last executing test programs: 6m18.795846347s ago: executing program 0 (id=50): recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/176, 0xb0}], 0x1}, 0x8}], 0x1, 0x2, 0x0) r0 = socket(0x25, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r1, 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x10000, 0x8c) openat(r2, &(0x7f0000000200)='.\x00', 0x80000, 0x72) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x612, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) setitimer(0x2, &(0x7f0000000180)={{0x0, 0x2710}, {0x77359400}}, 0x0) setitimer(0x2, &(0x7f0000000800)={{}, {0x77359400}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000100)={0x0}, 0x8}, 0x4000071) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x800, 0x0) utimes(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)={{0x77359400}, {0x77359400}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r6, r6, 0x0) mount$9p_xen(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x44000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=xen,a]cess=', @ANYRESDEC, @ANYBLOB=',uid>', @ANYRESDEC=r6, @ANYBLOB=',\x00']) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f0000000140)=[{0x3, 0x6, 0xf8, 0x5d0aebcf}]}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write(r7, &(0x7f0000000000)="2e000400", 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r4, 0xc3a51000) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r9, &(0x7f0000000080)=""/116, 0xfffffeb2) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, 0x0, 0x0) 6m18.511047887s ago: executing program 0 (id=52): creat(&(0x7f0000001380)='./file0\x00', 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001114010227bd7000044000000800030001000000080001000000000008003e000500000008004b0028"], 0x30}}, 0x8040) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) syz_usb_connect(0x5, 0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="26011001d4f86140d804830047da010203010902380001020840b3090400b201020201"], 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r2, 0x0, 0x31, &(0x7f00000000c0)=0x1, 0x4) setpgid(0x0, r1) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) 6m17.008110418s ago: executing program 0 (id=60): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r2, 0x4b63, 0x3) (async) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) (async, rerun: 32) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async, rerun: 32) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='hfs\x00', 0x0, 0x0) (async) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x43, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) (async, rerun: 64) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x18, 0xe000}, 0x5}], 0x1, 0x0) (async, rerun: 64) memfd_create(0x0, 0x3) (async, rerun: 32) r5 = socket(0xa, 0x3, 0x3a) (rerun: 32) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd0, &(0x7f0000000400)=0xf, 0x4) (async, rerun: 64) close_range(r5, 0xffffffffffffffff, 0x0) (async, rerun: 64) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r6, r6, 0x0, 0x7ffff000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'veth0\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x6, 0x36, "fa626753ff3e0572acb5f78017a061c00b8032e7714231a8dfd8e0d0c843e5f1ab77202f41d9b49d50accd96bbe40791cff3a5aaa4e4"}}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (rerun: 32) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926", 0x20}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 6m16.643591517s ago: executing program 0 (id=61): prctl$PR_SET_ENDIAN(0x14, 0x2) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xffffffffffffffff) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x18042, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0) (async) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r3]) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) setresgid(r2, r2, r3) (async) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) (async) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x120584c, 0x0) (async) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x311, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'ccm_base(cbc-aes-ce,wp384-generic)\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) 6m16.412449604s ago: executing program 0 (id=62): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0x6c3ca000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x761103, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f000080e000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/135, 0x87, 0x1, &(0x7f0000000180)=""/38, 0x26}, &(0x7f0000000200)=0x40) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x4}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x300}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0xffff}}, './file0\x00'}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x100000000000003) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000000000001010040"]) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) 6m15.816485079s ago: executing program 0 (id=66): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) mmap(&(0x7f0000900000/0x4000)=nil, 0x4000, 0x800004, 0x4012, r0, 0x8f1be000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r2, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x79}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0xb64938bbbbf126d5) r5 = gettid() r6 = getpid() rt_tgsigqueueinfo(r6, r5, 0x5, &(0x7f0000000140)={0x2, 0xffffffff, 0x6}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) ioctl$HIDIOCGRAWNAME(r7, 0x80404804, &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000001c0), &(0x7f0000000240), 0x2, 0x0) openat$kvm(0x0, 0x0, 0x80, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6m15.090294522s ago: executing program 32 (id=66): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) mmap(&(0x7f0000900000/0x4000)=nil, 0x4000, 0x800004, 0x4012, r0, 0x8f1be000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r2, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x79}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0xb64938bbbbf126d5) r5 = gettid() r6 = getpid() rt_tgsigqueueinfo(r6, r5, 0x5, &(0x7f0000000140)={0x2, 0xffffffff, 0x6}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) ioctl$HIDIOCGRAWNAME(r7, 0x80404804, &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000001c0), &(0x7f0000000240), 0x2, 0x0) openat$kvm(0x0, 0x0, 0x80, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7.214075932s ago: executing program 2 (id=2292): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648a000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xffffff09, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000080)={0x300, 0x0, 0x0}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x240, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES16=r3], 0x2b) sendfile(r4, r2, 0x0, 0x4000000053d2) r5 = syz_open_dev$audion(&(0x7f00000000c0), 0x1, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xb8, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xc2}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}]}, @IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_COMMENT={0x7, 0x1a, '!(\x00'}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x5}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x4}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x10}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x10000}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20004092}, 0x4000000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a00000905050200"], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b) 6.206705191s ago: executing program 1 (id=2297): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x181) fcntl$notify(r1, 0x402, 0x2b) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r3 = syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x9b, 0xde, 0x52, 0x10, 0x3923, 0x718a, 0xd8d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x9, 0x40, 0x19, [{{0x9, 0x4, 0x7b, 0x7, 0x0, 0x2d, 0x51, 0xd5, 0x98}}]}}]}}, 0x0) ftruncate(r2, 0x2007ffc) r4 = userfaultfd(0x80001) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x13, r5, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, &(0x7f0000000280)={0x20, 0xfe3355fc4896dcfc, 0xc5, {0xc5, 0x5, "6e83bd928e9150a85174a4ca538e6b93d16cae2027bb234fe1a351df85376bf841f9ed0fea9bb7bfcdb00ce2792f1a6a7621c94c4d56099fff3b283646cd51ac62e51bb7fe962d9b6c2398a2d79a1322e309b3d431443640800706068a9d1bf7079441abd936c18900301a30a485b39d86307e6b869e372dd54d8701bb803c2eaab3a600e5aefc79d536cd2f06ca307e7f1ff1292f08aa25707faf0922d8767c066acf2f296a22f40abc0f07c9dcfc14944be75f65dc18efd1877450fe279c269061f2"}}, &(0x7f0000000380)={0x0, 0x3, 0xfa, @string={0xfa, 0x3, "ab6f0d7f1d2e719e62aa91cd6feca21f9725ca064680ab54417efdad73a5e72fd0f46a7132fe973b205748500323bb67db229751082aca53318c53029ab9fe346eab28fbfb22c72dac2715af076a65cf61444771228a877918e395f730d8238649325d9058f2ec35e24df3fc18d5775095f2f3b019e5765989f2de0d73634c95c4b63b8219af97f0e9ce1bf3689438a63a32a86fc1b99ffd84a47bda3386e30e8ad16ca6306a564fb312d5bb2751c41e6b8b01f4599e5b50d80c7c3aa4920da36298c7bed4afa015ffc08a6bdb543c7f8c678e4ec089beb7e40ce94c39e5e2466af8b4aab96f9e671706c465738406199e08f946aa8ef2f0"}}, &(0x7f0000000000)={0x0, 0x22, 0x1a, {[@main=@item_4={0x3, 0x0, 0xc, "988f8dbc"}, @global=@item_4={0x3, 0x1, 0x8, "213a6abe"}, @global=@item_012={0x0, 0x1, 0xb}, @main=@item_4={0x3, 0x0, 0xa, "371badfd"}, @global=@item_4={0x3, 0x1, 0x4, "be92d17a"}, @main=@item_4={0x3, 0x0, 0x9, "e8241f8e"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0xf, 0x1, {0x22, 0x4e1}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x20, 0x5, 0xb4, "0e4be5a18674ac3fa7fe11338e827348661ed9b56048bdb1839d558a446c3117b601b824c49d086978e35feed24ebbb0f2128d0574a660aa84b83d891bdffcfcfe2c4d706a33c5a39656d6c5b2dcb1f2dd9b629748a022bf56df1091ce776d7a237409d172a158c990ad320cdf8acf0e8b255b03fb1b77890208f0a8a3240966e9d3aba2c098e01b907025624e71ff3e48d566a5fc59b19e9c340e0649b9389ecb5e2b79219b143e78ee136fe7b08e1b19ccbb66"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x1, 0xa6, "7b4589391526ad5c3de611354fdc513e867c2c4ef6f5e1c43c64d9599a8fe50ebf1bea7f7f3397ee545c741db5f2ca464c7a5d8890b08adade789cdbb4540578dd6cb8f7dc8a79809e0af702c8baa02620832220e58e2de128f8f4a547fe5afa0ca898c0d43e0531addbbe39428055eab0179fa3237717cd9afb49b7d2b9403a2d8a556715e9889fcd63511f8785a56654002af57bb9dc1ff7106c09e4c9d145e53c9d3b95ce"}, &(0x7f0000000640)={0x20, 0x3, 0x1}}) readv(r4, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r7, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x280000c4}, 0x4040810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) getsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080)=0x4) 4.651236936s ago: executing program 1 (id=2313): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0x9}}) close(0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) r2 = socket$inet6(0xa, 0x800, 0x8) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_usb_connect(0x2, 0x247, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000047e4ae20d118af1ef8b1010203010902350201000000000904", @ANYBLOB="89ddf42668662f861cc02f94fc2e5ebbdedd9440440c576a72ca"], 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = syz_clone(0x8001000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r5) ptrace$setregset(0x4205, r5, 0x2, &(0x7f00000001c0)={0x0}) r6 = syz_clone(0x501ca411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x7ffff000) getpgid(r6) ptrace$ARCH_GET_GS(0x1e, r5, &(0x7f0000000300), 0x1004) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x200e22, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[], 0x14}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{}], 0x1, 0xe7b, 0x0, 0x3) ioctl$KVM_RUN(r9, 0xae80, 0x0) 4.246878928s ago: executing program 3 (id=2319): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x25, &(0x7f0000000400)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d005cbd983247f03151ca60bc24eab556a71a251e6182949a3651f60a84c9f4d49309000000a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f80)) (async, rerun: 32) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x19) (rerun: 32) sendfile(r1, r1, 0x0, 0x7ffff000) 4.14200755s ago: executing program 2 (id=2320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffc0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) listen(r4, 0x5) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r7 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2ceb"]) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D@\x00\x00', @ANYRES16=r1, @ANYBLOB="01012abd7000000008002b00000008000300", @ANYRES32=r2, @ANYBLOB="040046001a00240097e0350001b601868b0c0585c80418018c60898696a40000080026006c090000"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4804) r8 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522) r9 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r10 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000010ac0542024000010203010902240001010008050904007f020301020909250f008101227205090581030006"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r10, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000709c3120e80401669b81010203010902120001010000000904"], 0x0) syz_usb_control_io$hid(r10, 0x0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x1, 0x8, "387e93966e2f9271"}, 0x0}) syz_usb_control_io$uac1(r10, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r11, 0x5b04, 0x0) ioctl$USBDEVFS_BULK(r8, 0x5523, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ecryptfs\x00', 0x200004, 0x0) 4.14075302s ago: executing program 3 (id=2321): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'veth0_vlan\x00', &(0x7f0000001180)=@ethtool_regs={0x4, 0x4, 0x1000, "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"}}) creat(&(0x7f0000000080)='./file0\x00', 0x4a) syz_usb_connect$uac1(0x7, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000070000000109029200030172e5000904000000010100000a24010000000215020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES64=r1, @ANYRES64=r0], 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0x8ee4a000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r4, 0x852ac000) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc84) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000180)=0x8000, 0x81, 0x4) futex(0x0, 0x80000000000b, 0x1, 0x0, &(0x7f0000048000)=0x1fffffc, 0x300) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e23, 0x4fd, @mcast2, 0x3}, {0xa, 0x4e21, 0x400, @local}, 0x0, {[0x80000000, 0x1ff, 0x4, 0x1ff, 0x1, 0x1, 0x10, 0x8]}}, 0x5c) setsockopt$MRT6_DEL_MFC(r5, 0x3a, 0xcd, 0x0, 0x0) fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) 3.124535851s ago: executing program 1 (id=2323): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x79, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000840)={@mcast1, 0xb, r1}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r1}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) r3 = creat(&(0x7f0000001380)='./file0\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x24, 0x3e, 0x9, 0x0, 0x800, {0x3}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x7}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) getsockopt$MRT6(r3, 0x29, 0x0, &(0x7f0000000040), &(0x7f0000000100)=0x4) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x2}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8805}, 0x20000801) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r6, 0x0, 0x8001, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000240)={"c241bdf65bea5527b279f98d6b48ceac", 0x0, 0x0, {0x3, 0x2}, {0x13a, 0xffffffff}, 0x3e3, [0xffffffff, 0x0, 0x9, 0x3ff, 0x6, 0x6, 0x7, 0x4, 0xb89, 0x6, 0x9, 0x6, 0xcb9f, 0x3, 0x4, 0x1]}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000340)={0x18, 0x1, {0x9, @struct={0x9, 0x9}, 0x0, 0x5, 0x100000001, 0x1ff, 0xc80, 0x1, 0x0, @struct={0xff, 0x100}, 0xfffffff7, 0x5, [0x8, 0x5, 0x30000, 0x7fff, 0xffffffffffffdf53, 0x3ff]}, {0x1, @struct={0x1, 0x1a8}, 0x0, 0x400, 0xc, 0xa454, 0xffffffff, 0xfff, 0x28, @usage=0x1002, 0x5, 0xe, [0x0, 0x4, 0x6, 0x2, 0x8, 0x100]}, {0x40, @struct={0xc, 0xf}, 0x0, 0x80, 0x8, 0x7, 0x303d, 0x8, 0x9d, @usage=0x8, 0x9, 0xfffffff9, [0x8, 0xfffffffffffffff8, 0x81, 0x8, 0x7, 0x5]}, {0xfff, 0x3, 0x6}}) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000180)={0x0, 0x38, 0x10, 0x9, 0x1, 0x3, 0x2, 0x5e}) 2.926095742s ago: executing program 1 (id=2324): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r1 = userfaultfd(0x80001) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x8010, r0, 0xfffff000) readv(r1, 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x5, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000001c0)=0x9, 0x4) r3 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x4, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io(r3, &(0x7f0000000fc0)={0x2c, 0x0, &(0x7f0000000e40)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r3, &(0x7f0000006740)={0x2c, 0x0, &(0x7f0000006640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x20}}, 0x0, 0x0, 0x0}, 0x0) tee(r1, r2, 0x863, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 1.465864394s ago: executing program 4 (id=2334): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000008) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x201}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3dd409d39ff6d5cca97", 0x47}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573c21df5435e3b81aaba048fa4264d4c15513c91e9230a8e4b7635b58dc631604c311225f2", 0xd9}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000017c0)={"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"}) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) sendfile(r4, r4, 0x0, 0x7f03) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000100)=@x86={0xf, 0x6, 0x4, 0x0, 0xd31, 0x0, 0x6, 0x4, 0x80, 0x9, 0x7, 0x7, 0x0, 0x3, 0x10001, 0xb, 0x2, 0x10, 0x5, '\x00', 0x2, 0x8}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf1, 0x4a, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x6}, {0x5000, 0x2, 0x6e484754e2bb763c, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0x4, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x4, 0xfc, 0x3, 0x46, 0x5, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x4, 0x9, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xd000, 0x0, 0x6, 0x3, 0x6e, 0x11, 0x7a, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x5000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x4, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x8, 0x2000, 0xe6e70c00, [0xffffffffffffff4a, 0x401, 0x7, 0xc5]}) (async) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') r5 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000022"], 0x1c}], 0x1}, 0x0) (async) r6 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r6, 0x110, 0x3) (async) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x0, 0x50323234}}) (async) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x4000, 0x800b, 0xe, 0xfffffffc, 0x0, [{0xc, 0x9, 0x8, '\x00', 0xb4}, {0x83, 0x6, 0x4, '\x00', 0x9b}, {0xf9, 0xe, 0x7, '\x00', 0xda}, {0x0, 0x5, 0x0, '\x00', 0x5}, {0x1, 0x10, 0x8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0x6, 0xd, 0x4a, '\x00', 0x9}, {0x5, 0x90, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x6, '\x00', 0x4}, {0x0, 0x9, 0x0, '\x00', 0x8}, {0x0, 0x4, 0x1, '\x00', 0x3}, {0x1, 0x4, 0x80, '\x00', 0x4}, {0x3, 0xf1, 0x6, '\x00', 0xb2}, {0x7, 0x44, 0x0, '\x00', 0xfd}, {0x6, 0x4, 0x4, '\x00', 0xd}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x3, 0x2, '\x00', 0x3}, {0x3, 0x1, 0x6, '\x00', 0x1}, {0x9, 0x3, 0x53, '\x00', 0x1}, {0x9, 0x2, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0x1, 0xfd, 0x7, '\x00', 0x2}, {0xac, 0x9, 0xfa, '\x00', 0x1}]}}) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) 1.328407558s ago: executing program 4 (id=2335): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) 1.245790105s ago: executing program 4 (id=2336): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x8}, 0xfffffffffffffe4e) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000040)={0x0, 0x7}) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r2) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x90) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) setsockopt$ax25_int(r7, 0x101, 0x7, &(0x7f0000000040)=0x371, 0x4) setsockopt$ax25_int(r7, 0x101, 0x1, &(0x7f00000002c0)=0x684e51b5, 0x4) socket$nl_generic(0x10, 0x3, 0x10) setreuid(0x0, r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 1.130209483s ago: executing program 4 (id=2337): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x2, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x1, {0x25, 0x28, 0x1, 0x10, 0x6, 0x8, 0x6, 0x107}}) mlock2(&(0x7f000008e000/0x4000)=nil, 0x4000, 0x1) 1.074650312s ago: executing program 4 (id=2338): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r0, 0x2, 0x0, 0x4000000}, 0x14}}, 0x4050) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) 1.066365207s ago: executing program 2 (id=2339): setresgid(0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xccd1a) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) 974.227161ms ago: executing program 3 (id=2340): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648a000) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x181) fcntl$notify(r1, 0x402, 0x2b) renameat2(r1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='.\x02\x00', 0x7) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x1, 0x80000000, 0x8, 0x80000000, 0x1c5e6f4}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r2) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002abd7000ffdbdf250300"], 0x1c}}, 0x4000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 938.854423ms ago: executing program 4 (id=2341): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x60a00, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="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", 0x275}], 0x2}, 0x4) r3 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x40, 0x0) fadvise64(r3, 0x3, 0x0, 0x4) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000300)={{}, 0x8, 0xfffffffffffffffe, 0x4}) statx(0xffffffffffffff9c, &(0x7f0000002300)='./file0\x00', 0x400, 0x121, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 936.57825ms ago: executing program 2 (id=2342): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00130000017c0000040042800c00018006000600800a00000c000280060006"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000efff0601020000000000000000080000040900010073797a3000000000"], 0x20}}, 0x24044040) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='pvfs2\x00', 0x220808, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './cgroup\x00'}) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xec, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0xad, 0x7, 0x1, 0x0, "089a6c5077f1c1e8ce1289df48fe36c0e796c0b0cd2c076b3dff0bec05345dfe2655db82a61639f732e4a774db28ddf7ab61e58c026c972cded48a2fb20e7543a6d0743f13304224902f43f75e2004362a390d8a12e2a5342c9c1ce192399c51595f7ea0cd9f5eeb57e3dae051878e89ad728dfa896ff9e9c6210c552f222c7a97258eb39fc12db40b8c6aaf3fa56b5d840a453a6a612eb65bbc35490659585913c22f3085d8d5b511"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x102}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x94, 0x8, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x201}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}], {0x14}}, 0x214}}, 0x40000) 901.608308ms ago: executing program 1 (id=2343): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0x6c3ca000) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x65) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000080)=[@cpuid={0x14, 0x18, {0x7, 0x6}}, @code={0xa, 0x74, {"66430f38819100780000c7442400b9000000c744240200000100ff2c24430f78fcf01109440f20c03503000000440f22c0c4c17a12ce8f29e890155f00000048b862000000000000000f23d80f21f835c00000a00f23f866ba400066ed64f3430faed6"}}, @code={0xa, 0x58, {"48b8c6ac0000000000000f23c80f21f835040060000f23f80f78150000000066b8c1000f00d80f01c2660f38f67cf82ab9380800000f32c4810564744c47f3af0f017101f30f09"}}], 0xe4}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) capset(&(0x7f0000000040)={0x20080522, r3}, &(0x7f0000000080)={0x10000, 0xfffffffe, 0xfffffffc}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCXONC(r4, 0x540a, 0x0) r5 = syz_open_procfs$namespace(0x0, 0x0) ioctl$HIDIOCGRAWPHYS(r5, 0x80404805, &(0x7f00000001c0)) socket$inet6_icmp(0xa, 0x2, 0x3a) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001840)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40041}, 0x0) ioctl$KDMKTONE(r6, 0x4b30, 0x8000000000000001) ioctl$KVM_GET_XSAVE2(r1, 0x9000aecf, &(0x7f0000216000/0x3000)=nil) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x100) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) 746.143485ms ago: executing program 2 (id=2344): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x30, r0, 0x1f326000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001480)={0x0, @in6={{0xa, 0x4e23, 0x6ca72898, @mcast1, 0x40000e}}, 0x3, 0xf2b1, 0x3, 0x80000001, 0xe7, 0x9, 0x9}, &(0x7f0000000040)=0x9c) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 578.739688ms ago: executing program 3 (id=2345): mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) 563.688955ms ago: executing program 2 (id=2346): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x141342, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async, rerun: 64) sendfile(r0, r0, 0x0, 0x7ffff000) 334.292445ms ago: executing program 3 (id=2347): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) mlock(&(0x7f0000324000/0x3000)=nil, 0x3000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000) 239.777902ms ago: executing program 3 (id=2348): r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000019c0)={&(0x7f00000015c0)={0x1e, 0x4e21, @broadcast}, 0x10, 0x0}, 0x4000014) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) io_setup(0xfff, &(0x7f0000000000)=0x0) r2 = epoll_create(0x7) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000600)=ANY=[@ANYBLOB='stack #(%#{//&@\\)//&'], 0x20) io_submit(r1, 0x1, &(0x7f00000009c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x8171, r2, 0x0, 0x0, 0x4}]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8982, &(0x7f0000000100)={0x6, '\x00', {0x3}, 0xfffc}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000ff02"]) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) socket$kcm(0x29, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r8, 0x6c3ca000) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x486, 0x1000, {}, {0x77359400}, {0x2, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x6, 0x3, 0x0, 0x0, "e05ad60a92c50497"}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$can_bcm(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="f2ffff019f60be65eeffffffffffffff1ad0d07f49a9739c9bb6b99280ad44508494db70a64eb86e6753751bba5a6d9a1f8e75a545b96365060d59d14b6eda00779c37faf530d1965577d64ad64f593c692ce1ac092bc12d0979474f2038bca4c170a2f49201a6601aeb573c33469669e12112f9c55c90e5d870765e84633d23cd9748cbd1f1f3577f7cddb5ec7af6a6be4d61cacc04f203fcf23c8fb5f76b6a518bf6d74d", @ANYRES64=0x0, @ANYRES32=r8, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000003000020010300006ee7ba2197db18bc"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x50001, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) semget$private(0x0, 0x4, 0x342) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) quotactl_fd$Q_QUOTAOFF(r10, 0xffffffff80000300, 0x0, 0x0) 0s ago: executing program 1 (id=2349): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000140)={0x0, 0x0, {0x9b, 0x5, 0x8001, 0x1}}) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r2 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000cc0)='/sys/kernel/address_bits', 0x40000, 0x8) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4) r5 = getpgid(0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$FBIOGETCMAP(r6, 0x4604, &(0x7f0000000480)={0xbf3d85e, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) rt_tgsigqueueinfo(r5, r7, 0x1, &(0x7f0000000040)={0x30, 0x8, 0xffff}) rt_tgsigqueueinfo(0x0, 0x0, 0x2d, &(0x7f0000000100)={0x1a, 0x1, 0xe}) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) sendfile(r8, r8, 0x0, 0x7ffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) kernel console output (not intermixed with test programs): 77] quatech2 2-1:0.0: probe with driver quatech2 failed with error -71 [ 411.218290][ T5877] usb 2-1: USB disconnect, device number 43 [ 411.516365][T12540] /dev/rnullb0: Can't open blockdev [ 411.648626][ T1042] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 411.796725][T12549] /dev/rnullb0: Can't open blockdev [ 411.797473][T12550] netlink: 'syz.3.1838': attribute type 15 has an invalid length. [ 411.810992][T12550] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1838'. [ 412.375515][T12573] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 412.400911][ T5957] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 412.413325][T12573] /dev/rnullb0: Can't open blockdev [ 412.571636][ T5957] usb 5-1: device descriptor read/64, error -71 [ 412.812591][ T5957] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 412.852684][ T5264] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 412.923044][ T5877] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 412.954464][ T5957] usb 5-1: device descriptor read/64, error -71 [ 413.003269][ T5264] usb 3-1: Using ep0 maxpacket: 32 [ 413.011683][ T5264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 413.024011][ T5264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 413.037704][ T5264] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 413.047596][ T5264] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.056005][ T5264] usb 3-1: Product: syz [ 413.060368][ T5264] usb 3-1: Manufacturer: syz [ 413.065598][ T5264] usb 3-1: SerialNumber: syz [ 413.074060][ T5877] usb 4-1: Using ep0 maxpacket: 8 [ 413.076784][ T5957] usb usb5-port1: attempt power cycle [ 413.080054][ T5264] usb 3-1: config 0 descriptor?? [ 413.099031][ T5877] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 413.111206][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.122190][ T5877] usb 4-1: Product: syz [ 413.129527][ T5264] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 413.139371][ T5877] usb 4-1: Manufacturer: syz [ 413.146505][ T5877] usb 4-1: SerialNumber: syz [ 413.166247][ T5877] usb 4-1: config 0 descriptor?? [ 413.297091][T12590] /dev/rnullb0: Can't open blockdev [ 413.307095][T12606] /dev/rnullb0: Can't open blockdev [ 413.313870][ T59] usb 3-1: Failed to submit usb control message: -71 [ 413.314302][ T5977] usb 3-1: USB disconnect, device number 83 [ 413.321512][ T59] usb 3-1: unable to send the bmi data to the device: -71 [ 413.341099][ T59] usb 3-1: unable to get target info from device [ 413.348918][ T59] usb 3-1: could not get target info (-71) [ 413.356233][ T59] usb 3-1: could not probe fw (-71) [ 413.383069][T12581] /dev/rnullb0: Can't open blockdev [ 413.391776][ T5877] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 413.408451][ T5877] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 413.429135][ T5877] usb 4-1: USB disconnect, device number 82 [ 413.452653][ T5957] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 413.487109][ T5957] usb 5-1: device descriptor read/8, error -71 [ 413.581948][ T1160] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 413.634324][T12630] PKCS7: Unknown OID: [4] 0.0 [ 413.640540][T12630] PKCS7: Only support pkcs7_signedData type [ 413.652101][T12630] /dev/rnullb0: Can't open blockdev [ 413.693948][T12633] /dev/rnullb0: Can't open blockdev [ 413.738728][ T5957] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 413.744709][T12636] /dev/rnullb0: Can't open blockdev [ 413.773054][ T5957] usb 5-1: device descriptor read/8, error -71 [ 413.889115][ T5957] usb usb5-port1: unable to enumerate USB device [ 414.125350][T12678] /dev/rnullb0: Can't open blockdev [ 415.264194][ T927] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 415.434150][ T927] usb 4-1: Using ep0 maxpacket: 32 [ 415.443351][ T927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.458715][ T927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.469302][ T927] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 415.482261][ T927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.502470][ T927] usb 4-1: config 0 descriptor?? [ 415.521748][ T927] hub 4-1:0.0: USB hub found [ 415.661848][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807e305000: rx timeout, send abort [ 415.670721][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807e305000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 415.756122][ T927] hub 4-1:0.0: 1 port detected [ 415.807418][T12799] /dev/rnullb0: Can't open blockdev [ 415.854024][T12802] /dev/rnullb0: Can't open blockdev [ 416.039530][T12809] /dev/rnullb0: Can't open blockdev [ 416.055901][T12811] /dev/rnullb0: Can't open blockdev [ 416.237862][T12820] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 416.369462][ T927] hub 4-1:0.0: activate --> -90 [ 416.796290][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 416.873680][ T5957] usb 4-1: USB disconnect, device number 83 [ 416.928390][T12831] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 417.101626][ T927] usb 4-1-port1: config error [ 417.291999][T12415] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 417.369391][ T5877] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 417.462472][T12415] usb 2-1: Using ep0 maxpacket: 8 [ 417.472448][ T5264] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 417.491096][T12415] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 417.506210][T12415] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.520092][T12415] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 417.539413][ T5877] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 417.556099][T12415] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 417.572687][ T5877] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 417.582277][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.593150][ T5877] usb 3-1: Product: syz [ 417.597936][ T5877] usb 3-1: Manufacturer: syz [ 417.602765][ T5877] usb 3-1: SerialNumber: syz [ 417.609938][T12415] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 417.621339][T12415] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.633152][ T5264] usb 5-1: Using ep0 maxpacket: 16 [ 417.641395][ T5877] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 417.659445][T12415] usb 2-1: Product: syz [ 417.662997][T12875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1876'. [ 417.664213][T12415] usb 2-1: Manufacturer: syz [ 417.678584][T12415] usb 2-1: SerialNumber: syz [ 417.678966][T12875] veth1_macvtap: left promiscuous mode [ 417.691007][T12415] usb 2-1: config 0 descriptor?? [ 417.696659][ T5264] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 417.707707][ T5264] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 417.716469][ T5264] usb 5-1: Product: syz [ 417.720784][ T5264] usb 5-1: SerialNumber: syz [ 417.721101][T12839] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 417.734540][ T5264] usb 5-1: config 0 descriptor?? [ 417.761453][ T5264] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 417.770873][ T5264] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 417.780891][ T5264] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 417.788646][ T5264] dvb_usb_af9035 5-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 417.876500][T12887] /dev/rnullb0: Can't open blockdev [ 418.012211][T12856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.042663][T12856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.069765][ T5877] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 418.107257][ T5957] usb 5-1: USB disconnect, device number 72 [ 418.169423][ T927] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 418.307830][T12415] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 418.322598][T12415] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input31 [ 418.345031][ C0] powermate: config urb returned -71 [ 418.350761][ C0] powermate: config urb returned -71 [ 418.358229][ C0] powermate: config urb returned -71 [ 418.365033][ C0] powermate: config urb returned -71 [ 418.373154][T12415] usb 2-1: USB disconnect, device number 44 [ 418.379296][ C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 418.381502][ T927] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 418.400710][ T927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.411712][ T927] usb 4-1: Product: syz [ 418.420665][ T927] usb 4-1: Manufacturer: syz [ 418.425329][ T927] usb 4-1: SerialNumber: syz [ 418.463472][ T5877] usb 3-1: USB disconnect, device number 84 [ 418.490661][ T927] usb 4-1: config 0 descriptor?? [ 418.627639][T12953] /dev/rnullb0: Can't open blockdev [ 418.971969][T12967] /dev/rnullb0: Can't open blockdev [ 418.981212][ T5877] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 419.119798][ T5877] usb 5-1: device descriptor read/64, error -71 [ 419.151513][ T927] usb 4-1: f81604_read: reg: 105 failed: -EPROTO [ 419.166238][ T927] f81604 4-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 419.175248][ T927] f81604 4-1:0.0: probe with driver f81604 failed with error -71 [ 419.194418][ T927] usb 4-1: USB disconnect, device number 84 [ 419.229839][ T5977] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 419.361527][ T5877] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 419.371711][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 419.371902][ T5977] usb 2-1: device descriptor read/64, error -71 [ 419.391600][T12988] /dev/rnullb0: Can't open blockdev [ 419.512784][ T5877] usb 5-1: device descriptor read/64, error -71 [ 419.561022][ T927] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 419.621764][ T5877] usb usb5-port1: attempt power cycle [ 419.631340][ T5977] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 419.714306][ T927] usb 4-1: config 4 has an invalid interface number: 18 but max is 1 [ 419.722779][ T927] usb 4-1: config 4 has no interface number 1 [ 419.729177][ T927] usb 4-1: config 4 interface 0 has no altsetting 0 [ 419.736128][ T927] usb 4-1: config 4 interface 18 has no altsetting 0 [ 419.745906][ T927] usb 4-1: New USB device found, idVendor=1199, idProduct=9009, bcdDevice=af.f4 [ 419.755041][ T927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.763171][ T927] usb 4-1: Product: syz [ 419.767439][ T927] usb 4-1: Manufacturer: syz [ 419.772187][ T5977] usb 2-1: device descriptor read/64, error -71 [ 419.778496][ T927] usb 4-1: SerialNumber: syz [ 419.893167][ T5977] usb usb2-port1: attempt power cycle [ 419.962628][ T5877] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 419.983389][ T5877] usb 5-1: device descriptor read/8, error -71 [ 420.169763][ T927] usb 4-1: unknown number of interfaces: 2 [ 420.186107][ T927] usb 4-1: USB disconnect, device number 85 [ 420.225820][ T5877] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 420.244296][ T5977] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 420.274925][ T5977] usb 2-1: device descriptor read/8, error -71 [ 420.276484][ T5877] usb 5-1: device descriptor read/8, error -71 [ 420.395092][ T5877] usb usb5-port1: unable to enumerate USB device [ 420.515020][ T5977] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 420.535788][ T5977] usb 2-1: device descriptor read/8, error -71 [ 420.575114][ T5264] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 420.657507][ T5977] usb usb2-port1: unable to enumerate USB device [ 420.736100][ T5264] usb 3-1: Using ep0 maxpacket: 8 [ 420.744577][ T5264] usb 3-1: config 1 interface 0 has no altsetting 0 [ 420.762579][ T5264] usb 3-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 420.772771][ T5264] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.781415][ T5264] usb 3-1: Product: syz [ 420.786258][ T5264] usb 3-1: Manufacturer: syz [ 420.792063][ T5264] usb 3-1: SerialNumber: syz [ 421.008917][T13007] /dev/rnullb0: Can't open blockdev [ 421.025276][ T5264] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input32 [ 421.047967][ T5222] bcm5974 3-1:1.0: could not read from device [ 421.066336][ T5222] bcm5974 3-1:1.0: could not read from device [ 421.081108][ T5264] usb 3-1: USB disconnect, device number 85 [ 421.085847][ T5222] bcm5974 3-1:1.0: could not read from device [ 421.099153][ T5222] bcm5974 3-1:1.0: could not read from device [ 421.189199][ T5977] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 421.348177][ T5977] usb 4-1: Using ep0 maxpacket: 32 [ 421.355955][ T5977] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.372184][ T5977] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 421.381297][ T5977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.389578][ T5977] usb 4-1: Product: syz [ 421.394183][ T5977] usb 4-1: Manufacturer: syz [ 421.399317][ T5977] usb 4-1: SerialNumber: syz [ 421.407399][ T5977] usb 4-1: config 0 descriptor?? [ 421.419596][ T5977] usb 4-1: no audio or video endpoints found [ 421.638931][T13023] AppArmor: change_hat: Invalid input '' [ 421.704895][ T5264] usb 4-1: USB disconnect, device number 86 [ 422.548241][T13085] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1898'. [ 422.574395][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 422.577617][T13085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1898'. [ 422.768120][T13103] syz.2.1903: attempt to access beyond end of device [ 422.768120][T13103] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 422.781907][T13103] isofs_fill_super: bread failed, dev=nbd2, iso_blknum=16, block=32 [ 422.944580][ T927] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 423.107708][ T927] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 423.118922][ T927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.130594][ T927] usb 5-1: config 0 descriptor?? [ 423.143784][ T927] gspca_main: spca508-2.14.0 probing 8086:0110 [ 423.146015][ T5876] block nbd1: Receive control failed (result -11) [ 423.606874][ T5977] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 423.767423][ T5977] usb 4-1: Using ep0 maxpacket: 16 [ 423.865257][ T927] gspca_spca508: reg_read err -71 [ 423.887347][ T927] gspca_spca508: reg_read err -71 [ 423.897798][ T927] gspca_spca508: reg_read err -71 [ 423.917709][ T927] gspca_spca508: reg write: error -71 [ 423.923431][ T927] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 423.941418][T13135] /dev/rnullb0: Can't open blockdev [ 423.966805][ T927] usb 5-1: USB disconnect, device number 77 [ 424.026303][T13125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.046313][T13125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.188184][ T5977] usb 4-1: unable to get BOS descriptor or descriptor too short [ 424.208627][ T5977] usb 4-1: too many configurations: 36, using maximum allowed: 8 [ 424.222405][ T5977] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 424.234194][ T5977] usb 4-1: can't read configurations, error -71 [ 424.503420][ T1042] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 424.851353][ T5264] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 424.869643][T13202] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 425.060001][ T5264] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.077929][ T5264] usb 3-1: config 1 interface 0 has no altsetting 0 [ 425.087673][ T5264] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 425.101750][ T5264] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.110905][ T5264] usb 3-1: Product: syz [ 425.118657][ T5264] usb 3-1: Manufacturer: syz [ 425.123654][ T5264] usb 3-1: SerialNumber: syz [ 425.333885][T13221] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 425.353450][T13221] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 425.364323][T13221] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 425.409004][ T5264] pxrc 3-1:1.0: Could not find endpoint [ 425.436502][ T5264] usb 3-1: USB disconnect, device number 86 [ 426.264873][T13120] block nbd1: shutting down sockets [ 426.401254][T13251] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1925'. [ 427.534524][T13277] /dev/rnullb0: Can't open blockdev [ 427.631683][ T927] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 427.643367][ T5877] usb 3-1: new low-speed USB device number 87 using dummy_hcd [ 427.808142][ T5877] usb 3-1: config 65 has an invalid interface number: 95 but max is 0 [ 427.823621][ T927] usb 2-1: Using ep0 maxpacket: 32 [ 427.827843][ T5877] usb 3-1: config 65 has no interface number 0 [ 427.840338][ T927] usb 2-1: config 0 interface 0 has no altsetting 0 [ 427.844590][ T5877] usb 3-1: string descriptor 0 read error: -22 [ 427.857865][ T927] usb 2-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= a.06 [ 427.864526][ T5877] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 427.868720][ T927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.883992][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.896276][ T927] usb 2-1: Product: syz [ 427.900489][ T927] usb 2-1: Manufacturer: syz [ 427.907209][ T927] usb 2-1: SerialNumber: syz [ 427.908245][ T5877] usbtest 3-1:65.95: Linux gadget zero [ 427.927538][ T5877] usbtest 3-1:65.95: low-speed {control in/out} tests (+alt) [ 427.978167][ T927] usb 2-1: config 0 descriptor?? [ 428.230162][ T927] snd_usb_podhd 2-1:0.0: Line 6 POD HD500 found [ 428.241859][ T927] usb 2-1: selecting invalid altsetting 1 [ 428.453301][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 428.474522][T12415] usb 3-1: USB disconnect, device number 87 [ 428.624271][T13323] /dev/rnullb0: Can't open blockdev [ 428.632946][T13324] /dev/rnullb0: Can't open blockdev [ 428.725287][ T30] audit: type=1326 audit(1754361569.848:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13322 comm="syz.3.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd1b8eb69 code=0x7ffc0000 [ 428.749369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 428.758819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 429.097350][ T927] snd_usb_podhd 2-1:0.0: set_interface failed [ 429.107814][ T927] snd_usb_podhd 2-1:0.0: Line 6 POD HD500 now disconnected [ 429.117068][ T927] snd_usb_podhd 2-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 429.135262][ T927] usb 2-1: USB disconnect, device number 49 [ 429.144454][ T30] audit: type=1326 audit(1754361569.848:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13322 comm="syz.3.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fddd1b8eb69 code=0x7ffc0000 [ 429.171462][ T30] audit: type=1326 audit(1754361570.286:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13322 comm="syz.3.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd1b8eb69 code=0x7ffc0000 [ 429.197679][ T30] audit: type=1326 audit(1754361570.286:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13322 comm="syz.3.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd1b8eb69 code=0x7ffc0000 [ 429.220952][ T30] audit: type=1326 audit(1754361570.306:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13322 comm="syz.3.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fddd1b8eb69 code=0x7ffc0000 [ 429.248230][ T30] audit: type=1326 audit(1754361570.316:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13322 comm="syz.3.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fddd1b2ad69 code=0x7ffc0000 [ 429.365007][ T30] audit: type=1326 audit(1754361570.316:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13322 comm="syz.3.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd1b8eb69 code=0x7ffc0000 [ 429.388741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 429.448404][ T30] audit: type=1326 audit(1754361570.316:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13322 comm="syz.3.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd1b8eb69 code=0x7ffc0000 [ 429.505352][ T30] audit: type=1326 audit(1754361570.316:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13322 comm="syz.3.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd1b8eb69 code=0x7ffc0000 [ 429.598705][ T30] audit: type=1326 audit(1754361570.376:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13322 comm="syz.3.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fddd1b2ad69 code=0x7ffc0000 [ 429.683751][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 429.743995][T12415] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 429.948793][T13354] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 2, id = 0 [ 429.959736][ T5264] usb 4-1: new low-speed USB device number 89 using dummy_hcd [ 429.989593][T12415] usb 3-1: Using ep0 maxpacket: 32 [ 429.999360][T12415] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 430.011133][T12415] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.042317][T12415] usb 3-1: Product: syz [ 430.046609][T12415] usb 3-1: Manufacturer: syz [ 430.383144][T12415] usb 3-1: SerialNumber: syz [ 430.404665][T12415] usb 3-1: config 0 descriptor?? [ 430.819797][T13334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.840241][T13334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.935120][T13370] /dev/rnullb0: Can't open blockdev [ 430.950063][T13370] /dev/rnullb0: Can't open blockdev [ 431.068518][T12415] airspy 3-1:0.0: Board ID: 00 [ 431.074525][T12415] airspy 3-1:0.0: Firmware version: [ 431.290524][T13380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 431.695503][ T5877] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 431.822914][T13410] /dev/rnullb0: Can't open blockdev [ 431.859681][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.871676][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.882267][ T5877] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 431.900518][ T5877] usb 2-1: New USB device found, idVendor=1223, idProduct=0107, bcdDevice= 0.00 [ 431.911490][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.969818][ T5877] usb 2-1: config 0 descriptor?? [ 432.118907][T12415] airspy 3-1:0.0: Registered as swradio24 [ 432.125169][T12415] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 432.337262][T13334] /dev/rnullb0: Can't open blockdev [ 432.357307][T12415] usb 3-1: USB disconnect, device number 88 [ 432.390812][ T5877] hid (null): unknown global tag 0xc [ 432.415652][ T5877] hid (null): usage index exceeded [ 432.438950][ T5877] hid (null): usage index exceeded [ 432.461630][ T5877] hid (null): unknown global tag 0xc [ 432.470429][ T5877] hid (null): invalid report_size 1078742164 [ 432.480658][ T5877] hid (null): unknown global tag 0xc [ 432.493875][ T5877] hid-generic 0003:1223:0107.0016: unknown global tag 0xc [ 432.502603][ T5877] hid-generic 0003:1223:0107.0016: item 0 1 1 12 parsing failed [ 432.513371][ T5877] hid-generic 0003:1223:0107.0016: probe with driver hid-generic failed with error -22 [ 432.559980][T13439] /dev/rnullb0: Can't open blockdev [ 432.629372][T13448] /dev/rnullb0: Can't open blockdev [ 432.678888][T12415] usb 2-1: USB disconnect, device number 50 [ 432.773804][ T5877] IPVS: starting estimator thread 0... [ 432.879777][T13463] IPVS: using max 25 ests per chain, 60000 per kthread [ 432.920587][T13468] ./cgroup: Can't lookup blockdev [ 432.962652][T13470] /dev/rnullb0: Can't open blockdev [ 433.056137][T13474] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1967'. [ 433.067833][T13474] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1967'. [ 433.693589][T13496] ./file0: Can't lookup blockdev [ 433.955191][T13509] /dev/rnullb0: Can't open blockdev [ 433.997541][T13514] /dev/rnullb0: Can't open blockdev [ 434.144116][ T1042] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 434.220635][T13525] syz.1.1980: attempt to access beyond end of device [ 434.220635][T13525] nbd1: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 434.234762][T13525] XFS (nbd1): SB validate failed with error -5. [ 434.454862][ T5977] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 435.176875][ T5957] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 435.332384][ T5957] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 435.340907][ T5957] usb 3-1: config 0 has no interface number 0 [ 435.348837][ T5957] usb 3-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 435.360093][ T5957] usb 3-1: config 0 interface 214 has no altsetting 0 [ 435.370585][ T5957] usb 3-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 435.379949][ T927] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 435.387906][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.395998][ T5957] usb 3-1: Product: syz [ 435.400920][ T5957] usb 3-1: Manufacturer: syz [ 435.405629][ T5957] usb 3-1: SerialNumber: syz [ 435.413195][ T5957] usb 3-1: config 0 descriptor?? [ 435.422740][T13560] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 435.423769][ T1042] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 435.440717][ T5957] ax88179_178a 3-1:0.214: probe with driver ax88179_178a failed with error -22 [ 435.547751][ T5977] usb 2-1: device descriptor read/64, error -71 [ 435.558039][ T927] usb 5-1: Using ep0 maxpacket: 16 [ 435.568074][ T927] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 435.578465][ T927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.586849][ T927] usb 5-1: Product: syz [ 435.592015][ T927] usb 5-1: Manufacturer: syz [ 435.596666][ T927] usb 5-1: SerialNumber: syz [ 435.612731][ T927] r8152-cfgselector 5-1: Unknown version 0x0000 [ 435.619327][ T927] r8152-cfgselector 5-1: config 0 descriptor?? [ 435.789435][ T5977] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 435.922723][T13595] /dev/rnullb0: Can't open blockdev [ 435.929056][ T5977] usb 2-1: device descriptor read/64, error -71 [ 436.049984][ T5977] usb usb2-port1: attempt power cycle [ 436.306903][ T927] r8152-cfgselector 5-1: USB disconnect, device number 78 [ 436.358181][T13618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.373002][T13618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.390779][ T5977] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 436.435383][ T5977] usb 2-1: device descriptor read/8, error -71 [ 436.691505][ T5977] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 436.712888][ T5977] usb 2-1: device descriptor read/8, error -71 [ 436.727421][T13630] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1999'. [ 436.822150][ T5977] usb usb2-port1: unable to enumerate USB device [ 437.478830][T13645] /dev/rnullb0: Can't open blockdev [ 437.726154][T13647] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2007'. [ 437.877821][T13654] /dev/rnullb0: Can't open blockdev [ 437.968394][T12415] usb 3-1: USB disconnect, device number 89 [ 438.466737][T12415] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 438.595854][T13673] overlayfs: failed to resolve './file0': -2 [ 438.608320][T13672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2012'. [ 438.654690][T12415] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.697553][T12415] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 438.710279][T12415] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.722939][T12415] usb 3-1: config 0 descriptor?? [ 438.865885][T13684] program syz.1.2015 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 438.958356][T12415] usbhid 3-1:0.0: can't add hid device: -71 [ 439.049084][T12415] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 439.083137][T12415] usb 3-1: USB disconnect, device number 90 [ 439.215084][T13707] FAULT_INJECTION: forcing a failure. [ 439.215084][T13707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.232589][T13707] CPU: 1 UID: 0 PID: 13707 Comm: syz.1.2019 Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 439.232619][T13707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 439.232631][T13707] Call Trace: [ 439.232639][T13707] [ 439.232647][T13707] dump_stack_lvl+0x189/0x250 [ 439.232681][T13707] ? __pfx____ratelimit+0x10/0x10 [ 439.232708][T13707] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.232735][T13707] ? __pfx__printk+0x10/0x10 [ 439.232761][T13707] ? __might_fault+0xb0/0x130 [ 439.232794][T13707] should_fail_ex+0x414/0x560 [ 439.232824][T13707] _copy_from_iter+0x1db/0x16f0 [ 439.232848][T13707] ? rcu_is_watching+0x15/0xb0 [ 439.232873][T13707] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 439.232894][T13707] ? __pfx__copy_from_iter+0x10/0x10 [ 439.232915][T13707] ? __build_skb_around+0x257/0x3e0 [ 439.232948][T13707] ? netlink_sendmsg+0x642/0xb30 [ 439.232974][T13707] ? skb_put+0x11b/0x210 [ 439.232996][T13707] netlink_sendmsg+0x6b2/0xb30 [ 439.233031][T13707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.233060][T13707] ? aa_sock_msg_perm+0xf1/0x1d0 [ 439.233087][T13707] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 439.233112][T13707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.233141][T13707] __sock_sendmsg+0x21c/0x270 [ 439.233169][T13707] ____sys_sendmsg+0x505/0x830 [ 439.233206][T13707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 439.233236][T13707] ? import_iovec+0x74/0xa0 [ 439.233269][T13707] ___sys_sendmsg+0x21f/0x2a0 [ 439.233292][T13707] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.233352][T13707] ? __fget_files+0x2a/0x420 [ 439.233376][T13707] ? __fget_files+0x3a0/0x420 [ 439.233411][T13707] __x64_sys_sendmsg+0x19b/0x260 [ 439.233435][T13707] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 439.233466][T13707] ? __pfx_ksys_write+0x10/0x10 [ 439.233485][T13707] ? rcu_is_watching+0x15/0xb0 [ 439.233514][T13707] ? do_syscall_64+0xbe/0x3b0 [ 439.233545][T13707] do_syscall_64+0xfa/0x3b0 [ 439.233570][T13707] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.233594][T13707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.233613][T13707] ? clear_bhb_loop+0x60/0xb0 [ 439.233637][T13707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.233653][T13707] RIP: 0033:0x7f6a66b8eb69 [ 439.233670][T13707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.233685][T13707] RSP: 002b:00007f6a6798e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.233705][T13707] RAX: ffffffffffffffda RBX: 00007f6a66db5fa0 RCX: 00007f6a66b8eb69 [ 439.233719][T13707] RDX: 0000000020000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 439.233731][T13707] RBP: 00007f6a6798e090 R08: 0000000000000000 R09: 0000000000000000 [ 439.233743][T13707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.233754][T13707] R13: 0000000000000000 R14: 00007f6a66db5fa0 R15: 00007ffc18337d98 [ 439.233786][T13707] [ 439.740469][ T5877] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 439.780968][T12415] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 439.893011][ T5877] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 439.902326][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.921589][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 439.933331][ T5264] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 439.941270][T12415] usb 3-1: Using ep0 maxpacket: 16 [ 439.958029][ T5877] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 439.968777][T12415] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.993011][ T5877] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 440.001764][T12415] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 440.014826][ T5877] usb 5-1: Manufacturer: syz [ 440.031253][T12415] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.052860][ T5877] usb 5-1: config 0 descriptor?? [ 440.074400][T12415] usb 3-1: config 0 descriptor?? [ 440.101705][ T5264] usb 2-1: Using ep0 maxpacket: 32 [ 440.119415][ T5264] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 440.141781][ T5264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.149941][ T5264] usb 2-1: Product: syz [ 440.171721][ T5264] usb 2-1: Manufacturer: syz [ 440.179820][ T5264] usb 2-1: SerialNumber: syz [ 440.203388][ T5264] usb 2-1: config 0 descriptor?? [ 440.242965][ T5264] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 440.292023][ T5877] rc_core: IR keymap rc-hauppauge not found [ 440.298334][ T5877] Registered IR keymap rc-empty [ 440.314862][T12415] usbhid 3-1:0.0: can't add hid device: -71 [ 440.332543][T13732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.335449][ T5877] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 440.338972][T12415] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 440.354103][T13732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.385501][ T5877] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input33 [ 440.442777][T12415] usb 3-1: USB disconnect, device number 91 [ 440.498135][T13732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.539414][T13732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.563144][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.569772][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.096417][T13767] /dev/rnullb0: Can't open blockdev [ 441.164673][T12415] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 441.199869][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 441.234434][ T5264] gspca_ov534_9: reg_w failed -71 [ 441.337464][T12415] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 441.346387][T12415] usb 4-1: config 0 has no interface number 0 [ 441.352843][T12415] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 441.356668][ T5957] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 441.364236][T12415] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 441.386645][T12415] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 441.396276][T12415] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.404531][T12415] usb 4-1: Product: syz [ 441.409421][T12415] usb 4-1: Manufacturer: syz [ 441.414155][T12415] usb 4-1: SerialNumber: syz [ 441.426178][T12415] usb 4-1: config 0 descriptor?? [ 441.448693][T13761] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 441.461188][T12415] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 441.480821][T12415] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 441.539053][ T5957] usb 3-1: config 9 has an invalid interface number: 239 but max is 1 [ 441.555002][ T5957] usb 3-1: config 9 has an invalid interface number: 178 but max is 1 [ 441.566372][ T5264] gspca_ov534_9: Unknown sensor 0000 [ 441.566519][ T5264] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 441.576862][ T5957] usb 3-1: config 9 has an invalid interface descriptor of length 2, skipping [ 441.609118][ T5957] usb 3-1: config 9 has an invalid interface number: 36 but max is 1 [ 441.610750][ T5264] usb 2-1: USB disconnect, device number 55 [ 441.625360][ T5957] usb 3-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 441.649092][ T5957] usb 3-1: config 9 has an invalid descriptor of length 226, skipping remainder of the config [ 441.680390][ T5957] usb 3-1: config 9 has 3 interfaces, different from the descriptor's value: 2 [ 441.695227][ T5957] usb 3-1: config 9 has no interface number 0 [ 441.702781][ T5957] usb 3-1: config 9 has no interface number 1 [ 441.709529][ T5957] usb 3-1: config 9 has no interface number 2 [ 441.715779][ T5957] usb 3-1: config 9 interface 239 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 441.727861][ T5957] usb 3-1: config 9 interface 239 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 441.743105][ T5957] usb 3-1: config 9 interface 239 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 10 [ 441.761630][ T5957] usb 3-1: too many endpoints for config 9 interface 178 altsetting 89: 45, using maximum allowed: 30 [ 441.800867][ T5957] usb 3-1: config 9 interface 178 altsetting 89 has an invalid descriptor for endpoint zero, skipping [ 441.818519][ T5957] usb 3-1: config 9 interface 178 altsetting 89 has 2 endpoint descriptors, different from the interface descriptor's value: 45 [ 441.835116][ T5957] usb 3-1: too many endpoints for config 9 interface 36 altsetting 73: 253, using maximum allowed: 30 [ 441.852747][ T5957] usb 3-1: config 9 interface 36 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 441.877918][ T5957] usb 3-1: config 9 interface 178 has no altsetting 0 [ 441.885522][ T5957] usb 3-1: config 9 interface 36 has no altsetting 0 [ 441.899606][ T5977] usb 4-1: USB disconnect, device number 90 [ 441.908178][T13786] FAULT_INJECTION: forcing a failure. [ 441.908178][T13786] name failslab, interval 1, probability 0, space 0, times 0 [ 441.925357][ T5977] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 441.949310][ T5977] cyberjack 4-1:0.69: device disconnected [ 441.963933][ T5957] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=76.f2 [ 441.980851][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.986886][T13786] CPU: 0 UID: 0 PID: 13786 Comm: syz.1.2028 Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 441.986913][T13786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 441.986923][T13786] Call Trace: [ 441.986931][T13786] [ 441.986938][T13786] dump_stack_lvl+0x189/0x250 [ 441.986982][T13786] ? __pfx____ratelimit+0x10/0x10 [ 441.987005][T13786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.987028][T13786] ? __pfx__printk+0x10/0x10 [ 441.987054][T13786] ? __lock_acquire+0xab9/0xd20 [ 441.987082][T13786] should_fail_ex+0x414/0x560 [ 441.987108][T13786] should_failslab+0xa8/0x100 [ 441.987129][T13786] kmem_cache_alloc_noprof+0x73/0x3c0 [ 441.987145][T13786] ? skb_clone+0x212/0x3a0 [ 441.987168][T13786] skb_clone+0x212/0x3a0 [ 441.987191][T13786] __netlink_deliver_tap+0x404/0x850 [ 441.987234][T13786] ? netlink_deliver_tap+0x2e/0x1b0 [ 441.987259][T13786] netlink_deliver_tap+0x19c/0x1b0 [ 441.987284][T13786] netlink_unicast+0x7fa/0x9e0 [ 441.987315][T13786] ? __pfx_netlink_unicast+0x10/0x10 [ 441.987339][T13786] ? netlink_sendmsg+0x642/0xb30 [ 441.987361][T13786] ? skb_put+0x11b/0x210 [ 441.987380][T13786] netlink_sendmsg+0x805/0xb30 [ 441.987414][T13786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.987442][T13786] ? aa_sock_msg_perm+0xf1/0x1d0 [ 441.987465][T13786] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 441.987487][T13786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.987512][T13786] __sock_sendmsg+0x21c/0x270 [ 441.987537][T13786] ____sys_sendmsg+0x505/0x830 [ 441.987561][T13786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.987589][T13786] ? import_iovec+0x74/0xa0 [ 441.987611][T13786] ___sys_sendmsg+0x21f/0x2a0 [ 441.987631][T13786] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.987686][T13786] ? __fget_files+0x2a/0x420 [ 441.987707][T13786] ? __fget_files+0x3a0/0x420 [ 441.987739][T13786] __x64_sys_sendmsg+0x19b/0x260 [ 441.987760][T13786] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 441.987788][T13786] ? __pfx_ksys_write+0x10/0x10 [ 441.987804][T13786] ? rcu_is_watching+0x15/0xb0 [ 441.987830][T13786] ? do_syscall_64+0xbe/0x3b0 [ 441.987857][T13786] do_syscall_64+0xfa/0x3b0 [ 441.987879][T13786] ? lockdep_hardirqs_on+0x9c/0x150 [ 441.987899][T13786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.987915][T13786] ? clear_bhb_loop+0x60/0xb0 [ 441.987936][T13786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.987952][T13786] RIP: 0033:0x7f6a66b8eb69 [ 441.987968][T13786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.987981][T13786] RSP: 002b:00007f6a6798e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.988000][T13786] RAX: ffffffffffffffda RBX: 00007f6a66db5fa0 RCX: 00007f6a66b8eb69 [ 441.988012][T13786] RDX: 0000000020000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 441.988023][T13786] RBP: 00007f6a6798e090 R08: 0000000000000000 R09: 0000000000000000 [ 441.988033][T13786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.988043][T13786] R13: 0000000000000000 R14: 00007f6a66db5fa0 R15: 00007ffc18337d98 [ 441.988072][T13786] [ 442.334777][ T5957] usb 3-1: Product: п [ 442.338510][ T5264] usb 5-1: USB disconnect, device number 79 [ 442.401578][ T5957] usb 3-1: Manufacturer: І [ 442.406266][ T5957] usb 3-1: SerialNumber: ᰉ [ 442.671257][ T5957] usb 3-1: selecting invalid altsetting 3 [ 442.677158][ T5957] comedi comedi5: could not set alternate setting 3 in high speed [ 442.703950][ T5957] usbduxsigma 3-1:9.239: driver 'usbduxsigma' failed to auto-configure device. [ 442.790922][ T5957] usbduxsigma 3-1:9.239: probe with driver usbduxsigma failed with error -22 [ 442.918908][ T5957] usb 3-1: selecting invalid altsetting 3 [ 442.949991][ T5957] comedi comedi5: could not set alternate setting 3 in high speed [ 442.988787][ T5957] usbduxsigma 3-1:9.178: driver 'usbduxsigma' failed to auto-configure device. [ 443.013598][T13831] /dev/rnullb0: Can't open blockdev [ 443.041571][T13831] /dev/rnullb0: Can't open blockdev [ 443.051297][ T5957] usbduxsigma 3-1:9.178: probe with driver usbduxsigma failed with error -22 [ 443.125033][ T5957] usb 3-1: selecting invalid altsetting 3 [ 443.170181][ T5957] comedi comedi5: could not set alternate setting 3 in high speed [ 443.224419][ T5957] usbduxsigma 3-1:9.36: driver 'usbduxsigma' failed to auto-configure device. [ 443.288318][ T5957] usbduxsigma 3-1:9.36: probe with driver usbduxsigma failed with error -22 [ 443.341499][T13842] FAULT_INJECTION: forcing a failure. [ 443.341499][T13842] name failslab, interval 1, probability 0, space 0, times 0 [ 443.385819][ T5957] usb 3-1: USB disconnect, device number 92 [ 443.469983][T13842] CPU: 1 UID: 0 PID: 13842 Comm: syz.1.2037 Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 443.470013][T13842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 443.470026][T13842] Call Trace: [ 443.470034][T13842] [ 443.470043][T13842] dump_stack_lvl+0x189/0x250 [ 443.470076][T13842] ? __pfx____ratelimit+0x10/0x10 [ 443.470104][T13842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.470131][T13842] ? __pfx__printk+0x10/0x10 [ 443.470162][T13842] ? __pfx___might_resched+0x10/0x10 [ 443.470185][T13842] ? fs_reclaim_acquire+0x7d/0x100 [ 443.470212][T13842] should_fail_ex+0x414/0x560 [ 443.470243][T13842] should_failslab+0xa8/0x100 [ 443.470267][T13842] __kmalloc_noprof+0xcb/0x4f0 [ 443.470285][T13842] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 443.470316][T13842] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 443.470348][T13842] genl_family_rcv_msg_doit+0xb8/0x300 [ 443.470379][T13842] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 443.470412][T13842] ? apparmor_capable+0x137/0x1b0 [ 443.470433][T13842] ? bpf_lsm_capable+0x9/0x20 [ 443.470452][T13842] ? security_capable+0x7e/0x2e0 [ 443.470484][T13842] genl_rcv_msg+0x60e/0x790 [ 443.470514][T13842] ? __pfx_genl_rcv_msg+0x10/0x10 [ 443.470535][T13842] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 443.470565][T13842] ? __asan_memcpy+0x40/0x70 [ 443.470590][T13842] ? __pfx_ref_tracker_free+0x10/0x10 [ 443.470625][T13842] netlink_rcv_skb+0x205/0x470 [ 443.470650][T13842] ? __lock_acquire+0xab9/0xd20 [ 443.470673][T13842] ? __pfx_genl_rcv_msg+0x10/0x10 [ 443.470696][T13842] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 443.470747][T13842] ? down_read+0x1ad/0x2e0 [ 443.470769][T13842] genl_rcv+0x28/0x40 [ 443.470789][T13842] netlink_unicast+0x82c/0x9e0 [ 443.470825][T13842] ? __pfx_netlink_unicast+0x10/0x10 [ 443.470857][T13842] ? netlink_sendmsg+0x642/0xb30 [ 443.470879][T13842] ? skb_put+0x11b/0x210 [ 443.470902][T13842] netlink_sendmsg+0x805/0xb30 [ 443.470942][T13842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.470982][T13842] ? aa_sock_msg_perm+0xf1/0x1d0 [ 443.471010][T13842] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 443.471035][T13842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.471063][T13842] __sock_sendmsg+0x21c/0x270 [ 443.471094][T13842] ____sys_sendmsg+0x505/0x830 [ 443.471122][T13842] ? __pfx_____sys_sendmsg+0x10/0x10 [ 443.471154][T13842] ? import_iovec+0x74/0xa0 [ 443.471181][T13842] ___sys_sendmsg+0x21f/0x2a0 [ 443.471203][T13842] ? __pfx____sys_sendmsg+0x10/0x10 [ 443.471268][T13842] ? __fget_files+0x2a/0x420 [ 443.471298][T13842] ? __fget_files+0x3a0/0x420 [ 443.471336][T13842] __x64_sys_sendmsg+0x19b/0x260 [ 443.471360][T13842] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 443.471393][T13842] ? __pfx_ksys_write+0x10/0x10 [ 443.471412][T13842] ? rcu_is_watching+0x15/0xb0 [ 443.471442][T13842] ? do_syscall_64+0xbe/0x3b0 [ 443.471474][T13842] do_syscall_64+0xfa/0x3b0 [ 443.471497][T13842] ? lockdep_hardirqs_on+0x9c/0x150 [ 443.471522][T13842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.471541][T13842] ? clear_bhb_loop+0x60/0xb0 [ 443.471565][T13842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.471582][T13842] RIP: 0033:0x7f6a66b8eb69 [ 443.471600][T13842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.471614][T13842] RSP: 002b:00007f6a6798e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.471636][T13842] RAX: ffffffffffffffda RBX: 00007f6a66db5fa0 RCX: 00007f6a66b8eb69 [ 443.471649][T13842] RDX: 0000000020000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 443.471662][T13842] RBP: 00007f6a6798e090 R08: 0000000000000000 R09: 0000000000000000 [ 443.471674][T13842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.471686][T13842] R13: 0000000000000000 R14: 00007f6a66db5fa0 R15: 00007ffc18337d98 [ 443.471719][T13842] [ 444.504179][T12415] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 444.622847][T13876] Malformed UNC in devname [ 444.622847][T13876] [ 444.636351][T13876] CIFS: VFS: Malformed UNC in devname [ 444.684421][T12415] usb 2-1: Using ep0 maxpacket: 16 [ 444.693781][T12415] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.716699][T12415] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.753960][T12415] usb 2-1: config 0 interface 0 has no altsetting 0 [ 444.771474][T12415] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 444.798405][T12415] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.856100][T12415] usb 2-1: config 0 descriptor?? [ 445.055544][ T5957] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 445.118857][T13895] FAULT_INJECTION: forcing a failure. [ 445.118857][T13895] name failslab, interval 1, probability 0, space 0, times 0 [ 445.155930][T13895] CPU: 0 UID: 0 PID: 13895 Comm: syz.4.2050 Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 445.155969][T13895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 445.155981][T13895] Call Trace: [ 445.155989][T13895] [ 445.156001][T13895] dump_stack_lvl+0x189/0x250 [ 445.156035][T13895] ? __pfx____ratelimit+0x10/0x10 [ 445.156062][T13895] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.156088][T13895] ? __pfx__printk+0x10/0x10 [ 445.156122][T13895] ? __pfx___might_resched+0x10/0x10 [ 445.156151][T13895] should_fail_ex+0x414/0x560 [ 445.156182][T13895] should_failslab+0xa8/0x100 [ 445.156204][T13895] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 445.156224][T13895] ? mptcp_pm_nl_add_addr_doit+0x37c/0x1460 [ 445.156256][T13895] kmemdup_noprof+0x2b/0x70 [ 445.156283][T13895] mptcp_pm_nl_add_addr_doit+0x37c/0x1460 [ 445.156310][T13895] ? __nla_validate_parse+0x2400/0x2d40 [ 445.156334][T13895] ? __sock_sendmsg+0x21c/0x270 [ 445.156355][T13895] ? ____sys_sendmsg+0x505/0x830 [ 445.156385][T13895] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 445.156419][T13895] ? __pfx___nla_validate_parse+0x10/0x10 [ 445.156489][T13895] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 445.156521][T13895] genl_family_rcv_msg_doit+0x215/0x300 [ 445.156551][T13895] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 445.156589][T13895] ? bpf_lsm_capable+0x9/0x20 [ 445.156607][T13895] ? security_capable+0x7e/0x2e0 [ 445.156638][T13895] genl_rcv_msg+0x60e/0x790 [ 445.156669][T13895] ? __pfx_genl_rcv_msg+0x10/0x10 [ 445.156689][T13895] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 445.156718][T13895] ? __asan_memcpy+0x40/0x70 [ 445.156743][T13895] ? __pfx_ref_tracker_free+0x10/0x10 [ 445.156778][T13895] netlink_rcv_skb+0x205/0x470 [ 445.156802][T13895] ? __lock_acquire+0xab9/0xd20 [ 445.156824][T13895] ? __pfx_genl_rcv_msg+0x10/0x10 [ 445.156847][T13895] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 445.156898][T13895] ? down_read+0x1ad/0x2e0 [ 445.156920][T13895] genl_rcv+0x28/0x40 [ 445.156948][T13895] netlink_unicast+0x82c/0x9e0 [ 445.156985][T13895] ? __pfx_netlink_unicast+0x10/0x10 [ 445.157012][T13895] ? netlink_sendmsg+0x642/0xb30 [ 445.157037][T13895] ? skb_put+0x11b/0x210 [ 445.157060][T13895] netlink_sendmsg+0x805/0xb30 [ 445.157100][T13895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.157132][T13895] ? aa_sock_msg_perm+0xf1/0x1d0 [ 445.157159][T13895] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 445.157184][T13895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.157212][T13895] __sock_sendmsg+0x21c/0x270 [ 445.157240][T13895] ____sys_sendmsg+0x505/0x830 [ 445.157269][T13895] ? __pfx_____sys_sendmsg+0x10/0x10 [ 445.157301][T13895] ? import_iovec+0x74/0xa0 [ 445.157327][T13895] ___sys_sendmsg+0x21f/0x2a0 [ 445.157351][T13895] ? __pfx____sys_sendmsg+0x10/0x10 [ 445.157417][T13895] ? __fget_files+0x2a/0x420 [ 445.157441][T13895] ? __fget_files+0x3a0/0x420 [ 445.157479][T13895] __x64_sys_sendmsg+0x19b/0x260 [ 445.157503][T13895] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 445.157537][T13895] ? __pfx_ksys_write+0x10/0x10 [ 445.157556][T13895] ? rcu_is_watching+0x15/0xb0 [ 445.157587][T13895] ? do_syscall_64+0xbe/0x3b0 [ 445.157618][T13895] do_syscall_64+0xfa/0x3b0 [ 445.157642][T13895] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.157667][T13895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.157686][T13895] ? clear_bhb_loop+0x60/0xb0 [ 445.157709][T13895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.157727][T13895] RIP: 0033:0x7f94ea78eb69 [ 445.157746][T13895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.157763][T13895] RSP: 002b:00007f94eb54f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.157812][T13895] RAX: ffffffffffffffda RBX: 00007f94ea9b5fa0 RCX: 00007f94ea78eb69 [ 445.157827][T13895] RDX: 0000000020000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 445.157840][T13895] RBP: 00007f94eb54f090 R08: 0000000000000000 R09: 0000000000000000 [ 445.157851][T13895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.157862][T13895] R13: 0000000000000000 R14: 00007f94ea9b5fa0 R15: 00007fff1dcf7748 [ 445.157895][T13895] [ 445.576028][ C0] vkms_vblank_simulate: vblank timer overrun [ 445.582403][ T5957] usb 4-1: Using ep0 maxpacket: 32 [ 445.615672][T12415] apple 0003:05AC:0247.0017: unknown main item tag 0x0 [ 445.623337][T12415] apple 0003:05AC:0247.0017: unknown main item tag 0x0 [ 445.630342][T12415] apple 0003:05AC:0247.0017: unknown main item tag 0x0 [ 445.635310][ T5957] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 445.637402][T12415] apple 0003:05AC:0247.0017: unknown main item tag 0x0 [ 445.637436][T12415] apple 0003:05AC:0247.0017: unknown main item tag 0x0 [ 445.637463][T12415] apple 0003:05AC:0247.0017: unknown main item tag 0x0 [ 445.671821][T12415] apple 0003:05AC:0247.0017: unknown main item tag 0x0 [ 445.675253][ T5957] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 445.678913][T12415] apple 0003:05AC:0247.0017: unknown main item tag 0x0 [ 445.678956][T12415] apple 0003:05AC:0247.0017: unknown main item tag 0x0 [ 445.704511][T12415] apple 0003:05AC:0247.0017: unknown main item tag 0x0 [ 445.729857][T12415] apple 0003:05AC:0247.0017: unexpected long global item [ 445.738257][T12415] apple 0003:05AC:0247.0017: parse failed [ 445.744508][T12415] apple 0003:05AC:0247.0017: probe with driver apple failed with error -22 [ 445.777554][T13897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2051'. [ 445.788861][T13903] syz.4.2052: attempt to access beyond end of device [ 445.788861][T13903] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 445.799045][ T5957] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 445.802004][T13903] FAT-fs (nbd4): unable to read boot sector [ 445.841334][T13897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2051'. [ 445.856369][ T5957] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 445.873137][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 445.883383][ T5957] usb 4-1: Product: syz [ 445.890402][ T5957] usb 4-1: Manufacturer: syz [ 445.895521][ T5957] usb 4-1: SerialNumber: syz [ 445.945283][ T5957] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input34 [ 446.131574][ T5957] usb 4-1: USB disconnect, device number 91 [ 446.131633][ C0] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 446.193574][ T5957] appletouch 4-1:1.0: input: appletouch disconnected [ 446.981050][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 447.018392][T13948] /dev/rnullb0: Can't open blockdev [ 447.065856][T13949] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2056'. [ 447.361502][ T5957] usb 2-1: USB disconnect, device number 56 [ 447.561933][T13961] dvmrp0: entered allmulticast mode [ 447.853570][T13973] FAULT_INJECTION: forcing a failure. [ 447.853570][T13973] name failslab, interval 1, probability 0, space 0, times 0 [ 447.927791][T13973] CPU: 0 UID: 0 PID: 13973 Comm: syz.2.2060 Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 447.927822][T13973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 447.927833][T13973] Call Trace: [ 447.927842][T13973] [ 447.927852][T13973] dump_stack_lvl+0x189/0x250 [ 447.927885][T13973] ? __pfx____ratelimit+0x10/0x10 [ 447.927912][T13973] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.927939][T13973] ? __pfx__printk+0x10/0x10 [ 447.927972][T13973] ? __pfx___might_resched+0x10/0x10 [ 447.927993][T13973] ? fs_reclaim_acquire+0x7d/0x100 [ 447.928021][T13973] should_fail_ex+0x414/0x560 [ 447.928052][T13973] should_failslab+0xa8/0x100 [ 447.928076][T13973] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 447.928096][T13973] ? __alloc_skb+0x112/0x2d0 [ 447.928120][T13973] __alloc_skb+0x112/0x2d0 [ 447.928142][T13973] netlink_ack+0x146/0xa50 [ 447.928168][T13973] ? __pfx_genl_rcv_msg+0x10/0x10 [ 447.928194][T13973] ? __asan_memcpy+0x40/0x70 [ 447.928228][T13973] ? __pfx_ref_tracker_free+0x10/0x10 [ 447.928428][T13973] netlink_rcv_skb+0x28c/0x470 [ 447.928477][T13973] ? __lock_acquire+0xab9/0xd20 [ 447.928500][T13973] ? __pfx_genl_rcv_msg+0x10/0x10 [ 447.928561][T13973] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 447.928618][T13973] ? down_read+0x1ad/0x2e0 [ 447.928639][T13973] genl_rcv+0x28/0x40 [ 447.928658][T13973] netlink_unicast+0x82c/0x9e0 [ 447.928690][T13973] ? __pfx_netlink_unicast+0x10/0x10 [ 447.928713][T13973] ? netlink_sendmsg+0x642/0xb30 [ 447.928736][T13973] ? skb_put+0x11b/0x210 [ 447.928757][T13973] netlink_sendmsg+0x805/0xb30 [ 447.928792][T13973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.928822][T13973] ? aa_sock_msg_perm+0xf1/0x1d0 [ 447.928858][T13973] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 447.928884][T13973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.928918][T13973] __sock_sendmsg+0x21c/0x270 [ 447.928954][T13973] ____sys_sendmsg+0x505/0x830 [ 447.928983][T13973] ? __pfx_____sys_sendmsg+0x10/0x10 [ 447.929015][T13973] ? import_iovec+0x74/0xa0 [ 447.929039][T13973] ___sys_sendmsg+0x21f/0x2a0 [ 447.929064][T13973] ? __pfx____sys_sendmsg+0x10/0x10 [ 447.929136][T13973] ? __fget_files+0x2a/0x420 [ 447.929170][T13973] ? __fget_files+0x3a0/0x420 [ 447.929208][T13973] __x64_sys_sendmsg+0x19b/0x260 [ 447.929233][T13973] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 447.929265][T13973] ? __pfx_ksys_write+0x10/0x10 [ 447.929291][T13973] ? rcu_is_watching+0x15/0xb0 [ 447.929321][T13973] ? do_syscall_64+0xbe/0x3b0 [ 447.929353][T13973] do_syscall_64+0xfa/0x3b0 [ 447.929378][T13973] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.929403][T13973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.929421][T13973] ? clear_bhb_loop+0x60/0xb0 [ 447.929444][T13973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.929464][T13973] RIP: 0033:0x7f8f7a38eb69 [ 447.929484][T13973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.929500][T13973] RSP: 002b:00007f8f7b17d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.929523][T13973] RAX: ffffffffffffffda RBX: 00007f8f7a5b5fa0 RCX: 00007f8f7a38eb69 [ 447.929538][T13973] RDX: 0000000020000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 447.929552][T13973] RBP: 00007f8f7b17d090 R08: 0000000000000000 R09: 0000000000000000 [ 447.929564][T13973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.929576][T13973] R13: 0000000000000000 R14: 00007f8f7a5b5fa0 R15: 00007fffbf7856f8 [ 447.929609][T13973] [ 448.274844][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.457594][T13980] /dev/rnullb0: Can't open blockdev [ 448.731239][T14004] /dev/rnullb0: Can't open blockdev [ 448.765003][ T5957] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 448.827455][ T927] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 448.928547][ T5957] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 448.940768][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.965780][ T927] usb 5-1: device descriptor read/64, error -71 [ 448.993362][ T5957] usb 3-1: config 0 descriptor?? [ 449.010490][ T5957] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 449.206157][ T927] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 449.218583][T13983] /dev/rnullb0: Can't open blockdev [ 449.236712][ T5957] gp8psk: usb in 128 operation failed. [ 449.261592][ T5957] gp8psk: usb in 137 operation failed. [ 449.282454][ T5957] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 449.308252][ T5957] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 449.336540][ T5957] usb 3-1: media controller created [ 449.366729][ T927] usb 5-1: device descriptor read/64, error -71 [ 449.377514][ T5957] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 449.423339][ T5957] gp8psk_fe: Frontend attached [ 449.436355][ T5957] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 449.451773][ T5957] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 449.497399][ T927] usb usb5-port1: attempt power cycle [ 449.666735][ T5957] gp8psk: usb in 138 operation failed. [ 449.688991][ T5957] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 449.715487][ T5957] gp8psk: found Genpix USB device pID = 203 (hex) [ 449.756716][ T5957] usb 3-1: USB disconnect, device number 93 [ 449.839776][ T927] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 449.900618][ T927] usb 5-1: device descriptor read/8, error -71 [ 450.178728][ T5977] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 450.186593][ T927] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 450.196169][ T5957] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 450.243595][ T927] usb 5-1: device descriptor read/8, error -71 [ 450.369159][ T5977] usb 2-1: Using ep0 maxpacket: 16 [ 450.378743][ T5977] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 450.388908][ T927] usb usb5-port1: unable to enumerate USB device [ 450.397279][ T5977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.406746][ T5977] usb 2-1: Product: syz [ 450.416879][ T5977] usb 2-1: Manufacturer: syz [ 450.426736][ T5977] usb 2-1: SerialNumber: syz [ 450.447714][ T5977] r8152-cfgselector 2-1: Unknown version 0x0000 [ 450.460407][ T5977] r8152-cfgselector 2-1: config 0 descriptor?? [ 450.772296][T14071] FAULT_INJECTION: forcing a failure. [ 450.772296][T14071] name failslab, interval 1, probability 0, space 0, times 0 [ 450.785922][T14071] CPU: 1 UID: 0 PID: 14071 Comm: syz.3.2081 Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 450.785948][T14071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 450.785958][T14071] Call Trace: [ 450.785966][T14071] [ 450.785974][T14071] dump_stack_lvl+0x189/0x250 [ 450.786005][T14071] ? __pfx____ratelimit+0x10/0x10 [ 450.786033][T14071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.786060][T14071] ? __pfx__printk+0x10/0x10 [ 450.786083][T14071] ? genl_rcv+0x28/0x40 [ 450.786102][T14071] ? ____sys_sendmsg+0x505/0x830 [ 450.786151][T14071] ? __x64_sys_sendmsg+0x19b/0x260 [ 450.786184][T14071] should_fail_ex+0x414/0x560 [ 450.786215][T14071] should_failslab+0xa8/0x100 [ 450.786238][T14071] kmem_cache_alloc_noprof+0x73/0x3c0 [ 450.786256][T14071] ? skb_clone+0x212/0x3a0 [ 450.786283][T14071] skb_clone+0x212/0x3a0 [ 450.786308][T14071] __netlink_deliver_tap+0x404/0x850 [ 450.786350][T14071] ? netlink_deliver_tap+0x2e/0x1b0 [ 450.786379][T14071] netlink_deliver_tap+0x19c/0x1b0 [ 450.786406][T14071] netlink_sendskb+0x68/0x140 [ 450.786433][T14071] netlink_unicast+0x397/0x9e0 [ 450.786456][T14071] ? __asan_memcpy+0x40/0x70 [ 450.786493][T14071] ? __pfx_netlink_unicast+0x10/0x10 [ 450.786530][T14071] netlink_rcv_skb+0x28c/0x470 [ 450.786554][T14071] ? __lock_acquire+0xab9/0xd20 [ 450.786576][T14071] ? __pfx_genl_rcv_msg+0x10/0x10 [ 450.786599][T14071] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 450.786656][T14071] ? down_read+0x1ad/0x2e0 [ 450.786677][T14071] genl_rcv+0x28/0x40 [ 450.786697][T14071] netlink_unicast+0x82c/0x9e0 [ 450.786733][T14071] ? __pfx_netlink_unicast+0x10/0x10 [ 450.786760][T14071] ? netlink_sendmsg+0x642/0xb30 [ 450.786783][T14071] ? skb_put+0x11b/0x210 [ 450.786806][T14071] netlink_sendmsg+0x805/0xb30 [ 450.786844][T14071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.786874][T14071] ? aa_sock_msg_perm+0xf1/0x1d0 [ 450.786902][T14071] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 450.786927][T14071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.786955][T14071] __sock_sendmsg+0x21c/0x270 [ 450.786984][T14071] ____sys_sendmsg+0x505/0x830 [ 450.787012][T14071] ? __pfx_____sys_sendmsg+0x10/0x10 [ 450.787045][T14071] ? import_iovec+0x74/0xa0 [ 450.787069][T14071] ___sys_sendmsg+0x21f/0x2a0 [ 450.787092][T14071] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.787170][T14071] ? __fget_files+0x2a/0x420 [ 450.787193][T14071] ? __fget_files+0x3a0/0x420 [ 450.787232][T14071] __x64_sys_sendmsg+0x19b/0x260 [ 450.787255][T14071] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 450.787288][T14071] ? __pfx_ksys_write+0x10/0x10 [ 450.787307][T14071] ? rcu_is_watching+0x15/0xb0 [ 450.787345][T14071] ? do_syscall_64+0xbe/0x3b0 [ 450.787380][T14071] do_syscall_64+0xfa/0x3b0 [ 450.787401][T14071] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.787431][T14071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.787450][T14071] ? clear_bhb_loop+0x60/0xb0 [ 450.787474][T14071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.787492][T14071] RIP: 0033:0x7fddd1b8eb69 [ 450.787510][T14071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.787526][T14071] RSP: 002b:00007fddd29f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.787549][T14071] RAX: ffffffffffffffda RBX: 00007fddd1db5fa0 RCX: 00007fddd1b8eb69 [ 450.787563][T14071] RDX: 0000000020000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 450.787576][T14071] RBP: 00007fddd29f6090 R08: 0000000000000000 R09: 0000000000000000 [ 450.787588][T14071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 450.787599][T14071] R13: 0000000000000000 R14: 00007fddd1db5fa0 R15: 00007ffcd0ded8c8 [ 450.787632][T14071] [ 451.208513][T14073] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 451.379080][T14081] /dev/rnullb0: Can't open blockdev [ 451.404569][ T5977] r8152-cfgselector 2-1: USB disconnect, device number 57 [ 451.550984][T14099] /dev/rnullb0: Can't open blockdev [ 451.732401][ T927] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 451.774781][T14110] FAULT_INJECTION: forcing a failure. [ 451.774781][T14110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.789384][T14110] CPU: 1 UID: 0 PID: 14110 Comm: syz.1.2090 Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 451.789404][T14110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 451.789411][T14110] Call Trace: [ 451.789415][T14110] [ 451.789421][T14110] dump_stack_lvl+0x189/0x250 [ 451.789442][T14110] ? __pfx____ratelimit+0x10/0x10 [ 451.789459][T14110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.789474][T14110] ? __pfx__printk+0x10/0x10 [ 451.789497][T14110] should_fail_ex+0x414/0x560 [ 451.789515][T14110] _copy_to_user+0x31/0xb0 [ 451.789530][T14110] simple_read_from_buffer+0xe1/0x170 [ 451.789560][T14110] proc_fail_nth_read+0x1b3/0x220 [ 451.789585][T14110] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 451.789604][T14110] ? rw_verify_area+0x2a6/0x4d0 [ 451.789615][T14110] ? __lock_acquire+0xab9/0xd20 [ 451.789626][T14110] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 451.789644][T14110] vfs_read+0x1fd/0xa30 [ 451.789655][T14110] ? fdget_pos+0x247/0x320 [ 451.789672][T14110] ? __pfx___mutex_lock+0x10/0x10 [ 451.789688][T14110] ? __pfx_vfs_read+0x10/0x10 [ 451.789701][T14110] ? __fget_files+0x2a/0x420 [ 451.789718][T14110] ? __fget_files+0x3a0/0x420 [ 451.789731][T14110] ? __fget_files+0x2a/0x420 [ 451.789750][T14110] ksys_read+0x145/0x250 [ 451.789764][T14110] ? __pfx_ksys_read+0x10/0x10 [ 451.789775][T14110] ? rcu_is_watching+0x15/0xb0 [ 451.789802][T14110] ? do_syscall_64+0xbe/0x3b0 [ 451.789832][T14110] do_syscall_64+0xfa/0x3b0 [ 451.789850][T14110] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.789865][T14110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.789880][T14110] ? clear_bhb_loop+0x60/0xb0 [ 451.789895][T14110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.789905][T14110] RIP: 0033:0x7f6a66b8d57c [ 451.789918][T14110] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 451.789928][T14110] RSP: 002b:00007f6a6798e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 451.789942][T14110] RAX: ffffffffffffffda RBX: 00007f6a66db5fa0 RCX: 00007f6a66b8d57c [ 451.789950][T14110] RDX: 000000000000000f RSI: 00007f6a6798e0a0 RDI: 0000000000000004 [ 451.789957][T14110] RBP: 00007f6a6798e090 R08: 0000000000000000 R09: 0000000000000000 [ 451.789964][T14110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 451.789970][T14110] R13: 0000000000000000 R14: 00007f6a66db5fa0 R15: 00007ffc18337d98 [ 451.789988][T14110] [ 452.114276][ T1168] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 452.133521][ T927] usb 4-1: device descriptor read/64, error -71 [ 452.374003][ T927] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 452.524397][ T927] usb 4-1: device descriptor read/64, error -71 [ 452.645217][ T927] usb usb4-port1: attempt power cycle [ 452.805332][T12415] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 452.955333][T12415] usb 3-1: Using ep0 maxpacket: 32 [ 452.963393][T12415] usb 3-1: config 0 has an invalid interface number: 86 but max is 0 [ 452.972002][ T5264] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 452.980176][T12415] usb 3-1: config 0 has no interface number 0 [ 452.986957][T12415] usb 3-1: config 0 interface 86 has no altsetting 0 [ 452.995615][ T927] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 452.998760][T12415] usb 3-1: New USB device found, idVendor=0af0, idProduct=7801, bcdDevice=c6.25 [ 453.014232][T12415] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.023042][T12415] usb 3-1: Product: syz [ 453.027057][ T927] usb 4-1: device descriptor read/8, error -71 [ 453.028073][T12415] usb 3-1: Manufacturer: syz [ 453.039713][T12415] usb 3-1: SerialNumber: syz [ 453.050776][T12415] usb 3-1: config 0 descriptor?? [ 453.059629][T12415] hso 3-1:0.86: Not our interface [ 453.138601][ T5264] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.150118][ T5264] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 453.159446][ T5264] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 453.169255][ T5264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.182837][ T5264] usb 2-1: config 0 descriptor?? [ 453.193594][ T5264] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 453.200429][ T5264] dvb-usb: bulk message failed: -22 (3/0) [ 453.214202][ T5264] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 453.224646][ T5264] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 453.232538][ T5264] usb 2-1: media controller created [ 453.241254][ T5264] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 453.264305][ T5264] dvb-usb: bulk message failed: -22 (6/0) [ 453.276356][ T5264] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 453.280468][ T927] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 453.300663][ T5264] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input35 [ 453.310562][ T5977] usb 3-1: USB disconnect, device number 94 [ 453.323754][ T927] usb 4-1: device descriptor read/8, error -71 [ 453.343187][ T5264] dvb-usb: schedule remote query interval to 150 msecs. [ 453.359754][ T5264] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 453.397392][T14140] dvb-usb: bulk message failed: -22 (2/0) [ 453.409544][T14140] tipc: Enabling of bearer rejected, media not registered [ 453.426718][ T43] usb 2-1: USB disconnect, device number 58 [ 453.446940][ T927] usb usb4-port1: unable to enumerate USB device [ 453.470868][ T43] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 454.001221][T14183] /dev/rnullb0: Can't open blockdev [ 454.086423][T14186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2102'. [ 454.101260][T14186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2102'. [ 454.325967][T14193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2103'. [ 454.398846][ T5264] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 454.539211][ T5264] usb 3-1: device descriptor read/64, error -71 [ 454.554924][T14198] overlayfs: failed to resolve './file1/file0': -2 [ 454.634360][T14200] /dev/rnullb0: Can't open blockdev [ 454.758420][T14208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.789782][ T5264] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 454.920054][ T5264] usb 3-1: device descriptor read/64, error -71 [ 455.030792][ T5264] usb usb3-port1: attempt power cycle [ 455.050487][ T43] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 455.080459][ T927] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 455.217323][ T43] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=d6.bb [ 455.226769][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.235971][ T43] usb 2-1: Product: syz [ 455.240745][ T927] usb 4-1: device descriptor read/64, error -71 [ 455.247252][ T43] usb 2-1: Manufacturer: syz [ 455.252275][ T43] usb 2-1: SerialNumber: syz [ 455.259627][ T43] usb 2-1: config 0 descriptor?? [ 455.268861][ T43] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 455.371135][ T5977] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 455.373911][ T5264] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 455.402762][ T5264] usb 3-1: device descriptor read/8, error -71 [ 455.483279][T14208] CUSE: DEVNAME unspecified [ 455.501397][ T927] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 455.531391][ T5977] usb 5-1: Using ep0 maxpacket: 8 [ 455.544989][ T5977] usb 5-1: config 2 has an invalid interface number: 21 but max is 0 [ 455.553817][ T5977] usb 5-1: config 2 has no interface number 0 [ 455.560203][ T5977] usb 5-1: config 2 interface 21 has no altsetting 0 [ 455.575025][ T5977] usb 5-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=31.1e [ 455.587547][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.598389][ T5977] usb 5-1: Product: syz [ 455.603091][ T5977] usb 5-1: Manufacturer: syz [ 455.608049][ T5977] usb 5-1: SerialNumber: syz [ 455.641686][ T927] usb 4-1: device descriptor read/64, error -71 [ 455.641967][ T5264] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 455.658799][ T43] gspca_sn9c2028: read1 error -71 [ 455.671638][ T43] gspca_sn9c2028: read1 error -71 [ 455.677095][ T43] gspca_sn9c2028: read1 error -71 [ 455.682862][ T5264] usb 3-1: device descriptor read/8, error -71 [ 455.682993][ T43] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71 [ 455.701206][ T43] usb 2-1: USB disconnect, device number 59 [ 455.752861][ T927] usb usb4-port1: attempt power cycle [ 455.792877][ T5264] usb usb3-port1: unable to enumerate USB device [ 455.877686][T14248] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 456.102634][ T927] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 456.144315][ T927] usb 4-1: device descriptor read/8, error -71 [ 456.383260][ T927] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 456.405382][ T927] usb 4-1: device descriptor read/8, error -71 [ 456.514483][ T927] usb usb4-port1: unable to enumerate USB device [ 456.764033][T14263] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 457.239318][ T1168] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 457.529908][T14299] /dev/rnullb0: Can't open blockdev [ 457.541184][T14299] /dev/rnullb0: Can't open blockdev [ 457.601628][T14303] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20000 [ 457.611689][T14303] IPVS: set_ctl: invalid protocol: 41 172.30.1.2:20002 [ 457.635733][T14303] IPVS: set_ctl: invalid protocol: 29 172.20.20.67:20004 [ 457.700204][ T43] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 457.861810][ T43] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 457.872877][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.884036][ T43] usb 3-1: Product: syz [ 457.891351][ T43] usb 3-1: Manufacturer: syz [ 457.896078][ T43] usb 3-1: SerialNumber: syz [ 457.940147][ T43] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 458.041155][ T927] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 458.185486][ T5977] quatech2 5-1:2.21: Quatech 2nd gen USB to Serial Driver converter detected [ 458.196112][ T5977] usb 5-1: qt2_attach - failed to power on unit: -71 [ 458.205755][ T5977] quatech2 5-1:2.21: probe with driver quatech2 failed with error -71 [ 458.229525][ T5977] usb 5-1: USB disconnect, device number 84 [ 458.300688][ T43] usb 3-1: USB disconnect, device number 99 [ 458.878287][T14351] /dev/rnullb0: Can't open blockdev [ 458.913859][T14353] /dev/rnullb0: Can't open blockdev [ 458.923330][T14353] /dev/rnullb0: Can't open blockdev [ 459.079760][ T927] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 459.094338][T14364] /dev/rnullb0: Can't open blockdev [ 459.102957][T14365] /dev/rnullb0: Can't open blockdev [ 459.121586][ T927] ath9k_htc: Failed to initialize the device [ 459.131136][ T43] usb 3-1: ath9k_htc: USB layer deinitialized [ 459.237946][T14374] overlayfs: missing 'lowerdir' [ 459.278169][T14374] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 459.294262][T14374] overlayfs: missing 'lowerdir' [ 459.309436][T14379] netlink: 'syz.2.2143': attribute type 2 has an invalid length. [ 459.354892][T14379] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2143'. [ 459.751656][T14395] random: crng reseeded on system resumption [ 459.794435][T14395] Restarting kernel threads ... [ 459.805940][T14395] Done restarting kernel threads. [ 459.820951][ T43] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 459.911820][T14405] /dev/rnullb0: Can't open blockdev [ 459.994102][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 460.021700][ T5264] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 460.057225][T14409] /dev/rnullb0: Can't open blockdev [ 460.129097][ T43] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 460.138324][ T43] usb 4-1: config 0 has no interface number 0 [ 460.152753][ T43] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.173870][ T43] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.183773][ T43] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 460.196157][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.197157][ T5264] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 460.222594][ T43] usb 4-1: config 0 descriptor?? [ 460.244673][ T5264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.249190][T14411] /dev/rnullb0: Can't open blockdev [ 460.261751][ T5264] usb 2-1: Product: syz [ 460.266442][ T5264] usb 2-1: Manufacturer: syz [ 460.271076][ T5264] usb 2-1: SerialNumber: syz [ 460.293470][ T5264] usb 2-1: config 0 descriptor?? [ 460.436490][T14424] /dev/rnullb0: Can't open blockdev [ 460.530459][T14428] netlink: 'syz.2.2156': attribute type 1 has an invalid length. [ 460.571221][T14430] /dev/rnullb0: Can't open blockdev [ 460.692238][T14437] /dev/rnullb0: Can't open blockdev [ 460.839762][ T43] uclogic 0003:28BD:0071.0018: failed retrieving string descriptor #100: -71 [ 460.856779][ T43] uclogic 0003:28BD:0071.0018: failed retrieving pen parameters: -71 [ 460.865508][ T43] uclogic 0003:28BD:0071.0018: pen probing failed: -71 [ 460.872494][ T43] uclogic 0003:28BD:0071.0018: failed probing parameters: -71 [ 460.880334][ T43] uclogic 0003:28BD:0071.0018: probe with driver uclogic failed with error -71 [ 460.902165][ T43] usb 4-1: USB disconnect, device number 100 [ 461.013367][ T5956] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 461.051177][ T5264] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 461.068401][ T5264] asix 2-1:0.0: probe with driver asix failed with error -71 [ 461.080187][ T5264] usb 2-1: USB disconnect, device number 60 [ 461.179234][ T5956] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 461.188592][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.196873][ T5956] usb 3-1: Product: syz [ 461.201058][ T5956] usb 3-1: Manufacturer: syz [ 461.205757][ T5956] usb 3-1: SerialNumber: syz [ 461.212629][ T5956] usb 3-1: config 0 descriptor?? [ 461.222724][ T5956] ch341 3-1:0.0: ch341-uart converter detected [ 461.294297][ T5877] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 461.429569][T14439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2159'. [ 461.456854][ T5877] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 461.474221][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.482390][ T5877] usb 5-1: Product: syz [ 461.494504][ T5877] usb 5-1: Manufacturer: syz [ 461.499195][ T5877] usb 5-1: SerialNumber: syz [ 461.531120][ T5877] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 461.576828][ T5264] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 462.137776][ T5877] usb 5-1: USB disconnect, device number 85 [ 462.287752][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 462.304091][ T5956] usb 3-1: failed to send control message: -71 [ 462.332775][ T5956] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 462.354526][ T5956] usb 3-1: USB disconnect, device number 100 [ 462.375571][ T5956] ch341 3-1:0.0: device disconnected [ 462.703107][T14507] /dev/rnullb0: Can't open blockdev [ 462.721021][T14508] /dev/rnullb0: Can't open blockdev [ 463.057799][ T5264] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 463.098999][ T5264] ath9k_htc: Failed to initialize the device [ 463.125421][ T5877] usb 5-1: ath9k_htc: USB layer deinitialized [ 463.275398][T14526] netlink: 'syz.3.2170': attribute type 5 has an invalid length. [ 463.342277][T14529] /dev/rnullb0: Can't open blockdev [ 463.456813][T14537] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2175'. [ 463.491800][T14537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2175'. [ 463.588958][ T5877] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 463.757796][ T5877] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.779718][ T5877] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 463.805047][ T5877] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 463.818964][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 463.827065][ T5877] usb 4-1: SerialNumber: syz [ 463.931678][T14559] netlink: 'syz.2.2178': attribute type 1 has an invalid length. [ 463.942498][T14560] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 463.969572][ T5264] usb 5-1: new low-speed USB device number 86 using dummy_hcd [ 463.989482][T14559] netlink: 'syz.2.2178': attribute type 101 has an invalid length. [ 463.990206][T14560] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 464.008327][T14559] netlink: 808 bytes leftover after parsing attributes in process `syz.2.2178'. [ 464.051432][T14560] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 464.076757][T14526] vcan0: tx drop: invalid sa for name 0x000003fffffffffd [ 464.077346][T14560] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 464.109246][T14562] /dev/rnullb0: Can't open blockdev [ 464.117643][T14526] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 464.154749][T14526] /dev/rnullb0: Can't open blockdev [ 464.175788][ T5264] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 464.184795][ T5264] usb 5-1: config 0 has no interface number 0 [ 464.202313][ T5877] usb 4-1: 0:2 : does not exist [ 464.209986][ T5264] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 464.243020][ T5264] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 464.263492][ T5264] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 464.277868][ T5877] usb 4-1: USB disconnect, device number 101 [ 464.293051][ T5264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.356956][ T5264] usb 5-1: config 0 descriptor?? [ 464.373701][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 464.409003][ T5264] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 464.437245][T14591] syz.2.2182: attempt to access beyond end of device [ 464.437245][T14591] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 464.478257][T14591] syz.2.2182: attempt to access beyond end of device [ 464.478257][T14591] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 464.524076][T14591] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 464.535451][T14591] syz.2.2182: attempt to access beyond end of device [ 464.535451][T14591] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 464.551378][T14591] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 464.561027][T14591] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 464.568728][T14591] UDF-fs: Scanning with blocksize 512 failed [ 464.579060][T14591] syz.2.2182: attempt to access beyond end of device [ 464.579060][T14591] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 464.592939][T14591] syz.2.2182: attempt to access beyond end of device [ 464.592939][T14591] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 464.618839][T14591] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 464.629648][T14591] syz.2.2182: attempt to access beyond end of device [ 464.629648][T14591] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 464.645798][T14591] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 464.656493][T14591] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 464.666797][T14591] UDF-fs: Scanning with blocksize 1024 failed [ 464.676157][T14591] syz.2.2182: attempt to access beyond end of device [ 464.676157][T14591] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 464.693833][T14591] syz.2.2182: attempt to access beyond end of device [ 464.693833][T14591] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 464.708361][T14591] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 464.724300][T14591] syz.2.2182: attempt to access beyond end of device [ 464.724300][T14591] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 464.739422][T14591] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 464.752163][ T5264] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 464.760634][T14591] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 464.769440][T14591] UDF-fs: Scanning with blocksize 2048 failed [ 464.776344][T14591] syz.2.2182: attempt to access beyond end of device [ 464.776344][T14591] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 464.790486][T14591] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 464.803876][T14591] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 464.813817][T14591] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 464.824867][T14591] UDF-fs: Scanning with blocksize 4096 failed [ 464.834077][T14591] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 464.911547][ T5264] usb 2-1: Using ep0 maxpacket: 16 [ 464.920761][ T5264] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 464.930507][ T5264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.954506][ T5264] usb 2-1: config 0 descriptor?? [ 464.975265][ T5264] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 465.060229][T14608] /dev/rnullb0: Can't open blockdev [ 465.201747][ T43] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 465.352783][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 465.363803][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 465.374069][ T43] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 465.382356][ T43] usb 3-1: config 0 has no interface number 0 [ 465.388587][ T43] usb 3-1: config 0 interface 88 altsetting 8 has an endpoint descriptor with address 0x4F, changing to 0xF [ 465.401755][ T43] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0xF has an invalid bInterval 49, changing to 9 [ 465.413174][ T43] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0xF has invalid maxpacket 9292, setting to 1024 [ 465.424659][ T43] usb 3-1: config 0 interface 88 has no altsetting 0 [ 465.438547][ T43] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 465.447715][ T43] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 465.456353][ T43] usb 3-1: Product: syz [ 465.460548][ T43] usb 3-1: Manufacturer: syz [ 465.465695][ T43] usb 3-1: SerialNumber: syz [ 465.475907][ T43] usb 3-1: config 0 descriptor?? [ 465.481793][T14602] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 465.765024][T14619] /dev/rnullb0: Can't open blockdev [ 465.990005][ T43] usb 3-1: USB disconnect, device number 101 [ 466.002800][T14621] netlink: 37 bytes leftover after parsing attributes in process `syz.3.2187'. [ 466.067733][ T5264] gspca_sonixj: reg_w1 err -71 [ 466.093570][ T5264] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 466.114420][ T5264] usb 2-1: USB disconnect, device number 61 [ 466.449477][ T5264] usb 5-1: USB disconnect, device number 86 [ 466.700452][T14659] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2189'. [ 466.711521][T14659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2189'. [ 466.722867][T14659] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2189'. [ 466.792861][T14657] /dev/rnullb0: Can't open blockdev [ 466.810075][T14662] /dev/rnullb0: Can't open blockdev [ 467.549000][ T43] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 467.696759][ T43] usb 2-1: device descriptor read/64, error -71 [ 467.912654][T14690] /dev/rnullb0: Can't open blockdev [ 467.948699][ T43] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 468.068408][ T5264] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 468.097337][ T43] usb 2-1: device descriptor read/64, error -71 [ 468.141419][ T1042] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 468.207941][ T43] usb usb2-port1: attempt power cycle [ 468.241751][ T5264] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.252877][ T5264] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 468.264390][ T5264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 468.276161][ T5264] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 468.315559][ T5264] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 468.327397][ T5264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.340971][ T5264] usb 4-1: Product: syz [ 468.345267][ T5264] usb 4-1: Manufacturer: syz [ 468.351477][ T5264] usb 4-1: SerialNumber: syz [ 468.364383][ T5264] usb 4-1: config 0 descriptor?? [ 468.379923][ T5264] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 468.397271][ T5264] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 468.409763][ T5264] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 468.568466][ T43] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 468.597162][ T43] usb 2-1: device descriptor read/8, error -71 [ 468.763369][T14719] netlink: 'syz.4.2204': attribute type 1 has an invalid length. [ 468.773692][ T5264] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 468.784274][ T5956] usb 4-1: USB disconnect, device number 102 [ 468.787370][T14719] netlink: 'syz.4.2204': attribute type 2 has an invalid length. [ 468.805330][ T5956] garmin_gps 4-1:0.0: device disconnected [ 468.813803][T14719] /dev/rnullb0: Can't open blockdev [ 468.839498][ T43] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 468.869615][ T43] usb 2-1: device descriptor read/8, error -71 [ 468.932898][T14736] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 468.940700][T14736] /dev/rnullb0: Can't open blockdev [ 468.969752][ T5264] usb 3-1: Using ep0 maxpacket: 8 [ 468.979425][ T43] usb usb2-port1: unable to enumerate USB device [ 468.980772][ T5264] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 469.017676][ T5264] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 469.038209][ T5264] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 469.056641][ T5264] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 469.088533][ T5264] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 469.105986][ T5264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.324666][ T5264] usb 3-1: GET_CAPABILITIES returned 0 [ 469.330040][ T5956] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 469.335312][ T5264] usbtmc 3-1:16.0: can't read capabilities [ 469.394678][T14757] loop7: detected capacity change from 0 to 7 [ 469.410374][T14757] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2212'. [ 469.417783][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 469.430221][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 469.439812][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 469.450616][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 469.459838][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 469.468530][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 469.477886][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 469.486668][ T5956] usb 4-1: device descriptor read/64, error -71 [ 469.486944][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 469.502201][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 469.513237][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 469.522537][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 469.526763][T14713] /dev/rnullb0: Can't open blockdev [ 469.543666][ T43] usb 3-1: USB disconnect, device number 102 [ 469.730538][ T5956] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 469.870569][ T5956] usb 4-1: device descriptor read/64, error -71 [ 469.981840][ T5956] usb usb4-port1: attempt power cycle [ 470.115437][T14786] /dev/rnullb0: Can't open blockdev [ 470.161515][ T43] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 470.215866][T14793] /dev/rnullb0: Can't open blockdev [ 470.314385][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 470.314424][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 470.314452][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 470.314478][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 470.314520][ T43] usb 5-1: New USB device found, idVendor=045e, idProduct=00db, bcdDevice= 0.00 [ 470.314543][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.317849][ T43] usb 5-1: config 0 descriptor?? [ 470.321743][T14781] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 470.321873][T14781] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 470.326870][T14808] 9pnet: Could not find request transport: Q'3ڿ>+3h&%XB tX=M IۛygZ(q [ 470.334758][ T5956] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 470.365835][ T5956] usb 4-1: device descriptor read/8, error -71 [ 470.616951][ T5956] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 470.652741][ T5956] usb 4-1: device descriptor read/8, error -71 [ 470.736058][ T43] hid_parser_main: 839 callbacks suppressed [ 470.736086][ T43] microsoft 0003:045E:00DB.0019: unknown main item tag 0x0 [ 470.749526][ T43] microsoft 0003:045E:00DB.0019: unknown main item tag 0x0 [ 470.758241][ T43] microsoft 0003:045E:00DB.0019: unknown main item tag 0x0 [ 470.765901][ T43] microsoft 0003:045E:00DB.0019: unknown main item tag 0x0 [ 470.773367][ T5956] usb usb4-port1: unable to enumerate USB device [ 470.780476][ T43] microsoft 0003:045E:00DB.0019: unknown main item tag 0x0 [ 470.787810][ T43] microsoft 0003:045E:00DB.0019: unknown main item tag 0x0 [ 470.795099][ T43] microsoft 0003:045E:00DB.0019: unknown main item tag 0x0 [ 470.805753][ T43] microsoft 0003:045E:00DB.0019: unknown main item tag 0x0 [ 470.813127][ T5264] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 470.822232][ T43] microsoft 0003:045E:00DB.0019: unknown main item tag 0x0 [ 470.829499][ T43] microsoft 0003:045E:00DB.0019: unknown main item tag 0x0 [ 470.844538][ T43] microsoft 0003:045E:00DB.0019: hidraw0: USB HID v0.00 Device [HID 045e:00db] on usb-dummy_hcd.4-1/input0 [ 470.858490][ T43] microsoft 0003:045E:00DB.0019: no inputs found [ 470.865360][ T43] microsoft 0003:045E:00DB.0019: could not initialize ff, continuing anyway [ 470.962600][ T5264] usb 2-1: Using ep0 maxpacket: 8 [ 470.969465][T14857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.990824][ T5264] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 470.993066][T14857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.019502][ T5264] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 471.032679][ T5264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.051293][ T5264] usb 2-1: Product: syz [ 471.057431][ T5264] usb 2-1: Manufacturer: syz [ 471.072568][ T5264] usb 2-1: SerialNumber: syz [ 471.088513][ T5264] usb 2-1: config 0 descriptor?? [ 471.093054][ T43] usb 5-1: USB disconnect, device number 87 [ 471.109878][ T5264] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 471.262892][T14878] 9pnet: Could not find request transport: xen [ 471.453450][ T5956] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 471.608760][ T5956] usb 3-1: unable to get BOS descriptor or descriptor too short [ 471.618132][ T5956] usb 3-1: config 0 has an invalid interface number: 244 but max is 0 [ 471.626570][ T5956] usb 3-1: config 0 has no interface number 0 [ 471.632729][ T5956] usb 3-1: config 0 interface 244 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 8 [ 471.642727][ T5956] usb 3-1: config 0 interface 244 has no altsetting 0 [ 471.652109][ T5956] usb 3-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=81.b0 [ 471.661389][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.669484][ T5956] usb 3-1: Product: syz [ 471.673653][ T5956] usb 3-1: Manufacturer: syz [ 471.678389][ T5956] usb 3-1: SerialNumber: syz [ 471.686487][ T5956] usb 3-1: config 0 descriptor?? [ 471.693139][T14881] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 471.921201][ T5956] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 471.929655][ T5956] usb 3-1: selecting invalid altsetting 0 [ 471.939576][ T2348] pvrusb2: control-write URB failure, status=-71 [ 471.942649][ T5956] usb 3-1: USB disconnect, device number 103 [ 471.953683][ T2348] pvrusb2: Device being rendered inoperable [ 471.967047][ T2348] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 471.979081][ T2348] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 472.315043][ T43] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 472.383507][T14914] /dev/rnullb0: Can't open blockdev [ 472.393541][T14915] MTD: Couldn't look up '/dev/sg0': -15 [ 472.401122][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.410021][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.416508][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.422755][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.429210][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.435448][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.443889][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.450753][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.459763][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.468550][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 472.480150][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.486142][ T43] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 472.502485][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.509207][ T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 472.522931][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.528629][ T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 472.539631][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.553275][ T43] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 472.567172][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.573444][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.579322][ T43] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 472.592162][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.598744][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.611133][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.641799][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.656425][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.671132][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.682723][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.689925][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.704568][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.711368][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.724508][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.730958][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.737332][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.743628][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.749952][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.756418][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.762660][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.768994][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.775209][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.782290][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.788735][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.795001][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.801340][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.807854][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.814172][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.824921][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.830694][ T43] usb 5-1: GET_CAPABILITIES returned 0 [ 472.840822][ T43] usbtmc 5-1:16.0: can't read capabilities [ 472.847473][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.853536][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.867933][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.874049][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.880440][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.888834][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.894941][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.902878][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.909527][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.915685][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.925177][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.932716][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.944291][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.952318][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.962649][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.970134][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.979963][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.986719][T14915] MTD: Couldn't look up './cgroup': -15 [ 472.993263][T14915] MTD: Couldn't look up './cgroup': -15 [ 473.000022][T14915] MTD: Couldn't look up './cgroup': -15 [ 473.007015][T14915] MTD: Couldn't look up './cgroup': -15 [ 473.013545][T14915] MTD: Couldn't look up './cgroup': -15 [ 473.020580][T14915] MTD: Couldn't look up './cgroup': -15 [ 473.032732][T12415] usb 5-1: USB disconnect, device number 88 [ 473.053596][T14915] MTD: Couldn't look up './cgroup': -15 [ 473.122258][ T5264] gspca_zc3xx: reg_r err -32 [ 473.131819][T14936] /dev/rnullb0: Can't open blockdev [ 473.369072][T14954] /dev/rnullb0: Can't open blockdev [ 473.406866][ T5956] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 473.420037][T14964] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 473.520557][T14973] netlink: 'syz.2.2241': attribute type 15 has an invalid length. [ 473.557141][ T5956] usb 4-1: Using ep0 maxpacket: 8 [ 473.573467][ T5956] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 473.589206][ T5956] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 473.603652][ T5956] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 473.617957][ T5956] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 473.649228][ T5956] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 473.662136][ T5956] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 473.673011][ T5956] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 473.684480][ T5956] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 473.697896][ T5956] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 473.709148][ T5956] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 473.725569][ T5956] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 473.733490][ T5956] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 473.745083][ T5956] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 473.756859][ T5264] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 473.756861][ T5956] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 473.756890][ T5956] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 473.767429][ T5264] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 473.802575][ T5956] usb 4-1: string descriptor 0 read error: -22 [ 473.820503][ T5956] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 473.830535][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.865196][ T5956] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 473.910911][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 473.948313][T12415] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 473.951138][T14993] program syz.2.2245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 474.066570][ T5264] usb 4-1: USB disconnect, device number 107 [ 474.122314][T12415] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.136125][T12415] usb 5-1: config 0 interface 0 has no altsetting 0 [ 474.150762][T12415] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 474.161672][T12415] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.170059][T12415] usb 5-1: Product: syz [ 474.174959][T12415] usb 5-1: Manufacturer: syz [ 474.180392][T12415] usb 5-1: SerialNumber: syz [ 474.194170][T12415] usb 5-1: config 0 descriptor?? [ 474.206682][T12415] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 474.223366][T12415] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 474.234357][T12415] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 474.246926][T12415] usb 5-1: media controller created [ 474.287695][T12415] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 474.425298][T12415] DVB: Unable to find symbol tda10046_attach() [ 474.438827][T12415] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 474.447755][T12415] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 474.539999][ T5956] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 474.699271][ T5956] usb 3-1: Using ep0 maxpacket: 8 [ 474.707616][ T5956] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.718278][ T5956] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 474.727638][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.736011][ T927] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 474.748540][ T5956] usb 3-1: config 0 descriptor?? [ 474.762025][ T5956] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 474.899408][ T927] usb 4-1: Using ep0 maxpacket: 16 [ 474.958017][ T43] usb 2-1: USB disconnect, device number 66 [ 474.969523][ T5956] gspca_vc032x: reg_r err -32 [ 474.976568][ T5956] vc032x 3-1:0.0: probe with driver vc032x failed with error -32 [ 474.999608][ T927] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 475.029710][ T927] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 475.062330][ T927] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 475.074959][ T927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.083809][ T927] usb 4-1: Product: syz [ 475.088017][ T927] usb 4-1: Manufacturer: syz [ 475.093977][ T927] usb 4-1: SerialNumber: syz [ 475.406020][ T927] usb 4-1: 0:2 : does not exist [ 475.422545][ T927] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 475.466474][ T927] usb 4-1: USB disconnect, device number 108 [ 475.548357][ T6497] udevd[6497]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 475.576794][T15087] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2253'. [ 475.658450][T15091] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2254'. [ 476.371906][ T5264] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 476.535057][ T5264] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 476.544341][ T5264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.558750][ T5264] usb 2-1: config 0 descriptor?? [ 476.570181][ T5264] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 476.686117][T12415] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 476.708659][T12415] usb 5-1: USB disconnect, device number 89 [ 476.769248][T15129] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2262'. [ 476.773821][ T5264] gspca_cpia1: usb_control_msg 05, error -71 [ 476.793424][T15129] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2262'. [ 476.800586][ T5264] gspca_cpia1: usb_control_msg 01, error -71 [ 476.813749][ T5264] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 476.830561][ T5264] usb 2-1: USB disconnect, device number 67 [ 477.027927][T15152] /dev/rnullb0: Can't open blockdev [ 477.433963][T12415] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 477.482243][T15179] /dev/rnullb0: Can't open blockdev [ 477.594143][T12415] usb 5-1: Using ep0 maxpacket: 16 [ 477.602248][T12415] usb 5-1: unable to get BOS descriptor or descriptor too short [ 477.612436][T12415] usb 5-1: config 255 has an invalid interface number: 48 but max is 0 [ 477.621946][T12415] usb 5-1: config 255 has no interface number 0 [ 477.629160][T12415] usb 5-1: config 255 interface 48 has no altsetting 0 [ 477.638669][T12415] usb 5-1: New USB device found, idVendor=2013, idProduct=024f, bcdDevice=e8.70 [ 477.647977][T12415] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.656076][T12415] usb 5-1: Product: syz [ 477.660282][T12415] usb 5-1: Manufacturer: syz [ 477.665095][T12415] usb 5-1: SerialNumber: syz [ 477.694191][ T927] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 477.844312][ T927] usb 2-1: Using ep0 maxpacket: 32 [ 477.854075][ T927] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.864709][ T927] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 477.877607][T15161] /dev/rnullb0: Can't open blockdev [ 477.892425][ T927] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 477.904085][T12415] em28xx 5-1:255.48: audio device (2013:024f): interface 48, class 1 [ 477.914358][ T927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.922961][ T927] usb 2-1: Product: syz [ 477.925950][T12415] usb 5-1: USB disconnect, device number 90 [ 477.932289][ T927] usb 2-1: Manufacturer: ᐄ [ 477.945890][ T43] usb 3-1: USB disconnect, device number 104 [ 477.952755][ T927] usb 2-1: SerialNumber: syz [ 478.472524][T15220] /dev/rnullb0: Can't open blockdev [ 478.610516][T15175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.627262][T15175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.641186][ T927] usb 2-1: 0:2 : does not exist [ 479.343711][T15259] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2289'. [ 479.352907][T15259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.365960][T15259] /dev/rnullb0: Can't open blockdev [ 479.679244][ T1042] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 479.702943][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2294'. [ 479.714735][T15275] /dev/rnullb0: Can't open blockdev [ 479.720659][T15274] /dev/rnullb0: Can't open blockdev [ 479.747580][ T927] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 479.880701][ T927] usb 3-1: device descriptor read/64, error -71 [ 480.058013][ T5956] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 480.117836][ T927] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 480.219932][ T5956] usb 5-1: no configurations [ 480.224870][ T5956] usb 5-1: can't read configurations, error -22 [ 480.258067][ T927] usb 3-1: device descriptor read/64, error -71 [ 480.358321][ T5956] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 480.368922][ T927] usb usb3-port1: attempt power cycle [ 480.425492][ T43] usb 2-1: USB disconnect, device number 68 [ 480.529046][ T5956] usb 5-1: no configurations [ 480.533843][ T5956] usb 5-1: can't read configurations, error -22 [ 480.545994][ T5956] usb usb5-port1: attempt power cycle [ 480.691101][T15301] /dev/rnullb0: Can't open blockdev [ 480.707331][T15301] overlay: Unknown parameter 'audit' [ 480.719428][ T927] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 480.749535][ T927] usb 3-1: device descriptor read/8, error -71 [ 480.758156][T15305] /dev/rnullb0: Can't open blockdev [ 480.849906][ T43] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 480.888647][T15311] /dev/rnullb0: Can't open blockdev [ 480.900366][ T5956] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 480.931385][ T5956] usb 5-1: no configurations [ 480.936142][ T5956] usb 5-1: can't read configurations, error -22 [ 480.989546][ T927] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 481.011769][ T43] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 481.020234][ T43] usb 2-1: config 5 has no interface number 0 [ 481.026625][ T927] usb 3-1: device descriptor read/8, error -71 [ 481.033007][ T43] usb 2-1: config 5 interface 123 has no altsetting 0 [ 481.049326][ T43] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 481.058432][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.067322][ T43] usb 2-1: Product: syz [ 481.071957][ T5956] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 481.079748][ T43] usb 2-1: Manufacturer: syz [ 481.084459][ T43] usb 2-1: SerialNumber: syz [ 481.115006][ T5956] usb 5-1: no configurations [ 481.120254][ T5956] usb 5-1: can't read configurations, error -22 [ 481.127254][ T5956] usb usb5-port1: unable to enumerate USB device [ 481.150865][ T927] usb usb3-port1: unable to enumerate USB device [ 481.552312][ T43] comedi comedi5: Wrong number of endpoints [ 481.559121][ T43] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 481.578025][ T43] usb 2-1: USB disconnect, device number 69 [ 481.654222][T15345] binder: 15344:15345 ioctl c00c620f 200000000040 returned -22 [ 481.664521][T15345] binder: 15344:15345 ioctl c010f508 200000000080 returned -22 [ 482.286076][T15371] bio_check_eod: 2 callbacks suppressed [ 482.286091][T15371] syz.3.2315: attempt to access beyond end of device [ 482.286091][T15371] loop3: rw=0, sector=2, nr_sectors = 1 limit=0 [ 482.401486][ T5264] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 482.488012][T15379] netlink: 'syz.3.2319': attribute type 29 has an invalid length. [ 482.501286][T15379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2319'. [ 482.574141][ T5264] usb 2-1: config 0 has an invalid interface number: 137 but max is 0 [ 482.622851][ T5264] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.643785][ T5264] usb 2-1: config 0 has no interface number 0 [ 482.650324][ T5264] usb 2-1: too many endpoints for config 0 interface 137 altsetting 221: 244, using maximum allowed: 30 [ 482.662605][ T5264] usb 2-1: config 0 interface 137 altsetting 221 has 0 endpoint descriptors, different from the interface descriptor's value: 244 [ 482.685779][ T5264] usb 2-1: config 0 interface 137 has no altsetting 0 [ 482.696653][ T5264] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=b1.f8 [ 482.706865][ T5264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.715052][ T5264] usb 2-1: Product: syz [ 482.719369][ T5264] usb 2-1: Manufacturer: syz [ 482.724545][ T5264] usb 2-1: SerialNumber: syz [ 482.733982][ T5264] usb 2-1: config 0 descriptor?? [ 482.982489][ T5877] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 483.057842][ T5264] usb 2-1: Cannot retrieve CPort count: -71 [ 483.060270][T15406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2322'. [ 483.077599][ T5264] usb 2-1: Cannot retrieve CPort count: -71 [ 483.081650][T15406] /dev/rnullb0: Can't open blockdev [ 483.092297][ T5264] es2_ap_driver 2-1:0.137: probe with driver es2_ap_driver failed with error -71 [ 483.113267][ T5264] usb 2-1: USB disconnect, device number 70 [ 483.160702][ T5877] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 483.175546][ T5877] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 483.199970][ T5877] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 483.209271][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.452705][T15390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.477732][T15390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.498969][T15390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.516384][T15390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.531623][ T5877] usb 3-1: usb_control_msg returned -32 [ 483.538948][ T5877] usbtmc 3-1:16.0: can't read capabilities [ 483.641348][T15421] openvswitch: netlink: IP tunnel dst address not specified [ 483.657016][T15421] /dev/rnullb0: Can't open blockdev [ 483.837840][T15424] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 483.849433][T15424] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 483.909697][T15429] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 483.974985][T15429] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 484.000509][T15429] Error validating options; rc = [-22] [ 484.094025][ T5264] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 484.284514][ T5264] usb 2-1: Using ep0 maxpacket: 8 [ 484.300473][ T5264] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 484.309722][ T5264] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 484.331388][ T5264] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 484.344665][ T5264] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 484.353784][ T5264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.373636][ T5264] usb 2-1: Product: syz [ 484.380203][ T5264] usb 2-1: Manufacturer: syz [ 484.389817][ T5264] usb 2-1: SerialNumber: syz [ 484.452660][T15385] syz.2.2320 (15385): drop_caches: 2 [ 485.009864][ T5264] usb 2-1: 0:2 : does not exist [ 485.231938][ T43] usb 2-1: USB disconnect, device number 71 [ 485.303550][T15477] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2856151591 (22849212728 ns) > initial count (5743301600 ns). Using initial count to start timer. [ 485.414328][T15493] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 485.426653][T15493] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 485.625651][ T43] usb 3-1: USB disconnect, device number 109 [ 485.710900][T15507] /dev/rnullb0: Can't open blockdev [ 485.815355][T15514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.827347][T15516] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.2341'. [ 486.548870][ T30] kauditd_printk_skb: 211 callbacks suppressed [ 486.548893][ T30] audit: type=1400 audit(1754361627.596:244): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=15573 comm="syz.3.2348" [ 486.869485][T15593] [ 486.871880][T15593] ====================================================== [ 486.878924][T15593] WARNING: possible circular locking dependency detected [ 486.885968][T15593] 6.16.0-next-20250804-syzkaller #0 Not tainted [ 486.892236][T15593] ------------------------------------------------------ [ 486.899329][T15593] syz.1.2349/15593 is trying to acquire lock: [ 486.905416][T15593] ffff88801b6ffa20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 486.915821][T15593] [ 486.915821][T15593] but task is already holding lock: [ 486.923227][T15593] ffff888024ec6c98 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: lo_ioctl+0x17f2/0x1d00 [ 486.933200][T15593] [ 486.933200][T15593] which lock already depends on the new lock. [ 486.933200][T15593] [ 486.943633][T15593] [ 486.943633][T15593] the existing dependency chain (in reverse order) is: [ 486.952663][T15593] [ 486.952663][T15593] -> #2 (&q->q_usage_counter(io)#25){++++}-{0:0}: [ 486.961286][T15593] lock_acquire+0x120/0x360 [ 486.966367][T15593] blk_alloc_queue+0x538/0x620 [ 486.971777][T15593] __blk_mq_alloc_disk+0x15c/0x340 [ 486.977425][T15593] loop_add+0x411/0xad0 [ 486.982113][T15593] loop_init+0xd9/0x170 [ 486.986787][T15593] do_one_initcall+0x233/0x820 [ 486.992076][T15593] do_initcall_level+0x104/0x190 [ 486.997536][T15593] do_initcalls+0x59/0xa0 [ 487.002386][T15593] kernel_init_freeable+0x334/0x4b0 [ 487.008107][T15593] kernel_init+0x1d/0x1d0 [ 487.013054][T15593] ret_from_fork+0x3f9/0x770 [ 487.018173][T15593] ret_from_fork_asm+0x1a/0x30 [ 487.023634][T15593] [ 487.023634][T15593] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 487.030864][T15593] lock_acquire+0x120/0x360 [ 487.035923][T15593] fs_reclaim_acquire+0x72/0x100 [ 487.041492][T15593] kmem_cache_alloc_noprof+0x44/0x3c0 [ 487.047657][T15593] __kernfs_iattrs+0xd9/0x320 [ 487.053128][T15593] kernfs_iop_setattr+0xea/0x3f0 [ 487.058605][T15593] notify_change+0xb36/0xe40 [ 487.063771][T15593] do_truncate+0x1a4/0x220 [ 487.068712][T15593] path_openat+0x306c/0x3830 [ 487.073859][T15593] do_filp_open+0x1fa/0x410 [ 487.079054][T15593] do_sys_openat2+0x121/0x1c0 [ 487.084269][T15593] __x64_sys_openat+0x138/0x170 [ 487.089675][T15593] do_syscall_64+0xfa/0x3b0 [ 487.094707][T15593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.101147][T15593] [ 487.101147][T15593] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 487.109663][T15593] validate_chain+0xb9b/0x2140 [ 487.114957][T15593] __lock_acquire+0xab9/0xd20 [ 487.120243][T15593] lock_acquire+0x120/0x360 [ 487.125278][T15593] down_read+0x46/0x2e0 [ 487.130138][T15593] kernfs_iop_getattr+0x9e/0x450 [ 487.135604][T15593] vfs_getattr_nosec+0x2de/0x430 [ 487.141069][T15593] loop_assign_backing_file+0x222/0x400 [ 487.147488][T15593] lo_ioctl+0x1860/0x1d00 [ 487.152430][T15593] blkdev_ioctl+0x5a8/0x6d0 [ 487.157471][T15593] __se_sys_ioctl+0xf9/0x170 [ 487.162594][T15593] do_syscall_64+0xfa/0x3b0 [ 487.167638][T15593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.174051][T15593] [ 487.174051][T15593] other info that might help us debug this: [ 487.174051][T15593] [ 487.184273][T15593] Chain exists of: [ 487.184273][T15593] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#25 [ 487.184273][T15593] [ 487.198709][T15593] Possible unsafe locking scenario: [ 487.198709][T15593] [ 487.206156][T15593] CPU0 CPU1 [ 487.211582][T15593] ---- ---- [ 487.217040][T15593] lock(&q->q_usage_counter(io)#25); [ 487.222437][T15593] lock(fs_reclaim); [ 487.228969][T15593] lock(&q->q_usage_counter(io)#25); [ 487.236974][T15593] rlock(&root->kernfs_iattr_rwsem); [ 487.242368][T15593] [ 487.242368][T15593] *** DEADLOCK *** [ 487.242368][T15593] [ 487.250534][T15593] 3 locks held by syz.1.2349/15593: [ 487.255754][T15593] #0: ffff888024f9e400 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0xfbf/0x1d00 [ 487.264744][T15593] #1: ffff888024ec6c98 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: lo_ioctl+0x17f2/0x1d00 [ 487.274939][T15593] #2: ffff888024ec6cd0 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: lo_ioctl+0x17f2/0x1d00 [ 487.285398][T15593] [ 487.285398][T15593] stack backtrace: [ 487.291375][T15593] CPU: 0 UID: 0 PID: 15593 Comm: syz.1.2349 Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 487.291395][T15593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 487.291405][T15593] Call Trace: [ 487.291412][T15593] [ 487.291428][T15593] dump_stack_lvl+0x189/0x250 [ 487.291454][T15593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.291476][T15593] ? __pfx__printk+0x10/0x10 [ 487.291500][T15593] print_circular_bug+0x2ee/0x310 [ 487.291523][T15593] check_noncircular+0x134/0x160 [ 487.291544][T15593] validate_chain+0xb9b/0x2140 [ 487.291564][T15593] ? tomoyo_path_perm+0x1e3/0x4b0 [ 487.291586][T15593] __lock_acquire+0xab9/0xd20 [ 487.291603][T15593] ? kernfs_iop_getattr+0x9e/0x450 [ 487.291623][T15593] lock_acquire+0x120/0x360 [ 487.291638][T15593] ? kernfs_iop_getattr+0x9e/0x450 [ 487.291662][T15593] down_read+0x46/0x2e0 [ 487.291676][T15593] ? kernfs_iop_getattr+0x9e/0x450 [ 487.291697][T15593] kernfs_iop_getattr+0x9e/0x450 [ 487.291719][T15593] vfs_getattr_nosec+0x2de/0x430 [ 487.291741][T15593] loop_assign_backing_file+0x222/0x400 [ 487.291763][T15593] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 487.291782][T15593] ? schedule+0x91/0x360 [ 487.291805][T15593] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 487.291830][T15593] lo_ioctl+0x1860/0x1d00 [ 487.291848][T15593] ? ktime_get+0x3e/0x1f0 [ 487.291870][T15593] ? __pfx_lo_ioctl+0x10/0x10 [ 487.291888][T15593] ? css_rstat_updated+0x23a/0x4f0 [ 487.291910][T15593] ? __lock_acquire+0xab9/0xd20 [ 487.291927][T15593] ? __lock_acquire+0xab9/0xd20 [ 487.291946][T15593] ? __lock_acquire+0xab9/0xd20 [ 487.291964][T15593] ? __lock_acquire+0xab9/0xd20 [ 487.291984][T15593] ? is_bpf_text_address+0x26/0x2b0 [ 487.292002][T15593] ? is_bpf_text_address+0x292/0x2b0 [ 487.292017][T15593] ? is_bpf_text_address+0x26/0x2b0 [ 487.292033][T15593] ? kernel_text_address+0xa5/0xe0 [ 487.292048][T15593] ? __kernel_text_address+0xd/0x40 [ 487.292061][T15593] ? unwind_get_return_address+0x4d/0x90 [ 487.292081][T15593] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 487.292101][T15593] ? arch_stack_walk+0xfc/0x150 [ 487.292125][T15593] ? stack_trace_save+0x9c/0xe0 [ 487.292144][T15593] ? __pfx_stack_trace_save+0x10/0x10 [ 487.292164][T15593] ? stack_depot_save_flags+0x40/0x860 [ 487.292184][T15593] ? kasan_save_track+0x4f/0x80 [ 487.292203][T15593] ? kasan_save_track+0x3e/0x80 [ 487.292222][T15593] ? kasan_save_free_info+0x46/0x50 [ 487.292239][T15593] ? __kasan_slab_free+0x5b/0x80 [ 487.292252][T15593] ? kfree+0x18e/0x440 [ 487.292272][T15593] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 487.292295][T15593] ? security_file_ioctl+0xcb/0x2d0 [ 487.292309][T15593] ? __se_sys_ioctl+0x47/0x170 [ 487.292322][T15593] ? do_syscall_64+0xfa/0x3b0 [ 487.292342][T15593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.292363][T15593] ? __asan_memset+0x22/0x50 [ 487.292382][T15593] ? blk_get_meta_cap+0x140/0x710 [ 487.292400][T15593] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 487.292424][T15593] ? kasan_quarantine_put+0xdd/0x220 [ 487.292446][T15593] ? blkdev_common_ioctl+0xff7/0x2550 [ 487.292464][T15593] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 487.292481][T15593] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 487.292499][T15593] ? do_vfs_ioctl+0xbe8/0x1430 [ 487.292514][T15593] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 487.292533][T15593] ? __lock_acquire+0xab9/0xd20 [ 487.292553][T15593] ? __pfx_lo_ioctl+0x10/0x10 [ 487.292571][T15593] blkdev_ioctl+0x5a8/0x6d0 [ 487.292590][T15593] ? __pfx_blkdev_ioctl+0x10/0x10 [ 487.292607][T15593] ? __fget_files+0x2a/0x420 [ 487.292626][T15593] ? bpf_lsm_file_ioctl+0x9/0x20 [ 487.292647][T15593] ? __pfx_blkdev_ioctl+0x10/0x10 [ 487.292664][T15593] __se_sys_ioctl+0xf9/0x170 [ 487.292680][T15593] do_syscall_64+0xfa/0x3b0 [ 487.292699][T15593] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.292718][T15593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.292733][T15593] ? clear_bhb_loop+0x60/0xb0 [ 487.292749][T15593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.292762][T15593] RIP: 0033:0x7f6a66b8eb69 [ 487.292778][T15593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.292792][T15593] RSP: 002b:00007f6a6798e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 487.292809][T15593] RAX: ffffffffffffffda RBX: 00007f6a66db5fa0 RCX: 00007f6a66b8eb69 [ 487.292820][T15593] RDX: 0000000000000007 RSI: 0000000000004c06 RDI: 0000000000000004 [ 487.292830][T15593] RBP: 00007f6a66c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 487.292840][T15593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.292849][T15593] R13: 0000000000000000 R14: 00007f6a66db5fa0 R15: 00007ffc18337d98 [ 487.292864][T15593] [ 487.292887][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.748952][ T927] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 487.751134][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.804007][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 487.814672][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 487.823894][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 487.828392][ C1] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 487.840959][ C1] Buffer I/O error on dev loop7, logical block 1, async page read [ 487.849029][ C1] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 487.858359][ C1] Buffer I/O error on dev loop7, logical block 2, async page read [ 487.866279][ C1] I/O error, dev loop7, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 487.875489][ C1] Buffer I/O error on dev loop7, logical block 3, async page read [ 487.883387][ C1] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 487.892582][ C1] Buffer I/O error on dev loop7, logical block 4, async page read [ 487.900496][ C1] I/O error, dev loop7, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 487.909663][ C1] Buffer I/O error on dev loop7, logical block 5, async page read [ 487.917508][ C1] I/O error, dev loop7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 487.926695][ C1] Buffer I/O error on dev loop7, logical block 6, async page read [ 487.938387][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 487.947610][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 487.955520][ C0] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 487.964692][ C0] Buffer I/O error on dev loop7, logical block 1, async page read [ 487.972601][ C0] Buffer I/O error on dev loop7, logical block 2, async page read [ 488.030826][ T927] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 488.039202][ T927] usb 5-1: config 220 has an invalid descriptor of length 108, skipping remainder of the config [ 488.052545][ T927] usb 5-1: config 220 has no interface number 2 [ 488.059086][ T927] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 488.072411][ T927] usb 5-1: config 220 interface 0 has no altsetting 0 [ 488.079220][ T927] usb 5-1: config 220 interface 76 has no altsetting 0 [ 488.086387][ T927] usb 5-1: config 220 interface 1 has no altsetting 0 [ 488.095142][ T927] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 488.104597][ T927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.112960][ T927] usb 5-1: Product: syz [ 488.117326][ T927] usb 5-1: Manufacturer: syz [ 488.122022][ T927] usb 5-1: SerialNumber: syz [ 488.335666][T15612] netlink: 'syz.4.2351': attribute type 33 has an invalid length. [ 488.343875][T15612] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2351'. [ 489.291554][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.438655][ T927] usb 5-1: selecting invalid altsetting 0 [ 490.444798][ T927] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 490.451201][ T927] usb 5-1: No valid video chain found. [ 490.461069][ T927] usb 5-1: selecting invalid altsetting 0 [ 490.466984][ T927] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 490.477994][ T927] usb 5-1: USB disconnect, device number 95 [ 494.418234][T12185] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration