last executing test programs: 5m13.49841876s ago: executing program 3 (id=175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x9) r2 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty, 0x80ad}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) accept4$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x60, 0x80000) r3 = socket$kcm(0x2, 0x5, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002400010001000000c2e79f760eb62f83060003"], 0x1c}}, 0x8004) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xbe) ppoll(&(0x7f0000000280)=[{r2, 0x100}], 0x1, 0x0, 0x0, 0x0) 5m13.322844089s ago: executing program 3 (id=176): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f00000002c0)={0xc, r0}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRES8=r0], 0x6) r1 = socket$inet(0x2, 0x1, 0xffff0000) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xff, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200407fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x20006064) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000011620141480b05101e8c00000001090212000100000000090401", @ANYRESHEX=0x0], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x7fff0000000000, 0x2003) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001b00)=""/4105, 0x1009, 0x1, 0x0}, &(0x7f0000000180)=0x40) sendto$inet(r1, &(0x7f00000003c0)="a52b2298c24abb0000866b53d9ce6600e4707150b3539a16c4726159788ed1bc9cbc8f8cf3d9d44e975d98254236fc0794aa982a8f4f9ff35b331056888fcfa93d0ec3fdf83c0ed387a4afc6af7c3c7eeeb40273a0adfc3532f646937382cd59cb6ed2fd521c9da5f8d728b72ae369e4a3778afa291bf87b0589cee6794a0005000000000000001bd5c247fda52f91db81a6161f90f79a23a7bdaa5ca4eb1e297c3ed9290d234a6996ed1e1a7f72598693b04e97cfbe953fb33905", 0xbb, 0x14000801, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r4, 0xc0045520, &(0x7f0000000100)) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x4, @private0}, {0xa, 0x4e20, 0x1000, @mcast1, 0x2}, 0xffffffffffffffff, 0x9}}, 0x48) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000080)={0xc, {0x20000000, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffc}}) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r6 = semget(0x1, 0x4, 0x39c) semop(r6, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r6, &(0x7f00000001c0)=[{0x1, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000480)=[0x4, 0x1, 0x1, 0xfff, 0x100, 0x6, 0x51, 0xa9e1, 0xef5]) semctl$SEM_INFO(r6, 0x4, 0x13, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 5m10.24570914s ago: executing program 3 (id=187): socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000540)={0x0, 0x0, r3, r4, 0x0, 0x9e, 0x4, 0xf7, {0x1, 0x1, 0x1, 0xc, 0x9, 0x6, 0x200, 0x6, 0x80, 0x6, 0x4081, 0x1, 0x38, 0x62, "bcddcb51bad91240ebb5a0c4350bc05988b348e72c1608bf9c568d1e9b403b5a"}}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000440)={r1, r3, r4, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r6, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="440f20c03505000000440f22c0f26df20f38f17a64b805000000b9e10d00000f01d9d8dd0f01728eb8010000000f01d94c0fc71d000000003ef245dbed410fc7f7", 0x41}], 0x1, 0x72, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r10, 0x80dc5521, &(0x7f0000000180)=""/135) sendmsg$NL80211_CMD_GET_REG(r7, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x79}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000000) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x28, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="01ab76afe13c5c1a2e0c014ded3859ba42745d933e4495e9139e29938fc5c57c414eeb85f398914578093c68f4651bfc996991b36e51500ceb3b4340f4bcd442299b0296aa38cfa9149682944f151d21c4f134417b71cbbbaf4e095f8c030a0c1c64cf", @ANYRES16=r8, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r9, @ANYBLOB="0400460008003400386b9bd5080026006c090000300051802c000080200005"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="0200001ed43ad517f2bae8bfdd846f36ce07d51893f893b5", @ANYRES32=0x0, @ANYBLOB="10000100000000002000050000000000"], 0x2c, 0x2) creat(&(0x7f0000000040)='./file0\x00', 0x140) 5m8.473302482s ago: executing program 3 (id=200): sendmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000800)="3ba89b5705167f13fbfe66815bf33fc62296a46953", 0x15}], 0x1}}], 0x1, 0x4000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @netrom}, [@null, @null, @null, @netrom, @netrom, @netrom, @netrom, @rose]}, &(0x7f0000000000)=0x48, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000080)=0x8, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) personality(0x5400004) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) chdir(&(0x7f00000001c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x3}) (async) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x3}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@private, 0x800, 0x6}, {@in, 0x0, 0x32}, @in=@local, {0x1, 0x6}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd28}}]}, 0x154}}, 0x0) 5m8.286627536s ago: executing program 3 (id=201): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001040)=[{&(0x7f0000000440)="a019ebee260f", 0x6}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f0000000140)='./file2\x00', &(0x7f0000000080), 0x100000, &(0x7f0000000100)) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) 5m8.081993859s ago: executing program 3 (id=202): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000000)) 5m7.537362246s ago: executing program 32 (id=202): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000040)) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000000)) 4m13.762591452s ago: executing program 2 (id=442): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000440)={0x20, 0xe, 0x3, "0f0456"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, 0x0, 0x8014) syz_usb_connect(0x2, 0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7670102030109024400020000000009049700010dd5ce0008240201000400000905000000000000000705a3f6", @ANYRESHEX], 0x0) 4m11.286267692s ago: executing program 2 (id=448): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x8, 0x11, r0, 0x100000000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000080)=0x28) 4m11.236291584s ago: executing program 2 (id=449): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x89e1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x30, 0x60, {0x60, 0x21, "d4d202c63836ccc847441824749022e42c1fd22242c4142cfbcf6c79b9415fd31c7a50b437bcbabd52cae970103c938614acf17d2cca776ef762136ab62fb320bfe62e36fd49af698200d7a7b41fa94597fce4852545151510bfdd8b8b92"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000100)={0x20, 0x12, 0xff, "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"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x1, 0xfc00, 0x1, 0xa16, 0x5, 0xfffe, 0x60d, 0x3, 0xecb, 0xf1b, 0x237, 0x1ff}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000340)={0x20, 0x83, 0x2, 0xe}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0xa}, &(0x7f00000003c0)={0x20, 0x89, 0x2, 0x1}}) 4m10.681980847s ago: executing program 2 (id=450): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x5b8}}, 0x0) r0 = socket$inet(0x2, 0x80807, 0x3) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x1d9) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000180)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$AUTOFS_IOC_FAIL(r3, 0x40187542, 0x200000000000) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@mcast1, @multicast2=0xe0000000, 0x13, 0xb}}) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007b40)=ANY=[@ANYBLOB="200000002200010a000000000000000007000002"], 0x20}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x3, r0, 'id0\x00'}) ioctl$SIOCRSACCEPT(r4, 0x89e3) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) socket$inet(0x2, 0x2, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket(0x2, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCEXCL(r6, 0x540c) syz_open_dev$ptys(0xc, 0x3, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0xfffffffa, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @remote, 0x9}, 0x1011, {[0x9, 0x4, 0xfffffffc, 0x8, 0x0, 0x1, 0x28ed]}}, 0x5c) bind$unix(r5, &(0x7f0000000100)=@file={0x1, './file0/file0\x00'}, 0x6e) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6ea4, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) 4m10.517236261s ago: executing program 2 (id=451): mkdir(&(0x7f00000020c0)='./file0\x00', 0xa2) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x200040, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="50000000000103000000617ca30000000000000a0000003c0001802c000180601229ab29ee78f9842d6214000300fe8000000000000000000000000000aa14000400ff01000000000000785f97d4c300"], 0x50}}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0x1ff, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @local}, 0x10) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r5, &(0x7f0000000080)={0x90, 0x0, r6, {0x0, 0x0, 0x3, 0x8d, 0x6a, 0x4, {0x6, 0x61f195fc, 0x7, 0x0, 0x1, 0x3, 0x800, 0x64, 0x5, 0xc000, 0x6, r7, r8, 0x100, 0x5}}}, 0x90) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r9, 0x100000000004, 0x1) getdents64(r9, 0x0, 0x4f) 4m10.298392651s ago: executing program 2 (id=454): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, '-'}]}, 0x24}}, 0x48000) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r6) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) 4m10.158526678s ago: executing program 33 (id=454): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, '-'}]}, 0x24}}, 0x48000) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r6) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) 8.934151811s ago: executing program 0 (id=1911): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRESOCT=0x0], 0x0) 8.310515474s ago: executing program 0 (id=1915): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000000)={0x0, 0x55, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000131401010000000000000000080001"], 0x20}, 0x7ffffffe}, 0x24004010) 8.256452397s ago: executing program 0 (id=1917): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) close(0x3) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[@ANYBLOB="ddf963efbeb08ab473", @ANYBLOB="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", @ANYRES32=r0]) 7.600657218s ago: executing program 0 (id=1921): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) 7.482207851s ago: executing program 0 (id=1922): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0x2, 0x6, 0x8, 0x7}, 0x15, [0x401, 0x7ff, 0x401, 0x8, 0x10000, 0x45, 0x200, 0x401, 0x7, 0x290, 0xfc, 0x80000000, 0x8, 0x3, 0xfffffd05, 0x9, 0x50d6, 0x7ff, 0xa, 0x0, 0xd4, 0x4, 0x5, 0x1d231da2, 0x6, 0x5, 0x0, 0x9, 0x0, 0x3, 0x101, 0x0, 0x800, 0xfffffffa, 0x9, 0x7, 0x8, 0x7, 0xf94d, 0x7, 0x3, 0xffffff00, 0xbeb, 0x575c, 0x2, 0x57, 0x2, 0x0, 0x4, 0x5, 0x1, 0x2, 0x1, 0x3, 0x6, 0x670, 0x9, 0x8000, 0x2, 0x9e, 0x0, 0x2, 0x1, 0x80000002], [0x4, 0x8000, 0xa, 0xfffff2e1, 0x9ca4, 0x7b, 0x0, 0x7f, 0x72a8, 0x400, 0x86, 0x2, 0x4, 0x56e, 0x0, 0x4, 0x100, 0x88a, 0xfffffff8, 0x8, 0xb2, 0x106c, 0xa2b8, 0xc60, 0x6740, 0xf2f1, 0x5, 0x1, 0x5, 0xfffffffd, 0x3, 0x0, 0x7fffffff, 0x1, 0x81, 0x6, 0x6, 0x0, 0x183, 0x401, 0x6, 0xf, 0xd349, 0x5, 0x6, 0x0, 0x9, 0x0, 0x7fff, 0x2, 0xffffffb1, 0x1, 0x1ff, 0x6, 0x9, 0x1, 0x2, 0x800, 0x4, 0x3, 0x4, 0x7fffffff, 0x9, 0x7], [0x4, 0x5, 0xc, 0x2, 0x5, 0x80, 0x7, 0x3, 0x8, 0xb5, 0xfffffffa, 0x100, 0x0, 0x1, 0x1, 0x7, 0x8a85, 0x4, 0x430fb4df, 0x3, 0x7, 0x88, 0x8, 0x2, 0x2, 0x9, 0x0, 0x54e934b9, 0x37, 0x10001, 0x5, 0x8000, 0x2e, 0x4, 0x6, 0x6, 0x5, 0xcf9, 0x6, 0x9, 0x2, 0xe, 0xffffff0e, 0xfffffffe, 0xffffffff, 0x0, 0xfffffffd, 0x5, 0x0, 0xa, 0x7fffffff, 0xffffffc0, 0x5, 0x6, 0xfff, 0x101, 0x7, 0xa, 0x2, 0x3, 0x5, 0x81, 0xfffffff8, 0xb6], [0x4, 0x2, 0x4, 0x1, 0x6, 0x7, 0x2, 0x8, 0x19, 0x0, 0x8000, 0x7fff, 0xd, 0x1, 0x5, 0x5, 0x4, 0x9, 0x5, 0x200, 0x7, 0xffffff7f, 0x4689, 0x3, 0x80000000, 0x5, 0xcd3, 0x80000000, 0x5, 0xfffff800, 0xe, 0x26419275, 0x80000001, 0x3, 0xfff, 0x8, 0xef7, 0x4ff, 0x1, 0xfffffff0, 0x7, 0x7b9, 0x52a, 0x5, 0x0, 0x6, 0x7fff, 0x7, 0x3ff, 0x0, 0x2, 0xb2a, 0x3, 0x189f, 0x9, 0x9, 0xffff, 0xd, 0xfb9, 0x77, 0x5, 0xfffffffa, 0x6e, 0x1]}, 0x45c) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d0200000000000000000000000038"], 0x51) close(r4) r5 = fanotify_init(0x20, 0x0) r6 = open$dir(&(0x7f0000001000)='.\x00', 0x20000, 0x50) fanotify_mark(r5, 0x641, 0x48001018, r6, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CAP_X2APIC_API(r8, 0x4068aea3, &(0x7f0000002a80)={0x81, 0x0, 0x3}) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f00000035c0)={0x1, 0x0, [{0x8, 0x2, 0x1, 0x0, @irqchip={0x40175449, 0x6}}]}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="3b2d5bec280000001214080027bd7000ffdbdf25080001000200000008004f000000000808001500"], 0x28}}, 0x10) r9 = syz_usb_connect$hid(0x7, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r9, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="18020000", @ANYRES16=r11, @ANYBLOB="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"], 0x218}, 0x1, 0x0, 0x0, 0x8040}, 0x24040004) 6.866934115s ago: executing program 0 (id=1924): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x891c, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x2}], 0x1, 0x40801) recvmsg$qrtr(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=""/134, 0x86}, {&(0x7f0000000540)=""/24, 0x18}], 0x2, 0x0, 0x0, 0x20}, 0x38, 0x40) gettid() pipe2$9p(&(0x7f0000000080), 0x4000) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000040)=0x2fff) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r3) 5.509832359s ago: executing program 1 (id=1933): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x4, 0xa760}, 0xc) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000040)={0x20002, r0, 0x1}) syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) (async) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000300)={r5}) (async) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000300)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000140)={r6, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r7}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) r8 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40100, 0x0) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40100, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r9, 0x560e, 0x2) close_range(r0, r3, 0x2) 5.30653238s ago: executing program 1 (id=1935): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 5.168131834s ago: executing program 1 (id=1937): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x200100) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, 0x0) 5.002507374s ago: executing program 1 (id=1938): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x2) 4.550441812s ago: executing program 4 (id=1941): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) (async, rerun: 64) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) getsockopt$inet6_int(r1, 0x29, 0x7, 0x0, &(0x7f0000000140)) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x20, &(0x7f0000000200)={0x5, 0xf, 0x20, 0x4, [@ptm_cap={0x3}, @generic={0xe, 0x10, 0x3, "55a1f4bfaf3b0fa8bd35ab"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0x0, 0x7e}]}, 0x1, [{0x38, &(0x7f0000000280)=ANY=[@ANYBLOB="3803e9c1079495584831e631cead1f2469ab87e86bc7bab66c2996e7c14f25564a5ec2002237a8edb144a0ce19"]}]}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.922683637s ago: executing program 1 (id=1942): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB='\x00\x00']) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x440200) r5 = syz_open_dev$video4linux(&(0x7f0000001e00), 0xffffffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc008561c, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x1, 0x0, 0x2, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7, 0x1, 0x5, 0x2000000}}) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet(r7, &(0x7f0000000440)={0x2, 0x4e24, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) ioctl$VIDIOC_G_AUDIO(r8, 0x80345621, 0x0) bind$xdp(r4, &(0x7f00000002c0)={0x2c, 0x8, r6, 0x10, r7}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r0], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r9, 0x29, 0xc8, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001100010002000000f6dbdf2507000000130000000800ff000497e8489b961ecfe7dac9175a55e56d589104627b79fcddd2d9747e89327eeb1c62c24c32fd3263cfdf88e7663012ecb2ebe415040000005432211eb3af3ef17e2569b43ee72b1ea531d4e6d37a931cef5786db954bb41019cf348e3e2f0fd20292d724af641f2be05999", @ANYRES32=r1, @ANYBLOB="0c001a8006000080cec60000"], 0x2c}, {&(0x7f0000000380)={0x20, 0x12, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@typed={0xf, 0x2, 0x0, 0x0, @binary="40f90ce9e9ae3eede982f2"}]}, 0x20}], 0x2}, 0x0) 1.842413088s ago: executing program 5 (id=1944): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 1.725705485s ago: executing program 5 (id=1945): setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000280)=0x10000, 0x4) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x8ab7, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x9, 0x0, 0x8, 0x8000000000000001, 0x265, 0x0, 0x8002, 0x3, 0x1], 0x8000000, 0x141200}) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (rerun: 32) write$tun(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x1177) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000300)='./bus\x00', 0x16d) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) (async, rerun: 64) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) (rerun: 64) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x12b001) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000140)={"524ebce3", 0x3, 0x5, 0x81, 0x3, 0x16dc, "0d0767fcf850456f2290e729cf77f1", "2eb4fea5", "44b4dd9e", "ad2e21d3", ["d4150c57d062e240fbe214a9", "850f3d04d42a166156600360", "82621ecad17be13010ccc10d", "6631cbd8c92f5461e2ea90f9"]}) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000140), 0x10) (async) sendmsg$can_bcm(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002680)=ANY=[@ANYBLOB="05000000020800de9c00000000000000", @ANYRESOCT=r2, @ANYBLOB="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", @ANYRES64=0x0, @ANYRES16=r2, @ANYBLOB="0000004001"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000007f0c00"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000040010000000000000000000000645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"], 0x38}}, 0x4) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000000040)={0x1, r5, 'id1\x00'}) (async) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f00000003c0)={0x0, 0xfffffffffffffffe, 0x1, 0x6, 0xe30, 0x7fffffff, "c2a0da871813beebb98f6cd3d5e10363", 0x0, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfc}) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.649696043s ago: executing program 5 (id=1946): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0xff, 0x2070, 0x1000, 0x9, 0x4, 0x8000, 0xfffd, 0xec, 0x3906, 0x1, 0x3, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1}) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) bind$xdp(r4, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r1) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x35, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x87, 0x2}, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.503117887s ago: executing program 4 (id=1947): mmap(&(0x7f0000930000/0x1000)=nil, 0x1000, 0xbd2ec2b9609ab43, 0x110, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000930000/0x1000)=nil, 0x1000, 0xbd2ec2b9609ab43, 0x110, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r0, r0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="22000a3ec100"}) getpeername$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e) (async) getpeername$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x29}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, 0x0) (async) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.099558013s ago: executing program 4 (id=1948): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x7f, 0x0, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="06000000", @ANYRES16=r2, @ANYBLOB="010028bd7000010000000f000000"], 0x14}, 0x1, 0x0, 0x0, 0x10040}, 0x4040041) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) capset(&(0x7f00000004c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8000000, 0x1ff, 0x11}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYRESOCT=r5, @ANYRES16=r4, @ANYBLOB="0008000100030000001400048005000300010000000500030080000000080002000200"/50], 0x38}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000007c0)=""/142, 0x8e}, {&(0x7f0000001ec0)=""/4056, 0xfd8}, {&(0x7f0000000e80)=""/4104, 0x1008}, {&(0x7f0000000940)=""/196, 0xc4}, {&(0x7f0000000e00)=""/94, 0x5e}, {&(0x7f00000002c0)=""/108, 0x6c}], 0x6}, 0x2000) sendmsg$kcm(r6, &(0x7f0000000c40)={&(0x7f0000000480)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x2, 0x0, 0x4}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000580)="95e557bb4841ef947814a6a48c4a393ecaee65a61fb06cf02d172f5cc47b4f8960a0de07309b1c2c6caa1302ff1d9a2268e9effa11d7a6d070e51983fe2016184da4e0fdcf9e2bd8c2db5c5a25063a66dd9b18b1c69f69711ab91915542cb8ab0e58", 0x62}, {&(0x7f0000000600)="05dccb0c47", 0x5}, {&(0x7f0000000640)="39ce05e54159b36f73c8f06fee52b300b4104fba93db2b6b3d577f3af031c74826d4a7c3a12eb09b9dd57dbec7dcdab02835b1e8b5bec6829d7ddec9fc7a51cf40fb836fb9b991f9a87beb37a59c73c05e31410b7fa2198ee63aba9cf68bd2ed86ab09d46a53ea62fd9e0a946ef2b54519af0f9970e253e89865153e1c4307821412e3367159c3a2cfe17060d0e489b53a90bbae1db09b47555e0bbcb8fb14066dd7f19ef144968f7e354d3bc4d33fa6286acaf4c1430f9253cb", 0xba}, {&(0x7f0000000700)="51795e2d55684369d14f58bdf175cc77f404fa", 0x13}, {&(0x7f0000000740)="a15d4846919ff3e34da9b2331003e99f257bab5cd8be30c96c25faa9b18e22953ae08dc2a61e936238bcd3715ee335377750bfc877d8981ce65b0e4b498ca88a6277156e2182ed72631869cac95cb67375f791862965a954fc78b951d1aba05c09d5f3fd290ab469f1656f5138d1962fd7860125bbfb990bf0d3828b4ead83fd0f6a2a972bff78e7d1e7e6160aa11c403e1d8f93e863b6", 0x97}, {&(0x7f0000000800)="67bbbe63232677e60eabcada3ffac0c6faf5c34d421a5fa960dcf1347be25dda4dd071b0bdea57776ea41cd9889b", 0x2e}], 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x378}, 0x84) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NFC_CMD_VENDOR(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x41040}, 0xc, &(0x7f0000000380)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00032bbd7000fedbdf251d00000008001e000e01000008001e000100000008001d000600000008001d00ff03000008001d000300000008001d000800000008001d00070000007e6ca791977922012d186e505e827fd21d457e72d6c2ce2d7d2b25a8006aaf0fcc615723fc15eb9e01e49a12a6c33bff1953ae9fc449a9effee6725ab44436a6b7fedc2ccaebd701544157b30e5fc87e4810abc45305697090e61ae64978ef3dc081", @ANYRESHEX=r4, @ANYRES64=r6, @ANYRES64=r1], 0x4c}}, 0x1) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000001180)={'erspan0\x00', {0x2, 0x4e22, @rand_addr=0x64010102}}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r9 = open(&(0x7f0000000180)='./bus\x00', 0x16d2fd, 0x0) fallocate(r9, 0x0, 0x100000400, 0x800000002) write$P9_RXATTRWALK(r9, &(0x7f0000000240)={0xf, 0x1f, 0x1, 0x6}, 0xf) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x53, 0xffffffffffffffff, 0x94, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="d95839027eb32eb1c65b6daef702bffeba43e38e69de94dc739a8754fcc2b526c12c960b8d45dbfd5d4dc786ca657615776d8dc8ce23be9db45aaad73898e3ee30bea15511a62ba20a0f1b59692bcccefe6c4be06244427d6660eff172d6ce257da6512894c8f2ec99edbd8eab84603c3a242fa5f75148502986f285549c2fee1f2ad82cdefb3bf90d1b7e1265e1521399943fee", 0x0, 0x101, 0x2, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r10, 0x40046109, &(0x7f00000001c0)=0xd0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000080)=0xd0) 1.09719469s ago: executing program 1 (id=1949): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xe7, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x2, 0x1, 0x4c, 0xe0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "c2f7"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x66, 0x6, 0x7, 0x5}, {0x6, 0x24, 0x1a, 0x7, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x5, 0x1000}, @dmm={0x7, 0x24, 0x14, 0x1, 0x5}, @mdlm_detail={0x68, 0x24, 0x13, 0x2a, "e45e8c79103fb0477a25d5ba7975d36a9e5c41c5431180602545bc316a4ecc8dadf74d40981bd51cf22b4a420ac13c1da424d8825cd599191a7a69cc1f1031d9a95de999609f294037f0d14ee9e6d6680c3732bc9254196945b4925003195ea03d1e3d21"}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x6, 0x33}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0x8, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x3, 0x9}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x6, 0x2, 0x80, 0x20}, 0x23, &(0x7f0000000200)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "2ebb2469bf14e58f3d41aa2d468b8d9f"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x5a, 0x5}]}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x280f01) r2 = socket(0x25, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, 0x0, 0x85e) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40085507, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) write$char_usb(r3, &(0x7f0000000940)="1b832d11fc17d2ce92526f27e68f124cf48fd1418425a775b98d07f904c4f008004176860e30519e70e5c5dad7b5203764a532321e1616b4a6c540957d5bd49e08231301813e1e941cee6809f7570fb2e76ffd369550003e50bde61b74e136476c4a8721272865512f4a0629497a55500a61b06a046ef67e14904b8b2b1b045c16f543a1f03b9b8685a7c84c2f843ae808be7b966f2310158842df6aeacbd4ada602e18d8bb969ef42b4a8c13aa3f67d8eae95a616107eda9d9a9bed994a9573b1c59c62a25682dce6ee047535442da3d899fe9212771786579786", 0xdb) syz_open_dev$audion(&(0x7f0000000840), 0x9, 0x44200) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000380)={0x40, 0x8, 0xec, {0xec, 0x5, "ee62a3b030a9209604ed95b7da50cb98293f5b79a2cb7e36873375e4740d8bd450e63286038f009af2ce75d18e0d759b893066cf2cd7a01185777558fdec57c123ab6be4afb60bcf2ab59268d631897d612e501d4da070ff5f02d58e66cef4b3a68917e94359ca94c586192465909984e3d3a0fd64569cb47472ea574fd6d061894ed447ba71dfd8445fdab71d54e56729f67daf39597872025e81ddba5e302f170986cbeee9c81e7192360c3de787a997daa770c0f65082d4a8ec9c71ed3af00d2ec3f55bb96fea97448919645350515d829198af42533b00a619cfc18b3f2e3ee229662bb925bf0701"}}, &(0x7f0000000480)={0x0, 0x3, 0xfc, @string={0xfc, 0x3, "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"}}, &(0x7f0000000280)={0x0, 0x22, 0x12, {[@global=@item_012={0x0, 0x1, 0x1}, @global=@item_4={0x3, 0x1, 0x0, "b5e1c6c4"}, @global=@item_4={0x3, 0x1, 0x4, "ab6cb58e"}, @global=@item_012={0x1, 0x1, 0x1, "ba"}, @local=@item_4={0x3, 0x2, 0x7, "d33f619d"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5d, 0x1, 0x1, {0x22, 0xb1e}}}}, &(0x7f0000000800)={0x2c, &(0x7f00000005c0)={0x0, 0x5, 0xe7, "19c01e9039be709bcc3aac8eadd27b655563d6d9c68ee6977a594ac31ecce5330059c177264631703cda81b0f3e4aef6c247e5c63365b1611b07f2bd7bb17f46a62253ab6aaa3b6fbe85839a7a6915f2366770c4c4fa00367d0ee1ce8cd0e6d8433fe4daa0adca4c732b7ebc08b3acd6b936f05501a8e9722e062b35db43d613ad0cbcb29ad23d115c12ebea7f651ed108d51f0e87f069dfba7cbb64d08ada989dc63fecd36510d032f49f916e6d45076ce30a9a313b8debc83f1c39a2e2c3b5239a948fbe5cab85f9b8285f78a06c5e82e18da521b577821d59ef7f05c9cf42ec1b0dd9d6ffa6"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x8b}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000880)=ANY=[@ANYBLOB="20016c0000008773b6a59b8fb8b35bab44154a28630f0f423c54b49ad10c0592e5ff196e2126289d5859a1d08027d7f9896ff81f6a5b06261350d3a0e4f2dadaeec4ac0ec3cfa9f9811d75940fccf3f5a071f75121e986a74816d108670ad41770d96b5c0fcdc7a338e64b15a1971db886a9be8497783802b51f5b032498a26fafa0ba9a64708a69c6e6e0dfc41f6371a83c3824b702"], &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x9}}) syz_usb_control_io$hid(r0, 0x0, 0x0) 921.969415ms ago: executing program 5 (id=1950): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x389800, 0x0) ioctl$COMEDI_DEVINFO(r0, 0x80b06401, &(0x7f0000000080)) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x23, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x8, 0x9, 0x1, 0x0, 0xfb}) 401.395462ms ago: executing program 4 (id=1951): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000006040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000000f14010027bd7000fcdbdf2509004500756d6164000000000800030001000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) 295.630326ms ago: executing program 5 (id=1952): syz_usb_connect(0x4, 0x1b, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0xed, 0x6, 0x3e, 0x20, 0x54c, 0xda, 0x5a69, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x3, 0x3, 0x10}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) (async) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) (async) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000e80)="94d1f2e1ab95afe67e299cbc47530ccadacb8ecabe3c73ac55d925a0d52a79ceedae83cf90a1789f07fbde8a75991d1e775ce7bdb15e59273429b52a246643318051f60e", 0x44}, {&(0x7f00000004c0)="18dff49858454fa491119b39f4ec02355402d69d02218513b580502ab73969fb7558b897e3b30d7d9c163303e86c133317f29d7e6e36c73e48253f01c272ec92fbc348244d10ce2c6bf23ea037d0557d84d20daea2bf3c058abfe432abbd8e9caa85ad0b8735520934a1d67b761b5dc37cf6e5f8c97d4bd70594b5a70a07775b2be008eed722b8555654b1c72c9847787cac29cbaa00434abf377f953fe1f06ff3cbe07550b6a7bde2bc7d5c5b68753a4d94bdeb60c704ec50fc674079ea876dfba754ac108a5b9c6ad9dfbf1b1349e3df787b38ca6398943f11669967824c3e4370e238708d7738c140b959ba9a5694b614843e", 0xf4}, {&(0x7f00000005c0)="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", 0x102}, {&(0x7f0000000c40)="202bb0415639f0c1e98ad3c35ba126faa9e43e618c9679bae2c30304d1850473f4102215ea2a192d9901b0785473c381e7904a63aba8ed92e2c3d8daf88f68dd5f5d04804a0331ff16ba0ccb9c36956022c1f7656660e773c38b9cf90e3d684ca95b5283b1ff10efc0b8351d0fe7423a3e5158c1e0e4831ecc8df8447379f6e93137177d1a0f8827e5c49556cabf334789727d6414d056bd6fb1a1311c748dfdc72879c6091c30be23580eecd40e8c40713768764e450ab8d5", 0xb9}, {&(0x7f0000000240)="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", 0x108}, {&(0x7f0000002300)="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", 0x290}], 0x6) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000003040)={0x8, {"488085fddf7e1378d3ad4adb6e165913c1f7ae15c9b4ed75d7413838ff0d9381cead5adbe8228d9ba29fe815a6f64afca949ca64011b9d8c93b4272d6428962fe017b1cb68796b7b800b25eb3013496be2e3e973309e6842f2df0e5309a233d16ced2bc26cd6f7db616268621fe160c1644afc707a535571e0a936469f5dd6d60c6962109cd8de336fc0938bcd412788f01c1d84e33d5eaa3e140944ddefde0366395044cf0f095786b3f1fd27c0eaf2d0df657acf52c9220297bc28779a85ac06d4f14c31cbfced5519b61ddf599c08c7f10e385e4a6637e44ce117631e6d561c5118ad8e21bba948e572e54c67516e0f2a504f05f23e00d9b04160dac7e52d6caacf617d94e200e9c97771d56fe7b2ad6b69247904463f36b11e74b41ea9e63e77ded5af1406fe0f01f2350e756fd41c94f9dee22f611720853d7f8fd755903f1c3e044bd704bd4255c570cc0c82cacec7b9b7720cd6d5b2cd96e583ff1ddb0ad39155daa2f29a4f61298b44ea802bbac9b1f552cf0279f52ff200178468b94b293f7052817d89adb9130a3eaec5ceeeb386a31a7d9807f0695432a93ae4dc820e702d21bdec10a773c7b3de3f0ec4b5f8af60a159aaa4231ed4e79883acf5d2eed3a0fd3445d46d7fbbd47f2c610d96d6435293b103db15b8e7383e63e9d672410f5248183d4e608e7aee4d9dbfd040fb3fae39faec3cc0f5410d0d479bc1b7addd255ba502a52fa858eb6574530fd16c01e1138b19258e1c40b9a29a8672f418159f663bc8fe634e3a0d23dde1ced471cfb1decc1a9464667771b795229b1906651e9e5e4402c7e75182b1432acb4b54c499358585aa83fca804fbdd12dfd3b9e95b0ac718cadb879a2898d86c4ed914a59918df6ba519de4599f662811202158e418cef0d103ed4e77833d4dea6e59f7fef1c86f818121655dd1b2cb3717c892a289797049911356b5dd5dc0c50caadd0dd0318994d730fd6e6953e01730fb2682ab3f7ca8b4d596574456f59b95f34ff6f79db68b495010b8816a7b55229b35a2790f25c42ef1efcc5271c66500fc285de61516fc401518ba1ae388f90b0a5760e01031ceed37d1eb8a792f4a196a9fa0ff1579358bfe5c63744027d1a01e0a4602c79c2fe727034a4d810f0a2c30dc5a4c122e510e4d6348774754bf1f924c1d5a31dccf345a6c752389cc38e46e968e3b2815e2ecc3e5827f198f5d836b5783e9d7cc5bc5ba1715d23a4c35157b28e997010c627cbcebda89d08ac88e3d2f387c87af78b2a565dd5704bf3c12e4019d91890ad4f660345b384b59fad6d9f56f1fcf35babe5a9fbd8dd3908be450edf05ca8a3154fb3ac1af485508c61a7ba322ac06928e7d660fee6bfef74c9c4f22bbab318077446163a3230a3d486ce6d71aed12e2581e4208eed1a540560921ac89e9372482594351a5ff0cf9e95e80f0a69c4d621638c9056ae0bdfc44895f061767aba8400da865b73b5488c690694af744372c00d87bba4664a60f13f1453337113055d7b659a87208c1e663e4d35f0ebcfe70459f5ec5812434468cec38d3fbcf90598de986b3d49ad45e7b3b230fc389b5278ed6242abe9c44a8c74438968cc9b7a253d89c5b14f7a917b86a6d51f5d5380f2a7606dbe1867fd781fab284d153e20f5bf1a2c8156b93e60dc8945eb8385d937537b785f6f6af81ea0131398c77819ddea78eadf6b6f019db772e69e9cde3540ddc95625987b4a4e1dbbf15bc0217abac6cc3ff0650ed11fa612b90afaab842be4c2bd9967702b023e8ecd5f4a0e62af56f7320241a8516bcdf344a4421eed035b8c5a126820c5dc3962f5df4bf369bd6260eb09aa8e1310bf6f28aba0e3236f699721daa26950de7fa8fd8c3d2adebc101e304d0ed1af839c74b6cc42a6d7244f6b31ed08f6f12f62569b2c0602cc371962bff74b9b3c5f6326247d4ffec7f2d0a073e5a678e76f4243533001b1c0de6739c4e6ec0195fa9a8e898c2068bb614c40c403324e84cdbc530121217ba49f300aa8d5056d170d0a6bc8827ee20d55401b9f401b12e212cf630781139978b5fb38fdf768fec87b79f7a70d6083c3df98019ebd09b7941708e06c8d9fa930a1fdb993e0061343c87b4cf47dd36f9a3d603ca986f5144af403b7b04a93f5808a8c192df5e4c17af1ec23eddd1e7fc91109e6a4cfe5e23435bcabf3915ce5242cb6f7974e97c8ad3773e3a510afa52c4193c36fd1b99a02ece5b19ad35eb8fa97b57fd1641b463de79cdd2aac5d5b4060a040ad1d5752d70015b74d556fb4ef0cc8747591edc8858707616104f0ec342fb3a9b95df31b6f84e56387aae80a72d8dd670be7aaeef54065d6e2d7837481ce5622ee3c115d02d50efdb20aaf25b636d6d6c7e49f50a4b30ae243ecf1187ffe851c52bb1849c5e5c0979b758b747aebfdab58d8fd60faa5d5005f401c661256183dd4e7cba38b4ccf03506398eab901595dc2de27ab231abdddffc9d120abd8025b77ac47f39b6373a38a09bc045559578ccdf0402385177d499333d06d2cd3f604689d50dcd01b04ffbcb545385da389e4b6102ee77febb8a34a906f822601e61d2d3fc9e206caf3753f65422a5ff31dc3b3c4d09aa9a90f9ebc858ee2e4df6a730948e436586c665a3c64aab00aa757d252eec5b8bea5035a5b9f644cb84a991286edc2a394cef9fd40ad085aa99680aea363dc163c2ef40e0f289e0b79dc600f31ae510bbd74f963632ff25230a1ec866fed0db0d0af59c5b9f4a18659f5a218c3d0db80700719a61e59efbd5f996145139e5654a9290bf504eb7453775b8c6190ff51d4c04ce9384060f1dd34799fee04c0f951ae15cb589f80dc544c05421d60f51cbc78df7dceff213575bfebe2bb307d196ef0a5cf3c2608fbb969a574e6dce9132246447a84cab6dd4923281cf40bc19c29585a02bc0d2d491907e5b528a1cfc7b2fe88dc2520ea49903423cb7a0d23530daa7217e7f312d4ec67c02fc74ab8d91b8ead50bfe9508b0f7d70e88868ee1a5f38349054374ae463d1148e0ca238c0f9fe7b40f6fba87498697f3220612ea66feb18a29f1df04234ac3d69e0706d0deef321d09ee16de188a32f4c41635cf48ee35a42140fc08b42c2e0e289a3c73fd4b0e656a72b29b99093127a17aaa199610787787abb0f4613dd03332a9306b9b5e98e9c839ffce5e72c44b288593bee47253613dc0fc3e583ab9aac7e1a161dfc36bd038d533eb6829b22dc1a01f055c16f83c1b1abe049b5744508456658c6df44c13d6ab1a18d76a55740cdcfca4a1dd81b54d9c4e71cef9f4b55f1ebc7751766175d631f9607f22a613377f6d96afaddbc66cbeef20ae578468f33265516ee711e2591e1af272a35bf5cedc78aec6e330bf6f3f3b9cdb7d373754125c9caea6a4d344d098c7332175b09441cc11040e5b71e9b975b2aaaaa5f8c5f502b00ad3ade9de204602aa227c9f11da55107b79802c09d246050c6580d92559a47935cfb59b47e88aa8095ea1ac34578697ffe89c440a2369f6661db2c24f1056d553e200184b927b359efba5db1e69e7f2cf5e4dd9c9bbc3e085fc38c43f436aa47abcc1e9986fc0226262588110c5b27c6fe9b8072cd8204c500883d3b9feaed80d5d87929d01b9bad995ed58a1be3ccad600840c6424625f4f4c221c8e1cd11af1a5ac153954ac6b441692f296ac2d529233d317fecf3fbfa53f77c8ea47d1385e3ca4b8b55fd2467cac15af1bfa04fb41784305a4b9aed6880cfba9629d6dabd22b2bd90c1aad0f2e0dff0777112b1e313447cf9417a52a58b17cc73ab03d4841ec9b1dc3f75d0fb5ece65c99982b338bb2f42b68104d94c826247814bd68e7c9664e8b2a9fdaf7fde4730960b43a496cb818badfbc97d1e51aa7817657e49536e69cacb3c4abb27dfe10d5c962fabdd3056d290a2b969e7f61d144e22539c5e2027b57c8e099db6ab8f0fdda7412b393af60e3299478744e9071801c4c39b0c87d4f237ade73b955812f254e641844e985d40f3e4df51bf7a9c81f02d22ad8296fe94d4664f3c0d113974ba222dab68c4407e9d5359205a5fec059d4370e0d15fd040ced32baa7e8586d38680a4c2e4e5679c0d374636e9dc0fd9a06808671f08e8c19b0bed18540de8107855f410f8954e078755a8c7b0822c25e2534887c9593aa1e008e78244cfec5b347a847ecf61cb207dcb2170b663a54d98ffeea991a9d944e4a8302bf37231bf3558c6b2fcaf925becb663bb574341bc81bbc50e9f0108c5d8a7783caf25bcb3bc24368e8a4915785652877555d22f7d6cbcb12049180ee4c49502d41c0fb00e31f3835b53e622e85290ee5a641eb9215567fed4782484ba8ccb43d81d3ef3ca5d8a2e3389864c15946e3d5dad607447f35a5396c27e99e20a1b98393169d85e788e9c4f9367649b308094479bc0ad8d68f0dc655724e2d9f599557f567fe7fd11f87b37df7ce0530e40d7e0ab06c2b273716e2598bd6e816c18c2e3c038b199e58424a5d72759af13e121e21d263fa0f24577a32b4356919cc22c5d1929b15590a53861aaf68aaa9ed404d1e64c3c6b0fa19e0a5299bd46867aff993b87ce96fd493fa2b125ea23907f9598acc33cd7e90c2383d5af5d232d979766ac2743c93d947db811d38df20742fa1db7c6f2306ec008ca9d53faf1a7cc2372d42437f906ef6ff9db785ac575c97e4f568e57414a0881ffe1b8dee59240305e28ab5f4f2c990c959009b022a656386229c7a71b3fcbc381a1f3511751ef19653d8e7dd0de12f630c719413a84b385802f5e8e2680cc2afa7fbb1cd1193a1e5af32ad07b24ba1c05904d3325634d10aa685d97f9c1d58377cfa46f17f0f57c7d48ce0917a8b4f5bccdf60e52764b7a826e6ccab1b70821a74cc5cc2e15532d3ef346aaf9c31fe0e0776bb1e3f4f5f276bcf53f5ea9018609b18b47497dba8e73676d2fc2fba47472ffba25ba7ddca1e9754b516eff05a05eaba9e7752f8d97f99684e3a53ded2d2c1913a6e488c65f57f8d85d261c762c37015c756e0aeed54edda41236bae33ed83c688478bcd94ce9e67971c0f8e588f1a3a4cd3f7da5e571c1984d9c9a10bb7eaf8414cbabf5fb97a17a67d10ae1a7ab96a8df88da1e82e797e67b534f765a5dcac76bb769d9547f375cfbea8d9f434f48d60e05df8797919fef5cb01a04177ed092a37f71f7948279bc4c35e3239e943a1507cff0b7152dd95c27e573e0191cfe1bc9f3862e5329ddcd160c61fc5bb82b57d8086e1e74abfc36bb43404357c50eb150fcaea9aac90fa0c413ea9f8538055a45b77d5a7548f6a4f2414714495576a1de459a55ab298a2a2fa33459da0d205e4b91d340c0721226e546f323bb878605590b66516fa51fd635e5eaa580486f6fb543b6b5236871aa3dedcb44e7d73d9bf704420fc0bb9b1a0f21e848ed9161e9bf1ae3bc628861b5007f0a38884a178dc85dbf034e9234fe603698cda4811dfcb73253335ca7cee533957578a9b97f149ae6dbd43c4aae8a16da135830f7a1c5b913838d5c28936f45f2d9ed991ec7a3ab83df4dd6fe2ff720a6b8abf40927bf8835bfa25effb92eadea47ae1629193ee5707767b13771cb105f231be2af8380ade42f682d22d17c926ccbe39ea3fa7a5d3c0f6b3dc7802b927a36cd04ade3e02bf8ce06a52585388fb8f49df4dda68e9eb426da9c0909d5b9cf4b16c2e3f78331c8683a1698033ea0b1ed4dd33edeecd89c4f14caf84d52336e50000000000000000000000000000faffffff00", 0x1000}}, 0x1006) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd700000dcdf25180000000c0006000100000001000000040030803000308004000200910000002400030064fc5303e0182832fff6192c5dc0da395221ceb59364d3854e93b6752794cb20"], 0x54}}, 0x4040084) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async, rerun: 32) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)=0x3d) (rerun: 32) syz_clone(0xa009200, 0x0, 0xffffffffffffffe9, 0x0, 0x0, 0x0) 212.10866ms ago: executing program 4 (id=1953): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 62.582982ms ago: executing program 5 (id=1954): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000240)=@ethtool_stats}) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) syz_usb_connect(0x6, 0x24, &(0x7f0000000100)=ANY=[], 0x0) 0s ago: executing program 4 (id=1955): syz_io_uring_setup(0x6c6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x11) r2 = fcntl$dupfd(r1, 0x0, r1) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e000904340102d469e7000905", @ANYRES32], 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) syz_genetlink_get_family_id$nfc(&(0x7f0000002bc0), r0) kernel console output (not intermixed with test programs): T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.436020][ T5889] usb 5-1: config 0 descriptor?? [ 362.500418][T10857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.525183][T10857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.550147][T10857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.574095][T10857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.674075][ T5889] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input61 [ 362.862158][ T5916] usb 5-1: USB disconnect, device number 108 [ 362.923912][T10846] can0 (unregistered): slcan off ptm0. [ 363.558610][T10878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.586590][T10878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.692717][T10833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.724208][T10833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.728534][T10889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.751147][T10890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.760523][T10889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.814401][T10890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.881487][T10895] loop4: detected capacity change from 0 to 524287936 [ 364.437160][T10910] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1389'. [ 364.449747][T10910] overlayfs: failed to resolve './file0': -2 [ 364.467643][T10911] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1388'. [ 364.519800][T10912] nft_compat: unsupported protocol 1 [ 364.533533][T10911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1388'. [ 364.608734][T10914] can0: slcan on ptm0. [ 364.684722][T10913] can0 (unregistered): slcan off ptm0. [ 365.300975][T10937] loop4: detected capacity change from 0 to 524287936 [ 365.514184][ T5888] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 365.530419][ T5888] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 365.556191][ T5888] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 365.583660][ T5888] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input62 [ 365.632107][T10944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.660496][ T5888] usb 2-1: USB disconnect, device number 16 [ 365.753006][T10948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.759959][T10944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.770614][T10947] overlayfs: invalid origin (000000ca67081e5f112bed8ab4416592a5356da96db48150eae0040000006fe65c239a40022f00000000000000000000) [ 365.886216][T10948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.091272][T10955] can0: slcan on ptm0. [ 366.203941][T10954] can0 (unregistered): slcan off ptm0. [ 366.561454][T10975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.613734][ T5909] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 366.614050][T10975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.643557][ T5916] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 366.702763][T10982] loop4: detected capacity change from 0 to 524287936 [ 366.784721][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 366.795001][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 366.800758][ T5909] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 366.819551][ T5909] usb 5-1: config 0 has no interface number 0 [ 366.821965][T10984] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1408'. [ 366.828571][ T5916] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 366.847595][ T5909] usb 5-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 366.859768][ T5916] usb 2-1: config 1 has no interface number 0 [ 366.866832][ T5916] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 366.878367][ T5916] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 366.890077][ T5909] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 366.899853][ T5916] usb 2-1: config 1 interface 105 has no altsetting 0 [ 366.907097][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 366.915839][ T5909] usb 5-1: Product: syz [ 366.920213][ T5909] usb 5-1: SerialNumber: syz [ 366.928091][ T5916] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 366.941656][ T5909] usb 5-1: config 0 descriptor?? [ 366.947949][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.962770][ T5916] usb 2-1: Product: syz [ 366.970858][ T5909] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 366.980146][ T5916] usb 2-1: Manufacturer: syz [ 366.988810][ T5916] usb 2-1: SerialNumber: syz [ 367.018615][T10969] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 367.032644][T10969] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 367.186850][ T5909] usb 5-1: USB disconnect, device number 109 [ 367.231127][T10993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.244192][T10993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.270735][T10993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.282328][T10995] can0: slcan on ptm0. [ 367.288772][T10993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.355114][T10994] can0 (unregistered): slcan off ptm0. [ 367.419803][T10998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.428896][T10998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.463121][T10969] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 367.470893][T10969] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 367.878866][T11002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.888100][T11002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.906001][ T5916] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 367.919246][ T5916] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 367.931330][ T5916] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 367.956413][ T5916] aqc111 2-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 90:71:07:4d:1c:51 [ 367.981776][ T5916] usb 2-1: USB disconnect, device number 17 [ 367.995107][ T5916] aqc111 2-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 368.064680][ T5916] aqc111 2-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 368.074082][ T5888] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 368.084735][ T5916] aqc111 2-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 368.096413][ T5916] aqc111 2-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 368.152460][T11009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.162856][T11009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.223960][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 368.230999][ T5888] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.241245][ T5888] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 368.252463][ T5888] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 368.261701][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.269793][ T5888] usb 5-1: Product: syz [ 368.274587][ T5888] usb 5-1: Manufacturer: syz [ 368.279220][ T5888] usb 5-1: SerialNumber: syz [ 368.492057][ T5888] usb 5-1: 0:2 : does not exist [ 368.513054][ T5888] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 368.565676][ T5888] usb 5-1: USB disconnect, device number 110 [ 368.610798][ T6033] udevd[6033]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 368.697816][T11018] can0: slcan on ptm0. [ 368.835823][T11024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.854972][T11024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.876429][T11024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.896850][T11024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.943870][ T5909] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 369.103766][ T5909] usb 2-1: Using ep0 maxpacket: 8 [ 369.144529][ T5909] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 369.153455][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.183593][ T5909] usb 2-1: config 0 has no interface number 0 [ 369.193646][ T5909] usb 2-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 369.229402][ T5909] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 369.273619][ T5909] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 369.294559][T11044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.308206][ T5909] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 369.327991][T11044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.336787][ T5909] usb 2-1: config 0 interface 52 has no altsetting 0 [ 369.344680][ T5909] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 369.358570][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.380560][ T5909] usb 2-1: config 0 descriptor?? [ 369.604898][ T5909] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input63 [ 369.794248][ T5889] usb 2-1: USB disconnect, device number 18 [ 369.800979][ T5888] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 369.812897][T11059] vxcan1 speed is unknown, defaulting to 1000 [ 369.924056][T11017] can0 (unregistered): slcan off ptm0. [ 369.973352][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 370.002630][ T5888] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 370.015931][T11066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.023358][ T5888] usb 5-1: config 1 has no interface number 0 [ 370.033983][T11066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.040169][ T5888] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 370.053060][ T5888] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 370.068627][ T5888] usb 5-1: config 1 interface 105 has no altsetting 0 [ 370.081552][ T5888] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 370.101000][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.114436][ T5888] usb 5-1: Product: syz [ 370.118670][ T5888] usb 5-1: Manufacturer: syz [ 370.142552][ T5888] usb 5-1: SerialNumber: syz [ 370.155493][T11054] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 370.170088][T11054] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 370.453203][T11078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.471359][T11078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.503110][T11079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.530283][T11079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.608380][T11054] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 370.639544][T11054] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 370.773375][ T5909] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 370.936105][ T5909] usb 2-1: config 9 has an invalid interface number: 88 but max is 1 [ 370.973734][ T5909] usb 2-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 371.001050][ T5909] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 371.017488][ T5909] usb 2-1: config 9 has no interface number 1 [ 371.025727][ T5909] usb 2-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 371.043212][ T5909] usb 2-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 371.063228][ T5909] usb 2-1: config 9 interface 88 altsetting 9 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 371.075884][ T5909] usb 2-1: config 9 interface 88 has no altsetting 0 [ 371.105576][ T5888] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 371.121940][ T5909] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=50.80 [ 371.127409][ T5888] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 371.142130][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.142164][ T5909] usb 2-1: Product: syz [ 371.142184][ T5909] usb 2-1: Manufacturer: syz [ 371.142203][ T5909] usb 2-1: SerialNumber: syz [ 371.206153][ T5888] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 371.255730][T11098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.266610][ T5888] aqc111 5-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 90:71:07:4d:1c:51 [ 371.290064][ T5888] usb 5-1: USB disconnect, device number 111 [ 371.299725][T11098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.312369][ T5888] aqc111 5-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 371.333914][T11100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.389845][T11100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.402986][T11082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.417164][ T5888] aqc111 5-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 371.427852][ T5888] aqc111 5-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 371.433753][T11082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.439262][ T5888] aqc111 5-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 371.478482][T11082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.489951][T11103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.512659][T11103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.523064][T11082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.543095][ T5909] qmi_wwan 2-1:9.88: skipping garbage [ 371.552649][T11105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.562512][ T5909] qmi_wwan 2-1:9.88: probe with driver qmi_wwan failed with error -22 [ 371.563195][T11105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.626623][ T5909] usb 2-1: USB disconnect, device number 19 [ 371.973486][ T5909] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 371.996225][T11109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.005233][T11109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.133778][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 372.140646][ T5909] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 372.149898][ T5909] usb 5-1: config 0 has no interface number 0 [ 372.158715][ T5909] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 372.168447][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.176868][ T5909] usb 5-1: Product: syz [ 372.182228][ T5909] usb 5-1: Manufacturer: syz [ 372.188236][ T5909] usb 5-1: SerialNumber: syz [ 372.201902][ T5909] usb 5-1: config 0 descriptor?? [ 372.216582][ T5909] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 372.234832][T11113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.245872][T11113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.323474][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 372.453869][ T10] usb 2-1: device descriptor read/64, error -71 [ 372.562648][T11115] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 372.586568][T11117] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.1440'. [ 372.659485][T11119] can0: slcan on ptm0. [ 372.670393][T11119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.682785][T11119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.694270][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 372.765973][T11118] can0 (unregistered): slcan off ptm0. [ 372.824011][ T10] usb 2-1: device descriptor read/64, error -71 [ 372.839138][T11124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.849202][T11124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.933794][ T10] usb usb2-port1: attempt power cycle [ 373.283372][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 373.306588][ T10] usb 2-1: device descriptor read/8, error -71 [ 373.416882][T11143] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1444'. [ 373.563863][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 373.604291][ T10] usb 2-1: device descriptor read/8, error -71 [ 373.723795][ T10] usb usb2-port1: unable to enumerate USB device [ 373.769600][T11158] delete_channel: no stack [ 373.775071][T11158] delete_channel: no stack [ 374.047317][T11107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.081915][T11107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.334771][T11183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.347754][T11183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.585459][T11185] can0: slcan on ptm0. [ 374.597312][T11185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.610350][T11185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.714440][T11184] can0 (unregistered): slcan off ptm0. [ 374.945909][T11197] netlink: 'syz.5.1453': attribute type 3 has an invalid length. [ 374.954051][T11197] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1453'. [ 374.968096][T11198] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1453'. [ 375.376638][T11216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.386181][T11217] Invalid source name [ 375.390226][T11217] UBIFS error (pid: 11217): cannot open "./file0", error -22 [ 375.399438][T11216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.544512][T11227] netlink: 'syz.1.1460': attribute type 1 has an invalid length. [ 375.657751][T11233] netlink: 'syz.1.1461': attribute type 1 has an invalid length. [ 375.788021][ T5909] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 375.813658][ T5909] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 375.824401][ T5909] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 375.840815][ T5909] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input64 [ 375.870092][ T5909] usb 5-1: USB disconnect, device number 112 [ 375.933381][ T5916] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 376.017523][T11240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.026578][T11240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.039460][ T5827] Bluetooth: hci2: ISO packet too small [ 376.093949][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 376.101382][ T5916] usb 2-1: config 0 interface 0 has no altsetting 0 [ 376.110696][ T5916] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 376.120178][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.129080][ T5916] usb 2-1: Product: syz [ 376.133382][ T5916] usb 2-1: Manufacturer: syz [ 376.138918][ T5916] usb 2-1: SerialNumber: syz [ 376.145983][ T5916] usb 2-1: config 0 descriptor?? [ 376.299578][T11245] comedi comedi3: comedi_config --init_data is deprecated [ 376.314791][T11245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1463'. [ 376.355166][ T5916] gs_usb 2-1:0.0: Couldn't send data format (err=-71) [ 376.362800][ T5916] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 376.424543][ T5916] usb 2-1: USB disconnect, device number 24 [ 376.466197][T11249] can0: slcan on ptm0. [ 376.478540][T11249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.490643][T11249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.550632][T11248] can0 (unregistered): slcan off ptm0. [ 376.615024][T11254] loop5: detected capacity change from 0 to 7 [ 376.636292][ T5889] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 376.649501][T11254] Dev loop5: unable to read RDB block 7 [ 376.660384][T11254] loop5: unable to read partition table [ 376.668463][T11254] loop5: partition table beyond EOD, truncated [ 376.684049][T11254] loop_reread_partitions: partition scan of loop5 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 376.726153][T11254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.737761][T11254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.828119][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.849441][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.870262][ T5889] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 376.881557][ T5889] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 376.890814][ T5889] usb 5-1: Manufacturer: syz [ 376.911119][ T5889] usb 5-1: config 0 descriptor?? [ 377.350373][ T5889] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 377.380379][ T5889] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 377.404011][ T5889] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 377.410969][ T5889] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 377.450419][ T5889] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 377.474405][ T5889] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 377.501937][ T5889] pyra 0003:1E7D:2CF6.0025: unknown main item tag 0x0 [ 377.517585][ T5889] pyra 0003:1E7D:2CF6.0025: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 377.538516][ T5889] pyra 0003:1E7D:2CF6.0025: couldn't init struct pyra_device [ 377.554512][ T5889] pyra 0003:1E7D:2CF6.0025: couldn't install mouse [ 377.567557][T11293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.578167][ T5889] pyra 0003:1E7D:2CF6.0025: probe with driver pyra failed with error -71 [ 377.591571][T11293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.614186][ T5889] usb 5-1: USB disconnect, device number 113 [ 377.734867][T11298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.753629][T11298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.775342][T11298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.784373][T11298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.827362][T11294] fido_id[11294]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 378.193461][ T5889] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 378.353422][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 378.362387][ T5889] usb 2-1: config 0 has no interfaces? [ 378.368246][ T5889] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 378.377855][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.389241][ T5889] usb 2-1: config 0 descriptor?? [ 378.418689][T11317] can0: slcan on ptm0. [ 378.432500][T11317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.444109][T11317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.453687][ T10] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 378.515746][T11316] can0 (unregistered): slcan off ptm0. [ 378.618030][ T5827] Bluetooth: hci0: Malformed HCI Event [ 378.619160][ T5909] usb 2-1: USB disconnect, device number 25 [ 378.633660][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 378.647340][ T10] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.673922][ T10] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.687073][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 378.701218][ T10] usb 5-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 378.723439][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.749248][ T10] usb 5-1: config 0 descriptor?? [ 379.029754][T11337] netlink: 'syz.4.1476': attribute type 10 has an invalid length. [ 379.101385][T11337] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 379.264255][T11345] loop4: detected capacity change from 0 to 524287936 [ 379.606029][ T5827] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 379.606100][ T5827] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 379.614639][ T5827] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 379.622579][ T5827] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 379.631281][ T5827] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 379.639975][ T5827] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 379.649482][ T5827] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 379.658058][ T5827] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 379.666067][ T5827] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 379.674255][ T5827] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 381.103476][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 381.103555][T11314] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 381.215317][T11314] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 381.221535][T11314] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 381.228201][T11314] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 381.242491][T11370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.260856][T11370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.272545][T11370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.282030][T11370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.316215][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 381.330746][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 381.356428][ T10] usb 5-1: USB disconnect, device number 114 [ 381.487188][ T5909] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 381.606104][T11385] comedi comedi3: comedi_config --init_data is deprecated [ 381.619114][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'. [ 381.629744][T11387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.641243][T11387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.657124][ T5909] usb 2-1: unable to get BOS descriptor or descriptor too short [ 381.671639][ T5909] usb 2-1: config 252 has an invalid interface number: 35 but max is 0 [ 381.682410][ T5909] usb 2-1: config 252 has no interface number 0 [ 381.724145][ T5909] usb 2-1: config 252 interface 35 has no altsetting 0 [ 381.742543][ T5909] usb 2-1: New USB device found, idVendor=04e2, idProduct=1422, bcdDevice=80.1c [ 381.756689][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.765324][ T5909] usb 2-1: Product: syz [ 381.769717][ T5909] usb 2-1: Manufacturer: syz [ 381.774993][ T5909] usb 2-1: SerialNumber: syz [ 381.812630][T11391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.822265][T11391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.847361][T11387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.862175][T11387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.003872][ T10] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 382.018755][ T5909] usb 2-1: USB disconnect, device number 26 [ 382.188019][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 382.198461][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.206666][ T10] usb 5-1: Product: syz [ 382.210870][ T10] usb 5-1: Manufacturer: syz [ 382.216833][ T10] usb 5-1: SerialNumber: syz [ 382.274801][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1493'. [ 382.479352][T11412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.494055][T11412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.496243][T11413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.512710][T11413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.575772][T11412] netlink: 'syz.0.1496': attribute type 2 has an invalid length. [ 382.587674][T11412] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1496'. [ 382.604923][T11413] netlink: 'syz.0.1496': attribute type 2 has an invalid length. [ 382.617047][T11413] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1496'. [ 382.634980][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 382.649435][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 382.662415][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 382.675875][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 382.689468][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 382.700556][ T10] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 382.714759][ T10] usb 5-1: USB disconnect, device number 115 [ 382.740118][T11417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.749890][T11417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.760411][T11417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.769986][T11417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.873481][ T795] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 383.023501][ T795] usb 2-1: Using ep0 maxpacket: 16 [ 383.032135][ T795] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 383.040908][ T795] usb 2-1: config 0 has no interface number 0 [ 383.050309][ T795] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 383.059518][ T795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.068016][ T795] usb 2-1: Product: syz [ 383.072243][ T795] usb 2-1: Manufacturer: syz [ 383.078567][ T795] usb 2-1: SerialNumber: syz [ 383.087173][ T795] usb 2-1: config 0 descriptor?? [ 383.095502][ T795] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 383.183450][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 383.264199][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 383.266474][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 383.312755][T11422] loop4: detected capacity change from 0 to 524287936 [ 383.428450][T11424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.452189][T11424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.476011][T11424] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20003 [ 383.784439][T11433] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1505'. [ 383.909053][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.061236][T11440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.070712][T11440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.093430][ T5909] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 384.249372][ T5909] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 384.258777][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.267706][ T5909] usb 5-1: Product: syz [ 384.272028][ T5909] usb 5-1: Manufacturer: syz [ 384.276975][ T5909] usb 5-1: SerialNumber: syz [ 384.907131][T11415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.922388][T11415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.012158][T11443] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 385.245723][T11452] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 385.308543][ T5909] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 385.322879][T11454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.332329][T11454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.621308][T11456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.632053][T11456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.661371][T11437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.670561][T11437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.705027][ T5909] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 385.887985][ T5909] usb 5-1: USB disconnect, device number 116 [ 385.909378][ T5909] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 386.101116][T11468] loop4: detected capacity change from 0 to 524287936 [ 386.325482][ T52] bt_err_ratelimited: 55 callbacks suppressed [ 386.325504][ T52] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 386.337733][ T52] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 386.346588][ T52] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 386.355323][ T52] Bluetooth: hci2: unexpected event 0x01 length: 4 > 1 [ 386.391400][T11481] netlink: 'syz.0.1516': attribute type 1 has an invalid length. [ 386.476113][T11481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.520260][T11481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.551430][ T795] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 386.578117][ T795] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 386.598515][ T795] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 386.630589][ T795] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input65 [ 386.652929][T11486] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 386.671793][ T795] usb 2-1: USB disconnect, device number 27 [ 386.849460][T11492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.862364][T11492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.963467][ T5874] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 387.134011][ T5874] usb 5-1: Using ep0 maxpacket: 32 [ 387.155697][ T5874] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 387.174340][ T5874] usb 5-1: config 0 has no interface number 0 [ 387.179713][T11505] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 387.183375][ T5874] usb 5-1: config 0 interface 69 has no altsetting 0 [ 387.214527][ T5874] usb 5-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=f8.b5 [ 387.229922][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.239842][T11507] netlink: 'syz.0.1521': attribute type 29 has an invalid length. [ 387.248572][ T5874] usb 5-1: Product: syz [ 387.253155][T11507] netlink: 'syz.0.1521': attribute type 29 has an invalid length. [ 387.261704][ T5874] usb 5-1: Manufacturer: syz [ 387.268364][ T5874] usb 5-1: SerialNumber: syz [ 387.273760][T11507] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1521'. [ 387.287260][ T5874] usb 5-1: config 0 descriptor?? [ 387.397671][T11513] loop4: detected capacity change from 0 to 524287936 [ 387.519774][ T5874] pegasus 5-1:0.69: probe with driver pegasus failed with error -71 [ 387.566938][ T5874] usb 5-1: USB disconnect, device number 117 [ 387.597654][T11520] FAULT_INJECTION: forcing a failure. [ 387.597654][T11520] name failslab, interval 1, probability 0, space 0, times 0 [ 387.611652][T11520] CPU: 0 UID: 0 PID: 11520 Comm: syz.0.1526 Not tainted syzkaller #0 PREEMPT(full) [ 387.611692][T11520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 387.611711][T11520] Call Trace: [ 387.611724][T11520] [ 387.611733][T11520] dump_stack_lvl+0x189/0x250 [ 387.611764][T11520] ? irqentry_exit+0x5ba/0x640 [ 387.611800][T11520] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.611846][T11520] should_fail_ex+0x414/0x560 [ 387.611884][T11520] should_failslab+0xa8/0x100 [ 387.611918][T11520] __kmalloc_noprof+0xdf/0x800 [ 387.611945][T11520] ? tomoyo_encode+0x28b/0x550 [ 387.611978][T11520] tomoyo_encode+0x28b/0x550 [ 387.612011][T11520] tomoyo_realpath_from_path+0x58d/0x5d0 [ 387.612050][T11520] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 387.612073][T11520] tomoyo_path_number_perm+0x1e8/0x5a0 [ 387.612099][T11520] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 387.612164][T11520] ? __fget_files+0x2a/0x420 [ 387.612194][T11520] ? __fget_files+0x3a0/0x420 [ 387.612216][T11520] ? __fget_files+0x2a/0x420 [ 387.612244][T11520] security_file_ioctl+0xcb/0x2d0 [ 387.612280][T11520] __se_sys_ioctl+0x47/0x170 [ 387.612314][T11520] do_syscall_64+0xfa/0xfa0 [ 387.612348][T11520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.612370][T11520] ? clear_bhb_loop+0x60/0xb0 [ 387.612397][T11520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.612417][T11520] RIP: 0033:0x7f74cff8f6c9 [ 387.612437][T11520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.612456][T11520] RSP: 002b:00007f74d0f0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.612479][T11520] RAX: ffffffffffffffda RBX: 00007f74d01e5fa0 RCX: 00007f74cff8f6c9 [ 387.612494][T11520] RDX: 0000200000000280 RSI: 0000000040946400 RDI: 0000000000000003 [ 387.612509][T11520] RBP: 00007f74d0f0c090 R08: 0000000000000000 R09: 0000000000000000 [ 387.612522][T11520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.612535][T11520] R13: 00007f74d01e6038 R14: 00007f74d01e5fa0 R15: 00007ffc1176be28 [ 387.612571][T11520] [ 387.821451][T11520] ERROR: Out of memory at tomoyo_realpath_from_path. [ 387.831395][T11520] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 387.847357][T11522] comedi comedi3: comedi_config --init_data is deprecated [ 387.858067][T11522] ubi31: attaching mtd0 [ 387.862387][T11522] ubi31 error: ubi_attach_mtd_dev: bad VID header (7236540) or data offsets (7236604) [ 387.874381][T11522] comedi comedi3: comedi_config --init_data is deprecated [ 388.193428][ T5874] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 388.355307][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 388.365648][ T5874] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 388.382302][ T5874] usb 2-1: config 0 has no interface number 0 [ 388.420227][ T5874] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 388.443352][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.461906][ T5874] usb 2-1: Product: syz [ 388.466590][ T5874] usb 2-1: Manufacturer: syz [ 388.471229][ T5874] usb 2-1: SerialNumber: syz [ 388.489771][ T5874] usb 2-1: config 0 descriptor?? [ 388.508603][ T5874] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 388.578881][T11541] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 388.736850][T11550] loop4: detected capacity change from 0 to 524287936 [ 388.875017][T11555] FAULT_INJECTION: forcing a failure. [ 388.875017][T11555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.888959][T11555] CPU: 0 UID: 0 PID: 11555 Comm: syz.5.1536 Not tainted syzkaller #0 PREEMPT(full) [ 388.888991][T11555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 388.889006][T11555] Call Trace: [ 388.889015][T11555] [ 388.889024][T11555] dump_stack_lvl+0x189/0x250 [ 388.889058][T11555] ? __pfx____ratelimit+0x10/0x10 [ 388.889090][T11555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.889118][T11555] ? __pfx__printk+0x10/0x10 [ 388.889144][T11555] ? __might_fault+0xb0/0x130 [ 388.889183][T11555] should_fail_ex+0x414/0x560 [ 388.889221][T11555] _copy_from_user+0x2d/0xb0 [ 388.889248][T11555] comedi_unlocked_ioctl+0x387/0x1020 [ 388.889277][T11555] ? kasan_quarantine_put+0xdd/0x220 [ 388.889314][T11555] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 388.889402][T11555] ? __fget_files+0x2a/0x420 [ 388.889432][T11555] ? __fget_files+0x3a0/0x420 [ 388.889455][T11555] ? __fget_files+0x2a/0x420 [ 388.889482][T11555] ? bpf_lsm_file_ioctl+0x9/0x20 [ 388.889515][T11555] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 388.889544][T11555] __se_sys_ioctl+0xfc/0x170 [ 388.889579][T11555] do_syscall_64+0xfa/0xfa0 [ 388.889612][T11555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.889634][T11555] ? clear_bhb_loop+0x60/0xb0 [ 388.889660][T11555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.889681][T11555] RIP: 0033:0x7f41c878f6c9 [ 388.889700][T11555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.889718][T11555] RSP: 002b:00007f41c69ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 388.889741][T11555] RAX: ffffffffffffffda RBX: 00007f41c89e5fa0 RCX: 00007f41c878f6c9 [ 388.889757][T11555] RDX: 0000200000000280 RSI: 0000000040946400 RDI: 0000000000000003 [ 388.889780][T11555] RBP: 00007f41c69ee090 R08: 0000000000000000 R09: 0000000000000000 [ 388.889794][T11555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.889806][T11555] R13: 00007f41c89e6038 R14: 00007f41c89e5fa0 R15: 00007ffc3da77948 [ 388.889842][T11555] [ 389.190064][T11560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.199145][T11560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.363443][ T795] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 389.504720][ T795] usb 5-1: device descriptor read/64, error -71 [ 389.753515][ T795] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 389.903564][ T795] usb 5-1: device descriptor read/64, error -71 [ 389.960579][T11567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.974468][T11567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.015908][ T795] usb usb5-port1: attempt power cycle [ 390.353389][ T795] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 390.364250][T11526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.376066][T11526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.383967][ T795] usb 5-1: device descriptor read/8, error -71 [ 390.498519][T11571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.512325][T11571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.623411][ T795] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 390.664387][ T795] usb 5-1: device descriptor read/8, error -71 [ 390.773993][ T795] usb usb5-port1: unable to enumerate USB device [ 390.931535][T11578] loop4: detected capacity change from 0 to 524287936 [ 391.103736][T11580] FAULT_INJECTION: forcing a failure. [ 391.103736][T11580] name failslab, interval 1, probability 0, space 0, times 0 [ 391.152525][T11580] CPU: 0 UID: 0 PID: 11580 Comm: syz.5.1548 Not tainted syzkaller #0 PREEMPT(full) [ 391.152554][T11580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 391.152569][T11580] Call Trace: [ 391.152577][T11580] [ 391.152587][T11580] dump_stack_lvl+0x189/0x250 [ 391.152618][T11580] ? __pfx____ratelimit+0x10/0x10 [ 391.152651][T11580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.152677][T11580] ? __pfx__printk+0x10/0x10 [ 391.152709][T11580] ? __pfx___might_resched+0x10/0x10 [ 391.152733][T11580] ? fs_reclaim_acquire+0x7d/0x100 [ 391.152768][T11580] should_fail_ex+0x414/0x560 [ 391.152807][T11580] should_failslab+0xa8/0x100 [ 391.152839][T11580] __kmalloc_noprof+0xdf/0x800 [ 391.152866][T11580] ? __pfx___mutex_lock+0x10/0x10 [ 391.152882][T11580] ? comedi_alloc_devpriv+0x1f/0x60 [ 391.152922][T11580] comedi_alloc_devpriv+0x1f/0x60 [ 391.152953][T11580] das16m1_attach+0x2a/0xae0 [ 391.152989][T11580] comedi_device_attach+0x51f/0x720 [ 391.153020][T11580] comedi_unlocked_ioctl+0x645/0x1020 [ 391.153047][T11580] ? kasan_quarantine_put+0xdd/0x220 [ 391.153084][T11580] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 391.153172][T11580] ? __fget_files+0x2a/0x420 [ 391.153203][T11580] ? __fget_files+0x3a0/0x420 [ 391.153226][T11580] ? __fget_files+0x2a/0x420 [ 391.153257][T11580] ? bpf_lsm_file_ioctl+0x9/0x20 [ 391.153288][T11580] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 391.153316][T11580] __se_sys_ioctl+0xfc/0x170 [ 391.153361][T11580] do_syscall_64+0xfa/0xfa0 [ 391.153394][T11580] ? irqentry_exit+0x10f/0x640 [ 391.153422][T11580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.153443][T11580] ? clear_bhb_loop+0x60/0xb0 [ 391.153470][T11580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.153490][T11580] RIP: 0033:0x7f41c878f6c9 [ 391.153509][T11580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.153527][T11580] RSP: 002b:00007f41c69ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 391.153549][T11580] RAX: ffffffffffffffda RBX: 00007f41c89e5fa0 RCX: 00007f41c878f6c9 [ 391.153565][T11580] RDX: 0000200000000280 RSI: 0000000040946400 RDI: 0000000000000003 [ 391.153579][T11580] RBP: 00007f41c69ee090 R08: 0000000000000000 R09: 0000000000000000 [ 391.153592][T11580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.153605][T11580] R13: 00007f41c89e6038 R14: 00007f41c89e5fa0 R15: 00007ffc3da77948 [ 391.153638][T11580] [ 391.156930][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1549'. [ 391.604028][T11586] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 391.620086][T11586] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 391.893357][T11599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.913589][T11599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.947711][T11599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.956942][T11599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.218532][ T5874] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 392.238907][T11602] loop4: detected capacity change from 0 to 524287936 [ 392.238965][ T5874] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 392.273684][ T5874] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 392.296431][ T5874] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input67 [ 392.346411][ T5874] usb 2-1: USB disconnect, device number 28 [ 392.510677][T11605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.538129][T11605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.606507][T11605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.619220][T11605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.629447][T11607] FAULT_INJECTION: forcing a failure. [ 392.629447][T11607] name failslab, interval 1, probability 0, space 0, times 0 [ 392.643056][T11607] CPU: 1 UID: 0 PID: 11607 Comm: syz.5.1558 Not tainted syzkaller #0 PREEMPT(full) [ 392.643085][T11607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 392.643099][T11607] Call Trace: [ 392.643108][T11607] [ 392.643117][T11607] dump_stack_lvl+0x189/0x250 [ 392.643150][T11607] ? __pfx____ratelimit+0x10/0x10 [ 392.643181][T11607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.643208][T11607] ? __pfx__printk+0x10/0x10 [ 392.643240][T11607] ? __pfx___might_resched+0x10/0x10 [ 392.643268][T11607] ? fs_reclaim_acquire+0x7d/0x100 [ 392.643303][T11607] should_fail_ex+0x414/0x560 [ 392.643339][T11607] should_failslab+0xa8/0x100 [ 392.643378][T11607] __kmalloc_cache_noprof+0x84/0x700 [ 392.643408][T11607] ? __request_region+0x5f/0xe0 [ 392.643443][T11607] __request_region+0x5f/0xe0 [ 392.643474][T11607] comedi_request_region+0x6d/0x180 [ 392.643506][T11607] das16m1_attach+0x64/0xae0 [ 392.643540][T11607] comedi_device_attach+0x51f/0x720 [ 392.643571][T11607] comedi_unlocked_ioctl+0x645/0x1020 [ 392.643598][T11607] ? kasan_quarantine_put+0xdd/0x220 [ 392.643633][T11607] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 392.643723][T11607] ? __fget_files+0x2a/0x420 [ 392.643752][T11607] ? __fget_files+0x3a0/0x420 [ 392.643775][T11607] ? __fget_files+0x2a/0x420 [ 392.643802][T11607] ? bpf_lsm_file_ioctl+0x9/0x20 [ 392.643835][T11607] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 392.643864][T11607] __se_sys_ioctl+0xfc/0x170 [ 392.643898][T11607] do_syscall_64+0xfa/0xfa0 [ 392.643932][T11607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.643953][T11607] ? clear_bhb_loop+0x60/0xb0 [ 392.643979][T11607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.644000][T11607] RIP: 0033:0x7f41c878f6c9 [ 392.644020][T11607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.644038][T11607] RSP: 002b:00007f41c69ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 392.644061][T11607] RAX: ffffffffffffffda RBX: 00007f41c89e5fa0 RCX: 00007f41c878f6c9 [ 392.644076][T11607] RDX: 0000200000000280 RSI: 0000000040946400 RDI: 0000000000000003 [ 392.644090][T11607] RBP: 00007f41c69ee090 R08: 0000000000000000 R09: 0000000000000000 [ 392.644104][T11607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.644116][T11607] R13: 00007f41c89e6038 R14: 00007f41c89e5fa0 R15: 00007ffc3da77948 [ 392.644151][T11607] [ 392.888103][T11607] comedi comedi3: das16m1: I/O port conflict (0x4f27,16) [ 393.016569][T11609] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 393.369922][T11620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.381662][T11620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.409169][T11620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.422331][T11620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.717455][T11554] kexec: Could not allocate control_code_buffer [ 393.789671][T11623] loop4: detected capacity change from 0 to 524287936 [ 393.853132][T11625] binder: 11624:11625 unknown command 0 [ 393.861910][T11625] binder: 11624:11625 ioctl c0306201 200000000080 returned -22 [ 393.878205][T11625] binder: BINDER_SET_CONTEXT_MGR already set [ 393.885736][T11625] binder: 11624:11625 ioctl 4018620d 200000000040 returned -16 [ 393.955115][T11628] FAULT_INJECTION: forcing a failure. [ 393.955115][T11628] name failslab, interval 1, probability 0, space 0, times 0 [ 393.971294][T11628] CPU: 1 UID: 0 PID: 11628 Comm: syz.4.1567 Not tainted syzkaller #0 PREEMPT(full) [ 393.971324][T11628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 393.971338][T11628] Call Trace: [ 393.971348][T11628] [ 393.971357][T11628] dump_stack_lvl+0x189/0x250 [ 393.971390][T11628] ? __pfx____ratelimit+0x10/0x10 [ 393.971431][T11628] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.971458][T11628] ? __pfx__printk+0x10/0x10 [ 393.971489][T11628] ? __pfx___might_resched+0x10/0x10 [ 393.971512][T11628] ? fs_reclaim_acquire+0x7d/0x100 [ 393.971545][T11628] should_fail_ex+0x414/0x560 [ 393.971582][T11628] should_failslab+0xa8/0x100 [ 393.971616][T11628] __kmalloc_cache_noprof+0x84/0x700 [ 393.971644][T11628] ? __request_region+0x98/0xe0 [ 393.971671][T11628] ? __request_region+0x5f/0xe0 [ 393.971705][T11628] __request_region+0x5f/0xe0 [ 393.971737][T11628] __comedi_request_region+0x6a/0x140 [ 393.971763][T11628] das16m1_attach+0xc8/0xae0 [ 393.971799][T11628] comedi_device_attach+0x51f/0x720 [ 393.971828][T11628] comedi_unlocked_ioctl+0x645/0x1020 [ 393.971855][T11628] ? kasan_quarantine_put+0xdd/0x220 [ 393.971892][T11628] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 393.971979][T11628] ? __fget_files+0x2a/0x420 [ 393.972009][T11628] ? __fget_files+0x3a0/0x420 [ 393.972030][T11628] ? __fget_files+0x2a/0x420 [ 393.972057][T11628] ? bpf_lsm_file_ioctl+0x9/0x20 [ 393.972089][T11628] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 393.972117][T11628] __se_sys_ioctl+0xfc/0x170 [ 393.972151][T11628] do_syscall_64+0xfa/0xfa0 [ 393.972184][T11628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.972206][T11628] ? clear_bhb_loop+0x60/0xb0 [ 393.972232][T11628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.972252][T11628] RIP: 0033:0x7f4756b8f6c9 [ 393.972271][T11628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.972288][T11628] RSP: 002b:00007f4757a8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.972311][T11628] RAX: ffffffffffffffda RBX: 00007f4756de5fa0 RCX: 00007f4756b8f6c9 [ 393.972327][T11628] RDX: 0000200000000280 RSI: 0000000040946400 RDI: 0000000000000003 [ 393.972341][T11628] RBP: 00007f4757a8d090 R08: 0000000000000000 R09: 0000000000000000 [ 393.972355][T11628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.972368][T11628] R13: 00007f4756de6038 R14: 00007f4756de5fa0 R15: 00007ffe3ad32038 [ 393.972411][T11628] [ 393.972708][T11628] comedi comedi3: das16m1: I/O port conflict (0x5327,8) [ 394.279800][T11630] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 394.296578][T11630] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 394.313885][T11630] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 394.343971][T11630] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 394.426443][T11633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.472784][T11633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.509337][T11633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.518646][T11633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.543588][ T52] Bluetooth: hci3: Malformed HCI Event [ 394.866037][T11640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1572'. [ 394.877896][T11640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1572'. [ 395.106639][T11647] loop4: detected capacity change from 0 to 524287936 [ 395.236350][ T30] audit: type=1326 audit(6054173584.107:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11648 comm="syz.5.1575" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41c878f6c9 code=0x0 [ 395.288248][T11656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.299250][T11656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.503501][ T10] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 395.653376][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 395.660432][ T10] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 395.668964][ T10] usb 5-1: config 0 has no interface number 0 [ 395.675305][ T10] usb 5-1: config 0 interface 217 has no altsetting 0 [ 395.684400][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=651f, bcdDevice=26.93 [ 395.693581][ T10] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 395.701785][ T10] usb 5-1: Product: syz [ 395.706020][ T10] usb 5-1: Manufacturer: syz [ 395.710647][ T10] usb 5-1: SerialNumber: syz [ 395.721115][ T10] usb 5-1: config 0 descriptor?? [ 395.929001][T11655] trusted_key: encrypted_key: insufficient parameters specified [ 395.939299][T11655] trusted_key: encrypted_key: insufficient parameters specified [ 395.957111][ T10] em28xx 5-1:0.217: New device syz syz @ 480 Mbps (2040:651f, interface 217, class 217) [ 395.967222][ T10] em28xx 5-1:0.217: Video interface 217 found: bulk [ 396.033771][ T10] em28xx 5-1:0.217: unknown em28xx chip ID (0) [ 396.108952][ T10] em28xx 5-1:0.217: reading from i2c device at 0xa0 failed (error=-5) [ 396.118195][ T10] em28xx 5-1:0.217: board has no eeprom [ 396.183410][ T10] em28xx 5-1:0.217: Identified as Hauppauge WinTV HVR 850 (card=60) [ 396.191641][ T10] em28xx 5-1:0.217: analog set to bulk mode. [ 396.197953][ T795] em28xx 5-1:0.217: Registering V4L2 extension [ 396.215375][ T10] usb 5-1: USB disconnect, device number 122 [ 396.223019][ T10] em28xx 5-1:0.217: Disconnecting em28xx [ 396.307110][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 396.307250][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 396.348749][ T795] em28xx 5-1:0.217: Config register raw data: 0xffffffed [ 396.363489][ T795] em28xx 5-1:0.217: AC97 chip type couldn't be determined [ 396.370681][ T795] em28xx 5-1:0.217: No AC97 audio processor [ 396.386550][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 396.392359][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 396.400231][ T795] em28xx 5-1:0.217: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 396.410089][ T795] em28xx 5-1:0.217: Binding DVB extension [ 396.416132][ T795] em28xx 5-1:0.217: no endpoint for DVB mode and transfer type 0 [ 396.424206][ T795] em28xx 5-1:0.217: failed to pre-allocate USB transfer buffers for DVB. [ 396.449111][ T795] em28xx 5-1:0.217: Registering input extension [ 396.456759][ T10] em28xx 5-1:0.217: Closing input extension [ 396.483156][ T10] em28xx 5-1:0.217: Freeing device [ 396.523200][T11667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.551015][T11667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.943499][ T5948] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 397.094643][ T5948] usb 5-1: Using ep0 maxpacket: 16 [ 397.116344][ T5948] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 397.125907][ T5948] usb 5-1: config 0 has no interface number 0 [ 397.135866][ T5948] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 397.145099][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.154177][ T5948] usb 5-1: Product: syz [ 397.159233][ T5948] usb 5-1: Manufacturer: syz [ 397.175818][ T5948] usb 5-1: SerialNumber: syz [ 397.191766][ T5948] usb 5-1: config 0 descriptor?? [ 397.209611][ T5948] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 397.273614][T11676] loop4: detected capacity change from 0 to 524287936 [ 397.324164][T11678] NILFS (nbd5): device size too small [ 397.348511][T11678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.357993][T11678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.629345][T11689] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 398.035104][T11703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.047500][T11703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.075165][T11703] autofs: Bad value for 'fd' [ 398.089628][T11703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.098580][T11703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.373381][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 398.523458][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 398.531147][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.542299][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 398.551479][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.562589][ T10] usb 2-1: config 0 descriptor?? [ 398.711902][T11708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.723007][T11708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.983781][ T10] mcp2221 0003:04D8:00DD.0026: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 399.015357][T11671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.024869][T11671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.341921][T11718] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 399.464945][T11721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.476675][T11721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.482312][T11719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.494544][T11719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.495503][T11721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.511994][T11721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.149624][T11725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.159807][T11725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.639617][ T5948] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 400.652729][ T5948] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 400.662985][ T5948] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 400.683102][ T5948] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input69 [ 400.704752][ T5948] usb 5-1: USB disconnect, device number 123 [ 400.873130][T11730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.882577][T11730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.994013][ T5948] usb 2-1: USB disconnect, device number 29 [ 401.508146][T11745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.518168][T11745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.526329][ T5874] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 401.553438][ T5948] usb 5-1: new low-speed USB device number 124 using dummy_hcd [ 401.686036][ T5874] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 401.694122][ T5874] usb 2-1: can't read configurations, error -22 [ 401.706894][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 401.718000][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.727890][ T5948] usb 5-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 401.737563][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.748437][ T5948] usb 5-1: config 0 descriptor?? [ 401.826201][ T5874] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 402.005727][ T5874] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 402.013867][ T5874] usb 2-1: can't read configurations, error -22 [ 402.020592][ T5874] usb usb2-port1: attempt power cycle [ 402.140144][T11750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.151209][T11750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.273033][ T5948] usbhid 5-1:0.0: can't add hid device: -71 [ 402.280945][ T5948] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 402.294112][ T5948] usb 5-1: USB disconnect, device number 124 [ 402.363535][ T5874] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 402.393426][ T5874] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 402.412616][ T5874] usb 2-1: can't read configurations, error -22 [ 402.543708][ T5874] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 402.566302][ T5874] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 402.574609][ T5874] usb 2-1: can't read configurations, error -22 [ 402.581479][ T5874] usb usb2-port1: unable to enumerate USB device [ 402.623724][T11756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.632551][T11756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.881702][T11767] ALSA: mixer_oss: invalid OSS volume '^' [ 402.902543][T11769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.917767][T11770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.919180][T11769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.948869][T11770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.970353][T11772] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 403.022344][T11774] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 403.031471][T11774] FAULT_INJECTION: forcing a failure. [ 403.031471][T11774] name failslab, interval 1, probability 0, space 0, times 0 [ 403.048249][T11774] CPU: 1 UID: 0 PID: 11774 Comm: syz.4.1620 Not tainted syzkaller #0 PREEMPT(full) [ 403.048279][T11774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 403.048300][T11774] Call Trace: [ 403.048314][T11774] [ 403.048323][T11774] dump_stack_lvl+0x189/0x250 [ 403.048356][T11774] ? __pfx____ratelimit+0x10/0x10 [ 403.048386][T11774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.048412][T11774] ? __pfx__printk+0x10/0x10 [ 403.048439][T11774] ? __pfx___might_resched+0x10/0x10 [ 403.048463][T11774] ? fs_reclaim_acquire+0x7d/0x100 [ 403.048503][T11774] should_fail_ex+0x414/0x560 [ 403.048540][T11774] should_failslab+0xa8/0x100 [ 403.048573][T11774] __kmalloc_noprof+0xdf/0x800 [ 403.048599][T11774] ? comedi_alloc_spriv+0x2d/0xa0 [ 403.048630][T11774] comedi_alloc_spriv+0x2d/0xa0 [ 403.048656][T11774] subdev_8255_io_init+0x2d/0x330 [ 403.048686][T11774] das16m1_attach+0x7cf/0xae0 [ 403.048720][T11774] comedi_device_attach+0x51f/0x720 [ 403.048750][T11774] comedi_unlocked_ioctl+0x645/0x1020 [ 403.048777][T11774] ? kasan_quarantine_put+0xdd/0x220 [ 403.048812][T11774] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 403.048898][T11774] ? __fget_files+0x2a/0x420 [ 403.048927][T11774] ? __fget_files+0x3a0/0x420 [ 403.048949][T11774] ? __fget_files+0x2a/0x420 [ 403.048975][T11774] ? bpf_lsm_file_ioctl+0x9/0x20 [ 403.049006][T11774] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 403.049034][T11774] __se_sys_ioctl+0xfc/0x170 [ 403.049067][T11774] do_syscall_64+0xfa/0xfa0 [ 403.049098][T11774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.049118][T11774] ? clear_bhb_loop+0x60/0xb0 [ 403.049144][T11774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.049164][T11774] RIP: 0033:0x7f4756b8f6c9 [ 403.049183][T11774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.049200][T11774] RSP: 002b:00007f4757a8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 403.049222][T11774] RAX: ffffffffffffffda RBX: 00007f4756de5fa0 RCX: 00007f4756b8f6c9 [ 403.049236][T11774] RDX: 0000200000000280 RSI: 0000000040946400 RDI: 0000000000000003 [ 403.049250][T11774] RBP: 00007f4757a8d090 R08: 0000000000000000 R09: 0000000000000000 [ 403.049262][T11774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 403.049274][T11774] R13: 00007f4756de6038 R14: 00007f4756de5fa0 R15: 00007ffe3ad32038 [ 403.049308][T11774] [ 403.356698][T11778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.370063][T11778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.395271][ T52] Bluetooth: hci2: Malformed HCI Event [ 403.633436][ T5889] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 403.783708][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 403.790569][ T5889] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 403.800194][ T5889] usb 5-1: config 0 has no interface number 0 [ 403.808340][ T5889] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 403.821351][ T5889] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 403.830577][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.840931][ T5889] usb 5-1: config 0 descriptor?? [ 403.856197][ T5889] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 404.007842][T11788] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1626'. [ 404.323800][T11796] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 404.424391][T11802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.424972][ T795] usb 5-1: USB disconnect, device number 125 [ 404.436719][T11802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.480787][T11802] overlay: filesystem on ./bus is read-only [ 404.718591][T11809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.728479][T11809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.743382][ T52] Bluetooth: hci1: Malformed HCI Event [ 404.753615][ T5948] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 404.883410][ T5948] usb 2-1: device descriptor read/64, error -71 [ 405.050495][T11811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.067266][T11811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.143412][ T5948] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 405.283483][ T5948] usb 2-1: device descriptor read/64, error -71 [ 405.316420][T11815] tmpfs: Unknown parameter 'usrquota_block_.+#0nhardl' [ 405.353481][ T10] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 405.395482][ T5948] usb usb2-port1: attempt power cycle [ 405.503635][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 405.514149][ T10] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.524215][T11824] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 405.525437][ T10] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 405.545302][ T10] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 405.559427][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 405.567879][ T10] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 405.577552][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.589103][ T10] usb 5-1: config 0 descriptor?? [ 405.702531][T11831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.711408][T11831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.726268][T11831] /dev/nullb0: Can't open blockdev [ 405.737809][ T5948] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 405.776532][T11833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.785712][ T5948] usb 2-1: device descriptor read/8, error -71 [ 405.793529][T11833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.806989][T11833] vxcan1: entered allmulticast mode [ 406.016350][ T10] hid-thrustmaster 0003:044F:B65D.0027: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 406.023740][ T5948] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 406.054050][ T5948] usb 2-1: device descriptor read/8, error -71 [ 406.163823][ T5948] usb usb2-port1: unable to enumerate USB device [ 406.418337][T11839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.431011][T11839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.537271][T11842] bridge0: port 3(batadv0) entered blocking state [ 406.544672][T11842] bridge0: port 3(batadv0) entered disabled state [ 406.554359][T11842] batadv0: entered allmulticast mode [ 406.562129][T11842] batadv0: entered promiscuous mode [ 406.569550][T11842] bridge0: port 3(batadv0) entered blocking state [ 406.577003][T11842] bridge0: port 3(batadv0) entered forwarding state [ 406.589482][T11843] batadv0: left allmulticast mode [ 406.594839][T11843] batadv0: left promiscuous mode [ 406.601105][T11843] bridge0: port 3(batadv0) entered disabled state [ 406.740591][ T10] hid-thrustmaster 0003:044F:B65D.0027: setup data couldn't be sent [ 406.777986][ C0] hid-thrustmaster 0003:044F:B65D.0027: URB to get model id failed with error -71 [ 406.815592][ T10] usb 5-1: USB disconnect, device number 126 [ 406.876378][T11853] comedi comedi3: comedi_config --init_data is deprecated [ 407.047134][T11859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1652'. [ 407.079949][T11861] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 407.272106][T11873] fuse: Bad value for 'fd' [ 407.430161][T11881] dns_resolver: Unsupported content type (254) [ 407.439168][T11883] comedi comedi3: comedi_config --init_data is deprecated [ 407.519599][T11885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.530617][T11885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.702755][T11892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.820967][T11906] loop4: detected capacity change from 0 to 524287936 [ 407.930501][T11908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.955639][T11908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.152362][T11917] comedi comedi3: comedi_config --init_data is deprecated [ 408.805404][T11925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1675'. [ 408.984972][T11928] loop4: detected capacity change from 0 to 524287936 [ 409.062103][T11930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.073444][T11930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.751261][T11939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.760942][T11939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.314058][T11941] comedi comedi3: comedi_config --init_data is deprecated [ 410.362060][T11943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1682'. [ 410.365825][T11944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.381998][T11944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.938184][T11953] loop4: detected capacity change from 0 to 524287936 [ 410.954352][ T795] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 411.123454][ T795] usb 2-1: Using ep0 maxpacket: 8 [ 411.131926][ T795] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 411.150722][ T795] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.169744][ T795] usb 2-1: config 0 has no interface number 0 [ 411.176466][ T795] usb 2-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 411.190250][ T795] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 411.202655][ T795] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 411.214381][ T795] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 411.256182][ T795] usb 2-1: config 0 interface 52 has no altsetting 0 [ 411.262970][ T795] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 411.278056][ T795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.290885][ T795] usb 2-1: config 0 descriptor?? [ 411.441789][T11955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.450834][T11955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.491619][T11955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.501566][T11955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.508345][ T795] usb 2-1: Can not set alternate setting to 1, error: -71 [ 411.521413][ T795] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -71 [ 411.541486][ T795] usb 2-1: USB disconnect, device number 38 [ 411.614886][T11963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.627265][T11963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.051588][T11968] vivid-004: disconnect [ 412.082273][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1692'. [ 412.282285][T11975] loop4: detected capacity change from 0 to 524287936 [ 412.445660][T11979] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1695'. [ 412.463530][ T795] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 412.479275][T11979] xt_policy: neither incoming nor outgoing policy selected [ 412.546690][T11987] comedi comedi3: comedi_config --init_data is deprecated [ 412.628194][ T795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.640122][ T795] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 412.649400][ T795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.668641][ T795] usb 2-1: config 0 descriptor?? [ 412.827109][T11966] vivid-004: reconnect [ 413.140227][T12004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.157043][T12004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.298595][ T795] steelseries 0003:1038:12B6.0028: unknown main item tag 0x1 [ 413.314992][ T795] steelseries 0003:1038:12B6.0028: unknown main item tag 0x1 [ 413.323104][ T795] steelseries 0003:1038:12B6.0028: unknown main item tag 0x7 [ 413.343203][ T795] steelseries 0003:1038:12B6.0028: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 413.496911][ T795] steelseries 0003:1038:12B6.0028: hid_hw_raw_request() failed with -71 [ 413.545196][ T795] usb 2-1: USB disconnect, device number 39 [ 413.582251][T12022] comedi comedi3: comedi_config --init_data is deprecated [ 413.855179][T12041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.878656][T12041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.141309][T12052] netlink: 1072 bytes leftover after parsing attributes in process `syz.1.1713'. [ 414.173398][T12052] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1713'. [ 414.262440][T12058] No buffer was provided with the request [ 414.327582][T12060] comedi comedi3: comedi_config --init_data is deprecated [ 414.379122][T12062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.390370][T12062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.427056][ T5874] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 414.441125][T12062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.467646][T12062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.483128][T12062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.492412][T12062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.583386][ T5874] usb 2-1: Using ep0 maxpacket: 8 [ 414.590371][ T5874] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 414.601974][T12076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.616526][ T5874] usb 2-1: config 0 has no interface number 0 [ 414.623149][ T5874] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 414.626671][T12076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.635395][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.652623][ T5874] usb 2-1: config 0 descriptor?? [ 414.785039][ T5874] viperboard 2-1:0.143: version 0.00 found at bus 002 address 040 [ 414.804953][ T5874] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 414.815852][ T5874] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 414.868653][T12052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.877647][T12052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.890841][ T5874] usb 2-1: USB disconnect, device number 40 [ 415.222416][T12078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.231483][T12078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.515292][T12087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1725'. [ 415.604981][T12091] comedi comedi3: comedi_config --init_data is deprecated [ 415.714384][T12089] overlayfs: workdir and upperdir must be separate subtrees [ 415.922046][T12099] can0: slcan on ptm0. [ 415.942303][T12102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.963184][T12102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.969474][T12099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.013861][T12099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.068760][T12097] can0 (unregistered): slcan off ptm0. [ 416.425460][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 416.585328][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 416.636651][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 416.656006][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.676245][ T10] usb 2-1: Product: syz [ 416.678128][T12127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.690868][ T10] usb 2-1: Manufacturer: syz [ 416.700857][ T10] usb 2-1: SerialNumber: syz [ 416.708407][T12127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.738184][T12131] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1733'. [ 416.811638][T12134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.823643][T12134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.933047][ T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 417.124180][T12147] comedi comedi3: comedi_config --init_data is deprecated [ 417.136193][ T5909] usb 2-1: USB disconnect, device number 41 [ 417.390673][T12157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.400292][T12157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.413202][T12109] usblp0: removed [ 417.492384][T12161] can0: slcan on ptm0. [ 417.977395][T12178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1743'. [ 418.052083][T12182] loop4: detected capacity change from 0 to 524287936 [ 418.139234][T12184] comedi comedi3: comedi_config --init_data is deprecated [ 418.336046][T12192] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 418.390720][T12194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.400470][T12194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.420247][T12194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.453540][ T5889] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 418.456760][T12194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.501825][T12196] bond0: (slave wlan1): Releasing backup interface [ 418.604771][T12199] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1752'. [ 418.615840][T12199] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1752'. [ 418.626191][ T5889] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 418.639288][ T5889] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 418.652232][ T5889] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 418.669493][ T5889] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 418.696720][ T5889] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 418.706790][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.715247][ T5889] usb 2-1: Product: syz [ 418.719543][ T5889] usb 2-1: Manufacturer: syz [ 418.724716][ T5889] usb 2-1: SerialNumber: syz [ 418.756389][T12188] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 418.786418][ T5889] cdc_mbim 2-1:1.0: skipping garbage [ 418.801167][T12202] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1753'. [ 418.994762][T12188] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 419.006326][T12188] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 419.073543][T12207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.089422][T12207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.095945][T12208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.114535][T12208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.225234][T12203] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 419.232698][T12203] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 419.253786][ T5889] cdc_mbim 2-1:1.0: setting tx_max = 48 [ 419.264236][ T5889] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 419.285216][T12213] comedi comedi3: comedi_config --init_data is deprecated [ 419.292548][ T5889] wwan wwan0: port wwan0mbim0 attached [ 419.308669][ T5889] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 22:55:5a:e1:2e:89 [ 419.551871][ T5909] usb 2-1: USB disconnect, device number 42 [ 419.578622][ T5909] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 419.707802][ T5909] wwan wwan0: port wwan0mbim0 disconnected [ 419.877558][T12230] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 420.280803][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1761'. [ 420.300349][T12238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1761'. [ 420.333394][ T5909] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 420.351549][T12241] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1762'. [ 420.473572][T12244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.508404][T12244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.526609][ T5909] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.532962][T12244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.546124][ T5909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 420.546183][ T5909] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 420.546207][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.568368][ T5909] usb 2-1: config 0 descriptor?? [ 420.618693][T12244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.725716][T12161] can0 (unregistered): slcan off ptm0. [ 420.841399][T12255] comedi comedi1: pcmda12: I/O port conflict (0x7,16) [ 420.885754][T12257] vxcan1 speed is unknown, defaulting to 1000 [ 421.010701][ T5909] playstation 0003:054C:05C4.0029: unknown main item tag 0x0 [ 421.027819][ T5909] playstation 0003:054C:05C4.0029: unknown main item tag 0x0 [ 421.053788][ T5909] playstation 0003:054C:05C4.0029: unknown main item tag 0x0 [ 421.061275][ T5909] playstation 0003:054C:05C4.0029: unknown main item tag 0x0 [ 421.084286][ T5909] playstation 0003:054C:05C4.0029: unknown main item tag 0x0 [ 421.091843][ T5909] playstation 0003:054C:05C4.0029: unknown main item tag 0x0 [ 421.104212][ T5909] playstation 0003:054C:05C4.0029: unknown main item tag 0x0 [ 421.145017][ T5909] playstation 0003:054C:05C4.0029: hidraw0: USB HID v40.00 Device [HID 054c:05c4] on usb-dummy_hcd.1-1/input0 [ 421.244399][ T5909] playstation 0003:054C:05C4.0029: Invalid byte count transferred, expected 16 got 0 [ 421.280191][ T5909] playstation 0003:054C:05C4.0029: Failed to retrieve DualShock4 pairing info: -22 [ 421.314850][ T5909] playstation 0003:054C:05C4.0029: Failed to get MAC address from DualShock4 [ 421.331989][ T5909] playstation 0003:054C:05C4.0029: Failed to create dualshock4. [ 421.357692][ T5909] playstation 0003:054C:05C4.0029: probe with driver playstation failed with error -22 [ 421.423974][T12273] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 421.454930][ T5909] usb 2-1: USB disconnect, device number 43 [ 421.604750][T12276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.659223][T12276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.052208][T12290] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1772'. [ 422.376272][T12303] can0: slcan on ptm0. [ 422.454130][T12303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.509815][T12303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.719381][T12302] can0 (unregistered): slcan off ptm0. [ 422.836008][T12325] usb usb8: usbfs: process 12325 (syz.4.1778) did not claim interface 0 before use [ 423.027809][ T30] audit: type=1326 audit(6054173611.897:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12329 comm="syz.1.1780" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc6e698f6c9 code=0x0 [ 423.270709][T12344] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1783'. [ 423.305063][T12345] loop4: detected capacity change from 0 to 524287936 [ 423.463166][T12354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1786'. [ 423.479843][T12352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.498219][T12352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.673459][ T10] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 423.799784][T12366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.817402][T12366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.823379][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 423.837235][ T10] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 423.859141][ T10] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.885074][ T10] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.905558][ T10] usb 2-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 423.931981][ T10] usb 2-1: config 7 interface 0 has no altsetting 0 [ 423.939133][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 423.949721][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.190999][T12384] random: crng reseeded on system resumption [ 424.285272][T12387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.300080][T12387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.378985][ T10] hid (null): unknown global tag 0xe [ 424.402246][ T10] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.0/0003:0458:5010.002A/input/input70 [ 424.494117][ T10] kye 0003:0458:5010.002A: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 424.584924][ T10] usb 2-1: USB disconnect, device number 44 [ 424.656053][T12391] can0: slcan on ptm0. [ 424.677677][T12391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.727444][T12391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.794862][T12390] can0 (unregistered): slcan off ptm0. [ 424.872656][T12398] netlink: 'syz.0.1793': attribute type 1 has an invalid length. [ 424.880575][T12398] netlink: 'syz.0.1793': attribute type 3 has an invalid length. [ 424.889119][T12398] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1793'. [ 424.917171][T12398] QAT: Invalid ioctl -1070033885 [ 424.986607][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1794'. [ 425.059849][T12409] loop4: detected capacity change from 0 to 524287936 [ 425.403638][ T5948] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 425.485775][T12422] kAFS: unable to lookup cell '/yz1' [ 425.573348][ T5948] usb 2-1: Using ep0 maxpacket: 16 [ 425.584362][ T5948] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.633457][ T5948] usb 2-1: config 0 interface 0 has no altsetting 0 [ 425.652751][ T5948] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 425.681886][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.710602][ T5948] usb 2-1: config 0 descriptor?? [ 425.832299][T12434] netlink: 'syz.5.1802': attribute type 12 has an invalid length. [ 425.851206][T12434] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1802'. [ 425.962816][T12438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1803'. [ 426.133336][T12413] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 426.140637][T12413] IPv6: NLM_F_CREATE should be set when creating new route [ 426.147997][T12413] IPv6: NLM_F_CREATE should be set when creating new route [ 426.155291][T12413] IPv6: NLM_F_CREATE should be set when creating new route [ 426.226621][ T5948] nzxt-smart2 0003:1E71:2009.002B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 426.266355][T12452] can0: slcan on ptm0. [ 426.286839][T12452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.342196][T12452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.569887][T12449] can0 (unregistered): slcan off ptm0. [ 426.653950][ T795] usb 2-1: USB disconnect, device number 45 [ 426.754348][T12459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.793490][T12459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.821130][T12459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.841806][T12459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.189643][T12462] bridge0: port 3(syz_tun) entered blocking state [ 427.203729][T12462] bridge0: port 3(syz_tun) entered disabled state [ 427.214892][T12442] syz.4.1804 (12442): drop_caches: 2 [ 427.220991][T12462] syz_tun: entered allmulticast mode [ 427.236751][T12462] syz_tun: entered promiscuous mode [ 427.252351][T12462] bridge0: port 3(syz_tun) entered blocking state [ 427.259044][T12462] bridge0: port 3(syz_tun) entered forwarding state [ 427.450101][T12474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.472961][T12474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.628114][T12488] can0: slcan on ptm0. [ 427.647372][T12488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.658615][T12488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.749200][T12487] can0 (unregistered): slcan off ptm0. [ 427.853449][ T795] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 428.025065][ T795] usb 2-1: config 0 has an invalid interface number: 201 but max is 0 [ 428.037565][ T795] usb 2-1: config 0 has no interface number 0 [ 428.047860][ T795] usb 2-1: New USB device found, idVendor=0582, idProduct=0046, bcdDevice=76.e3 [ 428.073430][ T795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.095343][ T795] usb 2-1: config 0 descriptor?? [ 428.128819][T12508] netlink: 'syz.0.1820': attribute type 4 has an invalid length. [ 428.137333][T12508] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1820'. [ 428.266135][T12511] syzkaller1: left promiscuous mode [ 428.271975][T12511] syzkaller1: left allmulticast mode [ 428.304667][ T795] usb 2-1: USB disconnect, device number 46 [ 428.336122][T12511] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 428.349340][T12511] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 428.401080][T12517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.413531][T12517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.429144][T12517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.440482][T12517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.134130][ T795] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 429.283471][ T795] usb 2-1: Using ep0 maxpacket: 32 [ 429.291029][ T795] usb 2-1: unable to get BOS descriptor or descriptor too short [ 429.300974][ T795] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 429.309643][ T795] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 429.320388][ T795] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 429.329796][ T795] usb 2-1: config 128 has no interface number 0 [ 429.336171][ T795] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 429.348029][ T795] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 429.358289][ T795] usb 2-1: config 128 interface 127 has no altsetting 0 [ 429.367397][ T795] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 429.376598][ T795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.385840][ T795] usb 2-1: Product: syz [ 429.390100][ T795] usb 2-1: Manufacturer: syz [ 429.394824][ T795] usb 2-1: SerialNumber: syz [ 429.757720][T12538] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1826'. [ 429.765228][ T795] usb 2-1: USB disconnect, device number 47 [ 429.804551][ T6033] udevd[6033]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.889497][T12546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1828'. [ 430.023549][T12553] can0: slcan on ptm0. [ 430.052237][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1831'. [ 430.122978][T12559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1832'. [ 430.208200][T12563] netlink: 'syz.0.1833': attribute type 5 has an invalid length. [ 430.263335][ T5909] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 430.413446][ T5909] usb 2-1: Using ep0 maxpacket: 8 [ 430.428344][ T5909] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 430.439662][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.463058][ T5909] usb 2-1: config 0 has no interface number 0 [ 430.492055][ T5909] usb 2-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 430.517742][ T5909] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 430.539547][ T5909] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 430.575663][ T5909] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 430.617947][ T5909] usb 2-1: config 0 interface 52 has no altsetting 0 [ 430.626435][ T5909] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 430.636738][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.658791][ T5909] usb 2-1: config 0 descriptor?? [ 430.769388][T12584] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1837'. [ 430.876528][ T5909] usb 2-1: Can not set alternate setting to 1, error: -71 [ 430.894064][ T5909] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -71 [ 430.919668][T12588] loop4: detected capacity change from 0 to 524287936 [ 430.941981][T12590] netlink: 'syz.4.1839': attribute type 1 has an invalid length. [ 430.961428][ T5909] usb 2-1: USB disconnect, device number 48 [ 430.980501][T12590] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1839'. [ 431.004910][T12552] can0 (unregistered): slcan off ptm0. [ 431.100509][T12593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1840'. [ 431.199999][T12597] nfsd: Unknown parameter 'cache' [ 431.513102][T12612] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1845'. [ 431.577267][T12612] trusted_key: encrypted_key: master key parameter '' is invalid [ 431.586405][T12612] netlink: 'syz.5.1845': attribute type 6 has an invalid length. [ 431.959767][T12638] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1848'. [ 432.174237][T12645] loop4: detected capacity change from 0 to 524287936 [ 432.419701][T12659] can0: slcan on ptm0. [ 432.439177][T12659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.451158][T12659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.523755][T12657] can0 (unregistered): slcan off ptm0. [ 432.587567][T12664] comedi comedi3: comedi_config --init_data is deprecated [ 432.604154][ T795] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 432.743496][ T795] usb 2-1: device descriptor read/64, error -71 [ 432.986575][ T795] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 433.024905][T12674] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 433.035251][T12674] comedi comedi3: comedi_config --init_data is deprecated [ 433.112535][T12676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.124106][ T795] usb 2-1: device descriptor read/64, error -71 [ 433.129094][T12677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.143054][T12676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.151128][T12677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.214286][T12682] __nla_validate_parse: 1 callbacks suppressed [ 433.214301][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1860'. [ 433.240116][ T795] usb usb2-port1: attempt power cycle [ 433.279102][T12682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.288067][T12682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.583640][ T795] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 433.604275][ T795] usb 2-1: device descriptor read/8, error -71 [ 433.756716][T12686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1862'. [ 433.816166][T12688] loop4: detected capacity change from 0 to 524287936 [ 433.843387][ T795] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 433.870408][ T795] usb 2-1: device descriptor read/8, error -71 [ 433.964562][T12692] netlink: 328 bytes leftover after parsing attributes in process `syz.5.1865'. [ 434.000026][ T795] usb usb2-port1: unable to enumerate USB device [ 434.048846][T12699] can0: slcan on ptm0. [ 434.254746][T12709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.264976][T12709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.286412][T12709] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 434.386760][T12711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.398588][T12711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.859018][T12724] FAULT_INJECTION: forcing a failure. [ 434.859018][T12724] name failslab, interval 1, probability 0, space 0, times 0 [ 434.872005][T12724] CPU: 0 UID: 0 PID: 12724 Comm: syz.5.1870 Not tainted syzkaller #0 PREEMPT(full) [ 434.872032][T12724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 434.872046][T12724] Call Trace: [ 434.872054][T12724] [ 434.872065][T12724] dump_stack_lvl+0x189/0x250 [ 434.872097][T12724] ? __pfx____ratelimit+0x10/0x10 [ 434.872138][T12724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.872164][T12724] ? __pfx__printk+0x10/0x10 [ 434.872196][T12724] ? __pfx___might_resched+0x10/0x10 [ 434.872220][T12724] ? fs_reclaim_acquire+0x7d/0x100 [ 434.872252][T12724] should_fail_ex+0x414/0x560 [ 434.872289][T12724] should_failslab+0xa8/0x100 [ 434.872322][T12724] kmem_cache_alloc_node_noprof+0x8c/0x710 [ 434.872350][T12724] ? __alloc_skb+0x112/0x2d0 [ 434.872375][T12724] ? netlink_autobind+0xdb/0x300 [ 434.872412][T12724] __alloc_skb+0x112/0x2d0 [ 434.872443][T12724] netlink_sendmsg+0x5c6/0xb30 [ 434.872485][T12724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.872518][T12724] ? aa_sock_msg_perm+0xf1/0x1d0 [ 434.872546][T12724] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 434.872575][T12724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.872606][T12724] __sock_sendmsg+0x21c/0x270 [ 434.872634][T12724] ____sys_sendmsg+0x505/0x830 [ 434.872670][T12724] ? __pfx_____sys_sendmsg+0x10/0x10 [ 434.872711][T12724] ? import_iovec+0x74/0xa0 [ 434.872740][T12724] ___sys_sendmsg+0x21f/0x2a0 [ 434.872773][T12724] ? __pfx____sys_sendmsg+0x10/0x10 [ 434.872843][T12724] ? __fget_files+0x2a/0x420 [ 434.872865][T12724] ? __fget_files+0x3a0/0x420 [ 434.872897][T12724] __x64_sys_sendmsg+0x19b/0x260 [ 434.872932][T12724] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 434.872973][T12724] ? __pfx_ksys_write+0x10/0x10 [ 434.872998][T12724] ? do_syscall_64+0xbe/0xfa0 [ 434.873033][T12724] do_syscall_64+0xfa/0xfa0 [ 434.873064][T12724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.873079][T12724] ? clear_bhb_loop+0x60/0xb0 [ 434.873098][T12724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.873121][T12724] RIP: 0033:0x7f41c878f6c9 [ 434.873135][T12724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.873147][T12724] RSP: 002b:00007f41c69ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.873164][T12724] RAX: ffffffffffffffda RBX: 00007f41c89e5fa0 RCX: 00007f41c878f6c9 [ 434.873175][T12724] RDX: 0000000024004010 RSI: 0000200000000000 RDI: 0000000000000003 [ 434.873185][T12724] RBP: 00007f41c69ee090 R08: 0000000000000000 R09: 0000000000000000 [ 434.873195][T12724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.873204][T12724] R13: 00007f41c89e6038 R14: 00007f41c89e5fa0 R15: 00007ffc3da77948 [ 434.873232][T12724] [ 435.199763][T12726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.210400][T12726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.222130][T12726] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1871'. [ 435.337426][T12728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1872'. [ 435.410217][T12732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.428274][T12732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.693573][ T5874] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 435.781115][T12736] tmpfs: Bad value for 'mpol' [ 435.787006][T12737] tmpfs: Bad value for 'mpol' [ 435.839845][T12739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.849840][T12739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.865966][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.877657][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.889628][ T5874] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 435.899095][ T5874] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 435.907459][ T5874] usb 2-1: Manufacturer: syz [ 435.915008][ T5874] usb 2-1: config 0 descriptor?? [ 435.981125][T12741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.990262][T12741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.417521][T12743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1879'. [ 436.488204][T12745] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 436.621276][T12749] loop4: detected capacity change from 0 to 524287936 [ 436.643153][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1882'. [ 436.758630][T12756] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1885'. [ 436.874815][T12758] comedi comedi3: comedi_config --init_data is deprecated [ 436.947521][T12734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.976026][T12734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.996714][ T5874] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.002C/input/input71 [ 437.000881][T12762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.019638][T12762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.021508][T12764] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 437.079224][ T5874] uclogic 0003:256C:006D.002C: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 437.130484][T12767] FAULT_INJECTION: forcing a failure. [ 437.130484][T12767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.165779][T12699] can0 (unregistered): slcan off ptm0. [ 437.203839][ T795] usb 2-1: USB disconnect, device number 53 [ 437.213702][T12767] CPU: 1 UID: 0 PID: 12767 Comm: syz.0.1890 Not tainted syzkaller #0 PREEMPT(full) [ 437.213730][T12767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 437.213743][T12767] Call Trace: [ 437.213752][T12767] [ 437.213761][T12767] dump_stack_lvl+0x189/0x250 [ 437.213793][T12767] ? __pfx____ratelimit+0x10/0x10 [ 437.213823][T12767] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.213850][T12767] ? __pfx__printk+0x10/0x10 [ 437.213875][T12767] ? __might_fault+0xb0/0x130 [ 437.213912][T12767] should_fail_ex+0x414/0x560 [ 437.213960][T12767] _copy_from_iter+0x1de/0x1790 [ 437.213990][T12767] ? rcu_is_watching+0x15/0xb0 [ 437.214023][T12767] ? __pfx__copy_from_iter+0x10/0x10 [ 437.214046][T12767] ? __build_skb_around+0x262/0x3f0 [ 437.214081][T12767] ? netlink_sendmsg+0x642/0xb30 [ 437.214109][T12767] ? skb_put+0x11b/0x210 [ 437.214140][T12767] netlink_sendmsg+0x6b2/0xb30 [ 437.214179][T12767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.214212][T12767] ? aa_sock_msg_perm+0xf1/0x1d0 [ 437.214239][T12767] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 437.214267][T12767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.214298][T12767] __sock_sendmsg+0x21c/0x270 [ 437.214324][T12767] ____sys_sendmsg+0x505/0x830 [ 437.214361][T12767] ? __pfx_____sys_sendmsg+0x10/0x10 [ 437.214400][T12767] ? import_iovec+0x74/0xa0 [ 437.214428][T12767] ___sys_sendmsg+0x21f/0x2a0 [ 437.214462][T12767] ? __pfx____sys_sendmsg+0x10/0x10 [ 437.214531][T12767] ? __fget_files+0x2a/0x420 [ 437.214555][T12767] ? __fget_files+0x3a0/0x420 [ 437.214588][T12767] __x64_sys_sendmsg+0x19b/0x260 [ 437.214623][T12767] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 437.214665][T12767] ? __pfx_ksys_write+0x10/0x10 [ 437.214689][T12767] ? do_syscall_64+0xbe/0xfa0 [ 437.214724][T12767] do_syscall_64+0xfa/0xfa0 [ 437.214756][T12767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.214777][T12767] ? clear_bhb_loop+0x60/0xb0 [ 437.214802][T12767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.214823][T12767] RIP: 0033:0x7f74cff8f6c9 [ 437.214841][T12767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.214859][T12767] RSP: 002b:00007f74d0f0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.214881][T12767] RAX: ffffffffffffffda RBX: 00007f74d01e5fa0 RCX: 00007f74cff8f6c9 [ 437.214897][T12767] RDX: 0000000024004010 RSI: 0000200000000000 RDI: 0000000000000003 [ 437.214911][T12767] RBP: 00007f74d0f0c090 R08: 0000000000000000 R09: 0000000000000000 [ 437.214924][T12767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.214937][T12767] R13: 00007f74d01e6038 R14: 00007f74d01e5fa0 R15: 00007ffc1176be28 [ 437.214982][T12767] [ 437.548100][T12770] fido_id[12770]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 437.840194][T12785] loop4: detected capacity change from 0 to 524287936 [ 438.056712][T12793] comedi comedi3: comedi_config --init_data is deprecated [ 438.122957][ T30] audit: type=1326 audit(6054173626.987:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.0.1896" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74cff8f6c9 code=0x0 [ 438.181241][ T30] audit: type=1326 audit(6054173627.017:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.0.1896" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74cff8f6c9 code=0x0 [ 438.288097][T12800] can0: slcan on ptm0. [ 438.332395][T12800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.383717][T12800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.465263][T12799] can0 (unregistered): slcan off ptm0. [ 439.203385][ T5874] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 439.363940][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 439.413546][ T5874] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 439.443407][ T5874] usb 2-1: config 0 has no interface number 0 [ 439.466416][ T5874] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 439.494516][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.502791][ T5874] usb 2-1: Product: syz [ 439.513690][ T5874] usb 2-1: Manufacturer: syz [ 439.518357][ T5874] usb 2-1: SerialNumber: syz [ 439.530288][T12858] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1905'. [ 439.560066][ T5874] usb 2-1: config 0 descriptor?? [ 439.587348][T12860] comedi comedi3: comedi_config --init_data is deprecated [ 439.593618][ T5874] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 439.665473][T12862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1907'. [ 439.750657][T12865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.761112][T12865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.779933][T12865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1908'. [ 439.791248][T12865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1908'. [ 440.248025][T12867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.257390][T12867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.470661][T12867] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 440.780884][T12872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.794651][T12872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.397308][T12827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.414784][T12827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.438888][T12884] comedi comedi3: comedi_config --init_data is deprecated [ 441.511414][T12888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.524532][T12888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.600869][T12894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.613800][T12894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.120635][T12900] loop4: detected capacity change from 0 to 524287936 [ 442.411746][T12904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.420849][T12904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.858365][T12911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.867728][T12911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.134289][T12917] comedi comedi3: comedi_config --init_data is deprecated [ 443.314962][ T5874] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 443.325212][ T5874] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 443.337394][ T5874] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input72 [ 443.354566][ T5874] usb 2-1: USB disconnect, device number 54 [ 443.600647][ T5874] usb 1-1: USB disconnect, device number 99 [ 443.662410][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 443.678625][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 443.690092][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 443.700232][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 443.708446][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 443.831066][T12923] vxcan1 speed is unknown, defaulting to 1000 [ 443.968473][T12926] loop4: detected capacity change from 0 to 524287936 [ 444.190134][T12931] 9p: Bad value for 'rfdno' [ 444.703892][ T5888] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 445.006526][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.040949][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1940'. [ 445.083467][ T795] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 445.115791][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.224627][ T795] usb 2-1: device descriptor read/64, error -71 [ 445.231669][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.259437][T12923] chnl_net:caif_netlink_parms(): no params data found [ 445.311007][ T36] bond0: (slave netdevsim0): Releasing backup interface [ 445.321712][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.351499][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.457267][T12923] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.464822][T12923] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.472277][T12923] bridge_slave_0: entered allmulticast mode [ 445.483369][ T795] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 445.495721][T12923] bridge_slave_0: entered promiscuous mode [ 445.513107][T12923] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.520852][T12923] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.528364][T12923] bridge_slave_1: entered allmulticast mode [ 445.536478][T12923] bridge_slave_1: entered promiscuous mode [ 445.610971][T12923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.627681][T12923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.633469][ T795] usb 2-1: device descriptor read/64, error -71 [ 445.688963][T12923] team0: Port device team_slave_0 added [ 445.710325][T12923] team0: Port device team_slave_1 added [ 445.743433][ T52] Bluetooth: hci4: command tx timeout [ 445.751327][ T795] usb usb2-port1: attempt power cycle [ 445.758910][ T36] bridge_slave_1: left allmulticast mode [ 445.764747][ T36] bridge_slave_1: left promiscuous mode [ 445.770559][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.781018][ T36] bridge_slave_0: left allmulticast mode [ 445.786821][ T36] bridge_slave_0: left promiscuous mode [ 445.792575][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.093470][ T795] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 446.114853][ T795] usb 2-1: device descriptor read/8, error -71 [ 446.236945][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.248694][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.260019][ T36] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 446.271026][ T36] bond0 (unregistering): Released all slaves [ 446.288004][T12923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.295260][T12923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.324509][T12923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.349443][T12923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.353777][ T795] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 446.357174][T12923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.390831][ T795] usb 2-1: device descriptor read/8, error -71 [ 446.391503][T12923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.505565][ T795] usb usb2-port1: unable to enumerate USB device [ 446.540362][T12923] hsr_slave_0: entered promiscuous mode [ 446.548216][T12923] hsr_slave_1: entered promiscuous mode [ 446.559311][T12923] debugfs: 'hsr0' already exists in 'hsr' [ 446.565555][T12923] Cannot create hsr debugfs directory [ 447.122011][ T36] hsr_slave_0: left promiscuous mode [ 447.128909][ T36] hsr_slave_1: left promiscuous mode [ 447.136636][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.146317][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.169110][ T36] veth1_macvtap: left promiscuous mode [ 447.175751][ T36] veth0_macvtap: left promiscuous mode [ 447.181403][ T36] veth1_vlan: left promiscuous mode [ 447.186930][ T36] veth0_vlan: left promiscuous mode [ 447.279108][ T36] pim6reg9 (unregistering): left allmulticast mode [ 447.715667][ T36] team0 (unregistering): Port device team_slave_1 removed [ 447.806261][ T36] team0 (unregistering): Port device team_slave_0 removed [ 447.823428][ T52] Bluetooth: hci4: command tx timeout [ 447.861487][T12991] 9p: Bad value for 'rfdno' [ 448.097636][T13000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.107874][T13000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.660836][T13009] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1948'. [ 448.694396][T13009] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1948'. [ 448.760060][T13011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.769808][T13011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.790439][ T52] Bluetooth: hci2: ISO packet too small [ 448.889584][ T5888] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 448.975714][T12923] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 448.991022][T12923] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 449.007601][T12923] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 449.020494][ T36] IPVS: stop unused estimator thread 0... [ 449.041024][T12923] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 449.059430][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.070682][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.090049][ T5888] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 449.099591][ T5888] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 449.110698][ T5888] usb 2-1: Manufacturer: syz [ 449.122093][ T5888] usb 2-1: config 0 descriptor?? [ 449.252391][T12923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.299620][T12923] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.327648][ T7827] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.334938][ T7827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.400528][ T7827] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.407894][ T7827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.764494][T13047] ------------[ cut here ]------------ [ 449.770075][T13047] WARNING: ./include/linux/ns_common.h:288 at nsproxy_ns_active_get+0x88f/0xcb0, CPU#1: syz.4.1955/13047 [ 449.781590][T13047] Modules linked in: [ 449.785603][T13047] CPU: 1 UID: 0 PID: 13047 Comm: syz.4.1955 Not tainted syzkaller #0 PREEMPT(full) [ 449.795154][T13047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 449.805594][T13047] RIP: 0010:nsproxy_ns_active_get+0x88f/0xcb0 [ 449.811733][T13047] Code: 00 e8 95 41 77 ff eb 0c e8 8e 41 77 ff eb 05 e8 87 41 77 ff 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 b2 1a 09 cc e8 72 41 77 ff 90 <0f> 0b 90 e9 ee f7 ff ff e8 64 41 77 ff 90 0f 0b 90 e9 12 f8 ff ff [ 449.832137][T13047] RSP: 0018:ffffc9000431fd40 EFLAGS: 00010283 [ 449.838520][T13047] RAX: ffffffff824a1b9e RBX: ffff88805a1a5b60 RCX: 0000000000080000 [ 449.846593][T13047] RDX: ffffc900124c3000 RSI: 000000000000093d RDI: 000000000000093e [ 449.854877][T13047] RBP: ffffc9000431fe01 R08: ffff88802f1970bb R09: 1ffff11005e32e17 [ 449.862903][T13047] R10: dffffc0000000000 R11: ffffed1005e32e18 R12: dffffc0000000000 [ 449.871470][T13047] R13: 0000000000000000 R14: ffff88802f1970b8 R15: ffff88802f197000 [ 449.879681][T13047] FS: 00007f4757a8d6c0(0000) GS:ffff888125b83000(0000) knlGS:0000000000000000 [ 449.888868][T13047] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 449.895575][T13047] CR2: 000000110c2b687c CR3: 000000007819c000 CR4: 00000000003526f0 [ 449.903811][ T52] Bluetooth: hci4: command tx timeout [ 449.909497][T13047] DR0: 000000000000767e DR1: 0000000000000000 DR2: 0000000000000000 [ 449.917568][T13047] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 449.925666][T13047] Call Trace: [ 449.928987][T13047] [ 449.931953][T13047] switch_task_namespaces+0x3e/0x110 [ 449.937336][T13047] __se_sys_setns+0x784/0x17d0 [ 449.942207][T13047] ? __pfx_do_sys_openat2+0x10/0x10 [ 449.947699][T13047] ? __pfx___se_sys_setns+0x10/0x10 [ 449.952962][T13047] ? do_syscall_64+0xbe/0xfa0 [ 449.957866][T13047] do_syscall_64+0xfa/0xfa0 [ 449.962447][T13047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.968711][T13047] ? clear_bhb_loop+0x60/0xb0 [ 449.973611][T13047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.979557][T13047] RIP: 0033:0x7f4756b90ef7 [ 449.984157][T13047] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.004406][T13047] RSP: 002b:00007f4757a8cfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 450.013117][T13047] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4756b90ef7 [ 450.021379][T13047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 450.029451][T13047] RBP: 00007f4756c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 450.037548][T13047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.045666][T13047] R13: 00007f4756de6038 R14: 00007f4756de5fa0 R15: 00007ffe3ad32038 [ 450.053865][T13047] [ 450.054988][T13050] can0: slcan on ptm0. [ 450.056987][T13047] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 450.057008][T13047] CPU: 1 UID: 0 PID: 13047 Comm: syz.4.1955 Not tainted syzkaller #0 PREEMPT(full) [ 450.057039][T13047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 450.057057][T13047] Call Trace: [ 450.057070][T13047] [ 450.057082][T13047] dump_stack_lvl+0x99/0x250 [ 450.057120][T13047] ? __asan_memcpy+0x40/0x70 [ 450.057153][T13047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.057187][T13047] ? __pfx__printk+0x10/0x10 [ 450.057233][T13047] vpanic+0x237/0x6d0 [ 450.057258][T13047] ? __pfx_vpanic+0x10/0x10 [ 450.057280][T13047] ? is_bpf_text_address+0x292/0x2b0 [ 450.057316][T13047] ? is_bpf_text_address+0x26/0x2b0 [ 450.057370][T13047] panic+0xb9/0xc0 [ 450.057394][T13047] ? __pfx_panic+0x10/0x10 [ 450.057436][T13047] __warn+0x334/0x4c0 [ 450.057459][T13047] ? nsproxy_ns_active_get+0x88f/0xcb0 [ 450.057492][T13047] ? nsproxy_ns_active_get+0x88f/0xcb0 [ 450.057523][T13047] report_bug+0x2be/0x4f0 [ 450.057559][T13047] ? nsproxy_ns_active_get+0x88f/0xcb0 [ 450.057589][T13047] ? nsproxy_ns_active_get+0x88f/0xcb0 [ 450.057618][T13047] ? nsproxy_ns_active_get+0x891/0xcb0 [ 450.057647][T13047] handle_bug+0x84/0x160 [ 450.057674][T13047] exc_invalid_op+0x1a/0x50 [ 450.057701][T13047] asm_exc_invalid_op+0x1a/0x20 [ 450.057724][T13047] RIP: 0010:nsproxy_ns_active_get+0x88f/0xcb0 [ 450.057756][T13047] Code: 00 e8 95 41 77 ff eb 0c e8 8e 41 77 ff eb 05 e8 87 41 77 ff 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 b2 1a 09 cc e8 72 41 77 ff 90 <0f> 0b 90 e9 ee f7 ff ff e8 64 41 77 ff 90 0f 0b 90 e9 12 f8 ff ff [ 450.057779][T13047] RSP: 0018:ffffc9000431fd40 EFLAGS: 00010283 [ 450.057804][T13047] RAX: ffffffff824a1b9e RBX: ffff88805a1a5b60 RCX: 0000000000080000 [ 450.057824][T13047] RDX: ffffc900124c3000 RSI: 000000000000093d RDI: 000000000000093e [ 450.057841][T13047] RBP: ffffc9000431fe01 R08: ffff88802f1970bb R09: 1ffff11005e32e17 [ 450.057861][T13047] R10: dffffc0000000000 R11: ffffed1005e32e18 R12: dffffc0000000000 [ 450.057880][T13047] R13: 0000000000000000 R14: ffff88802f1970b8 R15: ffff88802f197000 [ 450.057908][T13047] ? nsproxy_ns_active_get+0x88e/0xcb0 [ 450.057951][T13047] switch_task_namespaces+0x3e/0x110 [ 450.057980][T13047] __se_sys_setns+0x784/0x17d0 [ 450.058010][T13047] ? __pfx_do_sys_openat2+0x10/0x10 [ 450.058052][T13047] ? __pfx___se_sys_setns+0x10/0x10 [ 450.058085][T13047] ? do_syscall_64+0xbe/0xfa0 [ 450.058127][T13047] do_syscall_64+0xfa/0xfa0 [ 450.058166][T13047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.058191][T13047] ? clear_bhb_loop+0x60/0xb0 [ 450.058223][T13047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.058246][T13047] RIP: 0033:0x7f4756b90ef7 [ 450.058270][T13047] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.058292][T13047] RSP: 002b:00007f4757a8cfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 450.058318][T13047] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4756b90ef7 [ 450.058344][T13047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 450.058361][T13047] RBP: 00007f4756c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 450.058377][T13047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.058394][T13047] R13: 00007f4756de6038 R14: 00007f4756de5fa0 R15: 00007ffe3ad32038 [ 450.058435][T13047] [ 450.061384][T13047] Kernel Offset: disabled