ T24] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 429.591085][ T24] usb 3-1: USB disconnect, device number 22 [ 429.605127][ T24] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 429.619725][ T24] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 429.632242][ T24] visor 3-1:1.0: device disconnected [ 429.874372][ T938] r8152-cfgselector 2-1: USB disconnect, device number 127 [ 430.037278][T10537] Invalid ELF header magic: != ELF [ 430.552806][T10551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.564911][T10551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.232474][T10562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.244799][T10562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.435792][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 431.453905][T10572] Invalid ELF header magic: != ELF [ 431.460373][T10572] Invalid ELF header magic: != ELF [ 431.616621][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 431.641018][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 431.650974][ T9] usb 3-1: config 1 has an invalid interface number: 204 but max is 2 [ 431.662892][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 431.674502][ T9] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 431.696684][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 431.698298][T10580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.716951][ T9] usb 3-1: config 1 has no interface number 1 [ 431.723107][ T9] usb 3-1: too many endpoints for config 1 interface 204 altsetting 7: 37, using maximum allowed: 30 [ 431.735126][T10580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.747544][ T938] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 431.791906][ T9] usb 3-1: config 1 interface 204 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 431.806099][ T9] usb 3-1: config 1 interface 204 has no altsetting 0 [ 431.817010][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 431.829516][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.840366][ T9] usb 3-1: Product: syz [ 431.845040][ T9] usb 3-1: Manufacturer: syz [ 431.870119][ T9] usb 3-1: SerialNumber: syz [ 431.901460][T10584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.911190][T10584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.934315][ T938] usb 2-1: Using ep0 maxpacket: 16 [ 431.941923][ T938] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.952449][ T938] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 431.970605][ T938] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 431.980848][ T938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 431.995395][ T938] usb 2-1: SerialNumber: syz [ 432.012383][ T938] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 432.104061][ T9] usb 3-1: 0:2 : does not exist [ 432.113831][ T9] usb 3-1: unknown interface protocol 0x7f, assuming v1 [ 432.121770][ T9] usb 3-1: cannot find UAC_HEADER [ 432.137527][ T9] snd-usb-audio 3-1:1.204: probe with driver snd-usb-audio failed with error -22 [ 432.149432][ T9] usb 3-1: USB disconnect, device number 23 [ 432.190532][ T9825] udevd[9825]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 432.240910][T10574] FAULT_INJECTION: forcing a failure. [ 432.240910][T10574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.254603][T10574] CPU: 0 UID: 0 PID: 10574 Comm: syz.1.1401 Not tainted syzkaller #0 PREEMPT(full) [ 432.254630][T10574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 432.254643][T10574] Call Trace: [ 432.254651][T10574] [ 432.254659][T10574] dump_stack_lvl+0x189/0x250 [ 432.254696][T10574] ? __pfx____ratelimit+0x10/0x10 [ 432.254727][T10574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.254760][T10574] ? __pfx__printk+0x10/0x10 [ 432.254800][T10574] should_fail_ex+0x414/0x560 [ 432.254835][T10574] __kvm_read_guest_page+0x18d/0x240 [ 432.254860][T10574] kvm_fetch_guest_virt+0x12b/0x170 [ 432.254893][T10574] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 432.254920][T10574] __do_insn_fetch_bytes+0x2fc/0x6d0 [ 432.254951][T10574] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 432.254975][T10574] ? percpu_rwsem_wait+0x157/0x330 [ 432.255003][T10574] x86_decode_insn+0x31d/0x5470 [ 432.255058][T10574] ? __pfx_x86_decode_insn+0x10/0x10 [ 432.255084][T10574] ? is_bpf_text_address+0x26/0x2b0 [ 432.255124][T10574] ? __asan_memset+0x22/0x50 [ 432.255152][T10574] ? init_decode_cache+0x78/0x90 [ 432.255174][T10574] ? init_emulate_ctxt+0x4d6/0x660 [ 432.255207][T10574] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 432.255250][T10574] x86_emulate_instruction+0x61b/0x1f90 [ 432.255308][T10574] ? vmx_vcpu_run+0xe92/0x2b70 [ 432.255339][T10574] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 432.255370][T10574] ? __pfx_handle_mmio_page_fault+0x10/0x10 [ 432.255402][T10574] ? __pfx___kvm_io_bus_write+0x10/0x10 [ 432.255444][T10574] kvm_mmu_page_fault+0x91a/0xb70 [ 432.255484][T10574] vmx_handle_exit+0xd9e/0x18c0 [ 432.255526][T10574] ? vcpu_run+0x361b/0x7040 [ 432.255562][T10574] vcpu_run+0x43aa/0x7040 [ 432.255598][T10574] ? vcpu_run+0x361b/0x7040 [ 432.255681][T10574] ? __pfx_vcpu_run+0x10/0x10 [ 432.255702][T10574] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 432.255733][T10574] ? complete_emulated_mmio+0x18e/0x7a0 [ 432.255753][T10574] ? __asan_memcpy+0x40/0x70 [ 432.255780][T10574] ? complete_emulated_mmio+0x4d2/0x7a0 [ 432.255811][T10574] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 432.255840][T10574] ? __mutex_trylock_common+0x153/0x260 [ 432.255874][T10574] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 432.255897][T10574] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 432.255921][T10574] ? rcu_is_watching+0x15/0xb0 [ 432.255947][T10574] ? trace_contention_end+0x39/0x120 [ 432.255977][T10574] ? __mutex_lock+0x335/0x1350 [ 432.256008][T10574] ? kasan_quarantine_put+0xdd/0x220 [ 432.256037][T10574] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.256058][T10574] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 432.256080][T10574] ? __pfx___mutex_lock+0x10/0x10 [ 432.256100][T10574] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 432.256138][T10574] ? do_vfs_ioctl+0xbe8/0x1430 [ 432.256167][T10574] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 432.256201][T10574] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 432.256236][T10574] kvm_vcpu_ioctl+0x95c/0xe90 [ 432.256262][T10574] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 432.256305][T10574] ? __fget_files+0x2a/0x420 [ 432.256335][T10574] ? __fget_files+0x3a0/0x420 [ 432.256357][T10574] ? __fget_files+0x2a/0x420 [ 432.256385][T10574] ? bpf_lsm_file_ioctl+0x9/0x20 [ 432.256411][T10574] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 432.256430][T10574] __se_sys_ioctl+0xfc/0x170 [ 432.256463][T10574] do_syscall_64+0xfa/0xfa0 [ 432.256481][T10574] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.256501][T10574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.256552][T10574] ? clear_bhb_loop+0x60/0xb0 [ 432.256578][T10574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.256598][T10574] RIP: 0033:0x7f3f5c58eec9 [ 432.256617][T10574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.256634][T10574] RSP: 002b:00007f3f5d4da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 432.256655][T10574] RAX: ffffffffffffffda RBX: 00007f3f5c7e5fa0 RCX: 00007f3f5c58eec9 [ 432.256670][T10574] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 432.256682][T10574] RBP: 00007f3f5d4da090 R08: 0000000000000000 R09: 0000000000000000 [ 432.256694][T10574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.256706][T10574] R13: 00007f3f5c7e6038 R14: 00007f3f5c7e5fa0 R15: 00007ffd48e9d908 [ 432.256742][T10574] [ 432.783542][ T24] usb 2-1: USB disconnect, device number 2 [ 432.841048][T10590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.850149][T10590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.870505][T10591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.880622][T10591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.334680][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 433.449052][T10600] cgroup: subsys name conflicts with all [ 433.504484][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 433.515060][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.526455][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.537233][ T24] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 433.546688][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.561084][ T24] usb 3-1: config 0 descriptor?? [ 433.626506][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 433.781873][T10600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.792779][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 433.803819][T10600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.824040][ T9] usb 2-1: config 25 has an invalid interface number: 77 but max is 0 [ 433.834614][ T9] usb 2-1: config 25 has no interface number 0 [ 433.841088][ T9] usb 2-1: config 25 interface 77 has no altsetting 0 [ 433.866592][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=f2.d1 [ 433.876810][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.885473][ T9] usb 2-1: Product: syz [ 433.890047][ T9] usb 2-1: Manufacturer: syz [ 433.897483][ T9] usb 2-1: SerialNumber: syz [ 434.073138][ T24] hid-picolcd 0003:04D8:F002.0020: No report with id 0xf3 found [ 434.081070][ T24] hid-picolcd 0003:04D8:F002.0020: No report with id 0xf4 found [ 434.126095][ T9] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 434.151319][ T9] gspca_sunplus: reg_w_riv err -71 [ 434.160106][ T9] sunplus 2-1:25.77: probe with driver sunplus failed with error -71 [ 434.185259][ T9] usb 2-1: USB disconnect, device number 3 [ 434.193956][T10593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.208552][T10593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.220974][T10613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.238370][T10613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.252054][T10613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.261664][T10613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.433288][T10615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.450005][T10615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.586567][T10620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.606119][T10620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.634652][T10623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.640832][ T9] usb 3-1: USB disconnect, device number 24 [ 434.692168][T10623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.081164][T10632] CIFS mount error: No usable UNC path provided in device string! [ 435.081164][T10632] [ 435.091478][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 435.104892][ T5926] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 435.114311][T10632] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 435.166264][T10631] syz.3.1421 (10631): drop_caches: 2 [ 435.261493][T10634] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 435.268082][T10634] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 435.274300][ T9] usb 3-1: device descriptor read/64, error -71 [ 435.280796][T10634] vhci_hcd vhci_hcd.0: Device attached [ 435.294627][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 435.302971][ T5926] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.316678][T10634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.328550][ T5926] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 435.342717][T10634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.355223][ T5926] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 435.359725][T10637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.373654][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 435.377264][T10637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.382697][ T5926] usb 2-1: SerialNumber: syz [ 435.398829][T10635] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 435.407182][T10639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.413108][ T1088] vhci_hcd: stop threads [ 435.423377][ T1088] vhci_hcd: release socket [ 435.427181][ T5926] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 435.433416][T10639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.444028][ T1088] vhci_hcd: disconnect device [ 435.464688][ T24] vhci_hcd: vhci_device speed not set [ 435.514350][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 435.645127][ T9] usb 3-1: device descriptor read/64, error -71 [ 435.662065][T10629] FAULT_INJECTION: forcing a failure. [ 435.662065][T10629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.675867][T10629] CPU: 0 UID: 0 PID: 10629 Comm: syz.1.1420 Not tainted syzkaller #0 PREEMPT(full) [ 435.675893][T10629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 435.675906][T10629] Call Trace: [ 435.675914][T10629] [ 435.675922][T10629] dump_stack_lvl+0x189/0x250 [ 435.675963][T10629] ? __pfx____ratelimit+0x10/0x10 [ 435.675992][T10629] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.676023][T10629] ? __pfx__printk+0x10/0x10 [ 435.676064][T10629] should_fail_ex+0x414/0x560 [ 435.676099][T10629] _copy_to_user+0x31/0xb0 [ 435.676125][T10629] simple_read_from_buffer+0xe1/0x170 [ 435.676154][T10629] proc_fail_nth_read+0x1b3/0x220 [ 435.676188][T10629] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 435.676235][T10629] ? rw_verify_area+0x2a6/0x4d0 [ 435.676253][T10629] ? __lock_acquire+0xab9/0xd20 [ 435.676273][T10629] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 435.676304][T10629] vfs_read+0x200/0xa30 [ 435.676324][T10629] ? fdget_pos+0x247/0x320 [ 435.676352][T10629] ? __pfx___mutex_lock+0x10/0x10 [ 435.676375][T10629] ? __pfx_vfs_read+0x10/0x10 [ 435.676396][T10629] ? __fget_files+0x2a/0x420 [ 435.676423][T10629] ? __fget_files+0x3a0/0x420 [ 435.676445][T10629] ? __fget_files+0x2a/0x420 [ 435.676478][T10629] ksys_read+0x145/0x250 [ 435.676497][T10629] ? __fget_files+0x2a/0x420 [ 435.676523][T10629] ? __pfx_ksys_read+0x10/0x10 [ 435.676547][T10629] ? do_syscall_64+0xbe/0xfa0 [ 435.676578][T10629] do_syscall_64+0xfa/0xfa0 [ 435.676599][T10629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.676615][T10629] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 435.676630][T10629] ? clear_bhb_loop+0x60/0xb0 [ 435.676649][T10629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.676671][T10629] RIP: 0033:0x7f3f5c58d8dc [ 435.676691][T10629] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 435.676709][T10629] RSP: 002b:00007f3f5d4da030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 435.676731][T10629] RAX: ffffffffffffffda RBX: 00007f3f5c7e5fa0 RCX: 00007f3f5c58d8dc [ 435.676746][T10629] RDX: 000000000000000f RSI: 00007f3f5d4da0a0 RDI: 0000000000000007 [ 435.676758][T10629] RBP: 00007f3f5d4da090 R08: 0000000000000000 R09: 0000000000000000 [ 435.676771][T10629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.676782][T10629] R13: 00007f3f5c7e6038 R14: 00007f3f5c7e5fa0 R15: 00007ffd48e9d908 [ 435.676811][T10629] [ 435.934719][ T9] usb usb3-port1: attempt power cycle [ 435.970797][ T983] usb 2-1: USB disconnect, device number 4 [ 436.182671][T10648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.213690][T10648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.271660][T10650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.282351][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 436.290732][T10650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.306552][ T9] usb 3-1: device descriptor read/8, error -71 [ 436.454451][ T43] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 436.544410][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 436.564929][ T9] usb 3-1: device descriptor read/8, error -71 [ 436.614287][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 436.621903][ T43] usb 2-1: config 1 has an invalid interface number: 61 but max is 0 [ 436.630464][ T43] usb 2-1: config 1 has no interface number 0 [ 436.636990][ T43] usb 2-1: config 1 interface 61 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 436.647346][ T43] usb 2-1: config 1 interface 61 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 436.657594][ T43] usb 2-1: config 1 interface 61 has no altsetting 0 [ 436.667891][ T43] usb 2-1: New USB device found, idVendor=086a, idProduct=0001, bcdDevice=f0.6e [ 436.675164][ T9] usb usb3-port1: unable to enumerate USB device [ 436.677223][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.692115][ T43] usb 2-1: Product: syz [ 436.696470][ T43] usb 2-1: Manufacturer: syz [ 436.701172][ T43] usb 2-1: SerialNumber: syz [ 436.712858][T10642] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 436.720946][T10642] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 436.980182][ T43] usb 2-1: USB disconnect, device number 5 [ 437.006447][T10659] sctp: [Deprecated]: syz.3.1430 (pid 10659) Use of int in max_burst socket option. [ 437.006447][T10659] Use struct sctp_assoc_value instead [ 437.008567][T10660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.036500][T10660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.054006][T10660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.068835][T10660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.070961][T10661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.087542][T10661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.097245][T10662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.109443][T10662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.670457][T10666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.690172][T10666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.744267][ T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 437.791072][T10668] fuse: Invalid rootmode [ 437.921910][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 437.931860][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.941354][ T9] usb 2-1: Product: syz [ 437.945774][T10670] syz.2.1434 (10670): attempted to duplicate a private mapping with mremap. This is not supported. [ 437.957037][ T9] usb 2-1: Manufacturer: syz [ 437.961844][ T9] usb 2-1: SerialNumber: syz [ 437.974447][ T9] usb 2-1: config 0 descriptor?? [ 438.118605][T10678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.141564][T10678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.168041][T10678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.168324][T10680] cgroup: Unknown subsys name 'appraise' [ 438.186770][T10678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.203520][T10680] CUSE: zero length info key specified [ 438.203660][T10678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.218937][T10678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.224295][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 438.237786][T10678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.260995][T10678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.283697][T10678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.296371][T10678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.375694][ T983] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 438.437841][T10684] vxfs: unable to read disk superblock at 1 [ 438.446246][T10684] vxfs: unable to read disk superblock at 8 [ 438.452451][T10684] vxfs: can't find superblock. [ 438.549789][ T983] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 438.566168][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.588064][ T983] usb 3-1: Product: syz [ 438.593999][ T983] usb 3-1: Manufacturer: syz [ 438.601093][ T983] usb 3-1: SerialNumber: syz [ 438.637288][ T983] usb 3-1: config 0 descriptor?? [ 438.679901][ T52] Bluetooth: hci4: urb ffff888031114400 submission failed (2) [ 438.875451][ T43] usb 3-1: USB disconnect, device number 29 [ 439.169321][T10701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.178561][T10701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.273389][T10706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.282909][T10706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.626776][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 439.646389][ T9] usb 2-1: USB disconnect, device number 6 [ 440.022455][T10718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.032888][T10718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.171870][T10723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.181775][T10723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.348759][T10727] comedi comedi0: No channels found! [ 440.585749][ T938] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 440.765062][ T938] usb 2-1: unable to get BOS descriptor or descriptor too short [ 440.777385][ T938] usb 2-1: not running at top speed; connect to a high speed hub [ 440.795802][ T938] usb 2-1: config 1 has an invalid interface number: 113 but max is 0 [ 440.814531][ T24] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 440.814543][ T938] usb 2-1: config 1 has no interface number 0 [ 440.814579][ T938] usb 2-1: config 1 interface 113 has no altsetting 0 [ 440.835668][T10731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.862617][T10731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.866859][ T938] usb 2-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice= 8.a7 [ 440.884377][ T938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.904422][ T938] usb 2-1: Product: syz [ 440.913705][ T938] usb 2-1: Manufacturer: 䐊 [ 440.923754][ T938] usb 2-1: SerialNumber: syz [ 440.932178][T10731] tipc: Enabled bearer , priority 10 [ 440.954326][ T24] usb 3-1: device descriptor read/64, error -71 [ 440.978784][T10731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.009606][T10731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.044040][T10731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.081522][T10731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.194362][ T24] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 441.337057][ T24] usb 3-1: device descriptor read/64, error -71 [ 441.394335][T10740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.420612][ T938] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 441.433314][ T938] gspca_sn9c2028: read1 error -71 [ 441.441763][T10740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.460382][ T938] gspca_sn9c2028: read1 error -71 [ 441.472820][ T938] gspca_sn9c2028: read1 error -71 [ 441.476064][ T24] usb usb3-port1: attempt power cycle [ 441.485967][ T938] sn9c2028 2-1:1.113: probe with driver sn9c2028 failed with error -71 [ 441.519208][ T938] usb 2-1: USB disconnect, device number 7 [ 441.550029][T10740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.587705][T10740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.834325][ T24] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 441.856997][ T24] usb 3-1: device descriptor read/8, error -71 [ 442.046748][ T43] tipc: Node number set to 2798525461 [ 442.119695][ T24] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 442.155492][ T24] usb 3-1: device descriptor read/8, error -71 [ 442.274899][ T24] usb usb3-port1: unable to enumerate USB device [ 442.457886][T10746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.472056][T10746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.719260][T10754] delete_channel: no stack [ 443.724059][T10754] delete_channel: no stack [ 444.014325][ T43] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 444.129274][T10763] fuse: Unknown parameter 'rootcontext' [ 444.139946][T10763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.149547][T10763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.194550][ T43] usb 3-1: device descriptor read/64, error -71 [ 445.309577][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1466'. [ 445.410155][T10777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1467'. [ 445.420463][T10777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1467'. [ 445.434442][ T43] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 445.437544][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.444437][T10777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1467'. [ 445.520369][T10779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.529578][T10779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.589718][ T43] usb 3-1: config 3 has an invalid interface number: 186 but max is 3 [ 445.599961][ T43] usb 3-1: config 3 has an invalid interface number: 220 but max is 3 [ 445.608993][ T43] usb 3-1: config 3 has an invalid interface number: 92 but max is 3 [ 445.617600][ T43] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 445.628107][ T43] usb 3-1: config 3 has 3 interfaces, different from the descriptor's value: 4 [ 445.638036][ T43] usb 3-1: config 3 has no interface number 0 [ 445.644478][ T43] usb 3-1: config 3 has no interface number 1 [ 445.650867][ T43] usb 3-1: config 3 has no interface number 2 [ 445.657201][ T43] usb 3-1: config 3 interface 220 altsetting 33 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 445.668712][ T43] usb 3-1: config 3 interface 220 altsetting 33 endpoint 0x5 has an invalid bInterval 20, changing to 8 [ 445.680022][ T43] usb 3-1: config 3 interface 220 altsetting 33 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 445.691246][ T43] usb 3-1: config 3 interface 220 altsetting 33 has an invalid descriptor for endpoint zero, skipping [ 445.703261][ T43] usb 3-1: config 3 interface 220 altsetting 33 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 445.716786][ T43] usb 3-1: config 3 interface 92 altsetting 98 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 445.730273][ T43] usb 3-1: config 3 interface 186 has no altsetting 0 [ 445.737330][ T43] usb 3-1: config 3 interface 220 has no altsetting 0 [ 445.744628][ T43] usb 3-1: config 3 interface 92 has no altsetting 0 [ 445.755398][ T43] usb 3-1: Dual-Role OTG device on HNP port [ 445.761787][ T43] usb 3-1: New USB device found, idVendor=2735, idProduct=100b, bcdDevice=6a.34 [ 445.771275][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.779510][ T43] usb 3-1: Product: ␊ [ 445.783855][ T43] usb 3-1: Manufacturer: 、 [ 445.788618][ T43] usb 3-1: SerialNumber: 䠧湯䐌嗧奂邹虞髏菓䴨祺믄⏸핿辠䤳诶瞊ᆴ牁ꆔ蕬ᨾ嵀杴窰ꁮ䲀ᡱᘠः诱賖잏૑樋람脗敳垩푵䢘爱㐂䋟ﾝ鳧肝砦㖇Ⅾ摏≗䉧削ﱽ稣ꨌ⇇픀嬘櫵㲋鵞츙嬂췡͂썖싔递뙆漦ഘ㊳逃즳Ᾱ겻圵定壟燈瀰ꅘ藐鬎ް乞⩗퀭➣咳ᇃ䞱쵉⥣⢆꤅ꈙ匔Ӄ峺魘㧋ﺉ㙏莩 [ 446.043969][ T43] usb-storage 3-1:3.186: USB Mass Storage device detected [ 446.069580][ T43] usb-storage 3-1:3.186: Quirks match for vid 2735 pid 100b: 100 [ 446.149381][ T43] usb-storage 3-1:3.220: USB Mass Storage device detected [ 446.173146][ T43] usb-storage 3-1:3.220: Quirks match for vid 2735 pid 100b: 100 [ 446.239218][ T43] usb-storage 3-1:3.92: USB Mass Storage device detected [ 446.251260][ T43] usb-storage 3-1:3.92: Quirks match for vid 2735 pid 100b: 100 [ 446.331495][ T43] usb 3-1: USB disconnect, device number 35 [ 446.342016][T10790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.361051][T10790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.051512][T10808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.069201][T10808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.092139][T10808] comedi comedi4: bad chanlist[0]=0x04020006 chan=6 range length=2 [ 447.167503][T10812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.177930][T10812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.204277][ T938] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 447.367061][ T938] usb 3-1: unable to get BOS descriptor or descriptor too short [ 447.376989][ T938] usb 3-1: not running at top speed; connect to a high speed hub [ 447.386989][ T938] usb 3-1: config 10 has an invalid interface number: 50 but max is 0 [ 447.395483][ T938] usb 3-1: config 10 has no interface number 0 [ 447.401748][ T938] usb 3-1: config 10 interface 50 has no altsetting 0 [ 447.412007][ T938] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=43.2d [ 447.421306][ T938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.429737][ T938] usb 3-1: Product: syz [ 447.433984][ T938] usb 3-1: Manufacturer: syz [ 447.438683][ T938] usb 3-1: SerialNumber: syz [ 447.889220][T10816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.904743][T10816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.411970][T10820] binder: 10819:10820 ioctl c0306201 2000000001c0 returned -22 [ 448.890786][T10830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.913770][T10830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.965936][T10832] netlink: 'syz.2.1486': attribute type 21 has an invalid length. [ 449.018614][T10832] netlink: 'syz.2.1486': attribute type 4 has an invalid length. [ 449.281490][T10839] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1488'. [ 449.402632][T10841] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1489'. [ 449.967379][T10853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.996206][T10853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.006122][T10855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.041148][T10856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.051719][T10855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.062727][T10856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.111217][T10855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.122514][T10855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.140168][T10856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.158869][T10859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.173134][T10856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.230251][T10859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.334280][ T5906] psmouse serio3: Failed to reset mouse on : -5 [ 450.641163][T10873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.652030][T10873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.665481][T10873] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 450.698228][T10873] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 450.735010][T10874] mkiss: ax0: crc mode is auto. [ 450.745935][T10873] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 450.754412][T10873] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 450.957292][ T938] usbserial_generic 3-1:10.50: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 450.969527][ T938] usbserial_generic 3-1:10.50: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 450.987453][ T938] usbserial_generic 3-1:10.50: device has no bulk endpoints [ 450.998315][ T938] usb 3-1: USB disconnect, device number 36 [ 451.630607][T10889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.640737][T10889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.921625][T10893] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 452.757638][T10904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.768939][T10904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.113566][T10907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.122217][T10908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.123845][T10907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.133469][T10908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.149878][T10908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.160317][T10908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.469178][T10910] netlink: 'syz.3.1512': attribute type 10 has an invalid length. [ 453.478196][T10910] syz_tun: left promiscuous mode [ 453.484653][T10910] syz_tun: left allmulticast mode [ 453.496224][T10910] syz_tun: entered promiscuous mode [ 453.501668][T10910] syz_tun: entered allmulticast mode [ 453.508180][T10910] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 453.629453][T10915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.638588][T10915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.384362][ T5906] misc userio: Buffer overflowed, userio client isn't keeping up [ 454.531509][T10927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.551712][T10927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.743893][T10939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.753361][T10939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.911037][T10947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.923406][T10947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.250392][ T5906] input: PS/2 Generic Mouse as /devices/serio3/input/input33 [ 455.353771][T10949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.366797][T10949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.464766][ T5906] psmouse serio3: Failed to enable mouse on [ 455.499213][T10956] input: syz0 as /devices/virtual/input/input35 [ 455.527824][T10957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.543700][T10957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.370178][T10975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.383849][T10975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.739950][T10977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.777939][T10977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.938741][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 457.950388][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 457.963019][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 457.983043][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 457.992499][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 459.465298][T11005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.515210][T11005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.791447][T11015] binder: 11014:11015 ioctl c0306201 0 returned -14 [ 459.901464][T11015] bond0: Error: Cannot enslave bond to itself. [ 460.064641][ T52] Bluetooth: hci4: command tx timeout [ 460.135958][T11020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.175325][T11020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.181854][T11007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.222953][T11007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.249584][ T1343] Bluetooth: hci1: Frame reassembly failed (-84) [ 460.592712][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.640520][T10991] chnl_net:caif_netlink_parms(): no params data found [ 460.764693][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.824863][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1547'. [ 460.943986][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.037692][T11038] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1549'. [ 461.182571][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.198108][T11046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.228835][T11046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.240309][T10991] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.254887][T10991] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.272475][T10991] bridge_slave_0: entered allmulticast mode [ 461.290301][T10991] bridge_slave_0: entered promiscuous mode [ 461.314734][T10991] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.322629][T10991] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.342630][T10991] bridge_slave_1: entered allmulticast mode [ 461.351394][T10991] bridge_slave_1: entered promiscuous mode [ 461.476445][T11047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.486081][T11047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.508259][T10991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.561176][T10991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.699095][ T36] bridge_slave_1: left allmulticast mode [ 461.705175][ T36] bridge_slave_1: left promiscuous mode [ 461.711155][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.722520][ T36] bridge_slave_0: left allmulticast mode [ 461.732714][ T36] bridge_slave_0: left promiscuous mode [ 461.739995][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.144482][ T5875] Bluetooth: hci4: command tx timeout [ 462.202006][T11056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.212256][T11056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.315205][ T52] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 462.315603][ T5875] Bluetooth: hci1: command 0x1003 tx timeout [ 462.350388][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.377601][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.390615][ T36] bond0 (unregistering): Released all slaves [ 462.411571][T10991] team0: Port device team_slave_0 added [ 462.421261][T10991] team0: Port device team_slave_1 added [ 462.748895][T10991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.784344][T10991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.844346][T10991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.868618][T10991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.894244][T10991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.906356][T11072] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1559'. [ 462.920305][ C1] vkms_vblank_simulate: vblank timer overrun [ 462.974367][T10991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.403904][T11079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.429766][T10991] hsr_slave_0: entered promiscuous mode [ 463.443584][T11079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.456405][T10991] hsr_slave_1: entered promiscuous mode [ 463.463707][T10991] debugfs: 'hsr0' already exists in 'hsr' [ 463.504350][T10991] Cannot create hsr debugfs directory [ 463.818103][T11095] overlayfs: missing 'lowerdir' [ 463.956639][T11100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.969304][T11100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.230152][ T52] Bluetooth: hci4: command tx timeout [ 464.270287][ T36] hsr_slave_0: left promiscuous mode [ 464.286668][ T36] hsr_slave_1: left promiscuous mode [ 464.333232][T11105] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 464.360844][ T36] veth1_macvtap: left promiscuous mode [ 464.383019][ T36] veth0_macvtap: left promiscuous mode [ 464.406849][ T36] veth1_vlan: left promiscuous mode [ 464.414026][ T36] veth0_vlan: left promiscuous mode [ 464.623868][T11115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1568'. [ 465.504694][ T52] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 465.559328][ T36] team0 (unregistering): Port device team_slave_1 removed [ 465.630616][ T36] team0 (unregistering): Port device team_slave_0 removed [ 466.304525][ T52] Bluetooth: hci4: command tx timeout [ 466.473486][T11148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.566330][T11148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.572858][T11153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.593110][T10991] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 466.608061][T11153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.618956][T10991] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 466.663990][T10991] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 466.708971][T10991] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 466.801482][T11161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.835369][T11161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.897189][T11161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.921694][T11161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.027990][T10991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.081575][T10991] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.113992][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.121444][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.217430][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.224948][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.402137][T11179] ieee802154 phy1 wpan1: encryption failed: -22 [ 467.817770][T11194] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1584'. [ 467.983644][T10991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.023710][T11202] netlink: 'syz.2.1586': attribute type 10 has an invalid length. [ 468.034544][T11198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.043427][T11198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.348908][T11210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.382051][T11210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.490969][T11202] team0 (unregistering): Port device team_slave_0 removed [ 468.511154][T11202] team0 (unregistering): Port device team_slave_1 removed [ 468.918052][T11222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.933438][T11222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.146989][T10991] veth0_vlan: entered promiscuous mode [ 469.178768][T10991] veth1_vlan: entered promiscuous mode [ 469.238035][T10991] veth0_macvtap: entered promiscuous mode [ 469.255587][T10991] veth1_macvtap: entered promiscuous mode [ 469.307948][T10991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.350887][T10991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.435888][ T1115] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.496423][ T1115] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.529127][ T1115] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.562048][ T1115] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.679729][T11238] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1594'. [ 469.924804][T11247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.940898][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.968120][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.982330][T11247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.060845][T11251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.087077][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.097581][T11251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.108087][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.826589][T11269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.863855][T11269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.938491][T11273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.963174][T11273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.993670][T11276] netlink: 'syz.2.1605': attribute type 58 has an invalid length. [ 471.387217][T11278] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1606'. [ 471.641779][T11284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.652101][T11284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.673487][T11286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.710152][T11286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.742950][T11287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.760378][T11287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.776387][T11287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.786253][T11287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.834242][ T938] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 471.964309][ T938] usb 5-1: device descriptor read/64, error -71 [ 472.204349][ T938] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 472.338780][ T938] usb 5-1: device descriptor read/64, error -71 [ 472.455478][ T938] usb usb5-port1: attempt power cycle [ 472.524570][T11304] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1615'. [ 472.636926][T11312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.650102][T11312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.656688][T11313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.668902][T11313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.684512][T11313] overlayfs: upper fs does not support file handles, falling back to index=off. [ 472.702079][T11313] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 472.801181][T11316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1619'. [ 472.814311][ T938] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 472.836342][ T938] usb 5-1: device descriptor read/8, error -71 [ 473.084408][ T938] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 473.104964][ T938] usb 5-1: device descriptor read/8, error -71 [ 473.217769][ T938] usb usb5-port1: unable to enumerate USB device [ 473.439402][T11326] netlink: 'syz.2.1622': attribute type 2 has an invalid length. [ 473.496876][T11326] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1622'. [ 473.558546][T11330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.589381][T11330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.603425][T11332] netlink: 'syz.3.1625': attribute type 3 has an invalid length. [ 474.612006][T11354] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1631'. [ 474.661659][T11351] overlay: Bad value for 'workdir' [ 474.799498][T11363] overlayfs: failed to clone upperpath [ 474.844068][T11365] netlink: 'syz.3.1634': attribute type 7 has an invalid length. [ 475.023193][T11372] overlayfs: upper fs does not support file handles, falling back to index=off. [ 475.099045][T11372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.112521][T11372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.436888][T11381] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 475.800329][T11391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.878440][T11391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.237739][T11408] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1648'. [ 476.439703][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 476.489404][T11413] veth0_vlan: left promiscuous mode [ 476.547158][T11414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.561896][T11414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.574236][ T9] usb 5-1: device descriptor read/64, error -71 [ 476.631187][T11416] binder_alloc: 11415: binder_alloc_buf, no vma [ 476.638009][T11416] binder: 11415:11416 ioctl 4008af30 200000000180 returned -22 [ 476.647597][T11416] binder: BINDER_SET_CONTEXT_MGR already set [ 476.653826][T11416] binder: 11415:11416 ioctl 4018620d 200000000100 returned -16 [ 476.814300][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 476.944882][ T9] usb 5-1: device descriptor read/64, error -71 [ 477.056393][ T9] usb usb5-port1: attempt power cycle [ 477.102072][T11434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.111151][T11434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.394802][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 477.430252][ T9] usb 5-1: device descriptor read/8, error -71 [ 477.481435][ T938] IPVS: starting estimator thread 0... [ 477.585850][T11448] IPVS: using max 27 ests per chain, 64800 per kthread [ 477.664821][T11454] netlink: 'syz.2.1663': attribute type 21 has an invalid length. [ 477.676144][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 477.681359][T11454] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1663'. [ 477.714933][ T9] usb 5-1: device descriptor read/8, error -71 [ 477.788159][T11459] input: syz1 as /devices/virtual/input/input36 [ 477.829843][ T9] usb usb5-port1: unable to enumerate USB device [ 478.280353][T11475] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.1669'. [ 478.738154][T11480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.756229][T11480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.238262][T11488] input: syz1 as /devices/virtual/input/input37 [ 479.401480][T11486] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 479.408120][T11486] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 479.554539][T11499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1677'. [ 479.579015][T11498] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1678'. [ 479.727842][T11510] syzkaller1: entered promiscuous mode [ 479.733553][T11510] syzkaller1: entered allmulticast mode [ 479.974541][T11517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.047148][T11521] tmpfs: Bad value for 'mpol' [ 480.231248][T11525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.249910][T11525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.334855][T11521] nbd0: detected capacity change from 0 to 127 [ 480.353884][ T5875] block nbd0: Receive control failed (result -32) [ 480.353956][ T52] block nbd0: Receive control failed (result -104) [ 480.462007][T11532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1689'. [ 480.528679][T11537] fuse: Unknown parameter '0x0000000000000005' [ 480.953737][T11547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.972055][T11547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.005862][T11547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.017709][T11547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.043008][T11547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.066654][T11547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.111625][T11547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.141288][T11547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.308186][T11553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.346777][T11553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.524471][ T938] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 481.635089][T11560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.662811][T11560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.696666][ T938] usb 5-1: device descriptor read/64, error -71 [ 481.944321][ T938] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 482.380013][T11584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.423643][T11584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.504119][T11589] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 482.859033][T11607] sctp: [Deprecated]: syz.4.1705 (pid 11607) Use of struct sctp_assoc_value in delayed_ack socket option. [ 482.859033][T11607] Use struct sctp_sack_info instead [ 483.186110][ T938] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 483.365340][ T938] usb 5-1: Using ep0 maxpacket: 8 [ 483.376168][ T938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.401884][ T938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.425559][ T938] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 483.447677][ T938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.475073][ T938] usb 5-1: config 0 descriptor?? [ 483.564537][T11642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.582690][T11642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.905295][ T938] logitech 0003:046D:C20E.0021: rdesc size test failed for formula gp [ 483.914962][ T938] logitech 0003:046D:C20E.0021: unbalanced collection at end of report description [ 483.925232][ T938] logitech 0003:046D:C20E.0021: parse failed [ 483.931366][ T938] logitech 0003:046D:C20E.0021: probe with driver logitech failed with error -22 [ 484.104713][ T43] usb 5-1: USB disconnect, device number 12 [ 484.675797][ T938] [ 484.678195][ T938] ====================================================== [ 484.685254][ T938] WARNING: possible circular locking dependency detected [ 484.692296][ T938] syzkaller #0 Not tainted [ 484.696722][ T938] ------------------------------------------------------ [ 484.703920][ T938] kworker/0:2/938 is trying to acquire lock: [ 484.709904][ T938] ffff88801bea7a20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 484.720449][ T938] [ 484.720449][ T938] but task is already holding lock: [ 484.727820][ T938] ffff88801bea7988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 484.738242][ T938] [ 484.738242][ T938] which lock already depends on the new lock. [ 484.738242][ T938] [ 484.748662][ T938] [ 484.748662][ T938] the existing dependency chain (in reverse order) is: [ 484.757684][ T938] [ 484.757684][ T938] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 484.765787][ T938] lock_acquire+0x120/0x360 [ 484.770860][ T938] down_write+0x96/0x1f0 [ 484.775828][ T938] kernfs_add_one+0x41/0x520 [ 484.780954][ T938] kernfs_create_dir_ns+0xde/0x130 [ 484.786701][ T938] internal_create_group+0x419/0x1110 [ 484.792632][ T938] cpuhp_invoke_callback+0x445/0x860 [ 484.798465][ T938] cpuhp_issue_call+0x430/0x7a0 [ 484.803948][ T938] __cpuhp_setup_state_cpuslocked+0x3df/0x6c0 [ 484.810564][ T938] __cpuhp_setup_state+0x3f/0x60 [ 484.816046][ T938] do_one_initcall+0x236/0x820 [ 484.821445][ T938] do_initcall_level+0x104/0x190 [ 484.826925][ T938] do_initcalls+0x59/0xa0 [ 484.831791][ T938] kernel_init_freeable+0x334/0x4b0 [ 484.837623][ T938] kernel_init+0x1d/0x1d0 [ 484.842487][ T938] ret_from_fork+0x4bc/0x870 [ 484.847625][ T938] ret_from_fork_asm+0x1a/0x30 [ 484.852963][ T938] [ 484.852963][ T938] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 484.860848][ T938] [ 484.860848][ T938] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 484.868783][ T938] lock_acquire+0x120/0x360 [ 484.873853][ T938] cpus_read_lock+0x42/0x160 [ 484.879112][ T938] static_key_slow_inc+0x12/0x30 [ 484.884610][ T938] setup_udp_tunnel_sock+0x34f/0x550 [ 484.890453][ T938] l2tp_tunnel_register+0xcb6/0x1320 [ 484.896746][ T938] pppol2tp_connect+0x87c/0x1750 [ 484.902226][ T938] __sys_connect+0x316/0x440 [ 484.907357][ T938] __x64_sys_connect+0x7a/0x90 [ 484.912659][ T938] do_syscall_64+0xfa/0xfa0 [ 484.917832][ T938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.924263][ T938] [ 484.924263][ T938] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 484.932026][ T938] lock_acquire+0x120/0x360 [ 484.937070][ T938] lock_sock_nested+0x48/0x100 [ 484.942458][ T938] inet_shutdown+0x6a/0x390 [ 484.947505][ T938] nbd_mark_nsock_dead+0x2e9/0x560 [ 484.953154][ T938] sock_shutdown+0x15e/0x260 [ 484.958289][ T938] nbd_config_put+0x342/0x790 [ 484.963512][ T938] nbd_release+0xfe/0x140 [ 484.968378][ T938] bdev_release+0x536/0x650 [ 484.973415][ T938] blkdev_release+0x15/0x20 [ 484.978539][ T938] __fput+0x44c/0xa70 [ 484.983057][ T938] task_work_run+0x1d4/0x260 [ 484.988185][ T938] do_exit+0x6b5/0x2300 [ 484.992877][ T938] do_group_exit+0x21c/0x2d0 [ 484.998003][ T938] get_signal+0x1285/0x1340 [ 485.003038][ T938] arch_do_signal_or_restart+0xa0/0x790 [ 485.009201][ T938] exit_to_user_mode_loop+0x72/0x130 [ 485.015018][ T938] do_syscall_64+0x2bd/0xfa0 [ 485.020149][ T938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.026672][ T938] [ 485.026672][ T938] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 485.034340][ T938] lock_acquire+0x120/0x360 [ 485.039389][ T938] __mutex_lock+0x187/0x1350 [ 485.044514][ T938] nbd_queue_rq+0x257/0xf10 [ 485.049578][ T938] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 485.055689][ T938] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 485.062563][ T938] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 485.069099][ T938] blk_mq_run_hw_queue+0x348/0x4f0 [ 485.074830][ T938] blk_mq_dispatch_list+0xd0c/0xe00 [ 485.080565][ T938] blk_mq_flush_plug_list+0x469/0x550 [ 485.086484][ T938] __blk_flush_plug+0x3d3/0x4b0 [ 485.091900][ T938] __submit_bio+0x2d3/0x5a0 [ 485.096973][ T938] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 485.103145][ T938] block_read_full_folio+0x599/0x830 [ 485.108975][ T938] filemap_read_folio+0x117/0x380 [ 485.114630][ T938] do_read_cache_folio+0x350/0x590 [ 485.120362][ T938] read_part_sector+0xb6/0x2b0 [ 485.125658][ T938] adfspart_check_ICS+0xa4/0xa50 [ 485.131224][ T938] bdev_disk_changed+0x75f/0x14b0 [ 485.136781][ T938] blkdev_get_whole+0x380/0x510 [ 485.142256][ T938] bdev_open+0x31e/0xd30 [ 485.147157][ T938] blkdev_open+0x457/0x600 [ 485.152112][ T938] do_dentry_open+0x953/0x13f0 [ 485.157508][ T938] vfs_open+0x3b/0x340 [ 485.162231][ T938] path_openat+0x2ee5/0x3830 [ 485.167458][ T938] do_filp_open+0x1fa/0x410 [ 485.172533][ T938] do_sys_openat2+0x121/0x1c0 [ 485.177937][ T938] __x64_sys_openat+0x138/0x170 [ 485.183425][ T938] do_syscall_64+0xfa/0xfa0 [ 485.188552][ T938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.194980][ T938] [ 485.194980][ T938] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 485.202209][ T938] lock_acquire+0x120/0x360 [ 485.207255][ T938] __mutex_lock+0x187/0x1350 [ 485.212383][ T938] nbd_queue_rq+0xc8/0xf10 [ 485.217357][ T938] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 485.223453][ T938] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 485.230317][ T938] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 485.236833][ T938] blk_mq_run_hw_queue+0x348/0x4f0 [ 485.242500][ T938] blk_mq_dispatch_list+0xd0c/0xe00 [ 485.248237][ T938] blk_mq_flush_plug_list+0x469/0x550 [ 485.254145][ T938] __blk_flush_plug+0x3d3/0x4b0 [ 485.259539][ T938] __submit_bio+0x2d3/0x5a0 [ 485.264951][ T938] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 485.271216][ T938] block_read_full_folio+0x599/0x830 [ 485.277144][ T938] filemap_read_folio+0x117/0x380 [ 485.282750][ T938] do_read_cache_folio+0x350/0x590 [ 485.288585][ T938] read_part_sector+0xb6/0x2b0 [ 485.293895][ T938] adfspart_check_ICS+0xa4/0xa50 [ 485.299379][ T938] bdev_disk_changed+0x75f/0x14b0 [ 485.304937][ T938] blkdev_get_whole+0x380/0x510 [ 485.310409][ T938] bdev_open+0x31e/0xd30 [ 485.315185][ T938] blkdev_open+0x457/0x600 [ 485.320142][ T938] do_dentry_open+0x953/0x13f0 [ 485.325446][ T938] vfs_open+0x3b/0x340 [ 485.330048][ T938] path_openat+0x2ee5/0x3830 [ 485.335211][ T938] do_filp_open+0x1fa/0x410 [ 485.340277][ T938] do_sys_openat2+0x121/0x1c0 [ 485.345668][ T938] __x64_sys_openat+0x138/0x170 [ 485.351053][ T938] do_syscall_64+0xfa/0xfa0 [ 485.356107][ T938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.362535][ T938] [ 485.362535][ T938] -> #4 (set->srcu){.+.+}-{0:0}: [ 485.369703][ T938] lock_sync+0xba/0x160 [ 485.374401][ T938] __synchronize_srcu+0x96/0x3a0 [ 485.379874][ T938] elevator_switch+0x12b/0x640 [ 485.385173][ T938] elevator_change+0x315/0x4c0 [ 485.390465][ T938] elevator_set_default+0x186/0x260 [ 485.396192][ T938] blk_register_queue+0x34e/0x3f0 [ 485.401782][ T938] __add_disk+0x677/0xd50 [ 485.406659][ T938] add_disk_fwnode+0xfc/0x480 [ 485.412404][ T938] nbd_dev_add+0x717/0xae0 [ 485.417360][ T938] nbd_init+0x168/0x1f0 [ 485.422052][ T938] do_one_initcall+0x236/0x820 [ 485.427543][ T938] do_initcall_level+0x104/0x190 [ 485.433104][ T938] do_initcalls+0x59/0xa0 [ 485.437970][ T938] kernel_init_freeable+0x334/0x4b0 [ 485.443704][ T938] kernel_init+0x1d/0x1d0 [ 485.448579][ T938] ret_from_fork+0x4bc/0x870 [ 485.453911][ T938] ret_from_fork_asm+0x1a/0x30 [ 485.459220][ T938] [ 485.459220][ T938] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 485.467076][ T938] lock_acquire+0x120/0x360 [ 485.472125][ T938] __mutex_lock+0x187/0x1350 [ 485.477247][ T938] elevator_change+0x1e5/0x4c0 [ 485.482890][ T938] elevator_set_none+0x42/0xb0 [ 485.488215][ T938] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 485.494562][ T938] nbd_start_device+0x17f/0xb10 [ 485.500101][ T938] nbd_genl_connect+0x135b/0x18f0 [ 485.505674][ T938] genl_family_rcv_msg_doit+0x215/0x300 [ 485.511759][ T938] genl_rcv_msg+0x60e/0x790 [ 485.516899][ T938] netlink_rcv_skb+0x208/0x470 [ 485.522200][ T938] genl_rcv+0x28/0x40 [ 485.526712][ T938] netlink_unicast+0x82f/0x9e0 [ 485.532009][ T938] netlink_sendmsg+0x805/0xb30 [ 485.537301][ T938] __sock_sendmsg+0x21c/0x270 [ 485.542551][ T938] ____sys_sendmsg+0x505/0x830 [ 485.547893][ T938] ___sys_sendmsg+0x21f/0x2a0 [ 485.553154][ T938] __x64_sys_sendmsg+0x19b/0x260 [ 485.558626][ T938] do_syscall_64+0xfa/0xfa0 [ 485.563756][ T938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.570186][ T938] [ 485.570186][ T938] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 485.578803][ T938] lock_acquire+0x120/0x360 [ 485.583849][ T938] blk_alloc_queue+0x538/0x620 [ 485.589155][ T938] __blk_mq_alloc_disk+0x15c/0x340 [ 485.594799][ T938] nbd_dev_add+0x46c/0xae0 [ 485.599773][ T938] nbd_init+0x168/0x1f0 [ 485.604473][ T938] do_one_initcall+0x236/0x820 [ 485.609868][ T938] do_initcall_level+0x104/0x190 [ 485.615347][ T938] do_initcalls+0x59/0xa0 [ 485.620216][ T938] kernel_init_freeable+0x334/0x4b0 [ 485.626034][ T938] kernel_init+0x1d/0x1d0 [ 485.630897][ T938] ret_from_fork+0x4bc/0x870 [ 485.636025][ T938] ret_from_fork_asm+0x1a/0x30 [ 485.641334][ T938] [ 485.641334][ T938] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 485.648558][ T938] lock_acquire+0x120/0x360 [ 485.653707][ T938] fs_reclaim_acquire+0x72/0x100 [ 485.659184][ T938] kmem_cache_alloc_noprof+0x45/0x6e0 [ 485.665096][ T938] __kernfs_iattrs+0xd9/0x320 [ 485.670315][ T938] kernfs_iop_setattr+0xea/0x3f0 [ 485.675879][ T938] notify_change+0xc1a/0xf40 [ 485.681010][ T938] do_truncate+0x1a4/0x220 [ 485.685964][ T938] path_openat+0x306c/0x3830 [ 485.691097][ T938] do_filp_open+0x1fa/0x410 [ 485.696136][ T938] do_sys_openat2+0x121/0x1c0 [ 485.701593][ T938] __x64_sys_openat+0x138/0x170 [ 485.707080][ T938] do_syscall_64+0xfa/0xfa0 [ 485.712119][ T938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.718556][ T938] [ 485.718556][ T938] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 485.727087][ T938] validate_chain+0xb9b/0x2140 [ 485.732388][ T938] __lock_acquire+0xab9/0xd20 [ 485.737629][ T938] lock_acquire+0x120/0x360 [ 485.742668][ T938] down_write+0x96/0x1f0 [ 485.747444][ T938] kernfs_unlink_sibling+0x71/0x180 [ 485.753193][ T938] __kernfs_remove+0x353/0x570 [ 485.758488][ T938] kernfs_remove_by_name_ns+0xaf/0x130 [ 485.764568][ T938] sysfs_remove_group+0xfc/0x2c0 [ 485.770148][ T938] sysfs_remove_groups+0x54/0xb0 [ 485.775635][ T938] net_rx_queue_update_kobjects+0x69e/0x750 [ 485.782064][ T938] netdev_unregister_kobject+0x113/0x450 [ 485.788242][ T938] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 485.795290][ T938] unregister_netdevice_queue+0x33c/0x380 [ 485.801581][ T938] ser_release+0x190/0x240 [ 485.806542][ T938] process_scheduled_works+0xae1/0x17b0 [ 485.812633][ T938] worker_thread+0x8a0/0xda0 [ 485.817761][ T938] kthread+0x711/0x8a0 [ 485.822430][ T938] ret_from_fork+0x4bc/0x870 [ 485.827552][ T938] ret_from_fork_asm+0x1a/0x30 [ 485.832850][ T938] [ 485.832850][ T938] other info that might help us debug this: [ 485.832850][ T938] [ 485.843358][ T938] Chain exists of: [ 485.843358][ T938] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 485.843358][ T938] [ 485.857893][ T938] Possible unsafe locking scenario: [ 485.857893][ T938] [ 485.865363][ T938] CPU0 CPU1 [ 485.870832][ T938] ---- ---- [ 485.876213][ T938] lock(&root->kernfs_rwsem); [ 485.880998][ T938] lock(cpuhp_state_mutex); [ 485.888209][ T938] lock(&root->kernfs_rwsem); [ 485.895529][ T938] lock(&root->kernfs_iattr_rwsem); [ 485.900839][ T938] [ 485.900839][ T938] *** DEADLOCK *** [ 485.900839][ T938] [ 485.908991][ T938] 4 locks held by kworker/0:2/938: [ 485.914107][ T938] #0: ffff88801b019948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 485.925220][ T938] #1: ffffc90003807ba0 (ser_release_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 485.935774][ T938] #2: ffffffff8f952588 (rtnl_mutex){+.+.}-{4:4}, at: ser_release+0x107/0x240 [ 485.944682][ T938] #3: ffff88801bea7988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 485.955416][ T938] [ 485.955416][ T938] stack backtrace: [ 485.961387][ T938] CPU: 0 UID: 0 PID: 938 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 485.961412][ T938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 485.961426][ T938] Workqueue: events ser_release [ 485.961458][ T938] Call Trace: [ 485.961468][ T938] [ 485.961476][ T938] dump_stack_lvl+0x189/0x250 [ 485.961505][ T938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.961531][ T938] ? __pfx__printk+0x10/0x10 [ 485.961554][ T938] ? print_lock_name+0xde/0x100 [ 485.961577][ T938] print_circular_bug+0x2ee/0x310 [ 485.961603][ T938] check_noncircular+0x134/0x160 [ 485.961629][ T938] validate_chain+0xb9b/0x2140 [ 485.961665][ T938] __lock_acquire+0xab9/0xd20 [ 485.961687][ T938] ? kernfs_unlink_sibling+0x71/0x180 [ 485.961704][ T938] lock_acquire+0x120/0x360 [ 485.961722][ T938] ? kernfs_unlink_sibling+0x71/0x180 [ 485.961745][ T938] down_write+0x96/0x1f0 [ 485.961764][ T938] ? kernfs_unlink_sibling+0x71/0x180 [ 485.961782][ T938] ? __pfx_down_write+0x10/0x10 [ 485.961800][ T938] ? kernfs_root+0x1c/0x230 [ 485.961825][ T938] ? kernfs_root+0x1c/0x230 [ 485.961847][ T938] ? kernfs_root+0x1c/0x230 [ 485.961871][ T938] ? kernfs_root+0x1ea/0x230 [ 485.961896][ T938] kernfs_unlink_sibling+0x71/0x180 [ 485.961915][ T938] __kernfs_remove+0x353/0x570 [ 485.961932][ T938] kernfs_remove_by_name_ns+0xaf/0x130 [ 485.961951][ T938] sysfs_remove_group+0xfc/0x2c0 [ 485.961977][ T938] sysfs_remove_groups+0x54/0xb0 [ 485.962003][ T938] net_rx_queue_update_kobjects+0x69e/0x750 [ 485.962029][ T938] netdev_unregister_kobject+0x113/0x450 [ 485.962057][ T938] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 485.962085][ T938] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 485.962111][ T938] ? __lock_acquire+0xab9/0xd20 [ 485.962129][ T938] ? ser_release+0x107/0x240 [ 485.962155][ T938] unregister_netdevice_queue+0x33c/0x380 [ 485.962176][ T938] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 485.962198][ T938] ? dev_close+0x1ca/0x220 [ 485.962214][ T938] ser_release+0x190/0x240 [ 485.962238][ T938] ? process_scheduled_works+0x9ef/0x17b0 [ 485.962259][ T938] ? __pfx_ser_release+0x10/0x10 [ 485.962284][ T938] ? _raw_spin_unlock_irq+0x23/0x50 [ 485.962308][ T938] ? process_scheduled_works+0x9ef/0x17b0 [ 485.962328][ T938] ? process_scheduled_works+0x9ef/0x17b0 [ 485.962349][ T938] process_scheduled_works+0xae1/0x17b0 [ 485.962380][ T938] ? __pfx_process_scheduled_works+0x10/0x10 [ 485.962406][ T938] worker_thread+0x8a0/0xda0 [ 485.962437][ T938] kthread+0x711/0x8a0 [ 485.962463][ T938] ? __pfx_worker_thread+0x10/0x10 [ 485.962483][ T938] ? __pfx_kthread+0x10/0x10 [ 485.962509][ T938] ? _raw_spin_unlock_irq+0x23/0x50 [ 485.962532][ T938] ? lockdep_hardirqs_on+0x9c/0x150 [ 485.962548][ T938] ? __pfx_kthread+0x10/0x10 [ 485.962572][ T938] ret_from_fork+0x4bc/0x870 [ 485.962593][ T938] ? __pfx_ret_from_fork+0x10/0x10 [ 485.962614][ T938] ? __switch_to_asm+0x39/0x70 [ 485.962631][ T938] ? __switch_to_asm+0x33/0x70 [ 485.962646][ T938] ? __pfx_kthread+0x10/0x10 [ 485.962671][ T938] ret_from_fork_asm+0x1a/0x30 [ 485.962695][ T938]