last executing test programs: 2m2.167250995s ago: executing program 3 (id=948): userfaultfd(0x80001) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x21, 0x7, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet6(0xa, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) epoll_create1(0x80000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) 2m2.015690506s ago: executing program 3 (id=949): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, r3, 0x302, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x844}, 0x20008000) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) r4 = eventfd2(0x96, 0x80800) write$eventfd(r4, &(0x7f0000000140)=0xffffffffffffffff, 0x8) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000440)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x1c, 0x10, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @tim={0x5, 0x3, {0x2, 0xcc, 0x5}}]}]}, 0x28}}, 0x0) 2m1.415018161s ago: executing program 3 (id=954): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x200) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x1) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}}) openat$cgroup_ro(r2, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) listen(r0, 0x18004) 2m1.211847774s ago: executing program 3 (id=955): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000440)={0x1, @raw_data="6e5e0d8af755aaeb4e563231029c6060cb90186ad12fcff681d35bf8204529cf75d5c236c4ba611e967817b3c9e2bd07fa0c1777bf78f1c3e2b902b713ed09332fe333bf46606760d3b64c0ff252e15c61a0ebb4c49886cd31bca3d2906cb584a927283e6ba03b1121c8ecdc3829085bfc5ba3f3ce60e0bfe2f26cd3206b004da5328b1237de048a0bb6ab9c562ab4ba7a314d4414b03f09ed995423b147395f48627834f74b0f25bfb593fec9e3d90034e7aa5310b5e6b168e4adebc9df10815ccde151483bd6fe"}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, 0x0) 2m1.116891961s ago: executing program 3 (id=956): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r1, 0x1, 0x1000, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x82}}]}, 0x3c}}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0xfc, 0x0, 0x1, [@typed={0x8, 0x97, 0x0, 0x0, @pid}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="97f09726"]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x51}, 0x4040) connect$llc(r3, &(0x7f0000000040)={0x1a, 0x13, 0x81, 0xce, 0x5, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x10) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) wait4(0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x336, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)={0x0, 0x0, 0x5, 0x0}) r5 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed", @ANYRESOCT=r3, @ANYRES8=r2, @ANYRESDEC=r2, @ANYBLOB="85ef4aa363d85f5f9f4db9a4e2829bd3ac5efb2a693c6d95e643144271b8eb5d690c757791297c3b69d5f82521cc02cb9a795172668da0c1c938c907b48da97121bf4cd03c4a81d5e9ef932a4d778c1cb17afcaf0b094bee54e453d297d46ba796c563d04d9c8e79321918dfda03ea088a417c3f4da653e196274308af8975ec2617"], 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000200100000000000008000f0001000000", 0x24) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x9a3a488ed2ad99bf, 0x6, 0x1, "14"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000003c0)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) setresgid(0x0, 0xee01, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[]) 1m58.267679061s ago: executing program 3 (id=964): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00003a8000/0x1000)=nil, 0x1000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000f40)={0x2020}, 0x2020) close(r1) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x0, 0x300000, 0x401}}, 0x30) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$kcm(0x2d, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000340)={0x2d, 0x1, 0x7fff}, 0xc) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b4000000190001004661ffff00000000ac14142c000000000000000000000000fe8000800000000000000000000000aa4e2200004e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff000000400000000000000000000000001a000000000000000100000000000000feffffffffffffff7a0000000000000005000000000000000000000000000000ff7f00000000000008000000000000000101030000000000"], 0xb4}}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x10100, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008814}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022910500000047"], 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020007000000000000000c000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x488d0}, 0xc080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$nci(r7, &(0x7f0000000100)=""/20, 0x14) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000090a010400000000000000000300000108000a40000000200900020073797a31000000000900010073797a30000000000800054000000023200011800e000100636f6e6e6c696d69740000000c000280080001"], 0xa4}}, 0x4) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 1m55.79037451s ago: executing program 1 (id=975): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0xfff0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x18, r1, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x4000040) 1m55.751614783s ago: executing program 1 (id=976): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) r6 = dup(r5) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r6, 0x8010aebc, &(0x7f0000000100)={0x1000, 0x10000}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000200)="ea00a0ffffa600c4c3ad0e76be51f3e1642e0f01c5c4c15211d4b9ae0b0000b8a75c9aa6baa0d6b23d0f300f01cf83cc00b9800000c00f3235000800000f30b9800000c00f3235000100000f30", 0x4d}], 0x1, 0x17, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x8, 0x1, 0x0, 0x0, 0xd, 0x15, 0x7, 0xe, 0x7, 0x0, 0x9, 0x0, 0x44, 0x1, 0xc, 0x4, 0x4, 0x8, '\x00', 0x6, 0x1}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="9f00", 0x2}], 0x1}, 0x0) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$RTC_WKALM_SET(r0, 0x40187013, &(0x7f0000000140)) keyctl$dh_compute(0x17, &(0x7f0000000000), &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000000c0)={0x0}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x80, 0x0) 1m55.470392478s ago: executing program 1 (id=977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) 1m55.368067389s ago: executing program 1 (id=978): close(0xffffffffffffffff) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x7]}, 0x8, 0x800) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000040)) 1m55.355161322s ago: executing program 1 (id=979): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xfffd, @null, @bpq0, 0x8, [@bcast, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 1m55.311691012s ago: executing program 1 (id=980): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x8a) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_int(r4, 0x29, 0x3c, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r4, &(0x7f0000000240)="c4", 0xffffffffffffff95, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) unlinkat(r6, &(0x7f00000003c0)='./file2\x00', 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x9, 0xf, 0x8, 0x5, 0x3, 0xd, 0x5, 0x1e, 0x3, 0x5, 0x40, 0xd2}, {0xf, 0xffff, 0xb8, 0x0, 0x4d, 0x2, 0x99, 0x44, 0x42, 0x0, 0x7, 0x1, 0x40}, {0x3ff, 0x0, 0x1, 0x7, 0x47, 0x10, 0x25, 0x8, 0x9, 0x4, 0x9, 0x10, 0x4}], 0x6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r3, 0x5708e000) r7 = syz_open_procfs(0x0, &(0x7f0000003c00)='net/ptype\x00') preadv(r7, &(0x7f0000000480)=[{&(0x7f0000003f00)=""/54, 0x36}, {&(0x7f0000000000)=""/39, 0x27}], 0x2, 0x1, 0x9) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r7) 1m43.121079063s ago: executing program 32 (id=964): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00003a8000/0x1000)=nil, 0x1000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000f40)={0x2020}, 0x2020) close(r1) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x0, 0x300000, 0x401}}, 0x30) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$kcm(0x2d, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000340)={0x2d, 0x1, 0x7fff}, 0xc) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b4000000190001004661ffff00000000ac14142c000000000000000000000000fe8000800000000000000000000000aa4e2200004e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff000000400000000000000000000000001a000000000000000100000000000000feffffffffffffff7a0000000000000005000000000000000000000000000000ff7f00000000000008000000000000000101030000000000"], 0xb4}}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x10100, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008814}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022910500000047"], 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020007000000000000000c000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x488d0}, 0xc080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$nci(r7, &(0x7f0000000100)=""/20, 0x14) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000090a010400000000000000000300000108000a40000000200900020073797a31000000000900010073797a30000000000800054000000023200011800e000100636f6e6e6c696d69740000000c000280080001"], 0xa4}}, 0x4) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 1m40.029383023s ago: executing program 33 (id=980): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x8a) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_int(r4, 0x29, 0x3c, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r4, &(0x7f0000000240)="c4", 0xffffffffffffff95, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) unlinkat(r6, &(0x7f00000003c0)='./file2\x00', 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x9, 0xf, 0x8, 0x5, 0x3, 0xd, 0x5, 0x1e, 0x3, 0x5, 0x40, 0xd2}, {0xf, 0xffff, 0xb8, 0x0, 0x4d, 0x2, 0x99, 0x44, 0x42, 0x0, 0x7, 0x1, 0x40}, {0x3ff, 0x0, 0x1, 0x7, 0x47, 0x10, 0x25, 0x8, 0x9, 0x4, 0x9, 0x10, 0x4}], 0x6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r3, 0x5708e000) r7 = syz_open_procfs(0x0, &(0x7f0000003c00)='net/ptype\x00') preadv(r7, &(0x7f0000000480)=[{&(0x7f0000003f00)=""/54, 0x36}, {&(0x7f0000000000)=""/39, 0x27}], 0x2, 0x1, 0x9) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r7) 19.515837378s ago: executing program 0 (id=1261): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x31}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) 18.479324939s ago: executing program 2 (id=1262): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) getsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x5, 0x10, r1, 0xffffb000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x68, r3, 0x1, 0x70bd28, 0x5dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x4c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0xc, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x40000000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10004}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000c0c0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000000c0)) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 18.383551744s ago: executing program 2 (id=1263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r2 = msgget$private(0x0, 0x7a8) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000000)={{0x1}, 0x5, 0x0, 0x800000000000000, 0x6, 0xffffffffffffffff, 0x0, 0x80, 0x1}) msgrcv(r2, 0x0, 0x0, 0x3, 0x0) write$tun(r0, &(0x7f0000000400)={@val={0x8, 0x800}, @void, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x8, 0x66, 0x0, 0x40, 0x11, 0x0, @multicast2, @local}, {0x4e23, 0x4e22, 0x8}}}, 0x2a) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) fcntl$setstatus(r4, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r3, 0x93771000) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000080)={r3, 0x3, 0x9, 0x792}) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x20000) mmap$snddsp(&(0x7f000039b000/0x2000)=nil, 0x2000, 0x1000005, 0x10, r5, 0x10000) 18.003798349s ago: executing program 2 (id=1264): sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302", 0x6, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005242000000d240f01000000000000000000090d8103200000000009058202080080000009050302"], 0x0) r1 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000580)={0x40, 0xf, 0x11, "04c208b93e063c0dcd72a2533d35fa56d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) recvmsg(r3, 0x0, 0x40000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x4, 0x7, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0xe}, 0x7851, 0x1, 0xa2, 0x8001}}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 16.953044106s ago: executing program 0 (id=1265): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xc8001, 0x0) write$snapshot(r0, &(0x7f0000000040)="b8de", 0x2) write$snapshot(r0, 0x0, 0x0) 16.896551446s ago: executing program 0 (id=1266): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x4000000000000000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 16.759903718s ago: executing program 0 (id=1267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b40)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00", @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 16.758370963s ago: executing program 2 (id=1268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000f090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 16.730182761s ago: executing program 0 (id=1269): sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302", 0x6, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005242000000d240f01000000000000000000090d81032000000000090582020800800000090503"], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 16.651900247s ago: executing program 2 (id=1270): clock_adjtime(0x0, &(0x7f0000000500)={0x7de, 0x6b, 0x0, 0x1000, 0x1, 0x9, 0x7, 0x6, 0x9, 0x0, 0x2000000, 0x7fff, 0x81, 0xfffffffffffffff9, 0x3, 0x6, 0x8000000000000001, 0x4, 0x58fd, 0x3, 0x9, 0x2, 0x6, 0x6, 0xab, 0x5}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x10, 0x1411, 0x1, 0x70bd2d, 0x25dfdbfa}, 0x10}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000080)={0x0, 0x2, 0xe, 0x0, 0x2, [0x0, 0x0, 0x0, 0x0], [0x3, 0x7, 0x1, 0xfffffff7], [0x8, 0xb0f7, 0x2, 0x6], [0x7, 0x401, 0x4, 0x3]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000008c0)={0x0, 0x15bd, 0xb6c7, 0xffffffff, 0x0, [0x2, r4, r3], [0x80000], [0x8, 0x0, 0x1, 0xd], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, 0x0, &(0x7f0000000780)) r7 = socket$qrtr(0x2a, 0x2, 0x0) close(r7) socket$xdp(0x2c, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 16.621745085s ago: executing program 2 (id=1271): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000000)=0x1, 0x4) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f0000006280)=[{&(0x7f0000000240)="04", 0x1}], 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$int_in(r4, 0x5452, &(0x7f0000002480)=0x3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) close_range(r3, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x40}}, 0x18) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) fadvise64(r0, 0xdd, 0x9, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4713000) 15.509307446s ago: executing program 0 (id=1272): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xc8001, 0x0) write$snapshot(r0, 0x0, 0x0) 1.499312124s ago: executing program 34 (id=1271): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000000)=0x1, 0x4) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f0000006280)=[{&(0x7f0000000240)="04", 0x1}], 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$int_in(r4, 0x5452, &(0x7f0000002480)=0x3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) close_range(r3, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x40}}, 0x18) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) fadvise64(r0, 0xdd, 0x9, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4713000) 0s ago: executing program 35 (id=1272): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xc8001, 0x0) write$snapshot(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): iumd released netlink socket, switching to perfect channel medium [ 266.123478][ T8478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.228737][ T8484] FAT-fs (rnullb0): bogus number of reserved sectors [ 266.235846][ T8484] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 266.455508][ T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 266.612056][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 266.621105][ T24] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 266.623769][ T8499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.834'. [ 266.630055][ T24] usb 4-1: config 0 has no interface number 0 [ 266.650136][ T8498] vxfs: WRONG superblock magic 00000000 at 1 [ 266.650469][ T8498] vxfs: WRONG superblock magic 00000000 at 8 [ 266.650487][ T8498] vxfs: can't find superblock. [ 266.663131][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 266.663164][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.663187][ T24] usb 4-1: Product: syz [ 266.663204][ T24] usb 4-1: Manufacturer: syz [ 266.663220][ T24] usb 4-1: SerialNumber: syz [ 266.666655][ T24] usb 4-1: config 0 descriptor?? [ 266.682638][ T24] smsc95xx v2.0.0 [ 266.897610][ T10] usb 1-1: USB disconnect, device number 39 [ 266.990003][ T8513] netlink: 'syz.0.838': attribute type 21 has an invalid length. [ 266.999874][ T8513] netlink: 132 bytes leftover after parsing attributes in process `syz.0.838'. [ 267.014604][ T8513] Mount JFS Failure: -22 [ 267.078671][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 267.080841][ T8515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.092719][ T44] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 267.110580][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 267.128397][ T8517] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 267.139681][ T8515] netlink: 17 bytes leftover after parsing attributes in process `syz.0.841'. [ 267.155676][ T8515] netlink: zone id is out of range [ 267.160853][ T8515] netlink: zone id is out of range [ 267.169416][ T8515] netlink: zone id is out of range [ 267.177286][ T8515] netlink: zone id is out of range [ 267.182462][ T8515] netlink: zone id is out of range [ 267.188813][ T8515] netlink: zone id is out of range [ 267.195574][ T8515] netlink: zone id is out of range [ 267.202899][ T8518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.216263][ T8515] netlink: zone id is out of range [ 267.221454][ T8515] netlink: zone id is out of range [ 267.230791][ T8515] netlink: zone id is out of range [ 267.273823][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 267.281895][ T44] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 267.291723][ T44] usb 3-1: config 0 has no interface number 0 [ 267.308076][ T44] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 267.317616][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.326367][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 267.337980][ T44] usb 3-1: Product: syz [ 267.342766][ T24] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 267.351435][ T44] usb 3-1: Manufacturer: syz [ 267.356292][ T44] usb 3-1: SerialNumber: syz [ 267.376503][ T44] usb 3-1: config 0 descriptor?? [ 267.396162][ T44] smsc95xx v2.0.0 [ 267.792074][ T44] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 267.836339][ T44] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 268.395468][ T8543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 268.547164][ T8549] syz.1.852 (8549): /proc/8548/oom_adj is deprecated, please use /proc/8548/oom_score_adj instead. [ 268.570957][ T8549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.852'. [ 268.582162][ T8551] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 268.677044][ T44] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 268.698226][ T8555] netlink: 32 bytes leftover after parsing attributes in process `syz.0.855'. [ 268.720723][ T44] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 268.897472][ T5961] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 269.038742][ T44] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 269.068048][ T5961] usb 2-1: Using ep0 maxpacket: 32 [ 269.074888][ T5961] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 269.083194][ T5961] usb 2-1: config 0 has no interface number 0 [ 269.093415][ T5961] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 269.102656][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.110814][ T5961] usb 2-1: Product: syz [ 269.115005][ T5961] usb 2-1: Manufacturer: syz [ 269.119755][ T5961] usb 2-1: SerialNumber: syz [ 269.127092][ T5961] usb 2-1: config 0 descriptor?? [ 269.135441][ T5961] smsc95xx v2.0.0 [ 269.140039][ T5961] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 269.150855][ T5961] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 269.198339][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 269.209570][ T44] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 269.219389][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.227429][ T44] usb 1-1: Product: syz [ 269.232171][ T44] usb 1-1: Manufacturer: syz [ 269.236829][ T44] usb 1-1: SerialNumber: syz [ 269.245570][ T44] usb 1-1: config 0 descriptor?? [ 269.256964][ T5961] usb 4-1: USB disconnect, device number 44 [ 269.259384][ T44] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 269.633234][ T5961] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 269.795991][ T5961] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 269.805194][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.813778][ T5961] usb 4-1: Product: syz [ 269.818079][ T5961] usb 4-1: Manufacturer: syz [ 269.823393][ T5961] usb 4-1: SerialNumber: syz [ 269.831206][ T5961] usb 4-1: config 0 descriptor?? [ 269.884336][ T5911] usb 3-1: USB disconnect, device number 51 [ 269.956678][ T8566] netlink: 68 bytes leftover after parsing attributes in process `syz.2.858'. [ 270.035038][ T8568] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.052864][ T5961] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 270.774324][ T8576] netlink: 'syz.2.862': attribute type 1 has an invalid length. [ 271.042290][ T5911] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 271.207872][ T5911] usb 3-1: config 0 has an invalid interface number: 13 but max is 0 [ 271.216422][ T5911] usb 3-1: config 0 has no interface number 0 [ 271.222781][ T5911] usb 3-1: too many endpoints for config 0 interface 13 altsetting 170: 97, using maximum allowed: 30 [ 271.234530][ T5911] usb 3-1: config 0 interface 13 altsetting 170 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 271.247944][ T5911] usb 3-1: config 0 interface 13 has no altsetting 0 [ 271.254779][ T5911] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 271.264006][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.277326][ T5911] usb 3-1: config 0 descriptor?? [ 271.505433][ T5961] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 271.530557][ T5961] usb 4-1: USB disconnect, device number 45 [ 271.743055][ T5961] usb 2-1: USB disconnect, device number 49 [ 271.757039][ T5911] usb 3-1: string descriptor 0 read error: -71 [ 271.779140][ T5911] cp210x 3-1:0.13: cp210x converter detected [ 271.800957][ T5911] cp210x 3-1:0.13: failed to get vendor val 0x370b size 1: -71 [ 271.815888][ T5911] cp210x 3-1:0.13: querying part number failed [ 271.829372][ T5911] usb 3-1: cp210x converter now attached to ttyUSB0 [ 271.840273][ T5911] usb 3-1: USB disconnect, device number 52 [ 271.854134][ T5911] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 271.862680][ T5911] cp210x 3-1:0.13: device disconnected [ 272.676323][ T24] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 272.723573][ T8593] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.867' resets device [ 272.789410][ T8595] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 272.838515][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 272.862919][ T24] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 272.879095][ T8597] netlink: 32 bytes leftover after parsing attributes in process `syz.3.869'. [ 272.897515][ T24] usb 3-1: config 0 has no interface number 0 [ 272.912483][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 272.925991][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.942683][ T24] usb 3-1: Product: syz [ 272.948721][ T24] usb 3-1: Manufacturer: syz [ 272.953592][ T24] usb 3-1: SerialNumber: syz [ 272.965000][ T24] usb 3-1: config 0 descriptor?? [ 272.975857][ T24] smsc95xx v2.0.0 [ 273.094639][ T44] gspca_stk1135: reg_w 0x1b err -71 [ 273.101118][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 273.109083][ T44] gspca_stk1135: Sensor write failed [ 273.114447][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 273.122085][ T44] gspca_stk1135: Sensor write failed [ 273.127558][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 273.133939][ T44] gspca_stk1135: Sensor read failed [ 273.140281][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 273.146797][ T44] gspca_stk1135: Sensor read failed [ 273.152035][ T44] gspca_stk1135: Detected sensor type unknown (0x0) [ 273.158837][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 273.165214][ T44] gspca_stk1135: Sensor read failed [ 273.170555][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 273.180310][ T44] gspca_stk1135: Sensor read failed [ 273.188476][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 273.195018][ T44] gspca_stk1135: Sensor write failed [ 273.200414][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 273.206834][ T44] gspca_stk1135: Sensor write failed [ 273.212215][ T44] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 273.223248][ T44] usb 1-1: USB disconnect, device number 40 [ 273.317346][ T5955] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 273.386938][ T24] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 273.398837][ T24] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 273.485183][ T5955] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.495902][ T5955] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 273.505218][ T5955] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 273.517840][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.530271][ T5955] usb 4-1: config 0 descriptor?? [ 273.714987][ T8610] netlink: 'syz.0.875': attribute type 2 has an invalid length. [ 273.768086][ T5911] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 273.922487][ T5911] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 273.932451][ T5911] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.946881][ T5911] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 273.956347][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 273.965078][ T5911] usb 2-1: SerialNumber: syz [ 273.975884][ T8616] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 273.980539][ T5911] cdc_ether 2-1:1.0: skipping garbage [ 273.991345][ T5911] usb 2-1: bad CDC descriptors [ 273.997666][ T5911] usb-storage 2-1:1.0: USB Mass Storage device detected [ 274.019583][ T5911] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 274.214160][ T24] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 274.235115][ T24] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 274.273912][ T24] usb 2-1: USB disconnect, device number 50 [ 274.791967][ T8626] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 274.879543][ T24] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 274.889300][ T24] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 274.896843][ T24] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 274.904778][ T24] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 274.912692][ T24] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 274.924628][ T24] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 274.989234][ T8633] fido_id[8633]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 275.100853][ T5911] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 275.271167][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 275.278313][ T5911] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.288677][ T5911] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 275.299001][ T5911] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 275.314164][ T5911] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 275.323526][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.331637][ T5911] usb 2-1: Product: syz [ 275.335869][ T5911] usb 2-1: Manufacturer: syz [ 275.340489][ T5911] usb 2-1: SerialNumber: syz [ 275.354572][ T5911] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 275.364543][ T5911] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 275.370792][ T5911] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 275.455023][ T24] usb 3-1: USB disconnect, device number 53 [ 275.554542][ T8642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.563944][ T8642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.624149][ T44] usb 2-1: USB disconnect, device number 51 [ 275.832297][ T24] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 275.972669][ T5955] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 275.982682][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 275.990841][ T24] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 276.000091][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.008292][ T24] usb 3-1: Product: syz [ 276.013047][ T24] usb 3-1: Manufacturer: syz [ 276.017678][ T24] usb 3-1: SerialNumber: syz [ 276.025500][ T24] usb 3-1: config 0 descriptor?? [ 276.038739][ T24] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 276.092848][ T5911] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 276.119309][ T44] usb 4-1: USB disconnect, device number 46 [ 276.125623][ T5955] usb 1-1: Using ep0 maxpacket: 16 [ 276.149440][ T5955] usb 1-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59 [ 276.182175][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.183664][ T8661] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 276.208153][ T5955] usb 1-1: Product: syz [ 276.212515][ T5955] usb 1-1: Manufacturer: syz [ 276.218442][ T5955] usb 1-1: SerialNumber: syz [ 276.232303][ T5955] usb 1-1: config 0 descriptor?? [ 276.256559][ T5911] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 276.272553][ T5911] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.284941][ T5955] pwc: Logitech QuickCam 4000 Pro USB webcam detected. [ 276.297797][ T5911] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 276.307540][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 276.316195][ T5911] usb 2-1: SerialNumber: syz [ 276.336262][ T5911] cdc_ether 2-1:1.0: skipping garbage [ 276.346626][ T5911] usb 2-1: bad CDC descriptors [ 276.352432][ T5911] usb-storage 2-1:1.0: USB Mass Storage device detected [ 276.376874][ T5911] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 276.491380][ T8654] netlink: 72 bytes leftover after parsing attributes in process `syz.0.885'. [ 276.505430][ T5955] pwc: Failed to set LED on/off time (-71) [ 276.512029][ T5955] pwc: send_video_command error -71 [ 276.518534][ T5955] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 276.527863][ T5955] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 276.546318][ T5955] usb 1-1: USB disconnect, device number 41 [ 276.641365][ T5911] usb 2-1: USB disconnect, device number 52 [ 276.654115][ T44] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 276.824305][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 276.831543][ T44] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 276.840643][ T44] usb 4-1: config 0 has no interface number 0 [ 276.849579][ T44] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 276.859073][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.867256][ T44] usb 4-1: Product: syz [ 276.871454][ T44] usb 4-1: Manufacturer: syz [ 276.876250][ T44] usb 4-1: SerialNumber: syz [ 276.883501][ T44] usb 4-1: config 0 descriptor?? [ 276.892793][ T44] smsc95xx v2.0.0 [ 277.303691][ T44] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 277.325419][ T44] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 277.345390][ T5918] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 277.505704][ T5918] usb 1-1: Using ep0 maxpacket: 32 [ 277.513211][ T5918] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 277.526975][ T5918] usb 1-1: config 0 has no interface number 0 [ 277.539521][ T5918] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 277.552341][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.563008][ T5918] usb 1-1: Product: syz [ 277.569832][ T5918] usb 1-1: Manufacturer: syz [ 277.574676][ T5918] usb 1-1: SerialNumber: syz [ 277.598285][ T5918] usb 1-1: config 0 descriptor?? [ 277.614109][ T5918] smsc95xx v2.0.0 [ 277.866507][ T5955] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 278.016729][ T5955] usb 2-1: Using ep0 maxpacket: 32 [ 278.023098][ T5918] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 278.034157][ T5918] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 278.045481][ T5955] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 278.054597][ T5955] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 278.068638][ T5955] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 278.077905][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.085959][ T5955] usb 2-1: Product: syz [ 278.090257][ T5955] usb 2-1: Manufacturer: syz [ 278.094919][ T5955] usb 2-1: SerialNumber: syz [ 278.103222][ T5955] usb 2-1: config 0 descriptor?? [ 278.142159][ T44] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 278.154202][ T44] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 278.245564][ T5918] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 278.257355][ T5918] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 278.315700][ T8688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.324867][ T8688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.438066][ T5911] usb 4-1: USB disconnect, device number 47 [ 279.502111][ T8700] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 279.646634][ T8703] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 279.885709][ T24] gspca_stk1135: reg_w 0x1b err -71 [ 279.893777][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 279.903070][ T24] gspca_stk1135: Sensor write failed [ 279.909474][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 279.924343][ T24] gspca_stk1135: Sensor write failed [ 279.931077][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 279.937674][ T24] gspca_stk1135: Sensor read failed [ 279.947429][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 279.954370][ T24] gspca_stk1135: Sensor read failed [ 279.959841][ T24] gspca_stk1135: Detected sensor type unknown (0x0) [ 279.970271][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 279.980128][ T24] gspca_stk1135: Sensor read failed [ 279.988362][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 279.996249][ T24] gspca_stk1135: Sensor read failed [ 280.004463][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 280.012450][ T24] gspca_stk1135: Sensor write failed [ 280.018822][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 280.034406][ T24] gspca_stk1135: Sensor write failed [ 280.039973][ T24] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 280.058856][ T24] usb 3-1: USB disconnect, device number 54 [ 280.103292][ T8707] sctp: [Deprecated]: syz.3.899 (pid 8707) Use of int in maxseg socket option. [ 280.103292][ T8707] Use struct sctp_assoc_value instead [ 280.141964][ T5918] usb 1-1: USB disconnect, device number 42 [ 280.431327][ T5911] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 280.601910][ T5918] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 280.613927][ T5911] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 280.624370][ T5911] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.635165][ T5911] usb 4-1: config 0 has no interface number 0 [ 280.641505][ T5911] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 280.651774][ T5911] usb 4-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 280.667284][ T5911] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 280.676431][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.685149][ T5911] usb 4-1: Product: syz [ 280.689346][ T5911] usb 4-1: Manufacturer: syz [ 280.694467][ T5911] usb 4-1: SerialNumber: syz [ 280.701362][ T5911] usb 4-1: config 0 descriptor?? [ 280.742233][ T1221] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 280.751996][ T5918] usb 1-1: Using ep0 maxpacket: 8 [ 280.759746][ T5918] usb 1-1: config 5 has an invalid interface number: 62 but max is 1 [ 280.768778][ T5918] usb 1-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 280.777740][ T5918] usb 1-1: config 5 has an invalid interface number: 204 but max is 1 [ 280.786052][ T5918] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 280.796459][ T5918] usb 1-1: config 5 has no interface number 0 [ 280.805735][ T5918] usb 1-1: config 5 has no interface number 1 [ 280.815720][ T5918] usb 1-1: config 5 interface 62 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 280.826855][ T5918] usb 1-1: config 5 interface 62 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 280.838480][ T5918] usb 1-1: config 5 interface 62 altsetting 127 has a duplicate endpoint with address 0xF, skipping [ 280.846465][ T92] usb 2-1: USB disconnect, device number 53 [ 280.859076][ T5918] usb 1-1: config 5 interface 62 altsetting 127 bulk endpoint 0x7 has invalid maxpacket 1024 [ 280.870080][ T5918] usb 1-1: config 5 interface 204 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 280.887177][ T5918] usb 1-1: config 5 interface 62 has no altsetting 0 [ 280.894236][ T5918] usb 1-1: config 5 interface 204 has no altsetting 0 [ 280.908188][ T5918] usb 1-1: New USB device found, idVendor=0421, idProduct=044e, bcdDevice= 1.00 [ 280.919987][ T5961] usb 4-1: USB disconnect, device number 48 [ 280.921783][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.929289][ T1221] usb 3-1: Using ep0 maxpacket: 16 [ 280.939069][ T5918] usb 1-1: Product: syz [ 280.949904][ T5918] usb 1-1: Manufacturer: syz [ 280.966113][ T5918] usb 1-1: SerialNumber: syz [ 280.974841][ T1221] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.986854][ T8713] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 281.005618][ T1221] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x33, changing to 0x3 [ 281.017737][ T1221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 281.030229][ T1221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 281.040987][ T1221] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 281.051128][ T1221] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 281.073536][ T1221] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 281.085823][ T1221] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 281.096448][ T1221] usb 3-1: Manufacturer: syz [ 281.113670][ T1221] usb 3-1: config 0 descriptor?? [ 281.345622][ T24] usb 3-1: USB disconnect, device number 55 [ 281.439200][ T5918] usb-storage 1-1:5.62: USB Mass Storage device detected [ 281.451315][ T5918] usb-storage 1-1:5.62: Quirks match for vid 0421 pid 044e: 30 [ 281.641464][ T8733] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.651559][ T5918] usb-storage 1-1:5.204: USB Mass Storage device detected [ 281.674742][ T5918] usb-storage 1-1:5.204: Quirks match for vid 0421 pid 044e: 30 [ 281.773947][ T5961] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 281.857999][ T1221] usb 1-1: USB disconnect, device number 43 [ 281.936214][ T5961] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.947007][ T5961] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 281.961972][ T5961] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 281.972782][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 281.981217][ T5961] usb 2-1: SerialNumber: syz [ 281.999449][ T5961] usb 2-1: bad CDC descriptors [ 282.019280][ T5961] usb-storage 2-1:1.0: USB Mass Storage device detected [ 282.034867][ T5918] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 282.037835][ T5961] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 282.204071][ T8750] hfs: can't find a HFS filesystem on dev rnullb0 [ 282.211558][ T5918] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.233167][ T5918] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.258299][ T24] usb 2-1: USB disconnect, device number 54 [ 282.269592][ T5918] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 282.292651][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 282.297692][ T8752] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.917'. [ 282.312422][ T8752] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 282.315050][ T5918] usb 4-1: SerialNumber: syz [ 282.341306][ T5918] cdc_ether 4-1:1.0: skipping garbage [ 282.350559][ T5918] usb 4-1: bad CDC descriptors [ 282.356521][ T5918] usb-storage 4-1:1.0: USB Mass Storage device detected [ 282.387462][ T5918] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 282.517259][ T8761] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 282.557606][ T92] usb 4-1: USB disconnect, device number 49 [ 282.786070][ T5961] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 282.926049][ T44] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 282.966061][ T5961] usb 3-1: Using ep0 maxpacket: 16 [ 282.975376][ T5961] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 282.984781][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.993379][ T5961] usb 3-1: Product: syz [ 282.997780][ T5961] usb 3-1: Manufacturer: syz [ 283.002453][ T5961] usb 3-1: SerialNumber: syz [ 283.014080][ T5961] r8152-cfgselector 3-1: Unknown version 0x0000 [ 283.020558][ T5961] r8152-cfgselector 3-1: config 0 descriptor?? [ 283.076252][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 283.083389][ T44] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 283.092696][ T44] usb 1-1: config 0 has no interface number 0 [ 283.102083][ T44] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 283.116330][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.124388][ T44] usb 1-1: Product: syz [ 283.142524][ T44] usb 1-1: Manufacturer: syz [ 283.147530][ T44] usb 1-1: SerialNumber: syz [ 283.157945][ T44] usb 1-1: config 0 descriptor?? [ 283.166239][ T44] smsc95xx v2.0.0 [ 283.245299][ T5961] r8152-cfgselector 3-1: Needed 1 retries to read version [ 283.263894][ T5961] r8152-cfgselector 3-1: Unknown version 0x6420 [ 283.272251][ T5961] r8152-cfgselector 3-1: bad CDC descriptors [ 283.343786][ T8774] netlink: 6 bytes leftover after parsing attributes in process `syz.3.924'. [ 283.361387][ T8774] net_ratelimit: 72 callbacks suppressed [ 283.361405][ T8774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.451461][ T8763] hfs: can't find a HFS filesystem on dev rnullb0 [ 283.464470][ T24] r8152-cfgselector 3-1: USB disconnect, device number 56 [ 283.592050][ T44] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 283.603022][ T44] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 283.815412][ T44] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 283.827248][ T44] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 283.919880][ T24] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 284.079968][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.100146][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 284.132913][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 284.142423][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 284.157352][ T24] usb 2-1: SerialNumber: syz [ 284.177138][ T24] usb 2-1: bad CDC descriptors [ 284.183120][ T24] usb-storage 2-1:1.0: USB Mass Storage device detected [ 284.198654][ T24] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 284.348688][ T5961] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 284.492635][ T92] usb 2-1: USB disconnect, device number 55 [ 284.519191][ T5961] usb 4-1: Using ep0 maxpacket: 32 [ 284.532911][ T5961] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 284.547381][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.556085][ T5961] usb 4-1: Product: syz [ 284.563709][ T5961] usb 4-1: Manufacturer: syz [ 284.568596][ T5961] usb 4-1: SerialNumber: syz [ 284.577743][ T5961] usb 4-1: config 0 descriptor?? [ 284.592363][ T5961] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 285.117599][ T8790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.133482][ T8790] bond0: (slave rose0): Enslaving as an active interface with an up link [ 285.350530][ T8804] overlayfs: failed to resolve './file1': -2 [ 285.582090][ T1221] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 285.671315][ T92] usb 1-1: USB disconnect, device number 44 [ 285.716602][ T8815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 285.751191][ T1221] usb 2-1: Using ep0 maxpacket: 16 [ 285.769765][ T8817] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 285.777630][ T1221] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 285.797937][ T1221] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.826648][ T1221] usb 2-1: config 0 has no interface number 0 [ 285.847345][ T1221] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 285.861451][ T1221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.869546][ T1221] usb 2-1: Product: syz [ 285.897565][ T1221] usb 2-1: Manufacturer: syz [ 285.936073][ T1221] usb 2-1: SerialNumber: syz [ 285.966801][ T1221] usb 2-1: config 0 descriptor?? [ 286.003019][ T1221] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 286.009476][ T1221] usb 2-1: No valid video chain found. [ 286.222952][ T5918] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 286.224720][ T1221] usb 2-1: USB disconnect, device number 56 [ 286.382519][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 286.393701][ T5918] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 286.408289][ T5918] usb 3-1: config 0 has no interface number 0 [ 286.420704][ T5918] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 286.434164][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.444040][ T5918] usb 3-1: Product: syz [ 286.448427][ T5918] usb 3-1: Manufacturer: syz [ 286.456248][ T5918] usb 3-1: SerialNumber: syz [ 286.468756][ T5918] usb 3-1: config 0 descriptor?? [ 286.488026][ T5918] smsc95xx v2.0.0 [ 286.904975][ T5918] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 286.929604][ T5918] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 287.152214][ T5918] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 287.175055][ T5918] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 287.334977][ T1221] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 287.383860][ T24] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 287.504303][ T1221] usb 2-1: Using ep0 maxpacket: 32 [ 287.513659][ T1221] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 287.522868][ T1221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.531679][ T1221] usb 2-1: Product: syz [ 287.536045][ T1221] usb 2-1: Manufacturer: syz [ 287.540706][ T1221] usb 2-1: SerialNumber: syz [ 287.544178][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 287.553987][ T24] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 287.558838][ T1221] usb 2-1: config 0 descriptor?? [ 287.562935][ T24] usb 1-1: config 0 has no interface number 0 [ 287.576789][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 287.578274][ T1221] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 287.586582][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.600716][ T24] usb 1-1: Product: syz [ 287.605256][ T24] usb 1-1: Manufacturer: syz [ 287.610304][ T24] usb 1-1: SerialNumber: syz [ 287.624640][ T24] usb 1-1: config 0 descriptor?? [ 287.632741][ T24] smsc95xx v2.0.0 [ 288.039813][ T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 288.053745][ T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 288.269191][ T24] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 288.280414][ T24] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 288.468496][ T5961] gspca_stk1135: reg_w 0x1b err -71 [ 288.475123][ T5961] gspca_stk1135: serial bus timeout: status=0x00 [ 288.482165][ T5961] gspca_stk1135: Sensor write failed [ 288.490166][ T5961] gspca_stk1135: serial bus timeout: status=0x00 [ 288.496676][ T5961] gspca_stk1135: Sensor write failed [ 288.502313][ T5961] gspca_stk1135: serial bus timeout: status=0x00 [ 288.509132][ T5961] gspca_stk1135: Sensor read failed [ 288.514499][ T5961] gspca_stk1135: serial bus timeout: status=0x00 [ 288.521202][ T5961] gspca_stk1135: Sensor read failed [ 288.526560][ T5961] gspca_stk1135: Detected sensor type unknown (0x0) [ 288.533668][ T5961] gspca_stk1135: serial bus timeout: status=0x00 [ 288.540182][ T5961] gspca_stk1135: Sensor read failed [ 288.545552][ T5961] gspca_stk1135: serial bus timeout: status=0x00 [ 288.552147][ T5961] gspca_stk1135: Sensor read failed [ 288.557441][ T5961] gspca_stk1135: serial bus timeout: status=0x00 [ 288.563798][ T5961] gspca_stk1135: Sensor write failed [ 288.569196][ T5961] gspca_stk1135: serial bus timeout: status=0x00 [ 288.575628][ T5961] gspca_stk1135: Sensor write failed [ 288.581201][ T5961] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 288.598652][ T5961] usb 4-1: USB disconnect, device number 50 [ 289.012542][ T24] usb 3-1: USB disconnect, device number 57 [ 289.317131][ T5961] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 289.367166][ T24] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 289.501623][ T5961] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.512121][ T5961] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.517561][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 289.531422][ T5961] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 289.534083][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.540942][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 289.555809][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.569811][ T24] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 289.573585][ T5961] usb 4-1: SerialNumber: syz [ 289.579128][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.601226][ T5961] cdc_ether 4-1:1.0: skipping garbage [ 289.604416][ T24] usb 3-1: config 0 descriptor?? [ 289.606875][ T5961] usb 4-1: bad CDC descriptors [ 289.621960][ T5961] usb-storage 4-1:1.0: USB Mass Storage device detected [ 289.641526][ T5961] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 289.768022][ T1221] gspca_stk1135: reg_w 0x200 err -110 [ 289.774702][ T1221] gspca_stk1135: serial bus timeout: status=0x00 [ 289.781629][ T1221] gspca_stk1135: Sensor write failed [ 289.787015][ T1221] gspca_stk1135: serial bus timeout: status=0x00 [ 289.793996][ T1221] gspca_stk1135: Sensor write failed [ 289.799715][ T1221] gspca_stk1135: serial bus timeout: status=0x00 [ 289.806093][ T1221] gspca_stk1135: Sensor read failed [ 289.811785][ T1221] gspca_stk1135: serial bus timeout: status=0x00 [ 289.818530][ T1221] gspca_stk1135: Sensor read failed [ 289.824025][ T1221] gspca_stk1135: Detected sensor type unknown (0x0) [ 289.831701][ T1221] gspca_stk1135: serial bus timeout: status=0x00 [ 289.843126][ T1221] gspca_stk1135: Sensor read failed [ 289.843467][ T5918] usb 4-1: USB disconnect, device number 51 [ 289.850047][ T1221] gspca_stk1135: serial bus timeout: status=0x00 [ 289.866225][ T1221] gspca_stk1135: Sensor read failed [ 289.873379][ T1221] gspca_stk1135: serial bus timeout: status=0x00 [ 289.883126][ T1221] gspca_stk1135: Sensor write failed [ 289.888833][ T1221] gspca_stk1135: serial bus timeout: status=0x00 [ 289.895219][ T1221] gspca_stk1135: Sensor write failed [ 289.901516][ T1221] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 290.062282][ T24] aquacomputer_d5next 0003:0C70:F0B6.0007: unknown main item tag 0x0 [ 290.075781][ T24] aquacomputer_d5next 0003:0C70:F0B6.0007: hidraw0: USB HID vff.fc Device [HID 0c70:f0b6] on usb-dummy_hcd.2-1/input0 [ 290.179417][ T1221] usb 1-1: USB disconnect, device number 45 [ 290.276549][ T8872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.292490][ T8872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.309279][ T5961] usb 3-1: USB disconnect, device number 58 [ 290.520202][ T1221] usb 2-1: USB disconnect, device number 57 [ 290.625113][ T8892] loop3: detected capacity change from 0 to 1 [ 290.636771][ T8874] Dev loop3: unable to read RDB block 1 [ 290.644826][ T8874] loop3: unable to read partition table [ 290.652731][ T8874] loop3: partition table beyond EOD, truncated [ 290.663457][ T8892] Dev loop3: unable to read RDB block 1 [ 290.669093][ T8892] loop3: unable to read partition table [ 290.683235][ T8892] loop3: partition table beyond EOD, truncated [ 290.711406][ T8892] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 291.063978][ T24] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 291.220225][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 291.243573][ T24] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 291.272085][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.293323][ T24] usb 1-1: Product: syz [ 291.306027][ T24] usb 1-1: Manufacturer: syz [ 291.317382][ T24] usb 1-1: SerialNumber: syz [ 291.402605][ T24] usb 1-1: config 0 descriptor?? [ 291.431060][ T24] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 291.801181][ T5955] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 291.813654][ T8911] netlink: 'syz.2.959': attribute type 10 has an invalid length. [ 291.941561][ T5918] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 291.961382][ T5955] usb 4-1: Using ep0 maxpacket: 32 [ 291.970808][ T5955] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 291.980421][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.988552][ T5955] usb 4-1: Product: syz [ 291.992892][ T5955] usb 4-1: Manufacturer: syz [ 291.997521][ T5955] usb 4-1: SerialNumber: syz [ 292.006213][ T5955] usb 4-1: config 0 descriptor?? [ 292.015747][ T5955] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 292.081666][ T5918] usb 2-1: device descriptor read/64, error -71 [ 292.323446][ T5918] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 292.462176][ T5918] usb 2-1: device descriptor read/64, error -71 [ 292.552420][ T1221] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 292.583031][ T5918] usb usb2-port1: attempt power cycle [ 292.716950][ T1221] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 292.725336][ T1221] usb 3-1: config 0 has no interface number 0 [ 292.731510][ T1221] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 224, changing to 11 [ 292.746421][ T1221] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 33023, setting to 1024 [ 292.760151][ T1221] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 292.770454][ T1221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.778577][ T1221] usb 3-1: Product: syz [ 292.782902][ T1221] usb 3-1: Manufacturer: syz [ 292.787574][ T1221] usb 3-1: SerialNumber: syz [ 292.798123][ T1221] usb 3-1: config 0 descriptor?? [ 292.817437][ T1221] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 292.848434][ T8905] : entered promiscuous mode [ 292.863358][ T8905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.875075][ T8905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.888384][ T8905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.899713][ T8905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.923104][ T5918] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 292.944360][ T5918] usb 2-1: device descriptor read/8, error -71 [ 293.060874][ T8923] netlink: 60 bytes leftover after parsing attributes in process `syz.2.962'. [ 293.070633][ T8922] netlink: 60 bytes leftover after parsing attributes in process `syz.2.962'. [ 293.193393][ T5918] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 293.214253][ T5918] usb 2-1: device descriptor read/8, error -71 [ 293.324312][ T5918] usb usb2-port1: unable to enumerate USB device [ 293.512929][ T5918] usb 3-1: USB disconnect, device number 59 [ 293.529423][ T5918] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 293.724209][ T5955] gspca_ov534_9: reg_r err -71 [ 294.004609][ T5955] gspca_ov534_9: Unknown sensor 0000 [ 294.004744][ T5955] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 294.021407][ T5955] usb 4-1: USB disconnect, device number 52 [ 294.180720][ T8926] syzkaller1: entered promiscuous mode [ 294.186375][ T8926] syzkaller1: entered allmulticast mode [ 294.578812][ T8930] ./file0: Can't lookup blockdev [ 294.597295][ T5955] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 294.755853][ T5955] usb 4-1: Using ep0 maxpacket: 16 [ 294.763840][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.779369][ T5955] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 294.791497][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.806994][ T5955] usb 4-1: config 0 descriptor?? [ 294.876250][ T5918] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 295.025095][ T8928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.034245][ T8928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.042405][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 295.049726][ T5918] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 295.057987][ T5918] usb 3-1: config 0 has no interface number 0 [ 295.067280][ T5918] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 295.076512][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.084550][ T5918] usb 3-1: Product: syz [ 295.086559][ T1221] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 295.089529][ T5918] usb 3-1: Manufacturer: syz [ 295.101916][ T5918] usb 3-1: SerialNumber: syz [ 295.109809][ T5918] usb 3-1: config 0 descriptor?? [ 295.120554][ T5918] smsc95xx v2.0.0 [ 295.248106][ T1221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 295.258505][ T1221] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.266921][ T5955] gt683r_led 0003:1770:FF00.0008: unknown main item tag 0x0 [ 295.283254][ T24] gspca_stk1135: reg_w 0x1b err -71 [ 295.291031][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 295.292152][ T1221] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 295.298082][ T5955] gt683r_led 0003:1770:FF00.0008: item fetching failed at offset 1/5 [ 295.311131][ T1221] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 295.323465][ T24] gspca_stk1135: Sensor write failed [ 295.323531][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 295.323544][ T24] gspca_stk1135: Sensor write failed [ 295.323576][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 295.323587][ T24] gspca_stk1135: Sensor read failed [ 295.323646][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 295.323658][ T24] gspca_stk1135: Sensor read failed [ 295.323668][ T24] gspca_stk1135: Detected sensor type unknown (0x0) [ 295.323705][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 295.323716][ T24] gspca_stk1135: Sensor read failed [ 295.323749][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 295.323760][ T24] gspca_stk1135: Sensor read failed [ 295.323815][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 295.323826][ T24] gspca_stk1135: Sensor write failed [ 295.345339][ T1221] usb 2-1: SerialNumber: syz [ 295.360541][ T5955] gt683r_led 0003:1770:FF00.0008: hid parsing failed [ 295.394733][ T1221] cdc_ether 2-1:1.0: skipping garbage [ 295.398518][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 295.402775][ T1221] usb 2-1: bad CDC descriptors [ 295.408463][ T24] gspca_stk1135: Sensor write failed [ 295.419299][ T1221] usb-storage 2-1:1.0: USB Mass Storage device detected [ 295.419869][ T5955] gt683r_led 0003:1770:FF00.0008: probe with driver gt683r_led failed with error -22 [ 295.452060][ T1221] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 295.459023][ T24] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 295.475734][ T8928] openvswitch: netlink: EtherType 0 is less than min 600 [ 295.485034][ T24] usb 1-1: USB disconnect, device number 46 [ 295.570277][ T8942] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 295.570294][ T5918] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 295.581258][ T8942] VFS: Can't find a romfs filesystem on dev rnullb0. [ 295.581258][ T8942] [ 295.589050][ T5918] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 295.695463][ T5955] usb 2-1: USB disconnect, device number 62 [ 295.811072][ T5918] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 295.822574][ T5918] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 296.032194][ T8951] FAULT_INJECTION: forcing a failure. [ 296.032194][ T8951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.045534][ T8951] CPU: 1 UID: 0 PID: 8951 Comm: syz.0.971 Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 296.045563][ T8951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 296.045576][ T8951] Call Trace: [ 296.045587][ T8951] [ 296.045597][ T8951] dump_stack_lvl+0x189/0x250 [ 296.045633][ T8951] ? __pfx____ratelimit+0x10/0x10 [ 296.045655][ T8951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.045677][ T8951] ? __pfx__printk+0x10/0x10 [ 296.045708][ T8951] should_fail_ex+0x414/0x560 [ 296.045731][ T8951] __kvm_read_guest_page+0x18d/0x240 [ 296.045758][ T8951] kvm_fetch_guest_virt+0x12b/0x170 [ 296.045779][ T8951] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 296.045797][ T8951] __do_insn_fetch_bytes+0x2f9/0x6d0 [ 296.045822][ T8951] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 296.045849][ T8951] ? __lock_acquire+0xab9/0xd20 [ 296.045867][ T8951] x86_decode_insn+0x33c/0x5310 [ 296.045911][ T8951] ? __pfx_x86_decode_insn+0x10/0x10 [ 296.045941][ T8951] ? __asan_memset+0x22/0x50 [ 296.045962][ T8951] ? init_decode_cache+0x78/0x90 [ 296.045982][ T8951] ? init_emulate_ctxt+0x4d6/0x660 [ 296.046005][ T8951] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 296.046026][ T8951] ? trace_rcu_utilization+0x47/0x1d0 [ 296.046046][ T8951] ? rcu_note_context_switch+0xdc1/0x1140 [ 296.046063][ T8951] x86_emulate_instruction+0x60a/0x1ef0 [ 296.046086][ T8951] ? xfd_validate_state+0x6d/0x150 [ 296.046102][ T8951] ? save_fpregs_to_fpstate+0xa3/0x210 [ 296.046134][ T8951] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 296.046154][ T8951] ? __get_current_cr3_fast+0x90/0x150 [ 296.046169][ T8951] ? clear_bhb_loop+0x60/0xb0 [ 296.046183][ T8951] ? clear_bhb_loop+0x60/0xb0 [ 296.046198][ T8951] ? vmx_vcpu_run+0xe91/0x2900 [ 296.046219][ T8951] ? __vmx_complete_interrupts+0xe7/0x690 [ 296.046249][ T8951] handle_ud+0x142/0x590 [ 296.046270][ T8951] ? __pfx_handle_ud+0x10/0x10 [ 296.046296][ T8951] ? vmx_handle_exit_irqoff+0x6c9/0xad0 [ 296.046323][ T8951] ? __pfx_current_save_fsgs+0x10/0x10 [ 296.046352][ T8951] ? __lock_acquire+0xab9/0xd20 [ 296.046378][ T8951] ? __pfx_handle_exception_nmi+0x10/0x10 [ 296.046398][ T8951] vmx_handle_exit+0x1090/0x18a0 [ 296.046421][ T8951] ? vcpu_run+0x35f2/0x6fa0 [ 296.046445][ T8951] vcpu_run+0x434f/0x6fa0 [ 296.046473][ T8951] ? vcpu_run+0x35f2/0x6fa0 [ 296.046522][ T8951] ? __pfx_vcpu_run+0x10/0x10 [ 296.046536][ T8951] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 296.046559][ T8951] ? complete_emulated_mmio+0x18e/0x7a0 [ 296.046581][ T8951] ? __asan_memcpy+0x40/0x70 [ 296.046602][ T8951] ? complete_emulated_mmio+0x4d2/0x7a0 [ 296.046630][ T8951] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 296.046648][ T8951] ? __mutex_trylock_common+0x153/0x260 [ 296.046681][ T8951] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 296.046701][ T8951] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 296.046721][ T8951] ? rcu_is_watching+0x15/0xb0 [ 296.046746][ T8951] ? trace_contention_end+0x39/0x120 [ 296.046773][ T8951] ? __mutex_lock+0x335/0x1360 [ 296.046811][ T8951] ? kasan_quarantine_put+0xdd/0x220 [ 296.046836][ T8951] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 296.046861][ T8951] ? __pfx___mutex_lock+0x10/0x10 [ 296.046883][ T8951] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 296.046903][ T8951] ? do_vfs_ioctl+0xbe8/0x1430 [ 296.046920][ T8951] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 296.046938][ T8951] kvm_vcpu_ioctl+0x95c/0xe90 [ 296.046965][ T8951] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 296.046985][ T8951] ? __lock_acquire+0xab9/0xd20 [ 296.047016][ T8951] ? __fget_files+0x2a/0x420 [ 296.047037][ T8951] ? __fget_files+0x2a/0x420 [ 296.047055][ T8951] ? __fget_files+0x3a0/0x420 [ 296.047073][ T8951] ? __fget_files+0x2a/0x420 [ 296.047095][ T8951] ? bpf_lsm_file_ioctl+0x9/0x20 [ 296.047117][ T8951] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 296.047139][ T8951] __se_sys_ioctl+0xf9/0x170 [ 296.047156][ T8951] do_syscall_64+0xfa/0x3b0 [ 296.047177][ T8951] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.047197][ T8951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.047211][ T8951] ? clear_bhb_loop+0x60/0xb0 [ 296.047228][ T8951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.047243][ T8951] RIP: 0033:0x7f5840b8eb69 [ 296.047257][ T8951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.047270][ T8951] RSP: 002b:00007f58419d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.047292][ T8951] RAX: ffffffffffffffda RBX: 00007f5840db5fa0 RCX: 00007f5840b8eb69 [ 296.047303][ T8951] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 296.047311][ T8951] RBP: 00007f58419d0090 R08: 0000000000000000 R09: 0000000000000000 [ 296.047320][ T8951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.047328][ T8951] R13: 0000000000000000 R14: 00007f5840db5fa0 R15: 00007ffd4a122948 [ 296.047351][ T8951] [ 296.866683][ T5955] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 296.930902][ T8964] NILFS (rnullb0): couldn't find nilfs on the device [ 297.044924][ T5955] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.055358][ T5955] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.076141][ T5955] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 297.085672][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 297.094133][ T5955] usb 1-1: SerialNumber: syz [ 297.111094][ T5955] usb 1-1: bad CDC descriptors [ 297.118344][ T5955] usb-storage 1-1:1.0: USB Mass Storage device detected [ 297.130246][ T5955] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 297.464210][ T1221] usb 1-1: USB disconnect, device number 47 [ 297.703003][ T5918] usb 3-1: USB disconnect, device number 60 [ 297.782166][ T8994] netlink: 132 bytes leftover after parsing attributes in process `syz.2.981'. [ 298.118695][ T8978] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 298.127347][ T8978] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 298.151938][ T8978] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 298.162632][ T8978] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 298.184390][ T8978] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 298.199019][ T8978] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 298.290884][ T1221] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 298.453054][ T1221] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 298.469117][ T1221] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.487094][ T1221] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 298.498309][ T1221] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 298.508483][ T1221] usb 1-1: SerialNumber: syz [ 298.526101][ T1221] cdc_ether 1-1:1.0: skipping garbage [ 298.541234][ T1221] usb 1-1: bad CDC descriptors [ 298.547013][ T1221] usb-storage 1-1:1.0: USB Mass Storage device detected [ 298.569212][ T1221] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 298.708576][ T9022] /dev/rnullb0: Can't open blockdev [ 298.752117][ T1221] usb 1-1: USB disconnect, device number 48 [ 298.805373][ T9026] netlink: 40 bytes leftover after parsing attributes in process `syz.2.983'. [ 299.735189][ T9063] /dev/rnullb0: Can't open blockdev [ 299.945628][ T9076] netlink: 'syz.2.990': attribute type 11 has an invalid length. [ 299.953712][ T9076] netlink: 20 bytes leftover after parsing attributes in process `syz.2.990'. [ 300.203917][ T1221] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 300.278467][ T9086] /dev/rnullb0: Can't open blockdev [ 300.288929][ T9086] /dev/rnullb0: Can't open blockdev [ 300.297855][ T9086] /dev/rnullb0: Can't open blockdev [ 300.377828][ T1221] usb 3-1: Using ep0 maxpacket: 16 [ 300.400559][ T1221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.423639][ T1221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.437473][ T1221] usb 3-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 300.447735][ T1221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.455411][ T9096] binder: 9095:9096 ioctl c0306201 200000000040 returned -22 [ 300.465622][ T9096] binder: 9095:9096 ioctl c0306201 200000000640 returned -22 [ 300.466062][ T1221] usb 3-1: config 0 descriptor?? [ 300.882758][ T9102] /dev/rnullb0: Can't open blockdev [ 301.040004][ T9106] virtio-fs: tag not found [ 301.565901][ T5961] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 301.728816][ T5961] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 301.738804][ T5961] usb 1-1: config 0 has no interface number 0 [ 301.744995][ T5961] usb 1-1: config 0 interface 85 altsetting 151 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.757889][ T5961] usb 1-1: config 0 interface 85 altsetting 151 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.768122][ T5961] usb 1-1: config 0 interface 85 has no altsetting 0 [ 301.774882][ T5961] usb 1-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 301.784185][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.794983][ T5961] usb 1-1: config 0 descriptor?? [ 302.212623][ T5961] hid-led 0003:1D34:0004.0009: unknown main item tag 0x0 [ 302.219896][ T5961] hid-led 0003:1D34:0004.0009: unknown main item tag 0x0 [ 302.227079][ T5961] hid-led 0003:1D34:0004.0009: unknown main item tag 0x0 [ 302.234348][ T5961] hid-led 0003:1D34:0004.0009: unknown main item tag 0x0 [ 302.241484][ T5961] hid-led 0003:1D34:0004.0009: unknown main item tag 0x0 [ 302.248779][ T5961] hid-led 0003:1D34:0004.0009: unknown main item tag 0x0 [ 302.255897][ T5961] hid-led 0003:1D34:0004.0009: unknown main item tag 0x0 [ 302.414177][ T9115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.423723][ T9115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.438954][ T5961] hid-led 0003:1D34:0004.0009: probe with driver hid-led failed with error -71 [ 302.453805][ T5961] usb 1-1: USB disconnect, device number 49 [ 302.915741][ T1221] usbhid 3-1:0.0: can't add hid device: -71 [ 302.922351][ T1221] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 302.940160][ T1221] usb 3-1: USB disconnect, device number 61 [ 303.012602][ T9129] netlink: 'syz.0.1000': attribute type 2 has an invalid length. [ 303.024726][ T9129] netlink: 'syz.0.1000': attribute type 10 has an invalid length. [ 303.032903][ T9129] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1000'. [ 303.042058][ T9129] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 303.300519][ T5918] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 303.318140][ T1221] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 303.458192][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 303.464946][ T5918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.475264][ T5918] usb 1-1: config 0 interface 0 has no altsetting 0 [ 303.478185][ T1221] usb 3-1: Using ep0 maxpacket: 8 [ 303.487869][ T5918] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 303.491371][ T1221] usb 3-1: unable to get BOS descriptor or descriptor too short [ 303.497294][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.506965][ T1221] usb 3-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config [ 303.517556][ T5918] usb 1-1: Product: syz [ 303.527486][ T5918] usb 1-1: Manufacturer: syz [ 303.528918][ T1221] usb 3-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=ad.d9 [ 303.532405][ T5918] usb 1-1: SerialNumber: syz [ 303.542098][ T1221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.554319][ T1221] usb 3-1: Product: syz [ 303.558857][ T1221] usb 3-1: Manufacturer: syz [ 303.562198][ T5918] usb 1-1: config 0 descriptor?? [ 303.563503][ T1221] usb 3-1: SerialNumber: syz [ 306.055466][ T5918] usb 1-1: USB disconnect, device number 50 [ 306.055836][ T1221] s2255 3-1:192.0: Could not find bulk-in endpoint [ 306.078913][ T1221] Sensoray 2255 driver load failed: 0xfffffff4 [ 306.089844][ T1221] s2255 3-1:192.0: probe with driver s2255 failed with error -12 [ 306.109629][ T1221] usb 3-1: USB disconnect, device number 62 [ 306.147555][ T9133] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 306.156598][ T9133] /dev/rnullb0: Can't open blockdev [ 306.412907][ T9147] /dev/rnullb0: Can't open blockdev [ 306.592118][ T5918] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 306.742321][ T5918] usb 1-1: Using ep0 maxpacket: 32 [ 306.749129][ T5918] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 306.757490][ T5918] usb 1-1: config 0 has no interface number 0 [ 306.765806][ T5918] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 306.776267][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.784514][ T5918] usb 1-1: Product: syz [ 306.788702][ T5918] usb 1-1: Manufacturer: syz [ 306.793621][ T5918] usb 1-1: SerialNumber: syz [ 306.800346][ T5918] usb 1-1: config 0 descriptor?? [ 306.809572][ T5918] smsc95xx v2.0.0 [ 307.214539][ T5918] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 307.225629][ T5918] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 307.436829][ T5918] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 307.448226][ T5918] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 309.375440][ T1221] usb 1-1: USB disconnect, device number 51 [ 309.433028][ T9155] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1009'. [ 309.523239][ T9159] netlink: 'syz.0.1008': attribute type 11 has an invalid length. [ 309.559288][ T9159] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1008'. [ 309.848257][ T5918] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 309.886298][ T1221] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 310.007783][ T5918] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 310.015991][ T5918] usb 3-1: config 0 has no interface number 0 [ 310.024930][ T5918] usb 3-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 310.037162][ T5918] usb 3-1: config 0 interface 214 has no altsetting 0 [ 310.046386][ T5918] usb 3-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 310.055663][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.063832][ T5918] usb 3-1: Product: syz [ 310.066470][ T1221] usb 1-1: Using ep0 maxpacket: 16 [ 310.068151][ T5918] usb 3-1: Manufacturer: syz [ 310.077836][ T5918] usb 3-1: SerialNumber: syz [ 310.079740][ T1221] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.085950][ T5918] usb 3-1: config 0 descriptor?? [ 310.098544][ T1221] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.098593][ T1221] usb 1-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 310.122694][ T1221] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.131805][ T9162] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 310.134552][ T1221] usb 1-1: config 0 descriptor?? [ 310.143636][ T5918] ax88179_178a 3-1:0.214: probe with driver ax88179_178a failed with error -22 [ 312.466113][ T1221] usbhid 1-1:0.0: can't add hid device: -71 [ 312.479613][ T1221] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 312.495587][ T1221] usb 1-1: USB disconnect, device number 52 [ 312.632239][ T5961] usb 3-1: USB disconnect, device number 63 [ 312.836637][ T9181] ./file0: Can't lookup blockdev [ 312.860390][ T1221] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 313.022408][ T1221] usb 1-1: unable to get BOS descriptor or descriptor too short [ 313.030737][ T1221] usb 1-1: not running at top speed; connect to a high speed hub [ 313.039488][ T1221] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.052262][ T1221] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 313.063058][ T1221] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 313.072900][ T1221] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 313.082719][ T1221] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 313.098143][ T1221] usb 1-1: New USB device found, idVendor=045e, idProduct=043f, bcdDevice=fc.90 [ 313.107293][ T1221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.115400][ T1221] usb 1-1: Product: syz [ 313.119573][ T1221] usb 1-1: Manufacturer: syz [ 313.124254][ T1221] usb 1-1: SerialNumber: syz [ 313.132112][ T5918] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 313.138279][ T1221] ipaq 1-1:1.0: PocketPC PDA converter detected [ 313.290109][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 313.297555][ T5918] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 313.306021][ T5918] usb 3-1: config 0 has no interface number 0 [ 313.314870][ T5918] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 313.324136][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.332339][ T5918] usb 3-1: Product: syz [ 313.336545][ T5918] usb 3-1: Manufacturer: syz [ 313.339889][ T9171] overlayfs: failed to resolve './file1': -2 [ 313.341321][ T5918] usb 3-1: SerialNumber: syz [ 313.347838][ T5918] usb 3-1: config 0 descriptor?? [ 313.362164][ T5918] smsc95xx v2.0.0 [ 313.427851][ T1221] ipaq 1-1:1.0: probe with driver ipaq failed with error -71 [ 313.441399][ T1221] usb 1-1: USB disconnect, device number 53 [ 313.766981][ T5918] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 313.777908][ T5918] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 313.989200][ T5918] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 314.000627][ T5918] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 314.021880][ T9187] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1018'. [ 314.453691][ T1221] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 314.618384][ T1221] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 314.627520][ T1221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.635646][ T1221] usb 1-1: Product: syz [ 314.639903][ T1221] usb 1-1: Manufacturer: syz [ 314.644548][ T1221] usb 1-1: SerialNumber: syz [ 314.651938][ T1221] usb 1-1: config 0 descriptor?? [ 314.661062][ T1221] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 315.064796][ T1221] input: sonixb as /devices/platform/dummy_hcd.0/usb1/1-1/input/input18 [ 315.270556][ T1221] usb 1-1: USB disconnect, device number 54 [ 315.809704][ T9201] ./file0: Can't lookup blockdev [ 315.860045][ T9203] netlink: 'syz.0.1024': attribute type 9 has an invalid length. [ 315.868018][ T9203] netlink: 212384 bytes leftover after parsing attributes in process `syz.0.1024'. [ 315.878205][ T9203] openvswitch: netlink: Message has 5 unknown bytes. [ 315.934237][ T5918] usb 3-1: USB disconnect, device number 64 [ 316.007212][ T9208] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1025'. [ 316.068137][ T9210] /dev/rnullb0: Can't open blockdev [ 316.373519][ T5918] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 316.533677][ T5918] usb 1-1: Using ep0 maxpacket: 32 [ 316.540827][ T5918] usb 1-1: config 0 has an invalid interface number: 111 but max is 1 [ 316.549271][ T5918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.559483][ T5918] usb 1-1: config 0 has no interface number 1 [ 316.567424][ T5918] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 316.577424][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3 [ 316.585508][ T5918] usb 1-1: Product: syz [ 316.589721][ T5918] usb 1-1: Manufacturer: syz [ 316.594470][ T5918] usb 1-1: SerialNumber: syz [ 316.605330][ T5918] usb 1-1: config 0 descriptor?? [ 316.726359][ T9219] ./file0: Can't lookup blockdev [ 316.807816][ T9221] 9pnet_fd: Insufficient options for proto=fd [ 316.930085][ T5918] snd-usb-6fire 1-1:0.111: unable to receive device firmware state. [ 316.945497][ T5918] snd-usb-6fire 1-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 316.967581][ T5918] usb 1-1: USB disconnect, device number 55 [ 317.651614][ T9236] ./file0: Can't lookup blockdev [ 318.476320][ T1221] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 318.629053][ T1221] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.639404][ T1221] usb 1-1: config 0 has no interfaces? [ 318.649238][ T1221] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 318.658497][ T1221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.671455][ T1221] usb 1-1: Product: syz [ 318.675652][ T1221] usb 1-1: Manufacturer: syz [ 318.680411][ T1221] usb 1-1: SerialNumber: syz [ 318.687895][ T1221] usb 1-1: config 0 descriptor?? [ 318.766058][ T5918] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 318.918193][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.928579][ T5918] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 318.937743][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.948338][ T5918] usb 3-1: config 0 descriptor?? [ 319.162105][ T5918] usb 3-1: string descriptor 0 read error: -32 [ 319.170230][ T5918] pwc: Askey VC010 type 2 USB webcam detected. [ 319.379039][ T5918] pwc: recv_control_msg error -32 req 02 val 2b00 [ 319.386167][ T5918] pwc: recv_control_msg error -32 req 02 val 2700 [ 319.393922][ T5918] pwc: recv_control_msg error -32 req 02 val 2c00 [ 319.405594][ T5918] pwc: recv_control_msg error -32 req 04 val 1000 [ 319.413383][ T5918] pwc: recv_control_msg error -32 req 04 val 1300 [ 319.422025][ T5918] pwc: recv_control_msg error -32 req 04 val 1400 [ 319.630339][ T5918] pwc: recv_control_msg error -71 req 02 val 2100 [ 319.638492][ T5918] pwc: recv_control_msg error -71 req 04 val 1500 [ 319.645419][ T5918] pwc: recv_control_msg error -71 req 02 val 2500 [ 319.652485][ T5918] pwc: recv_control_msg error -71 req 02 val 2400 [ 319.659543][ T5918] pwc: recv_control_msg error -71 req 02 val 2600 [ 319.666321][ T5918] pwc: recv_control_msg error -71 req 02 val 2900 [ 319.673298][ T5918] pwc: recv_control_msg error -71 req 02 val 2800 [ 319.680318][ T5918] pwc: recv_control_msg error -71 req 04 val 1100 [ 319.687421][ T5918] pwc: recv_control_msg error -71 req 04 val 1200 [ 319.695327][ T5918] pwc: Registered as video103. [ 319.702832][ T5918] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 319.753000][ T5918] usb 3-1: USB disconnect, device number 65 [ 320.273460][ T9257] /dev/rnullb0: Can't open blockdev [ 321.132226][ T9255] syz.2.1043 (9255): drop_caches: 2 [ 321.182745][ T9263] ./file0: Can't lookup blockdev [ 321.297366][ T5918] usb 1-1: USB disconnect, device number 56 [ 321.357559][ T9270] /dev/rnullb0: Can't open blockdev [ 321.413294][ T9272] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1047'. [ 322.052481][ T9284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 322.259612][ T1221] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 322.339687][ T5918] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 322.422165][ T1221] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 322.432099][ T1221] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.446529][ T1221] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 322.455845][ T1221] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 322.464047][ T1221] usb 1-1: SerialNumber: syz [ 322.474575][ T1221] cdc_ether 1-1:1.0: skipping garbage [ 322.480606][ T1221] usb 1-1: bad CDC descriptors [ 322.486069][ T1221] usb-storage 1-1:1.0: USB Mass Storage device detected [ 322.496934][ T1221] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 322.501758][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.517099][ T5918] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 322.529340][ T5918] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 322.538689][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.546979][ T5918] usb 3-1: Product: syz [ 322.551569][ T5918] usb 3-1: Manufacturer: syz [ 322.556450][ T5918] usb 3-1: SerialNumber: syz [ 322.568921][ T5918] usb 3-1: config 0 descriptor?? [ 322.739595][ T1221] usb 1-1: USB disconnect, device number 57 [ 323.154982][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.161487][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.897440][ T9301] /dev/rnullb0: Can't open blockdev [ 324.261507][ T5918] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 324.415233][ T5918] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 324.427040][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 324.439088][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 324.450486][ T5918] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 324.463456][ T5918] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 324.473573][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.484406][ T5918] usb 1-1: config 0 descriptor?? [ 324.490143][ T9304] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 325.146213][ T1221] usb 3-1: USB disconnect, device number 66 [ 325.198005][ T9309] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1057'. [ 326.083243][ T24] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 326.236862][ T24] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 326.246300][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.257897][ T24] usb 3-1: config 0 descriptor?? [ 326.987437][ T5918] usbhid 1-1:0.0: can't add hid device: -71 [ 326.998827][ T5918] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 327.011646][ T5918] usb 1-1: USB disconnect, device number 58 [ 327.275164][ T9314] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 327.899635][ T24] pegasus 3-1:0.0: setup Pegasus II specific registers [ 327.975041][ T1221] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 328.019850][ T24] pegasus 3-1:0.0: can't locate MII phy, using default [ 328.036888][ T24] pegasus 3-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, b6:78:f3:5f:13:c3 [ 328.054650][ T24] usb 3-1: USB disconnect, device number 67 [ 328.125243][ T1221] usb 1-1: device descriptor read/64, error -71 [ 328.375324][ T1221] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 328.505611][ T1221] usb 1-1: device descriptor read/64, error -71 [ 328.616744][ T1221] usb usb1-port1: attempt power cycle [ 328.688438][ T24] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 328.847306][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.857683][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 328.871873][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 328.881148][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.889628][ T24] usb 3-1: Product: syz [ 328.893821][ T24] usb 3-1: Manufacturer: syz [ 328.898623][ T24] usb 3-1: SerialNumber: syz [ 328.907188][ T24] usb 3-1: config 0 descriptor?? [ 328.965895][ T1221] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 328.986783][ T1221] usb 1-1: device descriptor read/8, error -71 [ 329.226086][ T1221] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 329.248618][ T1221] usb 1-1: device descriptor read/8, error -71 [ 329.358315][ T1221] usb usb1-port1: unable to enumerate USB device [ 330.786925][ T9332] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1064'. [ 331.464915][ T1221] usb 3-1: USB disconnect, device number 68 [ 333.203341][ T9360] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1071'. [ 334.794189][ T9382] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1080'. [ 334.806192][ T1221] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 334.966993][ T1221] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 334.976176][ T1221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.984411][ T1221] usb 3-1: Product: syz [ 334.988614][ T1221] usb 3-1: Manufacturer: syz [ 334.993269][ T1221] usb 3-1: SerialNumber: syz [ 335.000065][ T1221] usb 3-1: config 0 descriptor?? [ 335.215146][ T1221] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 335.591485][ T24] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 335.743645][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 335.753646][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.768843][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 335.778101][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 335.786302][ T24] usb 1-1: SerialNumber: syz [ 335.802139][ T24] cdc_ether 1-1:1.0: skipping garbage [ 335.807612][ T24] usb 1-1: bad CDC descriptors [ 335.813429][ T24] usb-storage 1-1:1.0: USB Mass Storage device detected [ 335.822977][ T1221] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 335.828130][ T24] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 336.010272][ T24] usb 1-1: USB disconnect, device number 63 [ 336.806720][ T30] audit: type=1326 audit(1754291574.591:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.0.1084" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5840b8eb69 code=0xffff0000 [ 337.604045][ T24] usb 3-1: USB disconnect, device number 69 [ 337.726784][ T9404] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1087'. [ 338.022313][ T9408] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 338.296286][ T1221] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 338.463633][ T1221] usb 1-1: Using ep0 maxpacket: 16 [ 338.472651][ T1221] usb 1-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59 [ 338.481818][ T1221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.489954][ T1221] usb 1-1: Product: syz [ 338.494276][ T1221] usb 1-1: Manufacturer: syz [ 338.498907][ T1221] usb 1-1: SerialNumber: syz [ 338.507615][ T1221] usb 1-1: config 0 descriptor?? [ 338.513846][ T24] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 338.518446][ T1221] pwc: Logitech QuickCam 4000 Pro USB webcam detected. [ 338.666886][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 338.676887][ T24] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 338.687113][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.698381][ T24] usb 3-1: Product: syz [ 338.702596][ T24] usb 3-1: Manufacturer: syz [ 338.707586][ T24] usb 3-1: SerialNumber: syz [ 338.719873][ T1221] pwc: Failed to set LED on/off time (-71) [ 338.720934][ T24] usb 3-1: config 0 descriptor?? [ 338.734901][ T1221] pwc: send_video_command error -71 [ 338.740156][ T1221] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 338.754705][ T24] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 338.774006][ T1221] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 338.796559][ T1221] usb 1-1: USB disconnect, device number 64 [ 340.345017][ T1221] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 340.540254][ T1221] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 340.549477][ T1221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.557768][ T1221] usb 1-1: Product: syz [ 340.561983][ T1221] usb 1-1: Manufacturer: syz [ 340.568592][ T9411] [U]  [ 340.571677][ T9411] [U] K{‘ [ 340.574739][ T9411] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 340.581815][ T1221] usb 1-1: SerialNumber: syz [ 340.588592][ T9411] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 340.605442][ T1221] usb 1-1: config 0 descriptor?? [ 340.624028][ T9411] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 340.634869][ T9411] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 340.670959][ T9411] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 340.696107][ T9411] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 340.708223][ T9411] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 340.722700][ T9411] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 340.829927][ T1221] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 340.839459][ T9411] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 340.849608][ T9411] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 340.857742][ T24] gspca_stk1135: reg_w 0x200 err -110 [ 340.864905][ T9411] [U] 22½“Æ©Ðû©x?0;3u± [ 340.873364][ T9411] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 340.876432][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 340.904603][ T9411] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 340.919004][ T9411] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 340.928333][ T9411] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 340.934729][ T9411] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 340.952448][ T9411] [U] ¹ ec [ 340.955633][ T9411] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 340.965656][ T24] gspca_stk1135: Sensor write failed [ 340.973273][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 340.979808][ T24] gspca_stk1135: Sensor write failed [ 340.985103][ T9410] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 341.000542][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 341.007058][ T24] gspca_stk1135: Sensor read failed [ 341.012483][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 341.020687][ T24] gspca_stk1135: Sensor read failed [ 341.026853][ T24] gspca_stk1135: Detected sensor type unknown (0x0) [ 341.033512][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 341.042268][ T24] gspca_stk1135: Sensor read failed [ 341.048512][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 341.055071][ T24] gspca_stk1135: Sensor read failed [ 341.063001][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 341.070646][ T24] gspca_stk1135: Sensor write failed [ 341.079326][ T24] gspca_stk1135: serial bus timeout: status=0x00 [ 341.091815][ T24] gspca_stk1135: Sensor write failed [ 341.100411][ T24] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 341.112630][ T24] usb 3-1: USB disconnect, device number 70 [ 341.449648][ T1221] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 341.866125][ T1221] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 342.018318][ T1221] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 342.028329][ T1221] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.042773][ T1221] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 342.052033][ T1221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 342.060165][ T1221] usb 3-1: SerialNumber: syz [ 342.074496][ T1221] cdc_ether 3-1:1.0: skipping garbage [ 342.080286][ T1221] usb 3-1: bad CDC descriptors [ 342.086238][ T1221] usb-storage 3-1:1.0: USB Mass Storage device detected [ 342.095692][ T1221] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 342.276237][ T1221] usb 3-1: USB disconnect, device number 71 [ 343.111213][ T24] usb 1-1: USB disconnect, device number 65 [ 344.058475][ T1221] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 344.227819][ T1221] usb 1-1: Using ep0 maxpacket: 32 [ 344.234665][ T1221] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 344.245021][ T1221] usb 1-1: config 0 has no interface number 0 [ 344.253232][ T1221] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 344.262514][ T1221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.270760][ T1221] usb 1-1: Product: syz [ 344.274943][ T1221] usb 1-1: Manufacturer: syz [ 344.279662][ T1221] usb 1-1: SerialNumber: syz [ 344.286488][ T1221] usb 1-1: config 0 descriptor?? [ 344.295384][ T1221] smsc95xx v2.0.0 [ 344.357899][ T24] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 344.514895][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 344.524094][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.532846][ T24] usb 3-1: Product: syz [ 344.537247][ T24] usb 3-1: Manufacturer: syz [ 344.543302][ T24] usb 3-1: SerialNumber: syz [ 344.551232][ T24] usb 3-1: config 0 descriptor?? [ 344.741308][ T1221] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 344.752263][ T1221] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 344.766804][ T24] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 345.973450][ T1221] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 345.984865][ T1221] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 345.996769][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 346.005685][ T24] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 346.027545][ T24] usb 3-1: USB disconnect, device number 72 [ 346.589836][ T9456] ptrace attach of "./syz-executor exec"[5871] was attempted by "ÉôÔ“€7çE\x09Å» 宬›ò¾áPÕ"[9456] [ 346.989731][ T24] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 347.149865][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 347.158070][ T24] usb 3-1: config 8 has an invalid interface number: 64 but max is 2 [ 347.166421][ T24] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 347.176712][ T24] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 3 [ 347.185944][ T24] usb 3-1: config 8 has no interface number 0 [ 347.192388][ T24] usb 3-1: config 8 interface 64 altsetting 1 endpoint 0x3 has invalid maxpacket 2976, setting to 64 [ 347.203391][ T24] usb 3-1: config 8 interface 64 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 347.233808][ T44] usb 1-1: USB disconnect, device number 66 [ 347.249032][ T24] usb 3-1: config 8 interface 64 has no altsetting 0 [ 347.265686][ T24] usb 3-1: string descriptor 0 read error: -22 [ 347.275730][ T24] usb 3-1: New USB device found, idVendor=04ca, idProduct=3007, bcdDevice=b4.1b [ 347.281131][ T9461] FAULT_INJECTION: forcing a failure. [ 347.281131][ T9461] name failslab, interval 1, probability 0, space 0, times 0 [ 347.285061][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.305182][ T9461] CPU: 0 UID: 0 PID: 9461 Comm: syz.0.1107 Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 347.305217][ T9461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 347.305232][ T9461] Call Trace: [ 347.305242][ T9461] [ 347.305252][ T9461] dump_stack_lvl+0x189/0x250 [ 347.305292][ T9461] ? __pfx____ratelimit+0x10/0x10 [ 347.305326][ T9461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.305358][ T9461] ? __pfx__printk+0x10/0x10 [ 347.305400][ T9461] ? __pfx___might_resched+0x10/0x10 [ 347.305427][ T9461] ? fs_reclaim_acquire+0x7d/0x100 [ 347.305459][ T9461] should_fail_ex+0x414/0x560 [ 347.305494][ T9461] should_failslab+0xa8/0x100 [ 347.305524][ T9461] __kmalloc_noprof+0xcb/0x4f0 [ 347.305543][ T9461] ? kfree+0x4d/0x440 [ 347.305573][ T9461] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 347.305613][ T9461] tomoyo_realpath_from_path+0xe3/0x5d0 [ 347.305649][ T9461] ? tomoyo_domain+0xd9/0x130 [ 347.305687][ T9461] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 347.305713][ T9461] tomoyo_path_number_perm+0x1e8/0x5a0 [ 347.305743][ T9461] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 347.305791][ T9461] ? __lock_acquire+0xab9/0xd20 [ 347.305840][ T9461] ? __fget_files+0x2a/0x420 [ 347.305876][ T9461] ? __fget_files+0x2a/0x420 [ 347.305905][ T9461] ? __fget_files+0x3a0/0x420 [ 347.305933][ T9461] ? __fget_files+0x2a/0x420 [ 347.305967][ T9461] security_file_ioctl+0xcb/0x2d0 [ 347.306004][ T9461] __se_sys_ioctl+0x47/0x170 [ 347.306031][ T9461] do_syscall_64+0xfa/0x3b0 [ 347.306063][ T9461] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.306094][ T9461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.306117][ T9461] ? clear_bhb_loop+0x60/0xb0 [ 347.306146][ T9461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.306167][ T9461] RIP: 0033:0x7f5840b8eb69 [ 347.306187][ T9461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.306206][ T9461] RSP: 002b:00007f58419d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 347.306230][ T9461] RAX: ffffffffffffffda RBX: 00007f5840db5fa0 RCX: 00007f5840b8eb69 [ 347.306245][ T9461] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 0000000000000003 [ 347.306261][ T9461] RBP: 00007f58419d0090 R08: 0000000000000000 R09: 0000000000000000 [ 347.306276][ T9461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.306289][ T9461] R13: 0000000000000000 R14: 00007f5840db5fa0 R15: 00007ffd4a122948 [ 347.306324][ T9461] [ 347.306334][ T9461] ERROR: Out of memory at tomoyo_realpath_from_path. [ 347.552916][ T44] usb 3-1: USB disconnect, device number 73 [ 347.970405][ T1221] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 348.130655][ T1221] usb 1-1: Using ep0 maxpacket: 8 [ 348.139130][ T1221] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 348.148636][ T1221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 348.156924][ T1221] usb 1-1: Product: syz [ 348.161215][ T1221] usb 1-1: Manufacturer: syz [ 348.165868][ T1221] usb 1-1: SerialNumber: syz [ 348.173618][ T1221] usb 1-1: config 0 descriptor?? [ 348.182632][ T1221] gspca_main: sq905-2.14.0 probing 2770:9120 [ 348.586578][ T9469] /dev/rnullb0: Can't open blockdev [ 348.594419][ T1221] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 348.604392][ T1221] sq905 1-1:0.0: probe with driver sq905 failed with error -71 [ 348.614977][ T1221] usb 1-1: USB disconnect, device number 67 [ 350.030480][ T9479] overlayfs: statfs failed on './file0' [ 350.517856][ T1221] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 350.682164][ T1221] usb 1-1: Using ep0 maxpacket: 32 [ 350.689490][ T1221] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 350.699150][ T1221] usb 1-1: config 0 has no interface number 0 [ 350.707931][ T1221] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 350.717159][ T1221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.725205][ T1221] usb 1-1: Product: syz [ 350.729400][ T1221] usb 1-1: Manufacturer: syz [ 350.734092][ T1221] usb 1-1: SerialNumber: syz [ 350.741033][ T1221] usb 1-1: config 0 descriptor?? [ 350.748688][ T1221] smsc95xx v2.0.0 [ 350.752292][ T44] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 350.919141][ T44] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 350.928307][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.940077][ T44] usb 3-1: Product: syz [ 350.944454][ T44] usb 3-1: Manufacturer: syz [ 350.949085][ T44] usb 3-1: SerialNumber: syz [ 350.960083][ T44] usb 3-1: config 0 descriptor?? [ 351.156718][ T1221] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 351.167616][ T1221] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 351.168951][ T44] hso 3-1:0.0: Failed to find INT IN ep [ 351.183749][ T44] usb-storage 3-1:0.0: USB Mass Storage device detected [ 351.390561][ T44] usb 3-1: USB disconnect, device number 74 [ 352.173049][ T5961] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 352.313106][ T5961] usb 3-1: device descriptor read/64, error -71 [ 352.389274][ T1221] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 352.400583][ T1221] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 352.563346][ T5961] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 352.703462][ T5961] usb 3-1: device descriptor read/64, error -71 [ 352.814646][ T5961] usb usb3-port1: attempt power cycle [ 353.163685][ T5961] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 353.194532][ T5961] usb 3-1: device descriptor read/8, error -71 [ 353.433856][ T5961] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 353.467046][ T5961] usb 3-1: device descriptor read/8, error -71 [ 353.586590][ T5961] usb usb3-port1: unable to enumerate USB device [ 353.627668][ T44] usb 1-1: USB disconnect, device number 68 [ 353.829445][ T9507] IPv6: syztnl0: Disabled Multicast RS [ 354.451228][ T9510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 354.972287][ T9531] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1135'. [ 355.057579][ T9534] netlink: 'syz.2.1136': attribute type 2 has an invalid length. [ 355.117131][ T44] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 355.276826][ T44] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 355.286781][ T44] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.301103][ T44] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 355.310266][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 355.318474][ T44] usb 1-1: SerialNumber: syz [ 355.331107][ T44] cdc_ether 1-1:1.0: skipping garbage [ 355.336787][ T44] usb 1-1: bad CDC descriptors [ 355.342235][ T44] usb-storage 1-1:1.0: USB Mass Storage device detected [ 355.352996][ T44] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 355.534774][ T44] usb 1-1: USB disconnect, device number 69 [ 356.177556][ T44] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 356.339865][ T44] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 356.349098][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.357273][ T44] usb 3-1: Product: syz [ 356.361455][ T44] usb 3-1: Manufacturer: syz [ 356.366163][ T44] usb 3-1: SerialNumber: syz [ 356.372866][ T44] usb 3-1: config 0 descriptor?? [ 356.385749][ T5961] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 356.525703][ T5961] usb 1-1: device descriptor read/64, error -71 [ 356.583383][ T44] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 356.765853][ T5961] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 356.895811][ T5961] usb 1-1: device descriptor read/64, error -71 [ 357.007293][ T5961] usb usb1-port1: attempt power cycle [ 357.347238][ T5961] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 357.369428][ T5961] usb 1-1: device descriptor read/8, error -71 [ 357.606899][ T5961] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 357.627410][ T5961] usb 1-1: device descriptor read/8, error -71 [ 357.737935][ T5961] usb usb1-port1: unable to enumerate USB device [ 357.802617][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 357.810285][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 357.818851][ T44] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 357.833721][ T44] usb 3-1: USB disconnect, device number 79 [ 358.636817][ T44] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 358.786901][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 358.794421][ T44] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 358.802700][ T44] usb 3-1: config 0 has no interface number 0 [ 358.811259][ T44] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 358.820458][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.828566][ T44] usb 3-1: Product: syz [ 358.832750][ T44] usb 3-1: Manufacturer: syz [ 358.837468][ T44] usb 3-1: SerialNumber: syz [ 358.844456][ T44] usb 3-1: config 0 descriptor?? [ 358.853196][ T44] smsc95xx v2.0.0 [ 359.187762][ T9552] netlink: 'syz.0.1144': attribute type 2 has an invalid length. [ 359.256456][ T44] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 359.269135][ T44] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 359.567355][ T5961] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 359.721749][ T5961] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 359.731603][ T5961] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.747942][ T5961] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 359.757062][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 359.765386][ T5961] usb 1-1: SerialNumber: syz [ 359.779258][ T5961] cdc_ether 1-1:1.0: skipping garbage [ 359.784708][ T5961] usb 1-1: bad CDC descriptors [ 359.792546][ T5961] usb-storage 1-1:1.0: USB Mass Storage device detected [ 359.804377][ T5961] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 359.982889][ T5961] usb 1-1: USB disconnect, device number 74 [ 360.485296][ T44] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 360.500024][ T44] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 360.582754][ T9560] /dev/rnullb0: Can't open blockdev [ 360.868099][ T5961] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 361.023857][ T5961] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 361.033485][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.042011][ T5961] usb 1-1: Product: syz [ 361.046331][ T5961] usb 1-1: Manufacturer: syz [ 361.051630][ T5961] usb 1-1: SerialNumber: syz [ 361.060441][ T5961] usb 1-1: config 0 descriptor?? [ 361.272503][ T5961] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 361.717326][ T44] usb 3-1: USB disconnect, device number 80 [ 362.288892][ T1221] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 362.428837][ T1221] usb 3-1: device descriptor read/64, error -71 [ 362.490879][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 362.499392][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 362.507774][ T5961] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 362.523187][ T5961] usb 1-1: USB disconnect, device number 75 [ 362.669111][ T1221] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 362.811302][ T1221] usb 3-1: device descriptor read/64, error -71 [ 362.921560][ T1221] usb usb3-port1: attempt power cycle [ 363.140038][ T9579] netlink: 'syz.0.1153': attribute type 72 has an invalid length. [ 363.197056][ T30] audit: type=1326 audit(1754291600.964:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9580 comm="syz.0.1154" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5840b8eb69 code=0x0 [ 363.279504][ T1221] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 363.300037][ T1221] usb 3-1: device descriptor read/8, error -71 [ 363.549521][ T1221] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 363.580108][ T1221] usb 3-1: device descriptor read/8, error -71 [ 363.690121][ T1221] usb usb3-port1: unable to enumerate USB device [ 364.350519][ T1221] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 364.519990][ T1221] usb 1-1: Using ep0 maxpacket: 32 [ 364.528386][ T1221] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 364.537631][ T1221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.545706][ T1221] usb 1-1: Product: syz [ 364.550004][ T1221] usb 1-1: Manufacturer: syz [ 364.554629][ T1221] usb 1-1: SerialNumber: syz [ 364.561978][ T1221] usb 1-1: config 0 descriptor?? [ 364.570192][ T1221] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 365.112269][ T9591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1157'. [ 365.393691][ T9598] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1160'. [ 366.166318][ T9603] netlink: 'syz.2.1162': attribute type 2 has an invalid length. [ 366.630972][ T5961] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 366.781098][ T5961] usb 3-1: device descriptor read/64, error -71 [ 367.021172][ T5961] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 367.151226][ T5961] usb 3-1: device descriptor read/64, error -71 [ 367.271918][ T5961] usb usb3-port1: attempt power cycle [ 367.621413][ T5961] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 367.642034][ T5961] usb 3-1: device descriptor read/8, error -71 [ 367.796065][ T30] audit: type=1326 audit(1754291605.562:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9588 comm="syz.0.1156" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5840b8eb69 code=0x0 [ 367.892903][ T5961] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 367.903673][ T1221] gspca_stk1135: reg_w 0x353 err -71 [ 367.910092][ T1221] gspca_stk1135: serial bus timeout: status=0x00 [ 367.918829][ T1221] gspca_stk1135: Sensor write failed [ 367.924469][ T5961] usb 3-1: device descriptor read/8, error -71 [ 367.930734][ T1221] gspca_stk1135: serial bus timeout: status=0x00 [ 367.937203][ T1221] gspca_stk1135: Sensor write failed [ 367.943174][ T1221] gspca_stk1135: serial bus timeout: status=0x00 [ 367.949542][ T1221] gspca_stk1135: Sensor read failed [ 367.955211][ T1221] gspca_stk1135: serial bus timeout: status=0x00 [ 367.961634][ T1221] gspca_stk1135: Sensor read failed [ 367.966862][ T1221] gspca_stk1135: Detected sensor type unknown (0x0) [ 367.973620][ T1221] gspca_stk1135: serial bus timeout: status=0x00 [ 367.980025][ T1221] gspca_stk1135: Sensor read failed [ 367.985886][ T1221] gspca_stk1135: serial bus timeout: status=0x00 [ 367.992497][ T1221] gspca_stk1135: Sensor read failed [ 367.997769][ T1221] gspca_stk1135: serial bus timeout: status=0x00 [ 368.004264][ T1221] gspca_stk1135: Sensor write failed [ 368.009597][ T1221] gspca_stk1135: serial bus timeout: status=0x00 [ 368.016028][ T1221] gspca_stk1135: Sensor write failed [ 368.021406][ T1221] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 368.032559][ T5961] usb usb3-port1: unable to enumerate USB device [ 368.042120][ T1221] usb 1-1: USB disconnect, device number 76 [ 369.045235][ T9611] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.1165'. [ 369.733923][ T9622] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 370.212682][ T24] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 370.363511][ T24] usb 1-1: no configurations [ 370.368211][ T24] usb 1-1: can't read configurations, error -22 [ 370.502844][ T24] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 370.563899][ T9635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.580647][ T9635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.654541][ T24] usb 1-1: no configurations [ 370.659237][ T24] usb 1-1: can't read configurations, error -22 [ 370.666503][ T24] usb usb1-port1: attempt power cycle [ 371.013099][ T24] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 371.034360][ T24] usb 1-1: no configurations [ 371.039010][ T24] usb 1-1: can't read configurations, error -22 [ 371.173901][ T24] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 371.195742][ T24] usb 1-1: no configurations [ 371.200385][ T24] usb 1-1: can't read configurations, error -22 [ 371.207215][ T24] usb usb1-port1: unable to enumerate USB device [ 371.911858][ T9639] syz.2.1176 (9639): drop_caches: 2 [ 371.991490][ T9642] netlink: 'syz.2.1177': attribute type 10 has an invalid length. [ 371.999849][ T9642] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1177'. [ 372.020474][ T9642] tipc: Started in network mode [ 372.026795][ T9642] tipc: Node identity ff120000000000000000000000000001, cluster identity 4711 [ 372.035915][ T9642] tipc: Enabling of bearer rejected, failed to enable media [ 372.049914][ T9642] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 373.296241][ T5961] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 373.467178][ T5961] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 373.477220][ T5961] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 373.491687][ T5961] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 373.500918][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 373.508985][ T5961] usb 3-1: SerialNumber: syz [ 373.521462][ T5961] cdc_ether 3-1:1.0: skipping garbage [ 373.527181][ T5961] usb 3-1: bad CDC descriptors [ 373.532608][ T5961] usb-storage 3-1:1.0: USB Mass Storage device detected [ 373.543087][ T5961] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 373.727357][ T24] usb 3-1: USB disconnect, device number 89 [ 374.974772][ T5961] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 375.136404][ T5961] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.146751][ T5961] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 375.156625][ T5961] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 375.170818][ T5961] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 375.180670][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 375.188793][ T5961] usb 1-1: SerialNumber: syz [ 375.200558][ T5961] cdc_ether 1-1:1.0: skipping garbage [ 375.206484][ T5961] usb 1-1: bad CDC descriptors [ 375.213354][ T5961] usb-storage 1-1:1.0: USB Mass Storage device detected [ 375.224612][ T5961] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 375.235323][ T1221] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 375.386714][ T1221] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 375.396643][ T1221] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.417676][ T1221] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 375.427620][ T1221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 375.436507][ T1221] usb 3-1: SerialNumber: syz [ 375.450570][ T1221] cdc_ether 3-1:1.0: skipping garbage [ 375.456237][ T1221] usb 3-1: bad CDC descriptors [ 375.461655][ T1221] usb-storage 3-1:1.0: USB Mass Storage device detected [ 375.472913][ T1221] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 375.482646][ T5961] usb 1-1: USB disconnect, device number 81 [ 375.653669][ T24] usb 3-1: USB disconnect, device number 90 [ 377.061594][ T9710] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1202'. [ 378.166193][ T5961] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 378.216180][ T1221] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 378.326333][ T5961] usb 3-1: Using ep0 maxpacket: 32 [ 378.333149][ T5961] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 378.341448][ T5961] usb 3-1: config 0 has no interface number 0 [ 378.350208][ T5961] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 378.359616][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.367834][ T1221] usb 1-1: Using ep0 maxpacket: 32 [ 378.373367][ T5961] usb 3-1: Product: syz [ 378.377678][ T5961] usb 3-1: Manufacturer: syz [ 378.382573][ T5961] usb 3-1: SerialNumber: syz [ 378.390866][ T1221] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 378.399916][ T5961] usb 3-1: config 0 descriptor?? [ 378.405128][ T1221] usb 1-1: config 0 has no interface number 0 [ 378.414219][ T5961] smsc95xx v2.0.0 [ 378.419749][ T1221] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 378.429353][ T1221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.437472][ T1221] usb 1-1: Product: syz [ 378.441673][ T1221] usb 1-1: Manufacturer: syz [ 378.446348][ T1221] usb 1-1: SerialNumber: syz [ 378.453792][ T1221] usb 1-1: config 0 descriptor?? [ 378.461882][ T1221] smsc95xx v2.0.0 [ 378.817986][ T5961] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 378.829149][ T5961] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 378.869730][ T1221] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 378.880697][ T1221] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 380.045172][ T5961] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 380.056388][ T5961] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 380.097420][ T1221] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 380.108778][ T1221] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 381.269844][ T24] usb 3-1: USB disconnect, device number 91 [ 381.347629][ T1221] usb 1-1: USB disconnect, device number 82 [ 382.595842][ T9748] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 383.256213][ T9762] /dev/rnullb0: Can't open blockdev [ 383.262036][ T9761] /dev/rnullb0: Can't open blockdev [ 383.353941][ T9766] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 383.721584][ T9771] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1226'. [ 384.463807][ T9790] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1233'. [ 384.634324][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.641048][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.848742][ T1221] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 385.000895][ T1221] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 385.009004][ T1221] usb 3-1: config 0 has no interface number 0 [ 385.017425][ T1221] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 385.026636][ T1221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.034728][ T1221] usb 3-1: Product: syz [ 385.038972][ T1221] usb 3-1: Manufacturer: syz [ 385.043589][ T1221] usb 3-1: SerialNumber: syz [ 385.051089][ T1221] usb 3-1: config 0 descriptor?? [ 385.259039][ T1221] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 385.271396][ T1221] usb 3-1: USB disconnect, device number 92 [ 385.808695][ T9809] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1240'. [ 385.925833][ T9814] /dev/rnullb0: Can't open blockdev [ 385.993119][ T9816] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.1242'. [ 386.331712][ T9820] random: crng reseeded on system resumption [ 386.559997][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'. [ 386.659427][ T1221] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 386.789494][ T1221] usb 1-1: device descriptor read/64, error -71 [ 386.859536][ T5961] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 387.011718][ T5961] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 387.022122][ T5961] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 387.035215][ T1221] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 387.044154][ T5961] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 387.053767][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 387.061869][ T5961] usb 3-1: SerialNumber: syz [ 387.074312][ T5961] cdc_ether 3-1:1.0: skipping garbage [ 387.079872][ T5961] usb 3-1: bad CDC descriptors [ 387.085332][ T5961] usb-storage 3-1:1.0: USB Mass Storage device detected [ 387.095920][ T5961] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 387.181573][ T1221] usb 1-1: device descriptor read/64, error -71 [ 387.291247][ T1221] usb usb1-port1: attempt power cycle [ 387.341247][ T5961] usb 3-1: USB disconnect, device number 93 [ 387.629752][ T1221] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 387.650527][ T1221] usb 1-1: device descriptor read/8, error -71 [ 387.889807][ T1221] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 387.920665][ T1221] usb 1-1: device descriptor read/8, error -71 [ 388.032387][ T1221] usb usb1-port1: unable to enumerate USB device [ 388.129983][ T24] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 388.291929][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.304191][ T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 388.316214][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.328785][ T24] usb 3-1: config 0 descriptor?? [ 388.540754][ T24] usb 3-1: string descriptor 0 read error: -32 [ 388.549090][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 388.758313][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 388.765894][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 388.773606][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 388.781015][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 388.788358][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 388.796155][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 389.005603][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 389.015103][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 389.022124][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 389.028934][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 389.036817][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 389.043868][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 389.050901][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 389.057880][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 389.065205][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 389.073260][ T24] pwc: Registered as video103. [ 389.080859][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20 [ 389.102377][ T24] usb 3-1: USB disconnect, device number 94 [ 389.569665][ T9841] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 389.580092][ T9841] overlayfs: failed to set xattr on upper [ 389.586313][ T9841] overlayfs: ...falling back to redirect_dir=nofollow. [ 389.593354][ T9841] overlayfs: ...falling back to metacopy=off. [ 389.599511][ T9841] overlayfs: ...falling back to index=off. [ 389.605716][ T9841] overlayfs: ...falling back to uuid=null. [ 389.667050][ T9843] random: crng reseeded on system resumption [ 389.734811][ T9845] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.1252'. [ 390.570894][ T24] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 390.720827][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 390.727723][ T24] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 390.735975][ T24] usb 3-1: config 0 has no interface number 0 [ 390.746629][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 390.755877][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.764946][ T24] usb 3-1: Product: syz [ 390.769146][ T24] usb 3-1: Manufacturer: syz [ 390.773808][ T24] usb 3-1: SerialNumber: syz [ 390.780561][ T24] usb 3-1: config 0 descriptor?? [ 390.788412][ T24] smsc95xx v2.0.0 [ 391.007545][ T9861] random: crng reseeded on system resumption [ 391.203682][ T24] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 391.214620][ T24] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 392.835359][ T24] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -61 [ 392.848804][ T24] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 392.861126][ T9861] Unrecognized hibernate image header format! [ 392.869080][ T9861] PM: hibernation: Image mismatch: architecture specific data [ 393.261616][ T24] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 393.416530][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 393.425695][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.434670][ T24] usb 1-1: Product: syz [ 393.438869][ T24] usb 1-1: Manufacturer: syz [ 393.443650][ T24] usb 1-1: SerialNumber: syz [ 393.450736][ T24] usb 1-1: config 0 descriptor?? [ 393.663458][ T24] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 394.068060][ T5961] usb 3-1: USB disconnect, device number 95 [ 394.131118][ T9872] netlink: 'syz.2.1262': attribute type 1 has an invalid length. [ 394.139824][ T9872] netlink: 'syz.2.1262': attribute type 2 has an invalid length. [ 394.149592][ T9872] /dev/rnullb0: Can't open blockdev [ 394.223576][ T9874] syzkaller1: entered promiscuous mode [ 394.229126][ T9874] syzkaller1: entered allmulticast mode [ 394.792739][ T1221] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 394.946100][ T1221] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 394.956159][ T1221] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 394.973616][ T1221] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 394.982927][ T1221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 394.990958][ T1221] usb 3-1: SerialNumber: syz [ 395.003167][ T1221] cdc_ether 3-1:1.0: skipping garbage [ 395.009031][ T1221] usb 3-1: bad CDC descriptors [ 395.014814][ T1221] usb-storage 3-1:1.0: USB Mass Storage device detected [ 395.028735][ T1221] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 395.088345][ T24] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 395.111180][ T24] usb 1-1: USB disconnect, device number 87 [ 395.268574][ T44] usb 3-1: USB disconnect, device number 96 [ 395.628670][ T9884] random: crng reseeded on system resumption [ 396.123274][ T1221] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 396.274082][ T1221] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 396.283954][ T1221] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.298421][ T1221] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 396.307598][ T1221] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 396.315690][ T1221] usb 1-1: SerialNumber: syz [ 396.325985][ T1221] cdc_ether 1-1:1.0: skipping garbage [ 396.331451][ T1221] usb 1-1: bad CDC descriptors [ 396.337228][ T1221] usb-storage 1-1:1.0: USB Mass Storage device detected [ 396.346670][ T1221] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 396.530759][ T44] usb 1-1: USB disconnect, device number 88 [ 446.086934][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.093541][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 458.246719][ T31] INFO: task syz-executor:5877 blocked for more than 143 seconds. [ 458.254804][ T31] Not tainted 6.16.0-next-20250804-syzkaller #0 [ 458.261772][ T31] Blocked by coredump. [ 458.267014][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 458.275788][ T31] task:syz-executor state:D stack:21672 pid:5877 tgid:5877 ppid:1 task_flags:0x40054c flags:0x00004006 [ 458.287817][ T31] Call Trace: [ 458.291122][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 458.294090][ T31] __schedule+0x1798/0x4cc0 [ 458.298901][ T31] ? __lock_acquire+0xab9/0xd20 [ 458.304253][ T31] ? __lock_acquire+0xab9/0xd20 [ 458.309609][ T31] ? __pfx___schedule+0x10/0x10 [ 458.314816][ T31] ? schedule+0x91/0x360 [ 458.319116][ T31] schedule+0x165/0x360 [ 458.323312][ T31] schedule_preempt_disabled+0x13/0x30 [ 458.330150][ T31] __mutex_lock+0x7e6/0x1360 [ 458.359779][ T31] ? __mutex_lock+0x5b6/0x1360 [ 458.367894][ T31] ? rfkill_unregister+0xc8/0x220 [ 458.372995][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 458.378495][ T31] ? __pfx_device_del+0x10/0x10 [ 458.383391][ T31] ? hci_sock_dev_event+0x42d/0x600 [ 458.392280][ T31] rfkill_unregister+0xc8/0x220 [ 458.397578][ T31] hci_unregister_dev+0x374/0x510 [ 458.402661][ T31] vhci_release+0x80/0xd0 [ 458.411978][ T31] ? __pfx_vhci_release+0x10/0x10 [ 458.417513][ T31] __fput+0x449/0xa70 [ 458.421562][ T31] task_work_run+0x1d4/0x260 [ 458.429798][ T31] ? __pfx_task_work_run+0x10/0x10 [ 458.437254][ T31] ? kmem_cache_free+0x18f/0x400 [ 458.442671][ T31] do_exit+0x6b5/0x2300 [ 458.447363][ T31] ? do_raw_spin_lock+0x121/0x290 [ 458.452446][ T31] ? __pfx_do_exit+0x10/0x10 [ 458.457117][ T31] do_group_exit+0x21c/0x2d0 [ 458.461738][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.467047][ T31] get_signal+0x1286/0x1340 [ 458.471618][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 458.477369][ T31] ? __pfx___x64_sys_wait4+0x10/0x10 [ 458.482697][ T31] ? fput_close_sync+0x119/0x200 [ 458.487754][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 458.493955][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 458.499491][ T31] exit_to_user_mode_loop+0x75/0x110 [ 458.504869][ T31] do_syscall_64+0x2bd/0x3b0 [ 458.509548][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.514832][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.520930][ T31] ? clear_bhb_loop+0x60/0xb0 [ 458.525736][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.531669][ T31] RIP: 0033:0x7f09be384dd7 [ 458.536164][ T31] RSP: 002b:00007ffdab0c03c0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 458.544648][ T31] RAX: fffffffffffffe00 RBX: 0000000000000299 RCX: 00007f09be384dd7 [ 458.552649][ T31] RDX: 0000000040000000 RSI: 00007ffdab0c042c RDI: 00000000ffffffff [ 458.560703][ T31] RBP: 00007ffdab0c042c R08: 0000000000000000 R09: 0000000000000000 [ 458.568755][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000000fb [ 458.576804][ T31] R13: 000055556ccda590 R14: 00000000000480f1 R15: 00007ffdab0c0480 [ 458.584867][ T31] [ 458.587983][ T31] INFO: task kworker/1:5:5955 blocked for more than 143 seconds. [ 458.595779][ T31] Not tainted 6.16.0-next-20250804-syzkaller #0 [ 458.602559][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 458.611294][ T31] task:kworker/1:5 state:D stack:20664 pid:5955 tgid:5955 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 458.623398][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 458.630168][ T31] Call Trace: [ 458.633489][ T31] [ 458.636476][ T31] __schedule+0x1798/0x4cc0 [ 458.641130][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 458.646616][ T31] ? __pfx___schedule+0x10/0x10 [ 458.651511][ T31] ? schedule+0x91/0x360 [ 458.656725][ T31] schedule+0x165/0x360 [ 458.661022][ T31] schedule_preempt_disabled+0x13/0x30 [ 458.666568][ T31] __mutex_lock+0x7e6/0x1360 [ 458.671191][ T31] ? __mutex_lock+0x5b6/0x1360 [ 458.676053][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 458.682333][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 458.687450][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 458.693233][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 458.699127][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 458.705399][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 458.711192][ T31] process_scheduled_works+0xade/0x17b0 [ 458.716835][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 458.722877][ T31] worker_thread+0x8a0/0xda0 [ 458.727547][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 458.733939][ T31] ? __kthread_parkme+0x7b/0x200 [ 458.739002][ T31] kthread+0x70e/0x8a0 [ 458.743319][ T31] ? __pfx_worker_thread+0x10/0x10 [ 458.748515][ T31] ? __pfx_kthread+0x10/0x10 [ 458.753147][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 458.758414][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.763698][ T31] ? __pfx_kthread+0x10/0x10 [ 458.768502][ T31] ret_from_fork+0x3f9/0x770 [ 458.773145][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 458.778378][ T31] ? __switch_to_asm+0x39/0x70 [ 458.783178][ T31] ? __switch_to_asm+0x33/0x70 [ 458.788102][ T31] ? __pfx_kthread+0x10/0x10 [ 458.792819][ T31] ret_from_fork_asm+0x1a/0x30 [ 458.797659][ T31] [ 458.800750][ T31] INFO: task syz.3.964:8942 blocked for more than 143 seconds. [ 458.808483][ T31] Not tainted 6.16.0-next-20250804-syzkaller #0 [ 458.815333][ T31] Blocked by coredump. [ 458.819934][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 458.828666][ T31] task:syz.3.964 state:D stack:25880 pid:8942 tgid:8927 ppid:5877 task_flags:0x40054c flags:0x00004006 [ 458.840651][ T31] Call Trace: [ 458.843936][ T31] [ 458.846950][ T31] __schedule+0x1798/0x4cc0 [ 458.851514][ T31] ? __lock_acquire+0xab9/0xd20 [ 458.856455][ T31] ? __lock_acquire+0xab9/0xd20 [ 458.861340][ T31] ? __pfx___schedule+0x10/0x10 [ 458.866387][ T31] ? schedule+0x91/0x360 [ 458.870747][ T31] schedule+0x165/0x360 [ 458.874971][ T31] schedule_preempt_disabled+0x13/0x30 [ 458.880471][ T31] __mutex_lock+0x7e6/0x1360 [ 458.885145][ T31] ? __mutex_lock+0x5b6/0x1360 [ 458.889956][ T31] ? rfkill_unregister+0xc8/0x220 [ 458.895367][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 458.900447][ T31] ? __pfx_device_del+0x10/0x10 [ 458.905638][ T31] rfkill_unregister+0xc8/0x220 [ 458.910541][ T31] nfc_unregister_device+0x96/0x2a0 [ 458.915803][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 458.921556][ T31] virtual_ncidev_close+0x56/0x90 [ 458.926669][ T31] __fput+0x449/0xa70 [ 458.930695][ T31] task_work_run+0x1d4/0x260 [ 458.935372][ T31] ? __pfx_task_work_run+0x10/0x10 [ 458.940734][ T31] do_exit+0x6b5/0x2300 [ 458.945074][ T31] ? do_raw_spin_lock+0x121/0x290 [ 458.950138][ T31] ? __pfx_do_exit+0x10/0x10 [ 458.954830][ T31] do_group_exit+0x21c/0x2d0 [ 458.959446][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.964850][ T31] get_signal+0x1286/0x1340 [ 458.969413][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 458.975034][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 458.981237][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 458.986790][ T31] exit_to_user_mode_loop+0x75/0x110 [ 458.992110][ T31] do_syscall_64+0x2bd/0x3b0 [ 458.996780][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.002007][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.008136][ T31] ? clear_bhb_loop+0x60/0xb0 [ 459.012839][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.018788][ T31] RIP: 0033:0x7f09be38eb69 [ 459.023231][ T31] RSP: 002b:00007f09bc1f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 459.031711][ T31] RAX: fffffffffffffe00 RBX: 00007f09be5b6088 RCX: 00007f09be38eb69 [ 459.039744][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f09be5b6088 [ 459.047938][ T31] RBP: 00007f09be5b6080 R08: 0000000000000000 R09: 0000000000000000 [ 459.055984][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f09be5b608c [ 459.063979][ T31] R13: 0000000000000000 R14: 00007ffdab0bff80 R15: 00007ffdab0c0068 [ 459.072061][ T31] [ 459.075148][ T31] INFO: task syz.1.980:8978 blocked for more than 144 seconds. [ 459.082707][ T31] Not tainted 6.16.0-next-20250804-syzkaller #0 [ 459.089965][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 459.100892][ T31] task:syz.1.980 state:D stack:25048 pid:8978 tgid:8977 ppid:5868 task_flags:0x400140 flags:0x00004006 [ 459.114345][ T31] Call Trace: [ 459.117868][ T31] [ 459.120834][ T31] __schedule+0x1798/0x4cc0 [ 459.125486][ T31] ? __lock_acquire+0xab9/0xd20 [ 459.130373][ T31] ? __lock_acquire+0xab9/0xd20 [ 459.135413][ T31] ? __pfx___schedule+0x10/0x10 [ 459.140324][ T31] ? schedule+0x91/0x360 [ 459.144803][ T31] schedule+0x165/0x360 [ 459.148998][ T31] schedule_preempt_disabled+0x13/0x30 [ 459.154465][ T31] __mutex_lock+0x7e6/0x1360 [ 459.159523][ T31] ? __mutex_lock+0x5b6/0x1360 [ 459.164332][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 459.169701][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 459.174984][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.180218][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 459.186233][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 459.192593][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 459.198428][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 459.203572][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 459.209418][ T31] rfkill_set_block+0x1d2/0x440 [ 459.214309][ T31] rfkill_fop_write+0x44b/0x570 [ 459.219392][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 459.224876][ T31] ? security_kernfs_init_security+0x230/0x290 [ 459.231097][ T31] ? rw_verify_area+0x255/0x4d0 [ 459.237326][ T31] ? __lock_acquire+0xab9/0xd20 [ 459.242224][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 459.247763][ T31] vfs_write+0x27e/0xb30 [ 459.252043][ T31] ? __pfx_vfs_write+0x10/0x10 [ 459.256861][ T31] ? __fget_files+0x2a/0x420 [ 459.261480][ T31] ? __fget_files+0x2a/0x420 [ 459.266138][ T31] ? __fget_files+0x3a0/0x420 [ 459.270844][ T31] ? __fget_files+0x2a/0x420 [ 459.275542][ T31] ksys_write+0x145/0x250 [ 459.279902][ T31] ? __pfx_ksys_write+0x10/0x10 [ 459.284849][ T31] ? rcu_is_watching+0x15/0xb0 [ 459.290579][ T31] ? do_syscall_64+0xbe/0x3b0 [ 459.295340][ T31] do_syscall_64+0xfa/0x3b0 [ 459.299879][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.305817][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.311975][ T31] ? clear_bhb_loop+0x60/0xb0 [ 459.316765][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.322687][ T31] RIP: 0033:0x7f8cbab8eb69 [ 459.327204][ T31] RSP: 002b:00007f8cbba73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 459.335746][ T31] RAX: ffffffffffffffda RBX: 00007f8cbadb5fa0 RCX: 00007f8cbab8eb69 [ 459.343752][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000008 [ 459.351879][ T31] RBP: 00007f8cbac11df1 R08: 0000000000000000 R09: 0000000000000000 [ 459.359912][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.368050][ T31] R13: 0000000000000000 R14: 00007f8cbadb5fa0 R15: 00007ffee36432d8 [ 459.376127][ T31] [ 459.379202][ T31] INFO: task syz-executor:9163 blocked for more than 144 seconds. [ 459.387087][ T31] Not tainted 6.16.0-next-20250804-syzkaller #0 [ 459.393866][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 459.402663][ T31] task:syz-executor state:D stack:28040 pid:9163 tgid:9163 ppid:1 task_flags:0x400040 flags:0x00004000 [ 459.414727][ T31] Call Trace: [ 459.418065][ T31] [ 459.421026][ T31] __schedule+0x1798/0x4cc0 [ 459.425633][ T31] ? __lock_acquire+0xab9/0xd20 [ 459.430524][ T31] ? __lock_acquire+0xab9/0xd20 [ 459.435524][ T31] ? __pfx___schedule+0x10/0x10 [ 459.440427][ T31] ? schedule+0x91/0x360 [ 459.444782][ T31] schedule+0x165/0x360 [ 459.448990][ T31] schedule_preempt_disabled+0x13/0x30 [ 459.454471][ T31] __mutex_lock+0x7e6/0x1360 [ 459.459574][ T31] ? __mutex_lock+0x5b6/0x1360 [ 459.464411][ T31] ? rfkill_register+0x37/0x8e0 [ 459.469480][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 459.474555][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 459.480058][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 459.485654][ T31] ? device_initialize+0x24b/0x440 [ 459.490780][ T31] rfkill_register+0x37/0x8e0 [ 459.495751][ T31] hci_register_dev+0x3f5/0x890 [ 459.500670][ T31] vhci_create_device+0x39c/0x6e0 [ 459.505881][ T31] vhci_write+0x3ce/0x4a0 [ 459.510259][ T31] vfs_write+0x5c6/0xb30 [ 459.514547][ T31] ? __pfx_vhci_write+0x10/0x10 [ 459.519538][ T31] ? __pfx_vfs_write+0x10/0x10 [ 459.524423][ T31] ? count_memcg_event_mm+0x21/0x260 [ 459.529853][ T31] ksys_write+0x145/0x250 [ 459.534249][ T31] ? __pfx_ksys_write+0x10/0x10 [ 459.539326][ T31] ? do_syscall_64+0xbe/0x3b0 [ 459.544057][ T31] do_syscall_64+0xfa/0x3b0 [ 459.549731][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.555181][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.561277][ T31] ? clear_bhb_loop+0x60/0xb0 [ 459.566046][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.571966][ T31] RIP: 0033:0x7fa90af8d5e0 [ 459.576544][ T31] RSP: 002b:00007ffe64e9dbb8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 459.585071][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fa90af8d5e0 [ 459.593066][ T31] RDX: 0000000000000002 RSI: 00007ffe64e9dbca RDI: 00000000000000ca [ 459.601334][ T31] RBP: 00007fa90b1b6738 R08: 0000000000000000 R09: 00007fa90bced6c0 [ 459.609429][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 459.617593][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 459.625677][ T31] [ 459.628798][ T31] INFO: task syz-executor:9182 blocked for more than 144 seconds. [ 459.637354][ T31] Not tainted 6.16.0-next-20250804-syzkaller #0 [ 459.644144][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 459.652923][ T31] task:syz-executor state:D stack:26968 pid:9182 tgid:9182 ppid:1 task_flags:0x400040 flags:0x00004000 [ 459.665018][ T31] Call Trace: [ 459.668329][ T31] [ 459.671360][ T31] __schedule+0x1798/0x4cc0 [ 459.675981][ T31] ? __lock_acquire+0xab9/0xd20 [ 459.680901][ T31] ? __lock_acquire+0xab9/0xd20 [ 459.685847][ T31] ? __pfx___schedule+0x10/0x10 [ 459.690787][ T31] ? schedule+0x91/0x360 [ 459.695129][ T31] schedule+0x165/0x360 [ 459.699335][ T31] schedule_preempt_disabled+0x13/0x30 [ 459.705052][ T31] __mutex_lock+0x7e6/0x1360 [ 459.709683][ T31] ? __mutex_lock+0x5b6/0x1360 [ 459.714461][ T31] ? rfkill_register+0x37/0x8e0 [ 459.719401][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 459.724460][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 459.729852][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 459.735310][ T31] ? device_initialize+0x24b/0x440 [ 459.740447][ T31] rfkill_register+0x37/0x8e0 [ 459.745246][ T31] hci_register_dev+0x3f5/0x890 [ 459.750134][ T31] vhci_create_device+0x39c/0x6e0 [ 459.755273][ T31] vhci_write+0x3ce/0x4a0 [ 459.759641][ T31] vfs_write+0x5c6/0xb30 [ 459.763929][ T31] ? __pfx_vhci_write+0x10/0x10 [ 459.769030][ T31] ? __pfx_vfs_write+0x10/0x10 [ 459.773838][ T31] ? count_memcg_event_mm+0x21/0x260 [ 459.779210][ T31] ksys_write+0x145/0x250 [ 459.783585][ T31] ? __pfx_ksys_write+0x10/0x10 [ 459.788529][ T31] ? do_syscall_64+0xbe/0x3b0 [ 459.793243][ T31] do_syscall_64+0xfa/0x3b0 [ 459.797855][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.803086][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.809266][ T31] ? clear_bhb_loop+0x60/0xb0 [ 459.813973][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.820109][ T31] RIP: 0033:0x7f7232d8d5e0 [ 459.824565][ T31] RSP: 002b:00007ffe35f51908 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 459.833060][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f7232d8d5e0 [ 459.841088][ T31] RDX: 0000000000000002 RSI: 00007ffe35f5191a RDI: 00000000000000ca [ 459.849217][ T31] RBP: 00007f7232fb6738 R08: 0000000000000000 R09: 00007f7233aed6c0 [ 459.857287][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 459.865356][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 459.873402][ T31] [ 459.876533][ T31] [ 459.876533][ T31] Showing all locks held in the system: [ 459.884265][ T31] 1 lock held by khungtaskd/31: [ 459.889411][ T31] #0: ffffffff8e539f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 459.899380][ T31] 2 locks held by kworker/u8:4/64: [ 459.904538][ T31] 2 locks held by kworker/u8:8/3559: [ 459.909936][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 459.920019][ T31] #1: ffff8880b8624008 (per_cpu_ptr(&psi_seq, cpu)){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 459.931121][ T31] 2 locks held by getty/5626: [ 459.935909][ T31] #0: ffff88814df2e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 459.945798][ T31] #1: ffffc900036cc2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 459.956056][ T31] 1 lock held by syz-executor/5877: [ 459.961306][ T31] #0: ffffffff8fc24c28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 459.971528][ T31] 3 locks held by kworker/1:5/5955: [ 459.976817][ T31] #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 459.987934][ T31] #1: ffffc9000a9cfbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 460.001506][ T31] #2: ffffffff8fc24c28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 460.013143][ T31] 2 locks held by syz.3.964/8942: [ 460.018244][ T31] #0: ffff8880268fc100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 460.028164][ T31] #1: ffffffff8fc24c28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 460.038817][ T31] 2 locks held by syz.1.980/8978: [ 460.043874][ T31] #0: ffffffff8fc24c28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 460.054113][ T31] #1: ffff8880268fc100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 460.063958][ T31] 1 lock held by syz.2.1007/9149: [ 460.069133][ T31] #0: ffffffff8fc24c28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 460.079342][ T31] 2 locks held by syz-executor/9163: [ 460.084628][ T31] #0: ffff888056f41118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 460.095045][ T31] #1: ffffffff8fc24c28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 460.105085][ T31] 2 locks held by syz-executor/9182: [ 460.110382][ T31] #0: ffff8880335b8918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 460.120505][ T31] #1: ffffffff8fc24c28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 460.130673][ T31] 2 locks held by syz-executor/9628: [ 460.136035][ T31] #0: ffff88807be3f918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 460.146377][ T31] #1: ffffffff8fc24c28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 460.156454][ T31] 2 locks held by syz-executor/9656: [ 460.161767][ T31] #0: ffff88807cca9918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 460.171971][ T31] #1: ffffffff8fc24c28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 460.182013][ T31] 2 locks held by syz.2.1271/9897: [ 460.187177][ T31] #0: ffffffff8edd4128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 460.195748][ T31] #1: ffffffff8fc24c28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 460.205866][ T31] 1 lock held by syz.0.1272/9903: [ 460.210924][ T31] #0: ffffffff8edd4128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 460.219491][ T31] 1 lock held by syz-executor/9907: [ 460.224708][ T31] #0: ffffffff8edd4128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 460.233272][ T31] 1 lock held by syz-executor/9909: [ 460.238567][ T31] #0: ffffffff8edd4128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 460.247097][ T31] 1 lock held by syz-executor/9911: [ 460.252310][ T31] #0: ffffffff8edd4128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 460.261046][ T31] 1 lock held by syz-executor/9913: [ 460.266299][ T31] #0: ffffffff8edd4128 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 460.274861][ T31] [ 460.277211][ T31] ============================================= [ 460.277211][ T31] [ 460.285792][ T31] NMI backtrace for cpu 1 [ 460.285813][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 460.285837][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 460.285850][ T31] Call Trace: [ 460.285859][ T31] [ 460.285868][ T31] dump_stack_lvl+0x189/0x250 [ 460.285905][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.285935][ T31] ? __pfx__printk+0x10/0x10 [ 460.285978][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 460.286006][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 460.286034][ T31] ? __pfx__printk+0x10/0x10 [ 460.286067][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 460.286094][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 460.286122][ T31] watchdog+0xf60/0xfa0 [ 460.286148][ T31] ? watchdog+0x1e2/0xfa0 [ 460.286175][ T31] kthread+0x70e/0x8a0 [ 460.286210][ T31] ? __pfx_watchdog+0x10/0x10 [ 460.286229][ T31] ? __pfx_kthread+0x10/0x10 [ 460.286261][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 460.286287][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.286313][ T31] ? __pfx_kthread+0x10/0x10 [ 460.286344][ T31] ret_from_fork+0x3f9/0x770 [ 460.286374][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 460.286407][ T31] ? __switch_to_asm+0x39/0x70 [ 460.286425][ T31] ? __switch_to_asm+0x33/0x70 [ 460.286442][ T31] ? __pfx_kthread+0x10/0x10 [ 460.286473][ T31] ret_from_fork_asm+0x1a/0x30 [ 460.286509][ T31] [ 460.286517][ T31] Sending NMI from CPU 1 to CPUs 0: [ 460.433862][ C0] NMI backtrace for cpu 0 [ 460.433879][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 460.433900][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 460.433911][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 460.433942][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 5a 26 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 460.433958][ C0] RSP: 0018:ffffffff8e207d80 EFLAGS: 000002c6 [ 460.433974][ C0] RAX: 0db932c740e61d00 RBX: ffffffff8196d308 RCX: 0db932c740e61d00 [ 460.433987][ C0] RDX: 0000000000000001 RSI: ffffffff8dc916eb RDI: ffffffff8c04cf80 [ 460.434000][ C0] RBP: ffffffff8e207eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 460.434012][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fe4b230 [ 460.434025][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1c52a20 [ 460.434037][ C0] FS: 0000000000000000(0000) GS:ffff8881257de000(0000) knlGS:0000000000000000 [ 460.434051][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 460.434063][ C0] CR2: 00007ffdd8dcffec CR3: 00000000337f8000 CR4: 00000000003526f0 [ 460.434078][ C0] Call Trace: [ 460.434086][ C0] [ 460.434092][ C0] default_idle+0x13/0x20 [ 460.434108][ C0] default_idle_call+0x74/0xb0 [ 460.434124][ C0] do_idle+0x1e8/0x510 [ 460.434149][ C0] ? __pfx_do_idle+0x10/0x10 [ 460.434178][ C0] cpu_startup_entry+0x44/0x60 [ 460.434198][ C0] rest_init+0x2de/0x300 [ 460.434216][ C0] start_kernel+0x3a9/0x410 [ 460.434240][ C0] x86_64_start_reservations+0x24/0x30 [ 460.434257][ C0] x86_64_start_kernel+0x143/0x1c0 [ 460.434285][ C0] common_startup_64+0x13e/0x147 [ 460.434310][ C0] [ 460.434995][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 460.435014][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 460.435042][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 460.435057][ T31] Call Trace: [ 460.435067][ T31] [ 460.435078][ T31] dump_stack_lvl+0x99/0x250 [ 460.435115][ T31] ? __asan_memcpy+0x40/0x70 [ 460.435150][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.435185][ T31] ? __pfx__printk+0x10/0x10 [ 460.435233][ T31] vpanic+0x281/0x750 [ 460.435264][ T31] ? __pfx_vpanic+0x10/0x10 [ 460.435292][ T31] ? preempt_schedule+0xae/0xc0 [ 460.435326][ T31] ? preempt_schedule_common+0x83/0xd0 [ 460.435382][ T31] panic+0xb9/0xc0 [ 460.435407][ T31] ? __pfx_panic+0x10/0x10 [ 460.435438][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 460.435473][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 460.435505][ T31] watchdog+0xf9f/0xfa0 [ 460.435538][ T31] ? watchdog+0x1e2/0xfa0 [ 460.435568][ T31] kthread+0x70e/0x8a0 [ 460.435608][ T31] ? __pfx_watchdog+0x10/0x10 [ 460.435632][ T31] ? __pfx_kthread+0x10/0x10 [ 460.435668][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 460.435698][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.435730][ T31] ? __pfx_kthread+0x10/0x10 [ 460.435766][ T31] ret_from_fork+0x3f9/0x770 [ 460.435807][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 460.435844][ T31] ? __switch_to_asm+0x39/0x70 [ 460.435866][ T31] ? __switch_to_asm+0x33/0x70 [ 460.435886][ T31] ? __pfx_kthread+0x10/0x10 [ 460.435922][ T31] ret_from_fork_asm+0x1a/0x30 [ 460.435964][ T31] [ 460.769776][ T31] Kernel Offset: disabled [ 460.774102][ T31] Rebooting in 86400 seconds..