last executing test programs: 8.136919833s ago: executing program 0 (id=832): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xc, 0x0, &(0x7f0000000240)) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf257300000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x2400c0a0}, 0x40450) 8.022772398s ago: executing program 0 (id=836): r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) tgkill(r2, r3, 0x17) shmctl$IPC_RMID(r0, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x26, 0xb, 0x62, 0x40, 0x305a, 0x1405, 0xaa8a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x75, 0x0, 0x2, 0xff, 0xa3, 0xdd, 0x9, [], [{{0x9, 0x5, 0x9, 0x0, 0x400, 0x4, 0x5, 0x7, [@generic={0x7, 0x5, "ed46df2743"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0xf, 0x0, 0x5}}]}}]}}]}}, 0x0) 4.64806997s ago: executing program 0 (id=859): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x18, 0x0, &(0x7f0000000040)=0x5b) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f00000020c0)={0xe, {"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", 0x1000}}, 0x1006) r3 = socket$inet6(0xa, 0x3, 0xfe) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000001040)) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)="11a32ed688eb47", 0x7}, 0x1, 0x0, 0x0, 0x24008011}, 0x80) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0xfffffe01}], 0x1, 0x122, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) pivot_root(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000001080)=0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) 4.631501484s ago: executing program 0 (id=861): r0 = syz_open_dev$video(&(0x7f00000002c0), 0x20000000005, 0x8100) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)={0x9, {0x6, 0x0, 0x7fff, 0xfffff1fd}, {0xbc, 0x5, 0x2, 0x1001}, {0x40, 0x6}}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x58, 0xbd, 0x42, 0x20, 0x2013, 0x246, 0x1e94, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf6, 0x0, 0x0, 0xa0, 0x87, 0xfb}}]}}]}}, 0x0) 3.180895053s ago: executing program 3 (id=877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) 3.1054664s ago: executing program 3 (id=878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000053c0)='./bus\x00', 0x364) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x39, 0x36, 0x66, 0x30, 0x66, 0x34, 0x30, 0x32], 0x2d, [0x50, 0x36, 0x39, 0x36], 0x2d, [0x35, 0x65, 0x35, 0x30], 0x2d, [0x53, 0x34, 0x31, 0x66], 0x2d, [0x33, 0x34, 0x32, 0x32, 0x66, 0x63, 0x34, 0x38]}}}, {@flag='ro'}, {@smackfsdef}]}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800b0001006e756d67656e0000240002800800034000000000080001400000000208000440fffffffb080002400000ffb40900010073797a30000000000900020073797a3200180000140000001100010000000000000000000000000a"], 0x8c}}, 0x4) syz_usb_connect(0x0, 0x64, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240108000b020102082407010500150e1124060606050900060004000700df000a092402050001031f0409240300"/94], 0x0) 2.604551703s ago: executing program 3 (id=882): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00130000017c0000040042800c0001"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) socket$kcm(0x10, 0x400000002, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000140)={0x200000, 0x200000, 0x7}) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="201500000084b0"], 0x20, 0x4c004}], 0x1, 0x10) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000040)=""/44, &(0x7f0000000080)=0x2c) r2 = fanotify_init(0x8, 0x400) write$binfmt_elf64(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="7f454c4622000005"], 0x40) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r4 = syz_usb_connect(0x3, 0x24, &(0x7f0000001c80)=ANY=[@ANYBLOB="12010000941b6508c410c1ea2f700102030109021200010000000009040102"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x400000000000000, 0x801) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x100000}}, 0x8000, 0x400, 0x6, 0x8, 0x5, 0xd, 0xa}, 0x9c) ioctl$EVIOCRMFF(r5, 0x4004550e, 0x0) sendmmsg$inet6(r5, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000080)}}, {{0x0, 0x0, &(0x7f00000006c0)}}], 0x2, 0x400c404) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r7 = memfd_create(&(0x7f0000000440)='[\v\xdbX\xae[5\xa9\x90\xbemd\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eF\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1e{\n\x00\x00\x00jS\xd6\x91%||\xa0\x8e]\xc7T\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5\x02nN&\xf8#\x80z8Z\xd2}\xf5\xe4\xdf5\x9b\x01\xf8', 0x0) write$binfmt_script(r7, &(0x7f0000000500)={'#! ', './file0'}, 0xb) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000100)={0x8, 0x800, {0x0}, {}, 0x6a9, 0x6}) rt_sigqueueinfo(r8, 0x2a, &(0x7f0000000200)={0xd, 0x4, 0x6}) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r6, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x480000000000000, &(0x7f00000001c0)) 2.296599344s ago: executing program 2 (id=886): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x2, 0x0, 0x0, 0x5}]}, 0x10) (async, rerun: 32) sendto$inet(r0, 0x0, 0x0, 0x2000c801, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000019c0)="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", 0x4ac}], 0x1}}], 0x1, 0x400c0) (async, rerun: 64) close(r0) (async, rerun: 64) syz_usb_connect(0x0, 0x2d1, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x3b, 0x10, 0x8b, 0x8, 0x46d, 0x870, 0x33f6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2bf, 0x1, 0x1, 0x0, 0x10, 0x4, [{{0x9, 0x4, 0xfb, 0x0, 0xe, 0xd6, 0xf6, 0x3a, 0x0, [], [{{0x9, 0x5, 0xa, 0x4, 0x40, 0xb6, 0x2, 0x4, [@generic={0xda, 0x22, "3537917c6d58e51ea948b62a3d7603132a6d2b3365ff9be99a2a77beeed7807bc2ff7643d4fdef74a01bb54d8a7a77fa8de7c2062a0f79a23a734c137fc24abc345a1a19566c3dec18e11a3262e5a30862785043fc227c5b1386b0784e3aba7b52d56cf0f25d44cce33c5445d7343d2985f38e78e38a4272d20141adb46ca63dfafde394c76c8cc42e5cb5fe0c0995194bd2a7a8f95c16d21303024808d54ab9829cb9db284cfaa41438ca390e349aa53776b12c857a0ea7a2890a34045f3e54b1228fd9409ae9ca76da994b1090a075895600a903e9a25e"}, @uac_iso={0x7, 0x25, 0x1, 0x84, 0xb9, 0x4}]}}, {{0x9, 0x5, 0xd, 0x8, 0x40, 0x5, 0x1, 0xc7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x42, 0xff}]}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x0, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xf, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x101}]}}, {{0x9, 0x5, 0x2, 0x1, 0x40, 0x1, 0x0, 0x4, [@generic={0x5e, 0x0, "cb29d3bbca532884fed5c7352c936120fff715476266d5ee71de45ea8d0da2ae05c42d26712eed20cbd979fdadcf127e39bfcfa90596a18ba9e0682a9d2559ee6c8ad3684096e59c412b739be8029ecefc6245d5a708ef8138fe24ca"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xfa, 0x9}]}}, {{0x9, 0x5, 0x3, 0x3, 0x10, 0x9, 0xa, 0x3, [@generic={0x7, 0x0, "da685b101b"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x9, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xe}]}}, {{0x9, 0x5, 0x80, 0x12, 0x40, 0x4d, 0xd, 0xfe}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x5, 0x5, 0xd, [@generic={0xaa, 0x21, "85f2f102e6a98284b59e991914337900a47e6f2b1d1375e8d2f5d08014a6542219e767501516da12972749f5971ad9e3ff8162c4cfd29ad664a47f4407b9e3c8408f47775f3103da5643e547059035d5c2680f3120095aa3aef114a233555c83b5f5310f8f855685a97fd5161eeb1a5db5ce1108e5f0a4de36aa661e796bea6c19e78772760248ff0c75e54f5d99952e83d14bb5d8dc8ae8d6554276e8690827a8a18a637e80b3f0"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x1ff}]}}, {{0x9, 0x5, 0xd, 0x4, 0x234, 0x1, 0xf, 0x8}}, {{0x9, 0x5, 0x0, 0x18, 0x40, 0x5, 0x0, 0xf}}, {{0x9, 0x5, 0xc, 0x14, 0x40, 0x7, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x6b91}]}}, {{0x9, 0x5, 0xa, 0x8, 0x408, 0xc, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x0, 0xee}}, {{0x9, 0x5, 0x1, 0x3, 0x3ff, 0x4b, 0x1, 0x40}}]}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0xf, &(0x7f0000000b80)=ANY=[@ANYRES16=0x0], 0x1, [{0x0, 0x0}]}) 2.200141361s ago: executing program 2 (id=887): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x80001, 0x1}, {0xfffffffc, 0x80003}]}}) (async, rerun: 64) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000100)) (async, rerun: 64) close(r0) (async) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x2440) ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f0000000180)={0x1, r0, 'id1\x00'}) (async) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'blkio'}, {0x2d, 'pids'}, {0x0, 'hugetlb'}, {0x0, 'freezer'}, {0x2b, 'net'}, {0x0, 'cpuacct'}, {0x2b, 'blkio'}, {0x2d, 'cpu'}]}, 0x39) 2.164294199s ago: executing program 2 (id=889): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200000) recvfrom$inet6(r0, &(0x7f0000000040)=""/4096, 0x1000, 0x100, &(0x7f0000001040)={0xa, 0x4e24, 0xa6f, @remote, 0x3}, 0x1c) (async) recvfrom$inet6(r0, &(0x7f0000000040)=""/4096, 0x1000, 0x100, &(0x7f0000001040)={0xa, 0x4e24, 0xa6f, @remote, 0x3}, 0x1c) r1 = accept$phonet_pipe(r0, &(0x7f0000001080), &(0x7f00000010c0)=0x10) recvfrom(r1, &(0x7f0000001100)=""/4096, 0x1000, 0x0, &(0x7f0000002100)=@l2tp6={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0xca}, 0x80) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000021c0), r0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x2c, r2, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040014}, 0x48040) getpeername$inet6(r0, &(0x7f00000022c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000002300)=0x1c) (async) getpeername$inet6(r0, &(0x7f00000022c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000002300)=0x1c) getsockname$inet6(r0, &(0x7f0000002340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000002380)=0x1c) (async) getsockname$inet6(r0, &(0x7f0000002340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000002380)=0x1c) r3 = getpid() syz_clone3(&(0x7f00000025c0)={0x200080, &(0x7f00000023c0), &(0x7f0000002400), &(0x7f0000002440), {0x3a}, &(0x7f0000002480)=""/91, 0x5b, &(0x7f0000002500)=""/107, &(0x7f0000002580)=[r3], 0x1, {r0}}, 0x58) (async) syz_clone3(&(0x7f00000025c0)={0x200080, &(0x7f00000023c0)=0xffffffffffffffff, &(0x7f0000002400), &(0x7f0000002440), {0x3a}, &(0x7f0000002480)=""/91, 0x5b, &(0x7f0000002500)=""/107, &(0x7f0000002580)=[r3], 0x1, {r0}}, 0x58) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000002640)={{0x1, 0x1, 0x18, r4, {0x27e}}, './file0\x00'}) read$FUSE(r0, &(0x7f0000002680)={0x2020}, 0x2020) ioctl$SCSI_IOCTL_DOORUNLOCK(r5, 0x5381) socket$inet(0x2, 0x0, 0x7) (async) socket$inet(0x2, 0x0, 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f00000047c0)={&(0x7f00000046c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004780)={&(0x7f0000004700)={0x5c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x26}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8041}, 0x8004) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f00000047c0)={&(0x7f00000046c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004780)={&(0x7f0000004700)={0x5c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x26}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8041}, 0x8004) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000004800)={0x0, 0xc9, "d43b6659350c3841ef181be4a016e9093aff75661d7096b8f98b16f887b24b6953ddd034c5479c66a474925a70110faeb572e03535d2b43e2204c29f9119c133a2a6aa2be674b83dcafb8423321204a9a973c85363674a9a62e93e7690f2d03747c337d5bc286b185133d285ea2b9a719cab5ad3f58073925c0dd1c16aad6abf6ac75f24dc67634d7f169d30b6d17ce1e50cb59a4861b421440c55ff58d5b4560590aa79192ea121f0c58552f2996b3363edc3eb851052bb85f0e49bc4a98458fc4f552111e4f6d7c8"}, &(0x7f0000004900)=0xd1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000004940)={0x8000, 0x6, 0x6b8, 0x8, r7}, 0x10) write$binfmt_script(r0, &(0x7f0000004980)={'#! ', './file0', [{0x20, 'b\x00'}, {0x20, 'g-'}], 0xa, "e155694155054de2c29c4d21c387f554a5aa959cb6792a370c6907526992ce83b54701567550350fdedf691d623f79ddabfc66fc743d408b712ab66ae6ebb489bf666ba1a2575c623ca252f67410b2ee93849b3ae2c976ff7952f93e87e1e169d823b35948f50cc334be21ce76a3b7ef46119c67dde2299b3f4f353f10258d4abacc6e1d87e3d1"}, 0x98) (async) write$binfmt_script(r0, &(0x7f0000004980)={'#! ', './file0', [{0x20, 'b\x00'}, {0x20, 'g-'}], 0xa, "e155694155054de2c29c4d21c387f554a5aa959cb6792a370c6907526992ce83b54701567550350fdedf691d623f79ddabfc66fc743d408b712ab66ae6ebb489bf666ba1a2575c623ca252f67410b2ee93849b3ae2c976ff7952f93e87e1e169d823b35948f50cc334be21ce76a3b7ef46119c67dde2299b3f4f353f10258d4abacc6e1d87e3d1"}, 0x98) write$USERIO_CMD_REGISTER(r0, &(0x7f0000004a40)={0x0, 0x1}, 0x2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004a80)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x5}) ioctl$PPPIOCGDEBUG(r5, 0x80047441, &(0x7f0000004ac0)) map_shadow_stack(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) (async) map_shadow_stack(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000004c00)={&(0x7f0000004b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004bc0)={&(0x7f0000004b40)={0x50, 0x140f, 0x100, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x80000) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000004c00)={&(0x7f0000004b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004bc0)={&(0x7f0000004b40)={0x50, 0x140f, 0x100, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x80000) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000004c80), r6) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000004d80)={&(0x7f0000004c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004d40)={&(0x7f0000004cc0)={0x50, r8, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000004e80)={&(0x7f0000004dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004e40)={&(0x7f0000004e00)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x6]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x41) (async) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000004e80)={&(0x7f0000004dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004e40)={&(0x7f0000004e00)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x6]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x41) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000004ec0)={0x61, ""/97}) 1.904809184s ago: executing program 2 (id=891): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x3}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x4000881}, 0x0) 1.752091373s ago: executing program 1 (id=892): syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x1a9241) r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x42483) ioctl$CEC_ADAP_S_PHYS_ADDR(r0, 0x40026102, &(0x7f0000000100)=0x6) r1 = semget(0x2, 0x4, 0x200) semop(r1, &(0x7f0000000040)=[{0x0, 0x7fff, 0x1800}, {0x0, 0x8001}], 0x2) semop(r1, &(0x7f00000000c0)=[{0x0, 0x4, 0x800}, {0x0, 0x5, 0x1800}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) close(0x3) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) setsockopt$ax25_int(r5, 0x101, 0x9, &(0x7f0000000d80)=0x424e3bbd, 0x4) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x28, r4, 0x800, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x1}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) socket(0x22, 0x2, 0x4) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000005, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) getpgid(0xffffffffffffffff) r7 = socket$inet_icmp(0x2, 0x2, 0x1) accept4(r7, 0x0, 0x0, 0x800) 1.663023896s ago: executing program 3 (id=893): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x184, 0x10, 0x713, 0x70bd2a, 0x0, {{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0x2}, {@in=@private, 0x0, 0x33}, @in=@private=0xa010100, {}, {0x3}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}, @algo_aead={0x4c, 0x12, {{'rfc4543(rfc4106(gcm(aes)))\x00'}, 0x0, 0xc0}}]}, 0x184}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0xce}]}) prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) fchdir(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000280)={0xa, 0x0, 0x1, @mcast1, 0x9, 0x3}, 0x20) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011"], 0x1c}], 0x1, 0x0, 0x0, 0x4000045}, 0x20000344) 1.576809021s ago: executing program 1 (id=894): r0 = socket(0x10, 0x803, 0x0) (async) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) (async) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) (async) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)={0x7c, 0x0, 0x800, 0x470bd27, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_DATA={0x4}, @NFC_ATTR_VENDOR_DATA={0x62, 0x1f, "b9519de1e0902ce9aad77ea011d511a62f861dacdeee40ba6a42ddb3c7de6eeab47f9e6952211519a08aa6a54b348baba37cc9774fa4ae2189737619c746b49f98d5b7b524bc9452750d0eb1bcd0cc775529cc2c3b395bd207fd6dfb60e7"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004005}, 0x8000) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.528255091s ago: executing program 0 (id=895): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0xf6) 1.502516891s ago: executing program 1 (id=896): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0xfffffffc, 0x2, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0xb2, @time={0x65757100, 0x316575}, 0x0, {0xfd}, 0x0, 0x2}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0x7f, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe4}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'sit0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f030e0033e6140006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe94f, 0x0, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.232698442s ago: executing program 1 (id=897): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x80000000}) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205"], 0x0) setreuid(0x0, 0xee01) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0xd584f4b30903cbac, 0x7800, 0x206, 0xfffffffd, {{0x5, 0x4, 0x2, 0x3d, 0x14, 0x68, 0x0, 0x0, 0x2f, 0x0, @empty, @remote}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0xd584f4b30903cbac, 0x7800, 0x206, 0xfffffffd, {{0x5, 0x4, 0x2, 0x3d, 0x14, 0x68, 0x0, 0x0, 0x2f, 0x0, @empty, @remote}}}}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socket$key(0xf, 0x3, 0x2) (async) r6 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x7) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x7) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r10, 0xaece) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$key(r6, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="0203fe020b00000000000000000000000300060000000000020000000000000000000000000000000200010000000000000009007fffffff0300050000000000c87d2dc55d5101c7cf02000000ac1414aa00000000000000000100080000000000"], 0x58}, 0x1, 0x7}, 0x0) (async) sendmsg$key(r6, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="0203fe020b00000000000000000000000300060000000000020000000000000000000000000000000200010000000000000009007fffffff0300050000000000c87d2dc55d5101c7cf02000000ac1414aa00000000000000000100080000000000"], 0x58}, 0x1, 0x7}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8001, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCINQ(r11, 0x541b, &(0x7f0000000140)) accept$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000003c0)=0x1c) (async) accept$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000003c0)=0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x18, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x20008840) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x18, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x20008840) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, r2, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8080}, 0x44000) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[], 0x0) 1.22432726s ago: executing program 0 (id=898): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28050900000000000109022400010000000009040200010300000009210000000122050009058103"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000000206030000000000fffff000000000000900020073797a32000000000500040000000000050005000200000012000300686173683a6e65742c706f727400000005000100070000000c000780080012"], 0x58}}, 0x20000004) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xc0, 0x4d, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x40, 0x1, 0x8f}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x7, 0x8, 0x2, 0x8, 0xf}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x380a}}, {0x19, &(0x7f0000000100)=@string={0x19, 0x3, "64a79a768d04f839e5385d80d763a8e68bed265f785d81"}}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000006c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x80, 0x80, 0xff, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x3, 0x7c, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x9, 0x61, 0x9}}}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x200, 0x4, 0x1, 0x0, 0x8, 0x4}, 0x5, &(0x7f0000000800)={0x5, 0xf, 0x5}, 0x3, [{0x12, &(0x7f0000000840)=@string={0x12, 0x3, "858f4e30e50f3d80999a03361295cc92"}}, {0x47, &(0x7f0000000880)=@string={0x47, 0x3, "341e841e35a0c0527f08cda816f1e08e4c906e6e14c0792e9c06fa7086fb5f28154046b3841f8d98bff8d6cd055366e10f6f1dd24e6ecdea5ea831e5aebb5d1a253142e19f"}}, {0x7b, &(0x7f0000000900)=@string={0x7b, 0x3, "37e0e1e044cfa704e665366c1bd0fe4ed369a4f09dc40eff67748f8fd1cfe52f06aa7a5e6d5f0338de6ed7940c03098a160a8e62522508f2c8a0d8d17480d181e266ebc4827ad2fd40f838dfa5cee541d736ea4f5a57d92d6e50b226393388ca14a984392edd259659cc8de81253a52392589c1fff72bd82c2"}}]}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000009c0), 0x169800, 0x0) r4 = socket$isdn_base(0x22, 0x3, 0x0) close_range(r3, r4, 0x0) r5 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x33e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x20, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0xc6a, 0x2, 0x1, {0x22, 0xb6d}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x40, 0xc, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xa4, 0x7, 0xff}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x9, 0x1, 0x0, 0x8, 0x81}, 0x42, &(0x7f0000000240)={0x5, 0xf, 0x42, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0xf9, 0x4, 0x0, 0x0, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x10, 0x90, 0xff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x14, 0x9, 0x40, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x74, "c0c6dcce00"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x5, 0x6, 0x32a}]}, 0x5, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2401}}, {0xff, &(0x7f0000000300)=@string={0xff, 0x3, "b3386185292987824afb15aded0308f8dc62786ae5d6972d27d141922b7e4250362b20c03144462fa3e8f56c8a4eb36dd952706d44c7e2cf6071b51c3b78f8e12bc6428b6a63036332ca278ab5f941e9b1b85a869ac952db1c5000c470c4a76d51137aa2ef683922f84d281fa917749f8fcfdfe23b8ef4cb5b7bff0c1981953c426657fc0ee601cdf9a41d4d5353ead2d7ebe1377d581f012f761677393414590c889e6a237de4ea5e97da49c19cafc098793a7529d64455fbfb69f51192c1099c07a21412ba29d435d215347bfa26d9e7d27761fca60fe842394eedcd3753797e5c22c8f230aa586b151271f565fe5fe1d7976821639cba6bec6524d1"}}, {0xcc, &(0x7f0000000400)=@string={0xcc, 0x3, "a6fd95b825519f5b4d6732320a9f00fdd6c9ea40419d9a85ad84e9dcb9d449cf3b0414ba987653bbaeb9d74f75e632791ad4f4c35a18b3335e88e87691a403533c92d418e5a573bc9058e6fed142d78d156d977dbf7fd770248ceeaa9afe4d7e5161f0c639ea04b7404fb625188ea1170aa288717b1180d9cac30a942cea5c1aa9ba01e6c8f13bed94512db1bbff5b5713f5d4a5aaab2f7919e0ed80d57d7f4fb6625e3e3936329658852eeb992967338c55d8c50c0a98e23e098b7bd635e433f775af6d4e0aa3593d8b"}}, {0xab, &(0x7f0000000500)=@string={0xab, 0x3, "56587ed3078eb1c348fa843c11a54c8f840ef8165b0c10aae96a5889bca8a4a90429094d2fa8b29a3f7a1bacfe140f55764c89a4ef159f9ae293d5de41f79c4c99e5ec0d5273604b9b5383a5d55851ff860327ffb310377a4683cce044b0503ff68660cfb5e7ae5ba5da3f7dbe5e51d57db161e4d066f3956b4234ec9d86f4619c631d20c29bd734b648adabd4ff9134f610ee9a97c00541cad385d279f1b292daaff6bc46c65e6712"}}, {0xb1, &(0x7f00000005c0)=@string={0xb1, 0x3, "346869c4cd37cad4ccb8aab569cf364d59479ac4af8a17fec8c89851aca2b18ca5a99c2a21999f6037a80eddf9a1a495e6c2be2e37a93cfc2891155282971cf6f292077a7bad2f4440ff2f03e50b5db3a3f076c4b412dab03d6119651e584aa429bae932bdb07ae2ed907ebcec18d290648f1f6770ef2f93b42c12d96080d0c3f1bdfeb58cc77471ad8d9df9d655656d9ac3d0eeef87ffcdc65af595defccbf0d4b8a6e9a087001f0c9d34816d68b8"}}]}) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x1, "253a779a"}]}}, 0x0}, 0x0) ioctl$TIOCNOTTY(r3, 0x5422) 1.187741836s ago: executing program 2 (id=899): r0 = add_key$keyring(&(0x7f0000001180), &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, r0, 0xfffffffffffffffd, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0xffffffffffffb83f) syz_clone(0x80000, &(0x7f0000000100)="c533edcb85bfafddd6fc5e5091c05906a7fb7cccf86d9daab4b5ae23cfe3e5ab5219b69d8a0f71010d27bbc5fe17a2b97d0e4b7a558b4292dd034fdd36ab785246c7387f145e374825032f5ca86aee45713fed0d6dd8fd42b0bcc4357224cda20264964ad8a92e3fa6ffb640331a3ce4b1d1e3ff0aa2fe15efc98c4f9f658443ef2e711b691bd1bb906a4c414fcd6fbb33aea4f6a42d30752891ce137775da2b9667b28d63", 0xa5, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="6f92f472b4a2f212de2a5c306d66a8de16a250355c6ab82f1da1fc6df7902d25691f1c206301f9325e2a5042a7243646ccd2192dd97baae716bfc5a9730d7ef9046e8311e2452ffddd4cef77f01b1d3a2a9d7b74c3a927947b10133232f9248482505ef6008fad64a54be4e876e14b3f84862e939e28167c5521c54f6d91af6c9f11aa1a4d0b430a81e8306400f230d547c5306d4a641fac0639a6dadbf3c9c04d1232c4a53e498f985e5bbd7c5a6fcfa6a805f44e00cb864a17e3cf3b0c04b139163f0b03259564de802a37cebc66057d2de4efdbf7") r2 = socket(0x1d, 0x3, 0x1) bind$inet(r2, &(0x7f0000000340)={0x1d, 0x4e20, @loopback}, 0x57) r3 = syz_open_dev$vcsu(&(0x7f0000000040), 0x81, 0x341a02) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) 1.113982095s ago: executing program 2 (id=900): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)="8c") ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000080)={0x13, 0x10, 0x7, {0x0, r3}}, 0x28) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402312073f00000000000109022400010000a0000904000002030002000921000000012245000905810300"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r7, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000008004d564b"]) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000001c0)={{&(0x7f00006b3000/0x1000)=nil, 0x1000}}) syz_usb_control_io(r4, &(0x7f0000000140)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='P#E\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) 568.817306ms ago: executing program 1 (id=901): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x4, &(0x7f0000000040)={0x51, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000100)={0xa, @pix_mp={0x1ff, 0x0, 0x34324d59, 0x2, 0x2, [{0x9, 0x4}, {0x7, 0x2}, {0x91a, 0x9}, {0x7fffffff, 0x1}, {0x7, 0x3}, {0x6, 0x2}, {0x7fffffff, 0x74e5}, {0x8, 0x7}], 0x98, 0x1, 0x0, 0x0, 0x3}}) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) execve(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000580)={[&(0x7f0000000600)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f00000002c0)='-#\x00', &(0x7f0000000300)='skcipher\x00', &(0x7f0000000540)='$\x00\x00\x00\x00']}) 568.197067ms ago: executing program 3 (id=902): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, 0x0, 0x0) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) read$nci(r1, &(0x7f0000000100)=""/107, 0x6b) write$nci(r1, &(0x7f00000024c0)=ANY=[], 0x4) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') 497.030181ms ago: executing program 3 (id=903): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x6c, "ef97a16a9bb9a3a008816c2db689d76b29688b57ea6dc68e1f782bc85f04f8482d13cbdad14e78e3be570d2f1bf5ebbaeb9b85d86a430cae3c222e8ad93b99753ddd6dd193afd48df2d970b06b759ead383fa643a26670ad6f339bbcefc5307704f48ba02f5624192d477052"}, &(0x7f0000000080)=0x74) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={r1, 0x2, 0x0, 0x8, 0x4}, &(0x7f0000000100)=0x18) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xb, [{{0x9, 0x2, 0x48}}]}}, 0x0) 0s ago: executing program 1 (id=904): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x900, 0x12) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r3, 0x890c, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x42, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x8, 0x20480) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r7, &(0x7f0000000100)=[{{r8, r9/1000+10000}, 0x14, 0x7ff, 0x3}, {{}, 0x16, 0xf}], 0x30) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f00000001c0)={0x2, 'bond_slave_0\x00', {0x6}, 0xfff8}) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="53f655140000001000010000000000000000000500000a40000000060a01040000000000000000871cbc2322957c9182ed0a0000060900080073797a310000000014000480100001800800010066696200040002800900020073797a3200200000140000001100010000000000000000000000000afa4bcd2f054fb288e474a44af2b5fc494ee81e2a923317a924154817f27713db9bd7e96f839c8dd2f6b44646ef06070e9f8ecc8501248e631affffffff"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000080) kernel console output (not intermixed with test programs): 89.892983][ T6105] binder: 6092:6105 ioctl c018620b 0 returned -14 [ 89.902907][ T6105] binder: 6092:6105 ioctl c018620b 0 returned -14 [ 89.910034][ T6105] binder: 6092:6105 ioctl c018620b 0 returned -14 [ 89.918889][ T6105] binder: 6092:6105 ioctl c018620b 0 returned -14 [ 89.934168][ T6105] binder: 6092:6105 ioctl c018620b 0 returned -14 [ 89.958688][ T6105] binder: 6092:6105 ioctl c018620b 0 returned -14 [ 89.968573][ T6105] binder: 6092:6105 ioctl c018620b 0 returned -14 [ 89.982780][ T6105] binder: 6092:6105 ioctl c018620b 0 returned -14 [ 89.989700][ T6105] binder: 6092:6105 ioctl c018620b 0 returned -14 [ 89.997084][ T6105] binder: 6092:6105 ioctl c018620b 0 returned -14 [ 90.004109][ T6105] binder: 6092:6105 ioctl c018620b 0 returned -14 [ 90.010807][ T6105] binder: 6092:6105 ioctl c018620b 0 returned -14 [ 90.045956][ T6105] binder: 6092:6105 ioctl c018620b 0 returned -14 [ 90.052792][ T6105] binder: 6092:6105 ioctl c018620b 0 returned -14 [ 90.113803][ T6105] binder: 6092:6105 ioctl c018620b 0 returned -14 [ 90.139959][ T6105] binder: 6092:6105 ioctl c018620b 0 returned -14 [ 90.156869][ T6105] binder: 6092:6105 ioctl c018620b 0 returned -14 [ 90.173820][ T6105] binder: 6092:6105 ioctl c018620b 0 returned -14 [ 90.196507][ T5867] usb 2-1: USB disconnect, device number 4 [ 90.227451][ T980] usb 4-1: USB disconnect, device number 5 [ 90.451325][ T5967] usb 1-1: USB disconnect, device number 3 [ 90.475019][ T5967] option 1-1:0.131: device disconnected [ 90.526222][ T6131] netlink: 'syz.1.55': attribute type 12 has an invalid length. [ 90.539504][ T6131] netlink: 132 bytes leftover after parsing attributes in process `syz.1.55'. [ 90.797631][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 90.936586][ T24] usb 2-1: device descriptor read/64, error -71 [ 90.986022][ T5967] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.991313][ T6150] netlink: 260 bytes leftover after parsing attributes in process `syz.3.58'. [ 91.158422][ T5967] usb 1-1: Using ep0 maxpacket: 16 [ 91.170592][ T5967] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.183418][ T5967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 91.187090][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 91.205312][ T5967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 91.218362][ T5967] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 91.228900][ T5967] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.248788][ T5967] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 91.264000][ T5967] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 91.272506][ T5967] usb 1-1: Manufacturer: syz [ 91.283419][ T5967] usb 1-1: config 0 descriptor?? [ 91.355816][ T24] usb 2-1: device descriptor read/64, error -71 [ 91.385565][ T1210] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 91.466511][ T24] usb usb2-port1: attempt power cycle [ 91.537368][ T1210] usb 3-1: Using ep0 maxpacket: 8 [ 91.557460][ T1210] usb 3-1: unable to get BOS descriptor or descriptor too short [ 91.585573][ T5967] rc_core: IR keymap rc-hauppauge not found [ 91.591647][ T1210] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 91.600191][ T5967] Registered IR keymap rc-empty [ 91.608655][ T1210] usb 3-1: can't read configurations, error -71 [ 91.621179][ T5967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 91.646185][ T5967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 91.666476][ T5967] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 91.679643][ T5967] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 91.694397][ T5967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 91.715624][ T5967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 91.735737][ T5967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 91.755686][ T5967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 91.775608][ T5967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 91.795689][ T5967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 91.805615][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 91.816217][ T5967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 91.827352][ T24] usb 2-1: device descriptor read/8, error -71 [ 91.835549][ T5967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 91.855693][ T5967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 91.875697][ T5967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 91.897709][ T5967] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 91.906084][ T5967] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 91.922395][ T5967] usb 1-1: USB disconnect, device number 4 [ 92.065574][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 92.089545][ T24] usb 2-1: device descriptor read/8, error -71 [ 92.188743][ T6177] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.215813][ T24] usb usb2-port1: unable to enumerate USB device [ 92.231836][ T6179] netlink: 264 bytes leftover after parsing attributes in process `syz.2.68'. [ 92.394130][ T6188] hpfs: Bad magic ... probably not HPFS [ 92.415667][ T5967] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 92.436148][ T5867] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 92.555545][ T5967] usb 1-1: device descriptor read/64, error -71 [ 92.585620][ T5867] usb 4-1: device descriptor read/64, error -71 [ 92.765617][ T1210] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 92.795535][ T5967] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 92.835614][ T5867] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 92.895617][ T1210] usb 3-1: device descriptor read/64, error -71 [ 92.925571][ T5967] usb 1-1: device descriptor read/64, error -71 [ 92.965629][ T5867] usb 4-1: device descriptor read/64, error -71 [ 93.036977][ T5967] usb usb1-port1: attempt power cycle [ 93.075957][ T5867] usb usb4-port1: attempt power cycle [ 93.135575][ T1210] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 93.275629][ T1210] usb 3-1: device descriptor read/64, error -71 [ 93.375552][ T5967] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 93.396044][ T1210] usb usb3-port1: attempt power cycle [ 93.398748][ T5967] usb 1-1: device descriptor read/8, error -71 [ 93.417308][ T5867] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 93.436460][ T5867] usb 4-1: device descriptor read/8, error -71 [ 93.645582][ T5967] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 93.666280][ T5967] usb 1-1: device descriptor read/8, error -71 [ 93.675764][ T5867] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 93.696283][ T5867] usb 4-1: device descriptor read/8, error -71 [ 93.745671][ T1210] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 93.766054][ T1210] usb 3-1: device descriptor read/8, error -71 [ 93.785798][ T5967] usb usb1-port1: unable to enumerate USB device [ 93.805832][ T5867] usb usb4-port1: unable to enumerate USB device [ 93.926470][ T5910] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 94.005621][ T1210] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 94.026287][ T1210] usb 3-1: device descriptor read/8, error -71 [ 94.078808][ T5910] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.090509][ T5910] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 94.101702][ T5910] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 94.113093][ T5910] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 94.122169][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.133807][ T6192] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 94.141856][ T1210] usb usb3-port1: unable to enumerate USB device [ 95.528045][ T5910] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 95.553092][ T5910] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input7 [ 95.648699][ T5967] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 95.735900][ T5910] usb 2-1: USB disconnect, device number 9 [ 95.741917][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 95.776492][ T5867] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 95.828612][ T5967] usb 1-1: Using ep0 maxpacket: 32 [ 95.866417][ T5967] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 95.882694][ T5967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.911877][ T5967] usb 1-1: Product: syz [ 95.919879][ T5967] usb 1-1: Manufacturer: syz [ 95.924506][ T5967] usb 1-1: SerialNumber: syz [ 95.933246][ T5967] usb 1-1: config 0 descriptor?? [ 95.945168][ T5967] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 95.962251][ T30] audit: type=1804 audit(1757858457.851:2): pid=6219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.82" name="/newroot/31/file1/cgroup.controllers" dev="tmpfs" ino=2 res=1 errno=0 [ 95.963514][ T5867] usb 4-1: Using ep0 maxpacket: 8 [ 96.011951][ T5867] usb 4-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=81.67 [ 96.014296][ T30] audit: type=1800 audit(1757858457.881:3): pid=6219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.82" name="cgroup.controllers" dev="tmpfs" ino=2 res=0 errno=0 [ 96.022131][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.053414][ T5867] usb 4-1: Product: syz [ 96.082557][ T5867] usb 4-1: Manufacturer: syz [ 96.091869][ T5867] usb 4-1: SerialNumber: syz [ 96.113007][ T5867] usb 4-1: config 0 descriptor?? [ 96.129381][ T5867] ipw 4-1:0.0: IPWireless converter converter detected [ 96.272254][ T6226] tap0: tun_chr_ioctl cmd 1074025676 [ 96.277826][ T6226] tap0: owner set to 0 [ 96.339324][ T5910] usb 4-1: USB disconnect, device number 10 [ 96.354692][ T5910] ipw 4-1:0.0: device disconnected [ 96.443740][ T6228] mmap: syz.2.85 (6228) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.305525][ T1210] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 97.368457][ T5967] gspca_topro: Sensor cx0342 [ 97.450386][ T6272] capability: warning: `syz.3.102' uses 32-bit capabilities (legacy support in use) [ 97.465593][ T1210] usb 3-1: device descriptor read/64, error -71 [ 97.705606][ T1210] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 97.855569][ T1210] usb 3-1: device descriptor read/64, error -71 [ 97.966039][ T1210] usb usb3-port1: attempt power cycle [ 97.995541][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 98.160224][ T24] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 98.169486][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.177640][ T24] usb 4-1: Product: syz [ 98.181982][ T24] usb 4-1: Manufacturer: syz [ 98.186633][ T24] usb 4-1: SerialNumber: syz [ 98.194013][ T24] usb 4-1: config 0 descriptor?? [ 98.305655][ T1210] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 98.330943][ T1210] usb 3-1: device descriptor read/8, error -71 [ 98.585605][ T1210] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 98.606797][ T1210] usb 3-1: device descriptor read/8, error -71 [ 98.630467][ T980] usb 1-1: USB disconnect, device number 9 [ 98.730748][ T1210] usb usb3-port1: unable to enumerate USB device [ 98.755929][ T5967] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 98.919290][ T5967] usb 2-1: Using ep0 maxpacket: 8 [ 98.935101][ T5967] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 98.952565][ T5967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.961946][ T5967] usb 2-1: Product: syz [ 98.966584][ T5967] usb 2-1: Manufacturer: syz [ 98.971307][ T5967] usb 2-1: SerialNumber: syz [ 98.986611][ T5967] usb 2-1: config 0 descriptor?? [ 99.198028][ T5967] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 99.215756][ T24] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 99.226997][ T24] asix 4-1:0.0: probe with driver asix failed with error -71 [ 99.239881][ T24] usb 4-1: USB disconnect, device number 11 [ 99.661017][ T6302] netlink: 'syz.0.111': attribute type 10 has an invalid length. [ 99.684315][ T6302] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 99.926933][ T6312] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.000621][ T6314] trusted_key: syz.3.115 sent an empty control message without MSG_MORE. [ 100.171173][ T6326] fuse: Unknown parameter 'ndu|m0NƀJp:/O0pJհwyƲ e:-"?' [ 100.236098][ T6328] sctp: [Deprecated]: syz.2.117 (pid 6328) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.236098][ T6328] Use struct sctp_sack_info instead [ 100.495756][ T980] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 100.597835][ T5867] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 100.647621][ T980] usb 3-1: unable to get BOS descriptor or descriptor too short [ 100.657608][ T980] usb 3-1: config 66 interface 0 has no altsetting 0 [ 100.666639][ T980] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 100.676535][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.684557][ T980] usb 3-1: Product: syz [ 100.689718][ T980] usb 3-1: Manufacturer: syz [ 100.694320][ T980] usb 3-1: SerialNumber: syz [ 100.769003][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.780170][ T5867] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 100.789311][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.800837][ T5867] usb 4-1: config 0 descriptor?? [ 100.829989][ T5967] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 100.841393][ T5967] dvbdev: DVB: registering new adapter (Terratec H7) [ 100.848616][ T5967] usb 2-1: media controller created [ 100.855348][ T5967] usb read operation failed. (-32) [ 100.869064][ T5967] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 100.927340][ T980] ati_remote2 3-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 100.962104][ T980] usb 3-1: USB disconnect, device number 16 [ 101.123141][ T6338] netlink: 32 bytes leftover after parsing attributes in process `syz.1.122'. [ 101.261932][ T6340] netlink: 188 bytes leftover after parsing attributes in process `syz.1.123'. [ 101.277009][ T6340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.288087][ T6340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.668697][ T6348] netlink: 'syz.2.126': attribute type 9 has an invalid length. [ 101.677105][ T6348] netlink: 44 bytes leftover after parsing attributes in process `syz.2.126'. [ 101.871960][ T6353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.880896][ T6353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.055580][ T980] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 102.219621][ T980] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.230051][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 102.241277][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.255262][ T980] usb 3-1: New USB device found, idVendor=d405, idProduct=a0d2, bcdDevice=7d.d1 [ 102.264969][ T980] usb 3-1: New USB device strings: Mfr=155, Product=202, SerialNumber=0 [ 102.273641][ T980] usb 3-1: Product: syz [ 102.279676][ T980] usb 3-1: Manufacturer: syz [ 102.289750][ T980] usb 3-1: config 0 descriptor?? [ 102.441771][ T30] audit: type=1326 audit(1757858464.331:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.1.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3eb8eba9 code=0x50000 [ 102.469113][ T30] audit: type=1326 audit(1757858464.331:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.1.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3eb8eba9 code=0x50000 [ 102.491894][ T30] audit: type=1326 audit(1757858464.331:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.1.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3eb8eba9 code=0x50000 [ 102.518387][ T30] audit: type=1326 audit(1757858464.331:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.1.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3eb8eba9 code=0x50000 [ 102.540256][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.548354][ T30] audit: type=1326 audit(1757858464.331:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.1.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3eb8eba9 code=0x50000 [ 102.554627][ T6356] fuse: Unknown parameter 'group_i' [ 102.570202][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.572231][ T30] audit: type=1326 audit(1757858464.331:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.1.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3eb8eba9 code=0x50000 [ 102.604035][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.610174][ T30] audit: type=1326 audit(1757858464.331:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.1.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3eb8eba9 code=0x50000 [ 102.632151][ T30] audit: type=1326 audit(1757858464.331:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.1.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3eb8eba9 code=0x50000 [ 102.654111][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.660415][ T30] audit: type=1326 audit(1757858464.331:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.1.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3eb8eba9 code=0x50000 [ 102.683917][ T30] audit: type=1326 audit(1757858464.331:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.1.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3eb8eba9 code=0x50000 [ 102.705842][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.224620][ T6360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.238488][ T6360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.382715][ T6364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.400681][ T5867] usbhid 4-1:0.0: can't add hid device: -71 [ 103.401441][ T6364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.414300][ T5867] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 103.448599][ T5867] usb 4-1: USB disconnect, device number 12 [ 103.455678][ T6364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.502073][ T6364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.515603][ T6364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.528851][ T6364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.598755][ T6370] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 103.621879][ T6364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.636986][ T6364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.795571][ T5867] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 103.965644][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 103.976265][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 103.997001][ T5867] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 104.008231][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.031830][ T5867] usb 4-1: config 0 descriptor?? [ 104.355650][ T6377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.369119][ T6377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.454061][ T6367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.463686][ T6367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.496795][ T5867] mcp2200 0003:04D8:00DF.0004: USB HID v0.04 Device [HID 04d8:00df] on usb-dummy_hcd.3-1/input0 [ 104.530830][ T6381] syzkaller1: entered promiscuous mode [ 104.537105][ T6381] syzkaller1: entered allmulticast mode [ 104.684432][ T6383] netlink: 'syz.1.137': attribute type 3 has an invalid length. [ 104.694382][ T6383] netlink: 132 bytes leftover after parsing attributes in process `syz.1.137'. [ 104.708786][ T6383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.709101][ T5867] usb 4-1: USB disconnect, device number 13 [ 104.718646][ T6383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.801143][ T5967] usb 3-1: USB disconnect, device number 17 [ 104.970279][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'. [ 105.369684][ T6403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.393768][ T6403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.868611][ T6415] netlink: 288 bytes leftover after parsing attributes in process `syz.2.150'. [ 106.192625][ T6430] hpfs: Bad magic ... probably not HPFS [ 106.325230][ T6434] tmpfs: Unknown parameter 'usrquota0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.325230][ T6434] 0 [ 106.510753][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.586375][ T5867] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 106.651308][ T6441] comedi: No check for data length of config insn id 134217760 is implemented [ 106.669406][ T6441] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 106.679108][ T6441] comedi: Assuming n=15 is correct [ 106.684858][ T6444] comedi: No check for data length of config insn id 134217760 is implemented [ 106.694249][ T6444] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 106.711195][ T6444] comedi: Assuming n=15 is correct [ 106.755752][ T5867] usb 4-1: Using ep0 maxpacket: 32 [ 106.774696][ T5867] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.793023][ T5867] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.802937][ T5867] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.818784][ T5867] usb 4-1: config 0 interface 0 has no altsetting 0 [ 106.825490][ T5867] usb 4-1: New USB device found, idVendor=04b3, idProduct=3109, bcdDevice= 0.00 [ 106.834656][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.849187][ T5867] usb 4-1: config 0 descriptor?? [ 106.895702][ T5930] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 107.040923][ T6455] bpf: Bad value for 'uid' [ 107.057965][ T5930] usb 3-1: config 156 has an invalid descriptor of length 255, skipping remainder of the config [ 107.069718][ T5930] usb 3-1: too many endpoints for config 156 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 107.080786][ T5930] usb 3-1: config 156 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 107.097139][ T5930] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 107.110343][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.118812][ T5930] usb 3-1: Product: syz [ 107.123051][ T5930] usb 3-1: Manufacturer: syz [ 107.127729][ T5930] usb 3-1: SerialNumber: syz [ 107.272652][ T5867] lenovo 0003:04B3:3109.0005: item fetching failed at offset 5/9 [ 107.287238][ T5867] lenovo 0003:04B3:3109.0005: hid_parse failed [ 107.293698][ T5867] lenovo 0003:04B3:3109.0005: probe with driver lenovo failed with error -22 [ 107.359316][ T5930] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 107.380538][ T5930] dvb_usb_af9035 3-1:156.0: probe with driver dvb_usb_af9035 failed with error -22 [ 107.393953][ T5930] usb 3-1: USB disconnect, device number 18 [ 107.405139][ T6461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.418115][ T6461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.463876][ T5867] usb 4-1: USB disconnect, device number 14 [ 108.146782][ T5867] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 108.162978][ T6479] nilfs2: Unknown parameter 'barrier' [ 108.215681][ T5862] Bluetooth: hci3: command tx timeout [ 108.268001][ T6492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.277504][ T6492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.305978][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 108.325376][ T5867] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 108.334903][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.354464][ T5867] usb 3-1: Product: syz [ 108.358835][ T5867] usb 3-1: Manufacturer: syz [ 108.363805][ T5867] usb 3-1: SerialNumber: syz [ 108.371311][ T5867] usb 3-1: config 0 descriptor?? [ 108.380466][ T5867] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 108.605571][ T5867] usb 3-1: clie_3_5_startup: get interface number failed: -32 [ 108.613370][ T5867] visor 3-1:0.0: probe with driver visor failed with error -32 [ 108.804873][ T9] usb 3-1: USB disconnect, device number 19 [ 109.074159][ T6500] lo speed is unknown, defaulting to 1000 [ 109.081400][ T6500] lo speed is unknown, defaulting to 1000 [ 109.089467][ T6500] lo speed is unknown, defaulting to 1000 [ 109.102881][ T6500] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 109.120714][ T6500] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 109.153136][ T6500] lo speed is unknown, defaulting to 1000 [ 109.162068][ T6500] lo speed is unknown, defaulting to 1000 [ 109.169353][ T6500] lo speed is unknown, defaulting to 1000 [ 109.178588][ T6500] lo speed is unknown, defaulting to 1000 [ 109.187051][ T6500] lo speed is unknown, defaulting to 1000 [ 109.260702][ T5862] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 109.270232][ T5862] Bluetooth: hci1: Injecting HCI hardware error event [ 109.279807][ T5872] Bluetooth: hci1: hardware error 0x00 [ 109.443602][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.181'. [ 109.450965][ T6513] netlink: 9087 bytes leftover after parsing attributes in process `syz.2.181'. [ 109.500575][ T5862] Bluetooth: hci1: unexpected event for opcode 0x000c [ 109.789836][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 109.935614][ T24] usb 3-1: device descriptor read/64, error -71 [ 110.185770][ T5930] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 110.193450][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 110.328493][ T5930] usb 4-1: device descriptor read/64, error -71 [ 110.344303][ T24] usb 3-1: device descriptor read/64, error -71 [ 110.466763][ T24] usb usb3-port1: attempt power cycle [ 110.595525][ T5930] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 110.614828][ T6558] Bluetooth: MGMT ver 1.23 [ 110.725637][ T5930] usb 4-1: device descriptor read/64, error -71 [ 110.726083][ T6565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.743836][ T6565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.815613][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 110.836404][ T5930] usb usb4-port1: attempt power cycle [ 110.841887][ T24] usb 3-1: device descriptor read/8, error -71 [ 111.085621][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 111.106604][ T24] usb 3-1: device descriptor read/8, error -71 [ 111.185564][ T5930] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 111.206291][ T5930] usb 4-1: device descriptor read/8, error -71 [ 111.217900][ T24] usb usb3-port1: unable to enumerate USB device [ 111.335834][ T5872] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 111.446183][ T5930] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 111.477467][ T5930] usb 4-1: device descriptor read/8, error -71 [ 111.540268][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 111.605914][ T5930] usb usb4-port1: unable to enumerate USB device [ 111.728350][ T6586] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 112.388907][ T6588] ./file0: Can't lookup blockdev [ 112.398643][ T6588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.409195][ T6588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.419643][ T6588] ./file0: Can't lookup blockdev [ 113.015903][ T5930] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 113.187917][ T5930] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 113.207378][ T5930] usb 3-1: config 1 has no interface number 0 [ 113.229375][ T5930] usb 3-1: config 1 interface 105 has no altsetting 0 [ 113.247759][ T5930] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 113.258390][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.267002][ T5930] usb 3-1: Product: syz [ 113.276627][ T5930] usb 3-1: Manufacturer: syz [ 113.281293][ T5930] usb 3-1: SerialNumber: syz [ 113.405538][ T5867] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 113.565664][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 113.572679][ T5867] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 113.584360][ T5867] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.609111][ T5867] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.620006][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.628488][ T5867] usb 4-1: Product: syz [ 113.632889][ T5867] usb 4-1: Manufacturer: syz [ 113.641847][ T5867] usb 4-1: SerialNumber: syz [ 113.668871][ T6617] 9pnet_fd: Insufficient options for proto=fd [ 113.677183][ T6617] netlink: 20 bytes leftover after parsing attributes in process `syz.1.214'. [ 113.794922][ T6619] 9pnet_virtio: no channels available for device ./file0 [ 113.865758][ T6604] netlink: 164 bytes leftover after parsing attributes in process `syz.3.209'. [ 113.905995][ T5867] usb 4-1: 0:2 : does not exist [ 113.934877][ T5867] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 113.959994][ T5867] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 113.984083][ T5867] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 114.006514][ T5867] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 114.080954][ T5867] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 114.103213][ T5930] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 114.124387][ T5867] usb 4-1: USB disconnect, device number 19 [ 114.144535][ T5930] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 114.176545][ T5930] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 114.229789][ T5930] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a0:b4:1c:e0:4e:4f [ 114.426094][ T6643] process 'syz.3.219' launched '/dev/fd/5' with NULL argv: empty string added [ 114.471722][ T6646] Mount JFS Failure: -22 [ 114.487719][ T6646] jfs_mount failed w/return code = -22 [ 114.564721][ T6649] block device autoloading is deprecated and will be removed. [ 114.670063][ T6655] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 114.694339][ T6654] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 114.875186][ T6668] netlink: 'syz.3.224': attribute type 12 has an invalid length. [ 114.909063][ T6669] netlink: 'syz.3.224': attribute type 12 has an invalid length. [ 115.062439][ T6677] netlink: 16 bytes leftover after parsing attributes in process `syz.1.227'. [ 115.103630][ T6680] netlink: 'syz.1.227': attribute type 1 has an invalid length. [ 115.326003][ T5867] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 115.390222][ T6694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.401323][ T6694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.500234][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 115.519421][ T5867] usb 4-1: config 89 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.550847][ T5867] usb 4-1: config 89 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.570903][ T5867] usb 4-1: config 89 interface 0 has no altsetting 0 [ 115.581509][ T5867] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice=80.00 [ 115.594331][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 115.604539][ T5867] usb 4-1: Product: syz [ 115.793793][ T5967] usb 3-1: USB disconnect, device number 24 [ 115.815702][ T5967] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 115.846109][ T6679] netlink: 16182 bytes leftover after parsing attributes in process `syz.3.228'. [ 115.911314][ T6708] tmpfs: Unknown parameter 'uvota' [ 115.957699][ T5967] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 116.005630][ T5967] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 116.036822][ T5967] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 116.495003][ T5867] usbhid 4-1:89.0: can't add hid device: -71 [ 116.504498][ T5867] usbhid 4-1:89.0: probe with driver usbhid failed with error -71 [ 116.512740][ T980] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 116.554111][ T5867] usb 4-1: USB disconnect, device number 20 [ 116.689417][ T980] usb 3-1: No LPM exit latency info found, disabling LPM. [ 116.720637][ T980] usb 3-1: config 241 has an invalid interface number: 29 but max is 0 [ 116.740676][ T980] usb 3-1: config 241 contains an unexpected descriptor of type 0x2, skipping [ 116.753810][ T980] usb 3-1: config 241 has no interface number 0 [ 116.772906][ T980] usb 3-1: config 241 interface 29 altsetting 4 endpoint 0x8 has invalid wMaxPacketSize 0 [ 116.794480][ T980] usb 3-1: config 241 interface 29 altsetting 4 endpoint 0x9 has invalid maxpacket 512, setting to 0 [ 116.808831][ T980] usb 3-1: config 241 interface 29 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 116.825362][ T980] usb 3-1: config 241 interface 29 altsetting 4 endpoint 0xA has invalid maxpacket 16, setting to 8 [ 116.845590][ T980] usb 3-1: config 241 interface 29 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 116.859316][ T980] usb 3-1: config 241 interface 29 altsetting 4 endpoint 0xB has invalid maxpacket 16, setting to 8 [ 116.883989][ T980] usb 3-1: config 241 interface 29 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 116.898386][ T980] usb 3-1: config 241 interface 29 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 116.915734][ T980] usb 3-1: config 241 interface 29 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 116.930611][ T980] usb 3-1: config 241 interface 29 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 116.947879][ T980] usb 3-1: config 241 interface 29 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 116.959964][ T980] usb 3-1: config 241 interface 29 altsetting 4 endpoint 0xE has invalid maxpacket 64, setting to 8 [ 116.979059][ T980] usb 3-1: config 241 interface 29 has no altsetting 0 [ 117.533865][ T6763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.562989][ T6763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.889878][ T6776] fuse: Unknown parameter '*E*6Y%#' [ 118.225586][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 118.324026][ T6784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.335260][ T6784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.358368][ T6784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.367569][ T6784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.378268][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 118.390882][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 118.402526][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 118.413568][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 118.424133][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.441578][ T24] usb 4-1: config 0 descriptor?? [ 118.469539][ T24] em28xx 4-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 118.474111][ T6789] netlink: 'syz.1.250': attribute type 10 has an invalid length. [ 118.539912][ T6790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.552598][ T6790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.564234][ T6790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.574768][ T6790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.685732][ T5967] usb 4-1: USB disconnect, device number 21 [ 119.027658][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 119.027676][ T30] audit: type=1800 audit(1757858480.921:74): pid=6802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.253" name="/dri/card1" dev="devtmpfs" ino=628 res=0 errno=0 [ 119.116660][ T24] IPVS: starting estimator thread 0... [ 119.205963][ T6808] IPVS: using max 34 ests per chain, 81600 per kthread [ 119.298576][ T980] usb 3-1: New USB device found, idVendor=0403, idProduct=e80e, bcdDevice=bc.fe [ 119.335744][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.375658][ T980] usb 3-1: can't set config #241, error -71 [ 119.401397][ T980] usb 3-1: USB disconnect, device number 25 [ 119.625284][ T6831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.642411][ T6831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.688265][ T6831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.703895][ T6831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.874854][ T6844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.892841][ T6844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.918508][ T6840] kvm_intel: kvm [6834]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xeec7f47d563e95bb [ 119.995642][ T24] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 120.157481][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.167800][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.179600][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 120.188900][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 120.197060][ T24] usb 4-1: SerialNumber: syz [ 120.212035][ T24] usb 4-1: 0:2 : does not exist [ 120.221047][ T24] usb 4-1: unit 247 not found! [ 120.265725][ T980] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 120.440206][ T980] usb 3-1: unable to get BOS descriptor or descriptor too short [ 120.450361][ T980] usb 3-1: not running at top speed; connect to a high speed hub [ 120.467616][ T980] usb 3-1: config 2 has an invalid interface number: 59 but max is 0 [ 120.478689][ T980] usb 3-1: config 2 has no interface number 0 [ 120.490587][ T9] usb 4-1: USB disconnect, device number 22 [ 120.500524][ T980] usb 3-1: config 2 interface 59 has no altsetting 0 [ 120.512969][ T980] usb 3-1: New USB device found, idVendor=06cd, idProduct=0102, bcdDevice=50.1e [ 120.524520][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.534119][ T980] usb 3-1: Product: 画⒗ꪃ轏焬픳㭿涰䪠섰銮‱똸墮䘭䑙鿒ᅉ堨ᙘŀ䬰陃邷혙䧛ீ闌뢓㝸淠눐蘅ㄈ뷜؅ᥪ㗘♀鍙凿㧟쇢䖄讲麀敢稬枿볞誋눝㍰┤큋ᴉ䭑䛚♗쵌।駙߬鳰౽輥舖걜螫 [ 120.565360][ T980] usb 3-1: Manufacturer: 뵄汧⚑ [ 120.571076][ T980] usb 3-1: SerialNumber: syz [ 120.774155][ T6856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.784214][ T6856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.799065][ T6856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.805370][ T980] keyspan 3-1:2.59: Keyspan - (without firmware) converter detected [ 120.808269][ T6856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.830266][ T980] usb 3-1: USB disconnect, device number 26 [ 120.837694][ T980] keyspan 3-1:2.59: device disconnected [ 121.315560][ T980] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 121.478541][ T980] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.500409][ T980] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.514946][ T980] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 121.527697][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 121.533864][ T6868] 8021q: VLANs not supported on nr0 [ 121.537064][ T980] usb 4-1: SerialNumber: syz [ 121.643815][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.275'. [ 121.711543][ T6873] netlink: 'syz.2.276': attribute type 17 has an invalid length. [ 121.775685][ T980] usb 4-1: 0:2 : does not exist [ 121.787547][ T980] usb 4-1: unit 5: unexpected type 0x0b [ 121.837412][ T980] usb 4-1: USB disconnect, device number 23 [ 121.912178][ T6001] udevd[6001]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.925572][ T6880] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 122.121146][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.281'. [ 123.765517][ T5910] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 123.945524][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 123.945576][ T5967] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 123.957231][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.992837][ T5910] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 124.009482][ T5910] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 124.075509][ T5910] usb 4-1: Manufacturer: syz [ 124.123226][ T5910] usb 4-1: config 0 descriptor?? [ 124.351435][ T980] usb 4-1: USB disconnect, device number 24 [ 124.722603][ T6971] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 124.737496][ T6971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.937123][ T6986] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 124.944192][ T6986] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 124.954588][ T6986] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 124.963662][ T6986] comedi comedi3: 8255: I/O port conflict (0xd,4) [ 124.975752][ T6986] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 124.982590][ T6986] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 124.992515][ T6986] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 125.000548][ T6986] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 125.014216][ T6986] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 125.021287][ T6986] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 125.154292][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.313'. [ 125.235675][ T5967] usb 3-1: device descriptor read/64, error -71 [ 125.485607][ T5967] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 125.639294][ T5967] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 125.650313][ T5967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.661511][ T5967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.671295][ T5967] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 125.686032][ T5967] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 125.695304][ T5967] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 125.704809][ T5967] usb 3-1: Manufacturer: syz [ 125.711671][ T5967] usb 3-1: config 0 descriptor?? [ 126.129394][ T6979] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 126.139076][ T6979] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 127.737434][ T7003] netlink: 36 bytes leftover after parsing attributes in process `syz.1.316'. [ 127.747160][ T7005] loop7: detected capacity change from 0 to 3 [ 127.874494][ T5967] usbhid 3-1:0.0: can't add hid device: -71 [ 127.891050][ T5967] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 127.922204][ T5967] usb 3-1: USB disconnect, device number 28 [ 127.979167][ T7014] syz.2.318 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 128.010715][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 128.018882][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 128.059404][ T10] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 128.186597][ T9] usb 4-1: device descriptor read/64, error -71 [ 128.445517][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 128.585733][ T9] usb 4-1: device descriptor read/64, error -71 [ 128.699414][ T9] usb usb4-port1: attempt power cycle [ 128.751913][ T7043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.763028][ T7043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.774546][ T7043] program syz.1.326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.065628][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 129.097148][ T9] usb 4-1: device descriptor read/8, error -71 [ 129.155555][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 129.305617][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 129.326847][ T10] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 129.339070][ T7047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.347569][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 129.355161][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.355791][ T7047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.365732][ T10] usb 3-1: Product: syz [ 129.375697][ T10] usb 3-1: Manufacturer: syz [ 129.377234][ T7047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.381553][ T10] usb 3-1: SerialNumber: syz [ 129.391435][ T7047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.403667][ T9] usb 4-1: device descriptor read/8, error -71 [ 129.412021][ T10] usb 3-1: config 0 descriptor?? [ 129.518087][ T9] usb usb4-port1: unable to enumerate USB device [ 129.630548][ T10] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 129.641134][ T10] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 129.652263][ T10] usb 3-1: USB disconnect, device number 29 [ 130.290140][ T7065] overlay: filesystem on ./bus not supported as upperdir [ 130.672975][ T7080] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 130.711778][ T7083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.725250][ T7083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.738626][ T7080] CIFS mount error: No usable UNC path provided in device string! [ 130.738626][ T7080] [ 130.743405][ T7083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.761093][ T7083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.771640][ T7080] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 130.775101][ T7083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.816595][ T7083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.891111][ T7089] netlink: 24 bytes leftover after parsing attributes in process `syz.2.338'. [ 130.998413][ T7092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.012674][ T7092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.235543][ T5910] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 131.470831][ T7098] netlink: 160 bytes leftover after parsing attributes in process `syz.0.340'. [ 131.487124][ T7096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.512225][ T7096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.528635][ T7096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.540335][ T7096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.596077][ T7096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.611987][ T7096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.621559][ T7096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.633075][ T7096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.652811][ T7096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.675802][ T7096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.693227][ T7096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.713656][ T7096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.045497][ T5910] usb 3-1: unable to get BOS descriptor or descriptor too short [ 132.071299][ T5910] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 132.089314][ T5910] usb 3-1: can't read configurations, error -71 [ 132.285616][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 132.457344][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 132.468807][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 132.615681][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 132.626037][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 132.636227][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 132.645363][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.672768][ T9] usb 4-1: config 0 descriptor?? [ 132.956226][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.963903][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.016730][ T7137] ubi7: attaching mtd0 [ 133.023547][ T7137] ubi7: scanning is finished [ 133.029876][ T7137] ubi7: empty MTD device detected [ 133.078811][ T9] hdpvr 4-1:0.0: firmware version 0x88 dated _=&ˆ}nDT,w#ORCf( [ 133.120077][ T9] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 133.220321][ T7137] ubi7: attached mtd0 (name "mtdram test device", size 0 MiB) [ 133.243191][ T7137] ubi7: PEB size: 4096 bytes (4 KiB), LEB size: 3519 bytes [ 133.266457][ T7137] ubi7: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 133.274149][ T7137] ubi7: VID header offset: 513 (aligned 513), data offset: 577 [ 133.305560][ T7137] ubi7: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 133.312637][ T7137] ubi7: user volume: 0, internal volumes: 1, max. volumes count: 20 [ 133.345701][ T7137] ubi7: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 399803152 [ 133.378586][ T7137] ubi7: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 133.406769][ T7147] ubi7: background thread "ubi_bgt7d" started, PID 7147 [ 133.701293][ T7157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.710383][ T7157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.298517][ T7159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.309986][ T7159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.001993][ T7166] overlayfs: failed to resolve './file1': -2 [ 135.129767][ T7169] pim6reg: entered allmulticast mode [ 135.151396][ T7169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.163326][ T7169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.301549][ T9] hdpvr 4-1:0.0: Could not setup controls [ 135.320773][ T9] hdpvr 4-1:0.0: registering videodev failed [ 135.360153][ T9] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71 [ 135.382857][ T9] usb 4-1: USB disconnect, device number 29 [ 136.245490][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 136.421037][ T10] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 136.430446][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.438929][ T10] usb 3-1: Product: syz [ 136.443632][ T10] usb 3-1: Manufacturer: syz [ 136.448758][ T10] usb 3-1: SerialNumber: syz [ 136.466200][ T10] usb 3-1: config 0 descriptor?? [ 136.683082][ T10] int51x1 3-1:0.0: probe with driver int51x1 failed with error -22 [ 136.885809][ T7194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.899047][ T7194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.913912][ T7194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.927842][ T7194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.961508][ T10] usb 3-1: USB disconnect, device number 32 [ 137.332142][ T7217] netlink: 'syz.2.379': attribute type 10 has an invalid length. [ 137.350451][ T7217] batman_adv: batadv0: Adding interface: team0 [ 137.358214][ T7217] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.385971][ T24] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 137.387879][ T7217] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 137.558105][ T24] usb 4-1: unable to get BOS descriptor set [ 137.564571][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 137.573485][ T24] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 137.585262][ T24] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 137.596128][ T24] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.609036][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 137.617675][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.626979][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.634993][ T24] usb 4-1: Product: syz [ 137.639284][ T24] usb 4-1: Manufacturer: syz [ 137.643886][ T24] usb 4-1: SerialNumber: syz [ 137.651135][ T7203] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 137.658774][ T7203] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 137.737082][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 137.895998][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 137.909238][ T9] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 137.917343][ T9] usb 3-1: can't read configurations, error -22 [ 138.045682][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 138.205579][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 138.219393][ T9] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 138.227757][ T9] usb 3-1: can't read configurations, error -22 [ 138.234548][ T9] usb usb3-port1: attempt power cycle [ 138.578652][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 138.606251][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 138.613566][ T9] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 138.621826][ T9] usb 3-1: can't read configurations, error -22 [ 138.755588][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 138.776182][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 138.783740][ T9] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 138.792080][ T9] usb 3-1: can't read configurations, error -22 [ 138.798830][ T9] usb usb3-port1: unable to enumerate USB device [ 140.083097][ T24] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 140.104420][ T24] usb 4-1: USB disconnect, device number 30 [ 140.397988][ T7240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.387'. [ 140.451102][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 140.469618][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 141.150602][ T7259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.162475][ T7259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.175676][ T7259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.186212][ T7259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.861679][ T7278] netlink: 52 bytes leftover after parsing attributes in process `syz.1.399'. [ 141.896946][ T7281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.397'. [ 142.142112][ T7291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.174173][ T7291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.455654][ T5910] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 142.463570][ T5862] Bluetooth: hci4: command 0x1003 tx timeout [ 142.470787][ T5872] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 142.629259][ T5910] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 142.645511][ T5910] usb 3-1: config 0 has no interface number 0 [ 142.654219][ T5910] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 142.665509][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.673629][ T5910] usb 3-1: Product: syz [ 142.685457][ T5910] usb 3-1: Manufacturer: syz [ 142.690281][ T5910] usb 3-1: SerialNumber: syz [ 142.703255][ T5910] usb 3-1: config 0 descriptor?? [ 143.122628][ T5910] usb 3-1: Firmware: major: 141, minor: 12, hardware type: UNKNOWN (66) [ 143.334633][ T5910] usb 3-1: Read permanent extended address 7c:99:15:b7:83:3f:66:0f from device [ 143.343990][ T5910] usb 3-1: atusb_probe: initialization failed, error = -524 [ 143.351935][ T5910] atusb 3-1:0.128: probe with driver atusb failed with error -524 [ 143.538906][ T5910] usb 3-1: USB disconnect, device number 37 [ 143.861561][ T5967] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 144.047346][ T5967] usb 4-1: config 0 has an invalid interface number: 94 but max is 0 [ 144.059660][ T5967] usb 4-1: config 0 has no interface number 0 [ 144.066406][ T5967] usb 4-1: config 0 interface 94 has no altsetting 0 [ 144.077955][ T5967] usb 4-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=17.17 [ 144.091097][ T5967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.105434][ T5967] usb 4-1: Product: syz [ 144.110171][ T5967] usb 4-1: Manufacturer: syz [ 144.114966][ T5967] usb 4-1: SerialNumber: syz [ 144.137075][ T5967] usb 4-1: config 0 descriptor?? [ 144.254279][ T7303] netlink: 156 bytes leftover after parsing attributes in process `syz.2.407'. [ 145.383283][ T5967] comedi comedi5: This driver needs USB 2.0 to operate. Aborting... [ 145.409460][ T5967] usbduxfast 4-1:0.94: driver 'usbduxfast' failed to auto-configure device. [ 145.449808][ T5967] usb 4-1: USB disconnect, device number 31 [ 145.855555][ T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 146.005659][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 146.012910][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 146.028543][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 199, changing to 11 [ 146.039788][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 41878, setting to 1024 [ 146.058460][ T24] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 146.071883][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.081419][ T24] usb 3-1: Product: syz [ 146.088232][ T24] usb 3-1: Manufacturer: syz [ 146.092858][ T24] usb 3-1: SerialNumber: syz [ 146.100502][ T24] usb 3-1: config 0 descriptor?? [ 146.222673][ T24] rc_core: IR keymap rc-streamzap not found [ 146.242439][ T24] Registered IR keymap rc-empty [ 146.254889][ T24] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 146.278008][ T24] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 146.282516][ T7340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.326882][ T7340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.342146][ T24] usb 3-1: USB disconnect, device number 38 [ 146.396856][ T7345] kAFS: unparsable volume name [ 146.817134][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 146.884038][ T7353] misc userio: No port type given on /dev/userio [ 146.892715][ T7353] misc userio: The device must be registered before sending interrupts [ 146.902708][ T7353] misc userio: The device must be registered before sending interrupts [ 146.960976][ T7353] binder: 7352:7353 ioctl c0306201 2000000001c0 returned -22 [ 146.961206][ T7355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.976353][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 146.985085][ T7355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.003241][ T24] usb 4-1: descriptor type invalid, skip [ 147.010146][ T24] usb 4-1: descriptor type invalid, skip [ 147.017254][ T24] usb 4-1: descriptor type invalid, skip [ 147.023722][ T24] usb 4-1: descriptor type invalid, skip [ 147.034594][ T24] usb 4-1: config 1 interface 0 altsetting 175 bulk endpoint 0x1 has invalid maxpacket 64 [ 147.055605][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 147.073365][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 147.083402][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.091967][ T24] usb 4-1: Product: syz [ 147.096617][ T24] usb 4-1: Manufacturer: syz [ 147.101309][ T24] usb 4-1: SerialNumber: syz [ 147.115323][ T7350] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 147.394980][ T24] usb 4-1: USB disconnect, device number 32 [ 147.515740][ T5967] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 147.554397][ T7366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.566430][ T7366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.709256][ T5967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.720999][ T5967] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 147.730331][ T5967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.741725][ T5967] usb 3-1: config 0 descriptor?? [ 147.952842][ T7364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.967640][ T7364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.980211][ T7364] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 147.987473][ T7364] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 147.994082][ T7364] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 148.001138][ T7364] comedi comedi0: 8255: I/O port conflict (0x1,4) [ 148.007963][ T7364] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4) [ 148.015096][ T7364] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 148.021617][ T7364] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 148.030819][ T7364] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 148.037578][ T7364] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 148.044103][ T7364] comedi comedi0: 8255: I/O port conflict (0x1,4) [ 148.050683][ T7364] comedi comedi0: 8255: I/O port conflict (0x1,4) [ 148.057418][ T7364] comedi comedi0: 8255: I/O port conflict (0x9,4) [ 148.064067][ T7364] comedi comedi0: 8255: I/O port conflict (0x40000,4) [ 148.090791][ T5967] usbhid 3-1:0.0: can't add hid device: -71 [ 148.112045][ T5967] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 148.138608][ T5967] usb 3-1: USB disconnect, device number 39 [ 148.207051][ T7375] pim6reg1: entered promiscuous mode [ 148.212408][ T7375] pim6reg1: entered allmulticast mode [ 148.219135][ T5910] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 148.348126][ T7377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.360169][ T7377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.379932][ T7377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.389542][ T7377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.392454][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.408749][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.418685][ T5910] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 148.428240][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.439246][ T5910] usb 4-1: config 0 descriptor?? [ 148.485674][ T5967] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 148.616592][ T5967] usb 3-1: device descriptor read/64, error -71 [ 148.747461][ T7386] veth1_macvtap: left promiscuous mode [ 148.757501][ T7384] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 148.764069][ T7385] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 148.857508][ T5910] logitech 0003:046D:C29C.0007: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 148.865783][ T5967] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 149.005869][ T5967] usb 3-1: device descriptor read/64, error -71 [ 149.052689][ T7368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.061783][ T7368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.117408][ T5967] usb usb3-port1: attempt power cycle [ 149.147869][ T5910] logitech 0003:046D:C29C.0007: no inputs found [ 149.164440][ T5910] usb 4-1: USB disconnect, device number 33 [ 149.455721][ T5967] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 149.476181][ T5967] usb 3-1: device descriptor read/8, error -71 [ 149.715734][ T5967] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 149.736231][ T5967] usb 3-1: device descriptor read/8, error -71 [ 149.838494][ T7398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.845947][ T5967] usb usb3-port1: unable to enumerate USB device [ 149.848645][ T7398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.935624][ T1227] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 150.087890][ T1227] usb 4-1: Using ep0 maxpacket: 8 [ 150.094512][ T1227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.104514][ T1227] usb 4-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 150.114330][ T1227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.125254][ T1227] usb 4-1: config 0 descriptor?? [ 150.339737][ T1227] usbhid 4-1:0.0: can't add hid device: -71 [ 150.345867][ T1227] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 150.360837][ T1227] usb 4-1: USB disconnect, device number 34 [ 150.498450][ T7402] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 150.785700][ T5872] Bluetooth: hci0: command 0x0401 tx timeout [ 150.961923][ T7411] netlink: 200 bytes leftover after parsing attributes in process `syz.3.441'. [ 151.395800][ T7416] evm: overlay not supported [ 151.410533][ T7416] netlink: 'syz.1.443': attribute type 3 has an invalid length. [ 151.418841][ T7416] netlink: 36 bytes leftover after parsing attributes in process `syz.1.443'. [ 151.474403][ T5872] Bluetooth: hci0: unexpected event for opcode 0x080c [ 151.478059][ T7418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.492170][ T7418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.588128][ T5967] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 151.735695][ T5967] usb 3-1: device descriptor read/64, error -71 [ 151.787750][ T7411] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 151.975582][ T5967] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 152.115532][ T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 152.115703][ T5967] usb 3-1: device descriptor read/64, error -71 [ 152.235983][ T5967] usb usb3-port1: attempt power cycle [ 152.275535][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 152.283978][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 231, changing to 11 [ 152.297214][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.312676][ T24] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a31, bcdDevice= 0.40 [ 152.322061][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.330654][ T24] usb 4-1: Product: syz [ 152.334906][ T24] usb 4-1: Manufacturer: syz [ 152.340000][ T24] usb 4-1: SerialNumber: syz [ 152.558682][ T7420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.567985][ T7420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.579072][ T5967] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 152.579123][ T7420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.596870][ T7420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.616782][ T24] usbhid 4-1:1.0: can't add hid device: -71 [ 152.620581][ T5967] usb 3-1: device descriptor read/8, error -71 [ 152.622991][ T24] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 152.643967][ T24] usb 4-1: USB disconnect, device number 35 [ 152.744915][ T7434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.760068][ T7434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.774639][ T7434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.797311][ T7434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.827674][ T7437] tmpfs: Bad value for 'mpol' [ 152.865578][ T5967] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 152.886231][ T5967] usb 3-1: device descriptor read/8, error -71 [ 152.998324][ T7441] netlink: 'syz.0.452': attribute type 2 has an invalid length. [ 152.999395][ T5967] usb usb3-port1: unable to enumerate USB device [ 153.006674][ T7442] No control pipe specified [ 153.020132][ T7441] netlink: 'syz.0.452': attribute type 1 has an invalid length. [ 153.063988][ T7446] autofs4:pid:7446:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 153.143123][ T7449] netlink: 168 bytes leftover after parsing attributes in process `syz.0.454'. [ 153.180294][ T7454] netlink: 132 bytes leftover after parsing attributes in process `syz.3.455'. [ 153.428790][ T1227] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 153.477277][ T7464] fuse: Unknown parameter ' f0xffffffffffffffff' [ 153.488615][ T7464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.509170][ T7464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.615918][ T1227] usb 4-1: Using ep0 maxpacket: 32 [ 153.624376][ T1227] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 153.633222][ T1227] usb 4-1: config 0 has no interface number 0 [ 153.642128][ T1227] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 153.661029][ T1227] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 153.676853][ T1227] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 153.690092][ T1227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.698831][ T1227] usb 4-1: Product: syz [ 153.703121][ T1227] usb 4-1: Manufacturer: syz [ 153.711241][ T1227] usb 4-1: SerialNumber: syz [ 153.719498][ T1227] usb 4-1: config 0 descriptor?? [ 153.934355][ T1227] radio-si470x 4-1:0.35: this is not a si470x device. [ 154.143090][ T7454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.166102][ T7454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.225858][ T1227] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 154.263112][ T1227] usb 4-1: USB disconnect, device number 36 [ 154.282906][ T5872] Bluetooth: hci3: link tx timeout [ 154.290023][ T5872] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 154.293501][ T7489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.300857][ T5872] Bluetooth: hci3: link tx timeout [ 154.312782][ T5872] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.362558][ T7489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.601467][ T1227] IPVS: starting estimator thread 0... [ 154.655539][ T24] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 154.695657][ T7498] IPVS: using max 29 ests per chain, 69600 per kthread [ 154.807350][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 154.818426][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 154.829856][ T24] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 154.844074][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 154.851317][ T24] usb 3-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 154.861090][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.872042][ T24] usb 3-1: config 0 descriptor?? [ 155.301858][ T24] elecom 0003:056E:011C.0008: hidraw0: USB HID vf4.f6 Device [HID 056e:011c] on usb-dummy_hcd.2-1/input0 [ 155.494653][ T24] usb 3-1: USB disconnect, device number 48 [ 156.072620][ T7518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.084844][ T7518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.375646][ T5872] Bluetooth: hci3: command 0x0406 tx timeout [ 156.903062][ T5872] Bluetooth: hci0: unexpected event for opcode 0x080c [ 157.105855][ T5967] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 157.255675][ T5967] usb 3-1: Using ep0 maxpacket: 8 [ 157.264166][ T5967] usb 3-1: unable to get BOS descriptor or descriptor too short [ 157.273633][ T5967] usb 3-1: config 8 has an invalid interface number: 255 but max is 0 [ 157.281922][ T5967] usb 3-1: config 8 has no interface number 0 [ 157.288331][ T5967] usb 3-1: config 8 interface 255 has no altsetting 0 [ 157.299292][ T5967] usb 3-1: string descriptor 0 read error: -22 [ 157.305672][ T5967] usb 3-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 157.314727][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.452583][ T7541] netlink: 'syz.1.477': attribute type 2 has an invalid length. [ 157.460765][ T7541] netlink: 'syz.1.477': attribute type 4 has an invalid length. [ 157.469610][ T7541] netlink: 'syz.1.477': attribute type 8 has an invalid length. [ 157.478134][ T7541] netlink: 44 bytes leftover after parsing attributes in process `syz.1.477'. [ 157.613902][ T7543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.623012][ T7543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.741434][ T5967] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.2-1, 00:00:00:00:00:00. [ 157.772882][ T5967] usb 3-1: USB disconnect, device number 49 [ 157.791966][ T7550] sctp: [Deprecated]: syz.1.479 (pid 7550) Use of int in max_burst socket option deprecated. [ 157.791966][ T7550] Use struct sctp_assoc_value instead [ 158.289197][ T30] audit: type=1400 audit(1757858520.182:75): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=7563 comm="syz.2.484" [ 158.455578][ T5872] Bluetooth: hci3: command 0x0406 tx timeout [ 158.491626][ T7569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.500822][ T7569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.615800][ T24] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 158.775640][ T5862] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 158.780427][ T24] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 158.786374][ T5862] Bluetooth: hci2: Injecting HCI hardware error event [ 158.796442][ T24] usb 3-1: config 1 has no interface number 0 [ 158.802190][ T5862] Bluetooth: hci2: hardware error 0x00 [ 158.808410][ T24] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 16 [ 158.821591][ T24] usb 3-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 158.833973][ T24] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0xD has invalid maxpacket 1536, setting to 1024 [ 158.851838][ T24] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 158.861058][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.869299][ T24] usb 3-1: Product: syz [ 158.873510][ T24] usb 3-1: Manufacturer: syz [ 158.878290][ T24] usb 3-1: SerialNumber: syz [ 158.887544][ T7567] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 158.895193][ T7567] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 158.902696][ T7567] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 158.913320][ T24] usb 3-1: Expected 3 endpoints, found: 2 [ 159.504229][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'. [ 159.520536][ T7592] netlink: 16 bytes leftover after parsing attributes in process `syz.1.493'. [ 159.582976][ T7594] netlink: 56 bytes leftover after parsing attributes in process `syz.1.494'. [ 159.780691][ T7604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.790264][ T7604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.805228][ T7604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.815822][ T7604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.383209][ T5967] libceph: connect (1)[c::]:6789 error -101 [ 160.390480][ T5967] libceph: mon0 (1)[c::]:6789 connect error [ 160.657229][ T980] libceph: connect (1)[c::]:6789 error -101 [ 160.664104][ T980] libceph: mon0 (1)[c::]:6789 connect error [ 160.855672][ T5862] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 161.175958][ T5967] libceph: connect (1)[c::]:6789 error -101 [ 161.183071][ T5967] libceph: mon0 (1)[c::]:6789 connect error [ 161.241829][ T7613] ceph: No mds server is up or the cluster is laggy [ 161.333238][ T7629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.343817][ T7629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.345864][ T7628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.364259][ T7628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.455771][ T5967] usb 3-1: USB disconnect, device number 50 [ 161.519141][ T7633] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 161.525914][ T7633] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 161.538290][ T7633] vhci_hcd vhci_hcd.0: Device attached [ 161.550852][ T7633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.507'. [ 161.556682][ T5862] Bluetooth: hci0: ISO packet too small [ 161.595127][ T7633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.604976][ T7633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.623890][ T7637] vhci_hcd: connection closed [ 161.629083][ T6478] vhci_hcd: stop threads [ 161.639197][ T6478] vhci_hcd: release socket [ 161.643669][ T6478] vhci_hcd: disconnect device [ 161.676246][ T7642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.686702][ T7642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.698562][ T7642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.707229][ T7642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.783078][ T7647] netlink: 'syz.3.510': attribute type 12 has an invalid length. [ 161.791076][ T7647] netlink: 132 bytes leftover after parsing attributes in process `syz.3.510'. [ 161.915527][ T5967] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 162.196972][ T7660] tmpfs: Bad value for 'mpol' [ 162.203892][ T7658] pim6reg1: entered promiscuous mode [ 162.219157][ T7658] pim6reg1: entered allmulticast mode [ 162.435925][ T5967] usb usb3-port1: Cannot enable. Maybe the USB cable is bad? [ 162.575627][ T5967] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 162.727585][ T5967] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 162.736049][ T5967] usb 3-1: config 0 has no interface number 0 [ 162.742265][ T5967] usb 3-1: config 0 interface 85 altsetting 151 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.757237][ T5967] usb 3-1: config 0 interface 85 altsetting 151 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.771447][ T5967] usb 3-1: config 0 interface 85 has no altsetting 0 [ 162.778516][ T5967] usb 3-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 162.788465][ T5967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.801528][ T5967] usb 3-1: config 0 descriptor?? [ 163.028651][ T7665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.047103][ T7665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.261420][ T7665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.517'. [ 163.341255][ T5967] hid-led 0003:1D34:0004.0009: unknown main item tag 0x1 [ 163.440865][ T7702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.451650][ T7702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.454651][ T7703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.469101][ T7703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.525769][ T5967] hid-led 0003:1D34:0004.0009: probe with driver hid-led failed with error -71 [ 163.541968][ T5967] usb 3-1: USB disconnect, device number 52 [ 164.515648][ T5930] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 164.657433][ T7731] netlink: 830 bytes leftover after parsing attributes in process `syz.3.538'. [ 164.668973][ T5930] usb 3-1: config 0 has an invalid interface number: 243 but max is 1 [ 164.677564][ T5930] usb 3-1: config 0 has an invalid descriptor of length 139, skipping remainder of the config [ 164.688474][ T5930] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 164.697731][ T5930] usb 3-1: config 0 has no interface number 0 [ 164.703992][ T5930] usb 3-1: New USB device found, idVendor=07b4, idProduct=0f02, bcdDevice=42.ea [ 164.713338][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.732262][ T5930] usb 3-1: config 0 descriptor?? [ 164.740122][ T5930] zaurus 3-1:0.243: skipping garbage [ 164.745555][ T5930] usb 3-1: bad CDC descriptors [ 164.942963][ T9] usb 3-1: USB disconnect, device number 53 [ 165.400913][ T7742] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 165.422027][ T7742] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 165.975190][ T7770] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 165.984807][ T7770] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 166.003145][ T7770] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 166.253439][ T7785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.263530][ T7785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.435531][ T5930] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 166.566900][ T5930] usb 3-1: device descriptor read/64, error -71 [ 166.660691][ T7802] binder: 7801:7802 ioctl c0306201 200000000100 returned -14 [ 166.671227][ T7804] binder: 7801:7804 ioctl c0306201 200000000100 returned -14 [ 166.805572][ T5930] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 166.945890][ T5930] usb 3-1: device descriptor read/64, error -71 [ 166.973984][ T7813] netlink: 'syz.1.565': attribute type 7 has an invalid length. [ 166.983242][ T7813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.565'. [ 167.068554][ T5930] usb usb3-port1: attempt power cycle [ 167.300073][ T7820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.312118][ T7820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.416358][ T5930] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 167.436619][ T5930] usb 3-1: device descriptor read/8, error -71 [ 167.675629][ T5930] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 167.696174][ T5930] usb 3-1: device descriptor read/8, error -71 [ 167.805784][ T5930] usb usb3-port1: unable to enumerate USB device [ 167.943223][ T7831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.952774][ T7831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.430131][ T7845] overlayfs: failed to clone lowerpath [ 169.501640][ T7845] team_slave_0: entered promiscuous mode [ 169.507525][ T7845] team_slave_1: entered promiscuous mode [ 169.519472][ T7844] team_slave_0: left promiscuous mode [ 169.525145][ T7844] team_slave_1: left promiscuous mode [ 169.764421][ T7848] bridge0: entered promiscuous mode [ 169.769765][ T7848] bridge0: entered allmulticast mode [ 170.040138][ T7845] syz.3.574 (7845) used greatest stack depth: 16680 bytes left [ 170.174410][ T7855] C: renamed from team_slave_0 (while UP) [ 170.194261][ T7855] netlink: 152 bytes leftover after parsing attributes in process `syz.3.577'. [ 170.204986][ T7856] netlink: 152 bytes leftover after parsing attributes in process `syz.3.577'. [ 170.237975][ T7858] input: syz0 as /devices/virtual/input/input11 [ 170.931990][ T7878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.974607][ T7878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.276002][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 171.415333][ T7900] 9pnet: p9_errstr2errno: server reported unknown error [ 171.435466][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 171.442885][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 171.453111][ T9] usb 3-1: config 125 has an invalid interface number: 27 but max is 0 [ 171.462126][ T9] usb 3-1: config 125 has no interface number 0 [ 171.468953][ T9] usb 3-1: config 125 interface 27 has no altsetting 0 [ 171.479559][ T9] usb 3-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70 [ 171.489491][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.498433][ T9] usb 3-1: Product: syz [ 171.513249][ T9] usb 3-1: Manufacturer: syz [ 171.523199][ T9] usb 3-1: SerialNumber: syz [ 171.593198][ T7904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.607797][ T7904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.793218][ T7907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.839642][ T7907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.024689][ T9] hub 3-1:125.27: bad descriptor, ignoring hub [ 172.035847][ T9] hub 3-1:125.27: probe with driver hub failed with error -5 [ 172.044660][ T9] sierra 3-1:125.27: Sierra USB modem converter detected [ 172.072651][ T9] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 172.135820][ T9] usb 3-1: USB disconnect, device number 58 [ 172.161568][ T9] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 172.206434][ T9] sierra 3-1:125.27: device disconnected [ 172.389593][ T7923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.422495][ T7923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.229147][ T7950] netlink: 'syz.1.604': attribute type 10 has an invalid length. [ 173.237219][ T7950] netlink: 55 bytes leftover after parsing attributes in process `syz.1.604'. [ 173.350688][ T7955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.370503][ T7955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.788509][ T7975] netlink: 'syz.3.611': attribute type 2 has an invalid length. [ 173.799555][ T7975] netlink: 'syz.3.611': attribute type 8 has an invalid length. [ 173.810979][ T7975] netlink: 132 bytes leftover after parsing attributes in process `syz.3.611'. [ 174.125091][ T7992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.134692][ T7992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.223099][ T7996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.616'. [ 174.284917][ T8001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.294346][ T8001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.475538][ T24] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 174.625594][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 174.632677][ T24] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.643582][ T24] usb 3-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.657575][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 174.664211][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 174.673492][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.691947][ T24] usb 3-1: config 0 descriptor?? [ 175.128517][ T24] magicmouse 0003:05AC:0324.000A: unknown main item tag 0x0 [ 175.140009][ T24] magicmouse 0003:05AC:0324.000A: unknown main item tag 0x0 [ 175.148376][ T24] magicmouse 0003:05AC:0324.000A: unknown main item tag 0x0 [ 175.148410][ T24] magicmouse 0003:05AC:0324.000A: unknown main item tag 0x0 [ 175.148436][ T24] magicmouse 0003:05AC:0324.000A: unknown main item tag 0x0 [ 175.151427][ T24] magicmouse 0003:05AC:0324.000A: hidraw0: USB HID v80.00 Device [HID 05ac:0324] on usb-dummy_hcd.2-1/input0 [ 175.184724][ T24] magicmouse 0003:05AC:0324.000A: magicmouse input not registered [ 175.188080][ T24] magicmouse 0003:05AC:0324.000A: probe with driver magicmouse failed with error -12 [ 175.221866][ T8013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.222268][ T8013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.318014][ T9] usb 3-1: USB disconnect, device number 59 [ 175.569365][ T8018] could not allocate digest TFM handle cbcmac-aes-neon [ 175.914458][ T8026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.944876][ T8026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.972442][ T8026] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.345973][ T30] audit: type=1800 audit(1757858538.232:76): pid=8053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.633" name="nullb0" dev="tmpfs" ino=886 res=0 errno=0 [ 176.443928][ T8060] xt_l2tp: missing protocol rule (udp|l2tpip) [ 177.059641][ T8076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'. [ 177.148411][ T8078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.167403][ T8078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.763513][ T8102] mmap: syz.3.648 (8102): VmData 37466112 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 177.838080][ T8105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.855989][ T8105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.180153][ T8116] netlink: 'syz.3.652': attribute type 10 has an invalid length. [ 178.495456][ T30] audit: type=1326 audit(1757858540.382:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.1.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3eb8eba9 code=0x7ffc0000 [ 178.538755][ T30] audit: type=1326 audit(1757858540.412:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.1.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f9a3eb8eba9 code=0x7ffc0000 [ 178.632524][ T30] audit: type=1326 audit(1757858540.412:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.1.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3eb8eba9 code=0x7ffc0000 [ 178.681679][ T30] audit: type=1326 audit(1757858540.412:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.1.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9a3eb8e7ab code=0x7ffc0000 [ 178.749345][ T30] audit: type=1326 audit(1757858540.412:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.1.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9a3eb8e7ab code=0x7ffc0000 [ 178.801701][ T30] audit: type=1326 audit(1757858540.412:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.1.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9a3eb8e7ab code=0x7ffc0000 [ 178.855784][ T30] audit: type=1326 audit(1757858540.412:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.1.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9a3eb8e7ab code=0x7ffc0000 [ 178.875642][ T5930] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 178.897245][ T30] audit: type=1326 audit(1757858540.412:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.1.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9a3eb8e7ab code=0x7ffc0000 [ 178.922091][ T8136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.932026][ T8136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.941345][ T30] audit: type=1326 audit(1757858540.412:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.1.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9a3eb8e7ab code=0x7ffc0000 [ 179.057366][ T5930] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 179.065830][ T5930] usb 3-1: config 0 has no interface number 0 [ 179.072040][ T5930] usb 3-1: config 0 interface 41 has no altsetting 0 [ 179.082080][ T5930] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 179.091930][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.100987][ T5930] usb 3-1: Product: syz [ 179.105187][ T5930] usb 3-1: Manufacturer: syz [ 179.110234][ T5930] usb 3-1: SerialNumber: syz [ 179.118662][ T5930] usb 3-1: config 0 descriptor?? [ 179.143908][ T8136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.157740][ T8136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.237709][ T8143] binder: 8142:8143 ioctl c0306201 200000000080 returned -14 [ 179.249213][ T8143] binder: 8142:8143 ioctl 40047211 2000000000c0 returned -22 [ 179.340076][ T8122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.363848][ T8122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.380011][ T8122] netlink: 36 bytes leftover after parsing attributes in process `syz.2.654'. [ 179.800645][ T5930] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 179.835807][ T5930] usb 3-1: USB disconnect, device number 60 [ 180.154106][ T8173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.169022][ T8173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.506839][ T8183] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000006 [ 180.601078][ T8186] block nbd2: shutting down sockets [ 180.800204][ T8194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.812558][ T8194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.877655][ T5930] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 181.037214][ T5930] usb 3-1: unable to get BOS descriptor or descriptor too short [ 181.047935][ T5930] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 181.060900][ T5930] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 181.070266][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.079324][ T5930] usb 3-1: Product: syz [ 181.083505][ T5930] usb 3-1: Manufacturer: syz [ 181.088177][ T5930] usb 3-1: SerialNumber: syz [ 181.363314][ T8197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.372105][ T8197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.937292][ T5930] usb 3-1: reset high-speed USB device number 61 using dummy_hcd [ 181.951229][ T8203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.961962][ T8203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.971857][ T8203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.981454][ T8203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.087733][ T5930] usb 3-1: device descriptor read/64, error -71 [ 182.325659][ T5930] usb 3-1: reset high-speed USB device number 61 using dummy_hcd [ 182.465666][ T5930] usb 3-1: device descriptor read/64, error -71 [ 182.606396][ T8209] Invalid logical block size (2073784886) [ 182.694403][ T8215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.704347][ T8215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.715520][ T5930] usb 3-1: reset high-speed USB device number 61 using dummy_hcd [ 182.747234][ T5930] usb 3-1: device descriptor read/8, error -71 [ 182.985570][ T5930] usb 3-1: reset high-speed USB device number 61 using dummy_hcd [ 183.006942][ T5930] usb 3-1: device descriptor read/8, error -71 [ 183.123205][ T5930] usb 3-1: USB disconnect, device number 61 [ 183.258976][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 183.258993][ T30] audit: type=1326 audit(1757858545.152:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.3.688" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f270d18eba9 code=0x0 [ 183.289141][ T5930] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 183.436339][ T5930] usb 3-1: device descriptor read/64, error -71 [ 183.567479][ T8233] nfs: Deprecated parameter 'intr' [ 183.652788][ T8238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.664358][ T8238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.685738][ T5930] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 183.687183][ T8238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.703583][ T8238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.861773][ T8252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.872570][ T8252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.891551][ T8252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.902715][ T8252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.044354][ T8255] netlink: 40 bytes leftover after parsing attributes in process `syz.2.697'. [ 184.053771][ T8255] nbd: must specify at least one socket [ 184.313365][ T8262] netlink: 536 bytes leftover after parsing attributes in process `syz.2.700'. [ 184.322533][ T8262] netlink: 32 bytes leftover after parsing attributes in process `syz.2.700'. [ 184.524576][ T8264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.540349][ T8264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.751625][ T8264] input: syz0 as /devices/virtual/input/input12 [ 184.875520][ T5930] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 185.035531][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 185.042772][ T5930] usb 3-1: config 0 has no interfaces? [ 185.051937][ T5930] usb 3-1: New USB device found, idVendor=0403, idProduct=d070, bcdDevice=f7.23 [ 185.061230][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.069574][ T5930] usb 3-1: Product: syz [ 185.073828][ T5930] usb 3-1: Manufacturer: syz [ 185.078531][ T5930] usb 3-1: SerialNumber: syz [ 185.085259][ T5930] usb 3-1: config 0 descriptor?? [ 185.316750][ T5967] usb 3-1: USB disconnect, device number 64 [ 185.392110][ T8273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.403692][ T8273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.685500][ T5967] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 185.835639][ T5967] usb 3-1: Using ep0 maxpacket: 8 [ 185.842399][ T5967] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 185.850863][ T5967] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 185.861193][ T5967] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 185.871321][ T5967] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 185.882168][ T5967] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.895462][ T5967] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 185.904725][ T5967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.972312][ T8284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.983556][ T8284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.995308][ T8284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.004630][ T8284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.119554][ T5967] usb 3-1: usb_control_msg returned -32 [ 186.125589][ T5967] usbtmc 3-1:16.0: can't read capabilities [ 186.563356][ T8294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.573601][ T8294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.831240][ T8295] usbtmc 3-1:16.0: usb_clear_halt returned -32 [ 186.841751][ T8295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.850881][ T8295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.035873][ T9] usb 3-1: USB disconnect, device number 65 [ 187.855646][ T24] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 187.995518][ T24] usb 3-1: device descriptor read/64, error -71 [ 188.229673][ T8327] 9pnet_fd: Insufficient options for proto=fd [ 188.268500][ T24] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 188.405651][ T24] usb 3-1: device descriptor read/64, error -71 [ 188.516449][ T24] usb usb3-port1: attempt power cycle [ 188.688137][ T8340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.698396][ T8340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.847407][ T13] nci: nci_ntf_packet: unknown ntf opcode 0x13d [ 188.863751][ T24] usb 3-1: new low-speed USB device number 68 using dummy_hcd [ 188.896283][ T24] usb 3-1: device descriptor read/8, error -71 [ 188.985649][ T8357] cgroup: noprefix used incorrectly [ 189.065214][ T8362] overlayfs: failed to clone upperpath [ 189.145571][ T24] usb 3-1: new low-speed USB device number 69 using dummy_hcd [ 189.176352][ T24] usb 3-1: device descriptor read/8, error -71 [ 189.287467][ T24] usb usb3-port1: unable to enumerate USB device [ 189.567997][ T8374] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 189.580025][ T8374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.588878][ T8374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.141128][ T8377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.150235][ T8377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.641292][ T8382] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.650316][ T8382] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.662053][ T8382] bridge0: entered promiscuous mode [ 190.667565][ T8382] bridge0: entered allmulticast mode [ 190.680005][ T8382] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.687243][ T8382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.695792][ T8382] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.702939][ T8382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.748651][ T8384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.760812][ T8384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.259981][ T24] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 191.330067][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.748'. [ 191.443334][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 191.457424][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 191.471468][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 191.473870][ T8414] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 191.481936][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.506828][ T24] usb 3-1: config 0 descriptor?? [ 191.512813][ T8395] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 191.520115][ T8414] netlink: 'syz.1.750': attribute type 10 has an invalid length. [ 191.553080][ T8414] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 191.565238][ T8414] netlink: 64 bytes leftover after parsing attributes in process `syz.1.750'. [ 191.671039][ T8420] netlink: 'syz.1.751': attribute type 10 has an invalid length. [ 191.691210][ T8420] netlink: 'syz.1.751': attribute type 10 has an invalid length. [ 191.699338][ T8420] netlink: 'syz.1.751': attribute type 10 has an invalid length. [ 191.708310][ T8420] netlink: 'syz.1.751': attribute type 10 has an invalid length. [ 191.717235][ T8420] netlink: 'syz.1.751': attribute type 10 has an invalid length. [ 191.727156][ T8420] netlink: 'syz.1.751': attribute type 10 has an invalid length. [ 191.735134][ T8420] netlink: 'syz.1.751': attribute type 10 has an invalid length. [ 191.744131][ T8420] netlink: 'syz.1.751': attribute type 10 has an invalid length. [ 191.753320][ T8420] netlink: 'syz.1.751': attribute type 10 has an invalid length. [ 191.772209][ T8417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.145085][ T8436] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.343516][ T8446] TCP: TCP_TX_DELAY enabled [ 192.538094][ T24] ath6kl: Failed to submit usb control message: -110 [ 192.561279][ T24] ath6kl: unable to send the bmi data to the device: -110 [ 192.583246][ T24] ath6kl: Unable to send get target info: -110 [ 192.598465][ T24] ath6kl: Failed to init ath6kl core: -110 [ 192.606907][ T8456] usb usb8: usbfs: process 8456 (syz.1.762) did not claim interface 0 before use [ 192.627149][ T24] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 192.754807][ T8462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.774763][ T8462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.814597][ T8462] syzkaller1: entered promiscuous mode [ 192.816900][ T8464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.820526][ T8462] syzkaller1: entered allmulticast mode [ 192.834017][ T8464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.207619][ T8474] netlink: 9 bytes leftover after parsing attributes in process `syz.0.769'. [ 193.217448][ T8474] 0: renamed from hsr0 (while UP) [ 193.225110][ T8474] 0: entered allmulticast mode [ 193.230152][ T8474] hsr_slave_0: entered allmulticast mode [ 193.235970][ T8474] hsr_slave_1: entered allmulticast mode [ 193.242268][ T8474] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 193.384289][ T8479] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 193.405569][ T8479] overlayfs: missing 'lowerdir' [ 193.717646][ T8492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.741089][ T8491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.756268][ T8491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.757350][ T8492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.393888][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.400303][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.572596][ T8511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.581641][ T8511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.593087][ T8511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.603037][ T8511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.613208][ T8511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.622858][ T8511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.632239][ T8511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.644218][ T8511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.653548][ T8511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.663866][ T8511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.263195][ T8513] 9pnet_fd: Insufficient options for proto=fd [ 195.408889][ T8517] netlink: 72 bytes leftover after parsing attributes in process `syz.2.786'. [ 195.422350][ T8517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.431960][ T8517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.873533][ T8520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.882759][ T8520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.896599][ T8520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.907743][ T8520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.085674][ T8524] sctp: [Deprecated]: syz.2.789 (pid 8524) Use of int in max_burst socket option. [ 196.085674][ T8524] Use struct sctp_assoc_value instead [ 196.201953][ T8530] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.211291][ T8530] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.792'. [ 196.290477][ T8534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.303446][ T8534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.473606][ T8539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.485950][ T8539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.563327][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.796'. [ 196.622701][ T8546] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.690575][ T8546] sd 0:0:1:0: PR command failed: 1026 [ 196.696188][ T8546] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 196.702893][ T8546] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 196.887445][ T8552] FAT-fs (nullb0): bogus number of reserved sectors [ 196.905491][ T8552] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 197.193043][ T8568] gadgetfs: Unknown parameter 'dhscard @grݓsct5Ʀ"8nSc "' [ 197.215531][ T8570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.242945][ T8570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.788791][ T8585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.800684][ T8585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.874548][ T8590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.887512][ T8590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.426551][ T8595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.435340][ T8595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.642783][ T8599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.652913][ T8599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.069082][ T8606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.081734][ T8606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.223768][ T8613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.241599][ T8613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.303643][ T8616] syzkaller0: entered promiscuous mode [ 199.310501][ T8616] syzkaller0: entered allmulticast mode [ 199.319040][ T30] audit: type=1800 audit(1757858561.212:93): pid=8616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.820" name="memory.events" dev="tmpfs" ino=1150 res=0 errno=0 [ 199.341466][ T30] audit: type=1804 audit(1757858561.212:94): pid=8616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.820" name="/newroot/210/memory.events" dev="tmpfs" ino=1150 res=1 errno=0 [ 199.682672][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.824'. [ 200.116443][ T8641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.130728][ T8641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.499403][ T8625] orangefs_mount: mount request failed with -4 [ 200.841382][ T8649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.831'. [ 200.982728][ T8656] netlink: 20 bytes leftover after parsing attributes in process `syz.0.832'. [ 201.091717][ T8662] validate_nla: 57 callbacks suppressed [ 201.091735][ T8662] netlink: 'syz.0.836': attribute type 25 has an invalid length. [ 201.102015][ T8663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.128575][ T8663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.142257][ T8666] bpf: Bad value for 'uid' [ 201.188017][ T8670] netlink: 'syz.2.837': attribute type 21 has an invalid length. [ 201.196128][ T8670] netlink: 128 bytes leftover after parsing attributes in process `syz.2.837'. [ 201.289280][ T8674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.298125][ T8674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.309261][ T8674] CUSE: info not properly terminated [ 201.589400][ T5862] Bluetooth: hci0: command 0x0401 tx timeout [ 201.627260][ T8689] netlink: 'syz.3.842': attribute type 10 has an invalid length. [ 201.647264][ T8689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.668006][ T8689] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 201.975049][ T8705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.987583][ T8705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.001088][ T8706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.010590][ T8706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.019311][ T8706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.028502][ T8706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.039186][ T8706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.048617][ T8706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.059481][ T8706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.068431][ T8706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.078842][ T8706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.087613][ T8706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.269084][ T8709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.278036][ T8709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.608830][ C1] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 202.682860][ T8717] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 202.825204][ T8723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.834272][ T8723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.655455][ T5872] Bluetooth: hci0: command 0x0401 tx timeout [ 204.336838][ T8743] vivid-000: disconnect [ 204.408360][ T8742] vivid-000: reconnect [ 204.878444][ T8731] kexec: Could not allocate control_code_buffer [ 204.999574][ T8756] input: syz0 as /devices/virtual/input/input15 [ 205.422542][ T8776] block nbd2: Attempted send on invalid socket [ 205.440902][ T8776] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.453977][ T8776] block nbd2: Attempted send on invalid socket [ 205.461071][ T8776] I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.482571][ T8776] Mount JFS Failure: -5 [ 205.611116][ T8783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.620056][ T8783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.783217][ T8794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.792522][ T8794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.793507][ T8795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.811299][ T8795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.940564][ T8799] overlay: Unknown parameter 'fsuuid' [ 206.284120][ T8809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.294657][ T8809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.590666][ T8815] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 207.226793][ T8839] nbd0: detected capacity change from 0 to 127 [ 207.238161][ T5862] block nbd0: Receive control failed (result -32) [ 207.238652][ T5872] block nbd0: Receive control failed (result -32) [ 207.245639][ T8849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.253278][ T6001] block nbd0: Send control failed (result -32) [ 207.269914][ T6001] block nbd0: Request send failed, requeueing [ 207.281200][ T56] block nbd0: Dead connection, failed to find a fallback [ 207.286481][ T8848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.289841][ T6001] block nbd0: Dead connection, failed to find a fallback [ 207.306995][ T56] block nbd0: shutting down sockets [ 207.312748][ T56] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 207.325255][ T56] Buffer I/O error on dev nbd0, logical block 0, async page read [ 207.335025][ T6001] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 207.344802][ T6001] Buffer I/O error on dev nbd0, logical block 1, async page read [ 207.356100][ T6001] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 207.372713][ T6001] Buffer I/O error on dev nbd0, logical block 2, async page read [ 207.382704][ T6001] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 207.400895][ T6001] Buffer I/O error on dev nbd0, logical block 3, async page read [ 207.420305][ T6001] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 207.440394][ T6001] Buffer I/O error on dev nbd0, logical block 0, async page read [ 207.468714][ T6001] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 207.497087][ T6001] Buffer I/O error on dev nbd0, logical block 1, async page read [ 207.523827][ T6001] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 207.553828][ T6001] Buffer I/O error on dev nbd0, logical block 2, async page read [ 207.602871][ T6001] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 207.641659][ T6001] Buffer I/O error on dev nbd0, logical block 3, async page read [ 207.652079][ T6001] Buffer I/O error on dev nbd0, logical block 0, async page read [ 207.656149][ T30] audit: type=1326 audit(1757858569.542:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.3.893" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f270d18eba9 code=0x0 [ 207.660268][ T6001] Buffer I/O error on dev nbd0, logical block 1, async page read [ 207.695158][ T6001] ldm_validate_partition_table(): Disk read failed. [ 207.705625][ T6001] Dev nbd0: unable to read RDB block 0 [ 207.707557][ T8861] syzkaller1: entered promiscuous mode [ 207.713234][ T6001] nbd0: unable to read partition table [ 207.735966][ T8861] syzkaller1: entered allmulticast mode [ 207.754469][ T6001] ldm_validate_partition_table(): Disk read failed. [ 207.769941][ T6001] Dev nbd0: unable to read RDB block 0 [ 207.777667][ T6001] nbd0: unable to read partition table [ 207.866824][ T8865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.899479][ T8865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.528219][ T8877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.545483][ T8877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.108758][ T8884] [ 209.111105][ T8884] ====================================================== [ 209.118121][ T8884] WARNING: possible circular locking dependency detected [ 209.125140][ T8884] syzkaller #0 Not tainted [ 209.129572][ T8884] ------------------------------------------------------ [ 209.136588][ T8884] syz.1.904/8884 is trying to acquire lock: [ 209.142457][ T8884] ffff88801b6ffa20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x2fb/0x3e0 [ 209.152889][ T8884] [ 209.152889][ T8884] but task is already holding lock: [ 209.160238][ T8884] ffff88801b6ff988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x520 [ 209.169618][ T8884] [ 209.169618][ T8884] which lock already depends on the new lock. [ 209.169618][ T8884] [ 209.180013][ T8884] [ 209.180013][ T8884] the existing dependency chain (in reverse order) is: [ 209.189116][ T8884] [ 209.189116][ T8884] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 209.197204][ T8884] lock_acquire+0x120/0x360 [ 209.202219][ T8884] down_write+0x96/0x1f0 [ 209.207072][ T8884] kernfs_add_one+0x41/0x520 [ 209.212200][ T8884] kernfs_create_dir_ns+0xde/0x130 [ 209.217829][ T8884] internal_create_group+0x419/0x1110 [ 209.223720][ T8884] cpuhp_invoke_callback+0x445/0x860 [ 209.229608][ T8884] cpuhp_issue_call+0x430/0x7a0 [ 209.234980][ T8884] __cpuhp_setup_state_cpuslocked+0x3df/0x6c0 [ 209.241557][ T8884] __cpuhp_setup_state+0x3f/0x60 [ 209.247006][ T8884] do_one_initcall+0x236/0x820 [ 209.252468][ T8884] do_initcall_level+0x104/0x190 [ 209.257920][ T8884] do_initcalls+0x59/0xa0 [ 209.262763][ T8884] kernel_init_freeable+0x334/0x4b0 [ 209.268566][ T8884] kernel_init+0x1d/0x1d0 [ 209.273413][ T8884] ret_from_fork+0x4bc/0x870 [ 209.278516][ T8884] ret_from_fork_asm+0x1a/0x30 [ 209.283788][ T8884] [ 209.283788][ T8884] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 209.291690][ T8884] [ 209.291690][ T8884] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 209.299434][ T8884] lock_acquire+0x120/0x360 [ 209.304459][ T8884] cpus_read_lock+0x42/0x160 [ 209.309574][ T8884] static_key_slow_inc+0x12/0x30 [ 209.315036][ T8884] tcp_md5_do_add+0x21f/0x3a0 [ 209.320225][ T8884] tcp_v4_parse_md5_keys+0x412/0x600 [ 209.326053][ T8884] do_tcp_setsockopt+0x11dc/0x1f20 [ 209.331726][ T8884] do_sock_setsockopt+0x17c/0x1b0 [ 209.337355][ T8884] __x64_sys_setsockopt+0x13f/0x1b0 [ 209.343157][ T8884] do_syscall_64+0xfa/0xfa0 [ 209.348190][ T8884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.354695][ T8884] [ 209.354695][ T8884] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 209.362337][ T8884] lock_acquire+0x120/0x360 [ 209.367377][ T8884] lock_sock_nested+0x48/0x100 [ 209.372668][ T8884] inet_shutdown+0x6a/0x390 [ 209.377694][ T8884] nbd_mark_nsock_dead+0x2e9/0x560 [ 209.383333][ T8884] sock_shutdown+0x15e/0x260 [ 209.388531][ T8884] nbd_config_put+0x342/0x790 [ 209.393907][ T8884] nbd_release+0xfe/0x140 [ 209.398840][ T8884] bdev_release+0x536/0x650 [ 209.403849][ T8884] blkdev_release+0x15/0x20 [ 209.408860][ T8884] __fput+0x44c/0xa70 [ 209.413366][ T8884] task_work_run+0x1d4/0x260 [ 209.418644][ T8884] do_exit+0x6b5/0x2300 [ 209.423350][ T8884] do_group_exit+0x21c/0x2d0 [ 209.428442][ T8884] get_signal+0x1286/0x1340 [ 209.433452][ T8884] arch_do_signal_or_restart+0x9a/0x750 [ 209.439505][ T8884] exit_to_user_mode_loop+0x75/0x130 [ 209.445296][ T8884] do_syscall_64+0x2bd/0xfa0 [ 209.450394][ T8884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.456798][ T8884] [ 209.456798][ T8884] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 209.464441][ T8884] lock_acquire+0x120/0x360 [ 209.469468][ T8884] __mutex_lock+0x187/0x1350 [ 209.474583][ T8884] nbd_queue_rq+0x257/0xf10 [ 209.479624][ T8884] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 209.485679][ T8884] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 209.492515][ T8884] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 209.499092][ T8884] blk_mq_run_hw_queue+0x348/0x4f0 [ 209.504713][ T8884] blk_mq_dispatch_list+0xd0c/0xe00 [ 209.510425][ T8884] blk_mq_flush_plug_list+0x469/0x550 [ 209.516397][ T8884] __blk_flush_plug+0x3d3/0x4b0 [ 209.521760][ T8884] __submit_bio+0x2d3/0x5a0 [ 209.526778][ T8884] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 209.532931][ T8884] block_read_full_folio+0x599/0x830 [ 209.538739][ T8884] filemap_read_folio+0x117/0x380 [ 209.544279][ T8884] do_read_cache_folio+0x350/0x590 [ 209.549989][ T8884] read_part_sector+0xb6/0x2b0 [ 209.555283][ T8884] adfspart_check_ICS+0xa4/0xa50 [ 209.560723][ T8884] bdev_disk_changed+0x75f/0x14b0 [ 209.566252][ T8884] blkdev_get_whole+0x380/0x510 [ 209.571636][ T8884] bdev_open+0x31e/0xd30 [ 209.576400][ T8884] blkdev_open+0x457/0x600 [ 209.581335][ T8884] do_dentry_open+0x953/0x13f0 [ 209.586616][ T8884] vfs_open+0x3b/0x340 [ 209.591190][ T8884] path_openat+0x2ee5/0x3830 [ 209.596375][ T8884] do_filp_open+0x1fa/0x410 [ 209.601383][ T8884] do_sys_openat2+0x121/0x1c0 [ 209.606564][ T8884] __x64_sys_openat+0x138/0x170 [ 209.611923][ T8884] do_syscall_64+0xfa/0xfa0 [ 209.616943][ T8884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.623370][ T8884] [ 209.623370][ T8884] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 209.630581][ T8884] lock_acquire+0x120/0x360 [ 209.635686][ T8884] __mutex_lock+0x187/0x1350 [ 209.640807][ T8884] nbd_queue_rq+0xc8/0xf10 [ 209.645816][ T8884] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 209.651868][ T8884] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 209.658702][ T8884] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 209.665187][ T8884] blk_mq_run_hw_queue+0x348/0x4f0 [ 209.670806][ T8884] blk_mq_dispatch_list+0xd0c/0xe00 [ 209.676548][ T8884] blk_mq_flush_plug_list+0x469/0x550 [ 209.682430][ T8884] __blk_flush_plug+0x3d3/0x4b0 [ 209.687788][ T8884] __submit_bio+0x2d3/0x5a0 [ 209.692880][ T8884] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 209.699014][ T8884] __bread_gfp+0x216/0x3c0 [ 209.703947][ T8884] readSuper+0xdb/0x270 [ 209.709058][ T8884] chkSuper+0x5d/0xe00 [ 209.713640][ T8884] jfs_mount+0x4b/0x870 [ 209.718309][ T8884] jfs_fill_super+0x6bc/0xd80 [ 209.723515][ T8884] get_tree_bdev_flags+0x40e/0x4d0 [ 209.729162][ T8884] vfs_get_tree+0x92/0x2b0 [ 209.734094][ T8884] do_new_mount+0x302/0xa10 [ 209.739210][ T8884] __se_sys_mount+0x313/0x410 [ 209.744417][ T8884] do_syscall_64+0xfa/0xfa0 [ 209.749448][ T8884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.755859][ T8884] [ 209.755859][ T8884] -> #4 (set->srcu){.+.+}-{0:0}: [ 209.763321][ T8884] lock_sync+0xba/0x160 [ 209.767987][ T8884] __synchronize_srcu+0x96/0x3a0 [ 209.773433][ T8884] elevator_switch+0x12b/0x640 [ 209.778711][ T8884] elevator_change+0x315/0x4c0 [ 209.783979][ T8884] elevator_set_default+0x186/0x260 [ 209.789677][ T8884] blk_register_queue+0x34e/0x3f0 [ 209.795206][ T8884] __add_disk+0x677/0xd50 [ 209.800065][ T8884] add_disk_fwnode+0xfc/0x480 [ 209.805359][ T8884] nbd_dev_add+0x717/0xae0 [ 209.810291][ T8884] nbd_init+0x168/0x1f0 [ 209.814953][ T8884] do_one_initcall+0x236/0x820 [ 209.820324][ T8884] do_initcall_level+0x104/0x190 [ 209.825798][ T8884] do_initcalls+0x59/0xa0 [ 209.830727][ T8884] kernel_init_freeable+0x334/0x4b0 [ 209.836435][ T8884] kernel_init+0x1d/0x1d0 [ 209.841366][ T8884] ret_from_fork+0x4bc/0x870 [ 209.846461][ T8884] ret_from_fork_asm+0x1a/0x30 [ 209.851732][ T8884] [ 209.851732][ T8884] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 209.859546][ T8884] lock_acquire+0x120/0x360 [ 209.864552][ T8884] __mutex_lock+0x187/0x1350 [ 209.869647][ T8884] elevator_change+0x1e5/0x4c0 [ 209.874914][ T8884] elevator_set_none+0x42/0xb0 [ 209.880196][ T8884] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 209.886607][ T8884] nbd_start_device+0x17f/0xb10 [ 209.891992][ T8884] nbd_genl_connect+0x135b/0x18f0 [ 209.897525][ T8884] genl_family_rcv_msg_doit+0x215/0x300 [ 209.903676][ T8884] genl_rcv_msg+0x60e/0x790 [ 209.908701][ T8884] netlink_rcv_skb+0x208/0x470 [ 209.913984][ T8884] genl_rcv+0x28/0x40 [ 209.918515][ T8884] netlink_unicast+0x82f/0x9e0 [ 209.923781][ T8884] netlink_sendmsg+0x805/0xb30 [ 209.929067][ T8884] __sock_sendmsg+0x21c/0x270 [ 209.934274][ T8884] ____sys_sendmsg+0x505/0x830 [ 209.939557][ T8884] ___sys_sendmsg+0x21f/0x2a0 [ 209.944812][ T8884] __x64_sys_sendmsg+0x19b/0x260 [ 209.950290][ T8884] do_syscall_64+0xfa/0xfa0 [ 209.955317][ T8884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.961722][ T8884] [ 209.961722][ T8884] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 209.970324][ T8884] lock_acquire+0x120/0x360 [ 209.975371][ T8884] blk_alloc_queue+0x538/0x620 [ 209.980665][ T8884] __blk_mq_alloc_disk+0x15c/0x340 [ 209.986334][ T8884] nbd_dev_add+0x46c/0xae0 [ 209.991976][ T8884] nbd_init+0x168/0x1f0 [ 209.996690][ T8884] do_one_initcall+0x236/0x820 [ 210.001961][ T8884] do_initcall_level+0x104/0x190 [ 210.007422][ T8884] do_initcalls+0x59/0xa0 [ 210.012306][ T8884] kernel_init_freeable+0x334/0x4b0 [ 210.018048][ T8884] kernel_init+0x1d/0x1d0 [ 210.022908][ T8884] ret_from_fork+0x4bc/0x870 [ 210.028212][ T8884] ret_from_fork_asm+0x1a/0x30 [ 210.033489][ T8884] [ 210.033489][ T8884] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 210.040705][ T8884] lock_acquire+0x120/0x360 [ 210.045733][ T8884] fs_reclaim_acquire+0x72/0x100 [ 210.051197][ T8884] kmem_cache_alloc_noprof+0x45/0x6e0 [ 210.057123][ T8884] __kernfs_iattrs+0xd9/0x320 [ 210.062322][ T8884] kernfs_iop_setattr+0xea/0x3f0 [ 210.067863][ T8884] notify_change+0xc1a/0xf40 [ 210.073000][ T8884] do_truncate+0x1a4/0x220 [ 210.077947][ T8884] path_openat+0x306c/0x3830 [ 210.083048][ T8884] do_filp_open+0x1fa/0x410 [ 210.088075][ T8884] do_sys_openat2+0x121/0x1c0 [ 210.093273][ T8884] __x64_sys_openat+0x138/0x170 [ 210.098640][ T8884] do_syscall_64+0xfa/0xfa0 [ 210.103673][ T8884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.110356][ T8884] [ 210.110356][ T8884] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 210.118873][ T8884] validate_chain+0xb9b/0x2140 [ 210.124166][ T8884] __lock_acquire+0xab9/0xd20 [ 210.129384][ T8884] lock_acquire+0x120/0x360 [ 210.134418][ T8884] down_write+0x96/0x1f0 [ 210.139184][ T8884] kernfs_link_sibling+0x2fb/0x3e0 [ 210.144814][ T8884] kernfs_add_one+0x1e0/0x520 [ 210.150097][ T8884] kernfs_create_dir_ns+0xde/0x130 [ 210.155735][ T8884] sysfs_create_dir_ns+0x123/0x280 [ 210.161388][ T8884] kobject_add_internal+0x59f/0xb40 [ 210.167096][ T8884] kobject_add+0x155/0x220 [ 210.172030][ T8884] device_add+0x408/0xb50 [ 210.176888][ T8884] __add_disk+0x4be/0xd50 [ 210.181907][ T8884] add_disk_fwnode+0x149/0x480 [ 210.187275][ T8884] md_alloc+0x7fc/0xee0 [ 210.192159][ T8884] md_alloc_and_put+0x1a/0x1f0 [ 210.197445][ T8884] blk_request_module+0x27d/0x2a0 [ 210.203107][ T8884] blkdev_get_no_open+0x3f/0xe0 [ 210.208491][ T8884] bdev_file_open_by_dev+0xa0/0x240 [ 210.214230][ T8884] swsusp_check+0x56/0x440 [ 210.219169][ T8884] software_resume+0x51/0x420 [ 210.224364][ T8884] resume_store+0x2f1/0x460 [ 210.229382][ T8884] kernfs_fop_write_iter+0x3af/0x540 [ 210.235197][ T8884] vfs_write+0x5c9/0xb30 [ 210.240063][ T8884] ksys_write+0x145/0x250 [ 210.244907][ T8884] do_syscall_64+0xfa/0xfa0 [ 210.249923][ T8884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.256325][ T8884] [ 210.256325][ T8884] other info that might help us debug this: [ 210.256325][ T8884] [ 210.266624][ T8884] Chain exists of: [ 210.266624][ T8884] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 210.266624][ T8884] [ 210.281040][ T8884] Possible unsafe locking scenario: [ 210.281040][ T8884] [ 210.288478][ T8884] CPU0 CPU1 [ 210.293835][ T8884] ---- ---- [ 210.299180][ T8884] lock(&root->kernfs_rwsem); [ 210.303931][ T8884] lock(cpuhp_state_mutex); [ 210.311035][ T8884] lock(&root->kernfs_rwsem); [ 210.318303][ T8884] lock(&root->kernfs_iattr_rwsem); [ 210.323569][ T8884] [ 210.323569][ T8884] *** DEADLOCK *** [ 210.323569][ T8884] [ 210.331691][ T8884] 8 locks held by syz.1.904/8884: [ 210.336712][ T8884] #0: ffff8880246b3b38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320 [ 210.345854][ T8884] #1: ffff88807cebe420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 [ 210.354732][ T8884] #2: ffff88802f605488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 210.364469][ T8884] #3: ffff88801ea95878 (kn->active#64){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 210.374482][ T8884] #4: ffffffff8e3ec608 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x47/0x420 [ 210.384830][ T8884] #5: ffffffff8ecaa888 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x35/0x2a0 [ 210.394834][ T8884] #6: ffffffff8f5fcd08 (disks_mutex){+.+.}-{4:4}, at: md_alloc+0x40/0xee0 [ 210.403557][ T8884] #7: ffff88801b6ff988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x520 [ 210.413391][ T8884] [ 210.413391][ T8884] stack backtrace: [ 210.419461][ T8884] CPU: 0 UID: 0 PID: 8884 Comm: syz.1.904 Not tainted syzkaller #0 PREEMPT(full) [ 210.419481][ T8884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 210.419497][ T8884] Call Trace: [ 210.419506][ T8884] [ 210.419513][ T8884] dump_stack_lvl+0x189/0x250 [ 210.419535][ T8884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.419548][ T8884] ? __pfx__printk+0x10/0x10 [ 210.419578][ T8884] ? print_lock_name+0xde/0x100 [ 210.419599][ T8884] print_circular_bug+0x2ee/0x310 [ 210.419618][ T8884] check_noncircular+0x134/0x160 [ 210.419638][ T8884] validate_chain+0xb9b/0x2140 [ 210.419657][ T8884] ? lockdep_unlock+0x89/0x120 [ 210.419670][ T8884] ? validate_chain+0x897/0x2140 [ 210.419690][ T8884] __lock_acquire+0xab9/0xd20 [ 210.419707][ T8884] ? kernfs_link_sibling+0x2fb/0x3e0 [ 210.419723][ T8884] lock_acquire+0x120/0x360 [ 210.419737][ T8884] ? kernfs_link_sibling+0x2fb/0x3e0 [ 210.419757][ T8884] down_write+0x96/0x1f0 [ 210.419776][ T8884] ? kernfs_link_sibling+0x2fb/0x3e0 [ 210.419791][ T8884] ? __pfx_down_write+0x10/0x10 [ 210.419809][ T8884] ? kernfs_root+0x1c/0x230 [ 210.419822][ T8884] ? kernfs_root+0x1c/0x230 [ 210.419835][ T8884] ? kernfs_root+0x1c/0x230 [ 210.419850][ T8884] ? kernfs_root+0x1ea/0x230 [ 210.419864][ T8884] kernfs_link_sibling+0x2fb/0x3e0 [ 210.419883][ T8884] kernfs_add_one+0x1e0/0x520 [ 210.419900][ T8884] kernfs_create_dir_ns+0xde/0x130 [ 210.419918][ T8884] sysfs_create_dir_ns+0x123/0x280 [ 210.419934][ T8884] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 210.419948][ T8884] ? do_raw_spin_unlock+0x122/0x240 [ 210.419969][ T8884] kobject_add_internal+0x59f/0xb40 [ 210.419990][ T8884] kobject_add+0x155/0x220 [ 210.420008][ T8884] ? __pfx_kobject_add+0x10/0x10 [ 210.420023][ T8884] ? kobject_put+0x43f/0x480 [ 210.420041][ T8884] ? get_device_parent+0x366/0x3a0 [ 210.420062][ T8884] device_add+0x408/0xb50 [ 210.420082][ T8884] __add_disk+0x4be/0xd50 [ 210.420102][ T8884] add_disk_fwnode+0x149/0x480 [ 210.420118][ T8884] ? do_raw_spin_unlock+0x122/0x240 [ 210.420138][ T8884] md_alloc+0x7fc/0xee0 [ 210.420156][ T8884] ? __pfx_md_probe+0x10/0x10 [ 210.420175][ T8884] md_alloc_and_put+0x1a/0x1f0 [ 210.420195][ T8884] blk_request_module+0x27d/0x2a0 [ 210.420213][ T8884] blkdev_get_no_open+0x3f/0xe0 [ 210.420229][ T8884] bdev_file_open_by_dev+0xa0/0x240 [ 210.420244][ T8884] swsusp_check+0x56/0x440 [ 210.420259][ T8884] software_resume+0x51/0x420 [ 210.420285][ T8884] resume_store+0x2f1/0x460 [ 210.420303][ T8884] ? sysfs_file_kobj+0x1a/0x230 [ 210.420316][ T8884] ? __pfx_resume_store+0x10/0x10 [ 210.420337][ T8884] ? sysfs_file_kobj+0x1a/0x230 [ 210.420349][ T8884] ? sysfs_file_kobj+0x1e4/0x230 [ 210.420361][ T8884] ? sysfs_kf_write+0x166/0x260 [ 210.420375][ T8884] ? __pfx_sysfs_kf_write+0x10/0x10 [ 210.420387][ T8884] kernfs_fop_write_iter+0x3af/0x540 [ 210.420408][ T8884] vfs_write+0x5c9/0xb30 [ 210.420427][ T8884] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 210.420446][ T8884] ? __pfx_vfs_write+0x10/0x10 [ 210.420466][ T8884] ? __fget_files+0x2a/0x420 [ 210.420489][ T8884] ksys_write+0x145/0x250 [ 210.420507][ T8884] ? __pfx_ksys_write+0x10/0x10 [ 210.420527][ T8884] ? do_syscall_64+0xbe/0xfa0 [ 210.420544][ T8884] do_syscall_64+0xfa/0xfa0 [ 210.420559][ T8884] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.420575][ T8884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.420589][ T8884] ? clear_bhb_loop+0x60/0xb0 [ 210.420605][ T8884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.420619][ T8884] RIP: 0033:0x7f9a3eb8eba9 [ 210.420640][ T8884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.420653][ T8884] RSP: 002b:00007f9a3fa09038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 210.420668][ T8884] RAX: ffffffffffffffda RBX: 00007f9a3edd5fa0 RCX: 00007f9a3eb8eba9 [ 210.420679][ T8884] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000004 [ 210.420688][ T8884] RBP: 00007f9a3ec11e19 R08: 0000000000000000 R09: 0000000000000000 [ 210.420697][ T8884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.420705][ T8884] R13: 00007f9a3edd6038 R14: 00007f9a3edd5fa0 R15: 00007ffe397e9368 [ 210.420720][ T8884] [ 210.844457][ T8884] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 210.854696][ T8884] block device autoloading is deprecated and will be removed. [ 210.862431][ T8884] PM: Image not found (code -5)