last executing test programs: 3m3.340227849s ago: executing program 0 (id=16): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x14, r1, 0x1, 0x80, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2805}, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000012c0)) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000100)={0x3, 0x8, 0x1000, &(0x7f00000002c0)=""/4096}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x0, 0x100000, 0xc, 0x0, 0x4002004c4, 0x80000001, 0x45c5, 0xc595, 0x7, 0x20000000002, 0xffffffffffffffff, 0x4, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000000)="1c681411f7a496c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000001a0000200000000000201500", 0x0, 0x48) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.freeze\x00', 0x0, 0x0) setsockopt$MRT_TABLE(r5, 0x0, 0xcf, &(0x7f0000000180)=0xfe, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000001c0)={0x10003, 0x4, 0x80a0000, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m3.138666504s ago: executing program 0 (id=17): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@remote, 0x0, 0x0, 0x2, 0x0, 0x2}, {0x0, 0xfffffffffffffffe, 0x400, 0x1000, 0xdffffffffffffffb, 0x2000000, 0xfffffffffffffffc}, {0x7, 0x0, 0xff}, 0x6, 0x0, 0x1}, {{@in=@local, 0x0, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x4}}, 0xe8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000ff8c00000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 3m2.829167181s ago: executing program 0 (id=18): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4048804) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@remote, @remote, @rand_addr=' \x01\x00', 0x8, 0xd, 0xfffb, 0x100, 0x1000, 0x80020}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) sendmsg$unix(r5, &(0x7f0000000580)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000240)="667b192fe5bf601b652a995906bb3071d08e046e3f448fc8d90dea80c315e2efb39d5821278fbe8bddd146892eea1e8f47008cab934aaa3d41bd0a998e73c2ebbac13cbbda014eb97c490e46059511492a854d41e2a0363ac39e4473a6f68fcc39dade7820bef394", 0x68}, {&(0x7f00000002c0)="905982148e95f414aef9f7905d49ce1fbf2c802b274c0d5944f6a072d3ebd3b9c7df6d300f203d", 0x27}, {&(0x7f0000000300)="f54fb73d219ef64feb4e8c5b5470cba31dcb3250919539d8c2f238c2fca9f9aedd11c90f403d506f60514da1a4973e1853e08e659202959f7c495575b99a921037a770baf64116f3876cff8798bd2181a62b16e06d87bbe3dbc1a94f005158676ca24689b4de8549f988b1fb206d5e3205cdb3698c857e62f928b90927c6cf1ed6197f4c01f74774535b1ae41902c717b79bfd5c1236a20dcb2ea92808da7956269aa7b4b43ccbcf69f89e39ffa467fd52563c6be2e65dcfbc6ad30ee592a7781b", 0xc1}, {&(0x7f0000000400)="4ce4230b33ae508f0799d2eb265b4799c5d271329a9361d7eb32f32d547b8fb03201485767", 0x25}], 0x1000000000000228, &(0x7f0000000700)=ANY=[@ANYBLOB="24000000000000090100000001000000", @ANYRES64=r5, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x28, 0x4841}, 0x44080) r6 = socket(0x2, 0x80805, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x83, &(0x7f00000011c0)={r7}, &(0x7f0000000180)=0x8) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r3, 0xfffffffc, 0x0, 0x30, 0x0, @ib={0x1b, 0x8, 0x5, {"060400"}, 0xf, 0x2, 0x4}, @ib={0x1b, 0x0, 0x0, {"00000000000000000001000000000001"}, 0x80000001}}}, 0x118) r8 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000100)={0x0, 'nicvf0\x00', {}, 0x8}) 3m2.798288246s ago: executing program 0 (id=19): syz_usb_connect(0x3, 0x36, &(0x7f0000002700)={{0x12, 0x1, 0x310, 0xdd, 0x71, 0xc4, 0x40, 0x451, 0x505f, 0xa55f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x9, 0xf0, 0x1, [{{0x9, 0x4, 0x6b, 0x8c, 0x2, 0xff, 0x5d, 0x81, 0xb, [], [{{0x9, 0x5, 0xc, 0x4, 0x10, 0xa, 0x2b, 0x8}}, {{0x9, 0x5, 0x4, 0x1a, 0x40, 0x2, 0x5, 0x3}}]}}]}}]}}, &(0x7f00000031c0)={0xa, &(0x7f0000002c00)={0xa, 0x6, 0x250, 0x4, 0x8, 0xdf, 0x20, 0x9}, 0x12, &(0x7f0000002c40)={0x5, 0xf, 0x12, 0x2, [@generic={0x3, 0x10, 0xa}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x5, 0x8, 0x1}]}}) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d30000000000000050018000100000008000300fd0f0000080004000000000008000d000600000008000e"], 0x54}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) connect$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x3, @loopback}}, 0x1e) read$nci(r3, &(0x7f0000000100)=""/107, 0x6b) write$nci(r3, &(0x7f0000000100)=ANY=[], 0x4) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/75, 0x4b}, {&(0x7f0000000240)=""/124, 0x7c}], 0x3, 0x639d, 0x5) write$proc_mixer(r3, &(0x7f0000000080)=[{'LINE', @val={' \'', 'Synth Capture Switch'}}], 0x31) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x20200) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064d1, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000003340)=[0x0]}) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000000c0)={r4, 0x0, {0x0, 0x0, 0x0, 0x1000000, 0x9, 0x0, 0x0, 0x17, 0x14, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4b69d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "3bc529791f04004dc252840b0000000000f2fffff2845d9ee84ef80b7407cfbe", [0xfffffffffeff7ff9]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1) write$cgroup_subtree(r3, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a740673a2481f9c0e0a"], 0xfe33) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f00000002c0)=0x2) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/106, 0x6a}, {&(0x7f0000001f00)=""/4102, 0x1006}], 0x2}, 0x0) 2m59.699357066s ago: executing program 0 (id=37): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) dup(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x7) (async) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x800) (async) r3 = socket$caif_stream(0x25, 0x1, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) close(r5) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f00000002c0)={'pim6reg\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f00000000c0)=[{}, {0x80000000}], &(0x7f0000000100)}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000280)={r6, &(0x7f00000001c0), &(0x7f0000000200)}) 2m59.268985144s ago: executing program 0 (id=42): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x1) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f014, 0x105}) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x5050, 0x3}, 0x18, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448", 0xd}, {&(0x7f0000000140)="ebe3a0", 0x3}], 0x2}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) landlock_restrict_self(r2, 0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) read$FUSE(r5, &(0x7f0000001900)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace(0x8, r6) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ptrace(0x4208, r7) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) landlock_restrict_self(r9, 0x0) syz_pidfd_open(r8, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b4e000/0x2000)=nil, &(0x7f0000b07000/0x4000)=nil, &(0x7f0000f5b000/0x4000)=nil, &(0x7f00009a8000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000e10000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000300)="507c0261abae82b7801f55cf047e484b1759d9f725dbd762d1658b9d5fb19ab6822396bd639518d41cdff53a2d9adfa602d5b85dc8b84366d01bfe7c1e6b0b835e255bca103e9e5e6f3285cbea9d5063eb197b8d7975437c1f0c26fc50313d0a51c5b596657a3ff9c77ca7db869059cb7ae79239a443df7769c226d2acc84d797f2aed8ca70bde511b3a5f23647a7f7480ac71dfaa6224e390cb33e4d2f4e2e75d13d1ddf668010bd286045e698fac34f9fcd3207e7390831024bce9172b831d00a47195dca791e65da47c75a6fbb3d5ff44b55ee60a71167f8e9f2082a362958936b39d9b6a63d66d31a1d5f8", 0xed, r0}, 0x68) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r10 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x900, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r10, 0xc0884113, &(0x7f0000000600)={0x0, 0x395c, 0xcab, 0x0, 0x7, 0x1000, 0x3, 0x100000001, 0x3, 0x1fed, 0x855}) 2m58.883031931s ago: executing program 32 (id=42): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x1) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f014, 0x105}) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x5050, 0x3}, 0x18, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448", 0xd}, {&(0x7f0000000140)="ebe3a0", 0x3}], 0x2}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) landlock_restrict_self(r2, 0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) read$FUSE(r5, &(0x7f0000001900)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace(0x8, r6) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ptrace(0x4208, r7) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) landlock_restrict_self(r9, 0x0) syz_pidfd_open(r8, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b4e000/0x2000)=nil, &(0x7f0000b07000/0x4000)=nil, &(0x7f0000f5b000/0x4000)=nil, &(0x7f00009a8000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000e10000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000300)="507c0261abae82b7801f55cf047e484b1759d9f725dbd762d1658b9d5fb19ab6822396bd639518d41cdff53a2d9adfa602d5b85dc8b84366d01bfe7c1e6b0b835e255bca103e9e5e6f3285cbea9d5063eb197b8d7975437c1f0c26fc50313d0a51c5b596657a3ff9c77ca7db869059cb7ae79239a443df7769c226d2acc84d797f2aed8ca70bde511b3a5f23647a7f7480ac71dfaa6224e390cb33e4d2f4e2e75d13d1ddf668010bd286045e698fac34f9fcd3207e7390831024bce9172b831d00a47195dca791e65da47c75a6fbb3d5ff44b55ee60a71167f8e9f2082a362958936b39d9b6a63d66d31a1d5f8", 0xed, r0}, 0x68) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r10 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x900, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r10, 0xc0884113, &(0x7f0000000600)={0x0, 0x395c, 0xcab, 0x0, 0x7, 0x1000, 0x3, 0x100000001, 0x3, 0x1fed, 0x855}) 7.99533875s ago: executing program 1 (id=1023): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904"], 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x1, 0xfffffffb, 0x52, @loopback, @empty, 0x8, 0x700, 0x3, 0x3ff}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r8, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x8010) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010002000020000000002500000008000300", @ANYRES32=r13, @ANYBLOB="08002600b41400000a000600ffffffffffff000008003500000000000a003400020202020202000034005080110001005a4ac6ae0963ee7ffa96cb120900000009000100408922a0bd00000005000200010000"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r16, @ANYBLOB="050003"], 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa0, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x101}, 0x400c040) connect$bt_sco(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 6.001870736s ago: executing program 1 (id=1035): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f751ae40510410341eef010203010902240001000000000904000002aa0f600009050e5ccf9ee58d2664a704020000000000"], 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x33, 0xb, '\x00', [@jumbo={0xc2, 0x4, 0x7b}, @jumbo, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x8}, @generic={0x7, 0xd, "d642f925a6732519a40ca9b8d9"}, @enc_lim={0x4, 0x1, 0x40}, @pad1, @calipso={0x7, 0x18, {0x3, 0x4, 0xa, 0x7, [0x66, 0x3]}}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0x68) 4.698124987s ago: executing program 1 (id=1043): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x315ed1d74a70ee57, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4044) syz_usb_connect(0x2, 0x5f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000cd861e2042070920ca440102030109024d0001000010000904ee"], 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_drvinfo={0x51, "dabb6386f6d73094a90d1fdb507195e485f544228032f04eff6b7454b702570f", "6aabb3257fbc4eb5a702000000a9b0bfed5a88511bfa36cd4d6206598017dffa", "3323b7b8cd277c616d9206e6fd2d56ff18c6adb2b5f90e30b32158c846051324", "193d5bf82fba97515dda05e0637ba9fbf81e49d4f1b5508a4c956379155801bc", "d87badb8a826b9f7474cf73cc0ade30d0cd9c5a00f9025f55d18c2764e77d3fe", "14d3094839a1d8e1ef22cffc"}}) 4.467237457s ago: executing program 2 (id=1046): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0xf8b, 0x2, 0x3, 0x6, 0x8}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xc0) 3.855387604s ago: executing program 4 (id=1050): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) 3.74450046s ago: executing program 4 (id=1051): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4000881) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000080)={0x5}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) recvmmsg(r6, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2004}], 0x1, 0x40000002, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x20004800) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001d"], 0xb8}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) 3.3574848s ago: executing program 1 (id=1053): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x4e2b, 0x1, 0x0, 0x3, 0x2, 0x20, 0x0, 0x3a, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x2b}, @in=@dev={0xac, 0x14, 0x14, 0x33}, {0x2, 0x0, 0x8, 0xa, 0x6}, {0x100000000000, 0x0, 0x2, 0x4f}, {0xc, 0x0, 0x2}, 0x70bd28, 0x0, 0x2, 0x4, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'morus1280-sse2\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x18, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x9, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.944721362s ago: executing program 3 (id=1054): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fadvise64(r2, 0xc, 0x4, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x5, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x34f0a87871305eb2}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c) 2.928426916s ago: executing program 3 (id=1055): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x804, 0x0, 0x0, 0x0, 0x267a4e37}, 0xc) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x8e, 0x5, 0x8d, 0x40, 0x5c6, 0x9212, 0xfb9f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x1, 0xc0, 0x9, [{{0x9, 0x4, 0x5e, 0x5, 0x0, 0xb4, 0x35, 0xa4, 0xea}}]}}]}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f47"]) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000240)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x1400, 0x0, 0x2, 0x1, 0x0, @private=0xa010100, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x15, 0x4, 0x3, 0x9, 0xd, 0x66, 0x81, 0x0, 0x2, 0x2, @empty, @multicast2, {[@generic={0x7, 0x9, "b5e129e4e85851"}, @lsrr={0x83, 0xf, 0x8b, [@multicast2, @loopback, @rand_addr=0x64010100]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0x8, [@loopback, @multicast1]}, @lsrr={0x83, 0x13, 0xc, [@private=0xa010100, @multicast1, @rand_addr=0x64010101, @remote]}, @lsrr={0x83, 0x3, 0x33}]}}}}}, 0x7e) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x7, 0x6, 0x6, 0x2c, 0x10003, 0x41, 0x400400200cc0, 0x100ffd, 0xffffffffffffffff, 0x9, 0xb43e, 0x3, 0xf, 0x40000000007, 0x68, 0x5], 0x100000, 0x174bb3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) pipe(&(0x7f0000000080)) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 2.840032565s ago: executing program 4 (id=1056): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SIOCRSACCEPT(r2, 0x89e3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000200)={r3, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x6, 0x3, 0x9, 0x21, 0xa, 0x10001, 0x9}, &(0x7f0000000300)=0x9c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000340)={r5, 0x27}, 0x8) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x4, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4c008) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f0000000480)={0x7200, r4, 'id0\x00'}) mount$tmpfs(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x8400, &(0x7f0000000580)={[{@huge_never}, {@quota}, {@size={'size', 0x3d, [0x38]}}], [{@permit_directio}, {@subj_type={'subj_type', 0x3d, 'nl80211\x00'}}, {@pcr={'pcr', 0x3d, 0x32}}, {@fsmagic={'fsmagic', 0x3d, 0x2000000000000}}, {@obj_user={'obj_user', 0x3d, 'wlan0\x00'}}, {@appraise}]}) (async) mount$tmpfs(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x8400, &(0x7f0000000580)={[{@huge_never}, {@quota}, {@size={'size', 0x3d, [0x38]}}], [{@permit_directio}, {@subj_type={'subj_type', 0x3d, 'nl80211\x00'}}, {@pcr={'pcr', 0x3d, 0x32}}, {@fsmagic={'fsmagic', 0x3d, 0x2000000000000}}, {@obj_user={'obj_user', 0x3d, 'wlan0\x00'}}, {@appraise}]}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) getsockname(r8, &(0x7f00000006c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000740)=0x80) ioctl$PPPIOCGIDLE64(r6, 0x8010743f, &(0x7f0000000780)) (async) ioctl$PPPIOCGIDLE64(r6, 0x8010743f, &(0x7f0000000780)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000007c0)={0x9, 0x15b5141dcd5f1018, 0x2, 0x7, r5}, &(0x7f0000000800)=0x10) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000007c0)={0x9, 0x15b5141dcd5f1018, 0x2, 0x7, r5}, &(0x7f0000000800)=0x10) r9 = socket$xdp(0x2c, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000840)={{0x1, 0x1, 0x18, r9, {0x6}}, './file1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r6) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r6) ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000000900)=0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000980)={0x0, 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000ac0)={&(0x7f0000000880), 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x54, r11, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x8}, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r12}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r13}, @NL80211_ATTR_PID={0x8, 0x52, r14}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x13}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000ac0)={&(0x7f0000000880), 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x54, r11, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x8}, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r12}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r13}, @NL80211_ATTR_PID={0x8, 0x52, r14}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x13}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x34, 0xb, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0xb00, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x40004) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x34, 0xb, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0xb00, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x40004) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f0000000d00)={r5}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f0000000d00)={r5}, 0x8) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000d40)={{0xa, 0x4e24, 0x1, @local, 0x4}, {0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, 0x0, {[0x81, 0x7f, 0x80000000, 0xf, 0x9, 0x2, 0x0, 0x80]}}, 0x5c) (async) setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000d40)={{0xa, 0x4e24, 0x1, @local, 0x4}, {0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, 0x0, {[0x81, 0x7f, 0x80000000, 0xf, 0x9, 0x2, 0x0, 0x80]}}, 0x5c) close(r8) 2.693083952s ago: executing program 4 (id=1057): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="020981072600000028bd7000fcdbdf2505001a007f000001000000000000000000000000fc00000000000000000000000000000002001414010015004e240000030017003c00000002004e21ac1414aa00000000000000000800120001000100b26b6e000b00000006003200fb0211000800000000000000ac1e000100000000000000000000000000000000000000000000ffffac2114aa010014004000000003000500ffa0000002004e207f000001000000000000000002001000000004d6000004d200000000070019000000000002004e23ffffffff00000000000000000a004e2380000001ff0200000000000000000000000000010200000000000000010016004e20000005000600328000000a004e21000003ff00000000000000000000000000000000b50b000000000000"], 0x130}}, 0x40000) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x202280, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}], 0x1, 0xc8d1) socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) read(r4, &(0x7f0000000080)=""/186, 0xba) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1223, 0x3f07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xc, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="402345000000451161635d2ce9daa7602630c686377369efa824c3371300000000b009001000000000007708dfd51207b2908fceb485a8995d9125"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x262}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x54, r7, 0x10, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac09, 0xfac05, 0xfac08, 0xfac0d, 0xfac00]}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_PBSS={0x4}]}, 0x54}}, 0x4840) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)=']{\x00', 0x0, r9) syz_clone(0x40000200, &(0x7f0000000000)="4078747f9f3668d0903b1a88323474cb34cbeed3c2d961205cb22434bd242e34bae12597724e5fe12c3fdc95ae5c725eca0a4f9595d95d341515ab013e068999f654f8397c4e0c", 0x47, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="1fc8c42cdec2216b346ffae8e46a293b7e7ac7cd682205c53c7fea85aee3cff174") socket(0x11, 0x80000, 0x800003) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r10, 0x6, 0x1e, 0x0, &(0x7f0000000080)) 2.398143825s ago: executing program 2 (id=1058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet(0x2, 0x2, 0x1) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r1], 0x1c}}, 0x804) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080001400000000d0500020007040000080006400000000208000440000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 2.091980289s ago: executing program 3 (id=1059): mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) utime(&(0x7f0000000340)='./file1\x00', &(0x7f00000003c0)={0x6, 0x8000}) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000100)={0x98f907, 0x9}) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r2, 0x0, 0x80, 0x6) r4 = syz_open_dev$sg(&(0x7f0000000400), 0x7f, 0x400a00) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x18, 0x1412, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x20000000) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x5c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000040) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000140)='FREEZING\x00', 0x9) 1.934991025s ago: executing program 4 (id=1060): r0 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x6, 0x40103) ioctl$VIDIOC_SUBDEV_G_CROP(r5, 0xc038563b, &(0x7f0000000140)={0x0, 0x0, {0x0, 0x5, 0x8001, 0x1}}) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f0000000100)={[0x12e]}, 0x8) r6 = fanotify_init(0x81, 0x101000) fanotify_mark(r6, 0x105, 0x2a, r1, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = dup2(r7, r7) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) setpriority(0x0, r0, 0x5) read$FUSE(r6, &(0x7f00000057c0)={0x2020}, 0x2020) 1.652358046s ago: executing program 1 (id=1061): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f00000000c0)) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000240)=@ethtool_pauseparam={0x12, 0x3, 0x6, 0x2d}}) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0x5428, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x84}}, 0x20050800) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x84}}, 0x20050800) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000000100)={0x10003, 0xffffffff, 0x3, 0x10001, 0x0, 0x9}) (async) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000000100)={0x10003, 0xffffffff, 0x3, 0x10001, 0x0, 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x50) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) (async) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x154, 0x10, 0x1, 0x4000000, 0x0, {{@in6=@private1, @in=@private}, {@in, 0x0, 0x32}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) syz_init_net_socket$x25(0x9, 0x5, 0x18) 1.503164385s ago: executing program 2 (id=1062): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r0, 0x4068aea3, &(0x7f00000000c0)) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r1, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x12, 0x7, 0x300, 0x8}, @ipv6=@tipc_packet={0xf, 0x6, "e9e018", 0x190, 0x6, 0x7f, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@srh={0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x8}, @hopopts={0x73, 0x6, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0xa, 0xba, [0x9, 0xffffffffffffffff, 0x3, 0x8000]}}, @jumbo={0xc2, 0x4, 0x1}, @pad1]}, @routing={0x2c, 0x6, 0x2, 0x0, 0x0, [@empty, @dev={0xfe, 0x80, '\x00', 0x19}, @dev={0xfe, 0x80, '\x00', 0x3f}]}, @srh={0x1, 0x4, 0x4, 0x2, 0x9, 0x8, 0x4, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x2e}]}, @fragment={0x2c, 0x0, 0x3, 0x1, 0x0, 0x1, 0x67}, @routing={0x87, 0xa, 0x2, 0x2, 0x0, [@local, @loopback, @mcast2, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x6c, 0xc, 0x4, 0x6, 0x4, 0x50, 0x3, [@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x19}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x2, 0x1ff, 0x0, 0x2, 0x4, 0x1, 0x3, 0x9, 0x2, 0x3, 0x4e21, 0x4e20}, 0x3, 0x6}}}}}}, 0x1c6) (async) syz_80211_inject_frame(&(0x7f0000002480)=@broadcast, &(0x7f00000024c0)=ANY=[@ANYBLOB="10040100ffffffffffff0802110000000802117e001e31000c0008000100"], 0x1e) (async) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x2}, @device_b, @device_a, @random="ede373f2162e", {0xf, 0x3}}, @tdls_disc_req={0xc, 0xa, {0x0, {0x65, 0x12, {@from_mac=@broadcast, @broadcast}}}}}, 0x2f) 1.341109803s ago: executing program 2 (id=1063): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000183b9220b113420016583857030109021b0001000000000904ca00017a8bbf0009050200ff03000000dce701b8d8d181f54446f11ec65c99d1c5d4fb1ee6a7e5360cfd71244f77a7559176919b1a6834ea5998708faa34aeae5dc788430b3b7ac60e931f8734c57c45399c0a69b4274f6ed644827d190d0e979b77efae9f63999ec052b530a0c9b146286121b3dea4"], 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000480)=[@in={0x2, 0x4e23, @remote}], 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e01000000010902120001000000000904"], 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000183b9220b113420016583857030109021b0001000000000904ca00017a8bbf0009050200ff03000000dce701b8d8d181f54446f11ec65c99d1c5d4fb1ee6a7e5360cfd71244f77a7559176919b1a6834ea5998708faa34aeae5dc788430b3b7ac60e931f8734c57c45399c0a69b4274f6ed644827d190d0e979b77efae9f63999ec052b530a0c9b146286121b3dea4"], 0x0) (async) socket$inet6(0xa, 0x5, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000480)=[@in={0x2, 0x4e23, @remote}], 0x10) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e01000000010902120001000000000904"], 0x0) (async) 1.146822137s ago: executing program 3 (id=1064): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40000}}, [0x1, 0x6, 0x6, 0x101, 0x5, 0xffffffff, 0x0, 0x1, 0xfffffffffffffffc, 0xd, 0x7fffffffffffffff, 0x3, 0x8, 0x2cb, 0x75b]}, &(0x7f0000000280)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={r2, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0xfffffffc, @remote}]}, &(0x7f0000000180)=0x10) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX]) (async) write$sndseq(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r4, r4, 0x0, 0x200000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r5, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f}}, 0x50) write$FUSE_INTERRUPT(r0, &(0x7f00000002c0)={0x10, 0x0, r7}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') (async) mkdir(&(0x7f0000000240)='./file0\x00', 0x1) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x109080, 0x4d) (async, rerun: 32) socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) 977.406114ms ago: executing program 3 (id=1065): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast2, 0xbfd}}, {{0xa, 0x4e24, 0x20, @loopback, 0xfffffe01}}}, 0x108) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000300)=""/228, &(0x7f0000000080)=0xe4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a00154001", 0x21}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000000c0), 0x10) sendto$l2tp(r2, &(0x7f0000000280)="e508000d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @private=0xa010102}, 0x10) recvfrom$l2tp(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002100)='./binderfs2/custom1\x00', 0x2, 0x0) r3 = userfaultfd(0x80800) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x2, 0x4, 0xffff1000, 0x1000, &(0x7f00005b7000/0x1000)=nil}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x33fe0) sendto$inet6(r1, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffbf}, 0x1c) 425.065312ms ago: executing program 4 (id=1066): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x4c, r2, 0x1, 0x70bd2d, 0xff7ffffd, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab, 0xfffffffc}}, {0x8, 0xb, 0xb6b}, {0x6, 0x11, 0x3}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000050}, 0x4044040) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xd1) ioctl$TCFLSH(r3, 0x540b, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xc0) 418.204829ms ago: executing program 2 (id=1067): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040)={0x6, 0x1, 0x2, 0x2, 0x80000000, 0xfb, 0x8}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x4c02) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)=@multiplanar_overlay={0x475, 0x2, 0x4, 0x100, 0x1, {}, {0x4, 0x0, 0x5e, 0x2, 0x6, 0x6, "3a62836e"}, 0x2, 0x3, {&(0x7f0000000380)=[{0x60000000, 0x6, {0x1}, 0x8}, {0x80c, 0x5, {0xf}, 0x5}]}, 0x6, 0x0, r1}) r2 = creat(&(0x7f0000000400)='./file0\x00', 0xf5) openat$cgroup_int(r2, &(0x7f0000000800)='cpu.weight.nice\x00', 0x2, 0x0) r3 = semget$private(0x0, 0xa, 0x3c8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f00000004c0)={0x7, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e20, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r7, 0x0, 0x2f, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @local}}}, 0x108) semctl$SETALL(r3, 0x0, 0x9, &(0x7f0000000080)) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000300)=""/78) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="fe", 0x1a000}], 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000100)=0x5, 0x4) socket(0x11, 0x3, 0x3a) r9 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r9, 0x1, 0x11, 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000480)={'bridge0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) 79.04041ms ago: executing program 2 (id=1068): syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="2201ff0007ff1a40d8048200b7ce01028297090212000100000000090400000002"], 0x0) 13.103159ms ago: executing program 1 (id=1069): madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3) r0 = socket$alg(0x26, 0x5, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r3, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="e6", 0x1}], 0x1}}], 0x1, 0x24040890) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="c599cb384f14f4289d159e38794088df29f370faf741b5a5561295d323144d4fa15f72c424f20be63f5e2556ce1f569f0b8905641a26851d5b4933a31bc35a5d5f706696f3e05d93cc2deb705ff58eae8f830a162ccd60ca368909348bd21a3042ee8d1daa1aa260806799b6194d4d26", 0x70}, {&(0x7f00000002c0)="1b541280a25cc1f80531d9e5e4f36ab6684396ca19960c10670204d1e1413594b5f79ef366dcc01195ddb76034c0c43de544cdefb17c6bc59aa49d719ef08bb93908f4eecff9d9ec865b9e678daab5c5674f293fc696ef039e6e16ddbbbdecdc00873932110ccfdfb37994de0367601c5705c90b22b27ecb528d35d964a7774333c641ad356b512187fb7efe48a6", 0x8e}], 0x2, 0x0, 0x0, 0x1f000801}, 0x20008000) 0s ago: executing program 3 (id=1070): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000034c0)='ns/mnt\x00') ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f00000035c0)={{}, "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"}) r3 = socket(0x10, 0x803, 0x20000000) write(r3, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@dev, @in6=@private0}}, {{@in6=@mcast1}, 0x0, @in6=@private1}}, &(0x7f0000000100)=0xe8) setuid(r1) kernel console output (not intermixed with test programs): 30883][ T24] usb 2-1: device descriptor read/8, error -71 [ 201.239509][ T24] usb usb2-port1: unable to enumerate USB device [ 201.266143][ T7851] netlink: 'syz.3.607': attribute type 10 has an invalid length. [ 201.321760][ T7858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.338013][ T7858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.467354][ T7851] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 201.997710][ T24] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 202.162910][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 202.201053][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 202.227903][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 202.247177][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 202.257395][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.280497][ T24] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 202.291294][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.303579][ T24] usb 5-1: Product: syz [ 202.311425][ T24] usb 5-1: Manufacturer: syz [ 202.316624][ T24] usb 5-1: SerialNumber: syz [ 202.338684][ T24] usb 5-1: config 0 descriptor?? [ 202.352265][ T24] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input22 [ 202.561293][ T7861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.588368][ T7861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.601634][ T7861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.636702][ T7861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.670701][ T7875] program syz.3.615 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.695324][ T1219] usb 5-1: USB disconnect, device number 46 [ 203.017684][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 203.115512][ T7882] netlink: 'syz.3.618': attribute type 4 has an invalid length. [ 203.123440][ T7882] netlink: 152 bytes leftover after parsing attributes in process `syz.3.618'. [ 203.140386][ T7882] wlan1: mtu less than device minimum [ 203.198962][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 203.219393][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 203.254375][ T24] usb 3-1: config 190 has an invalid interface number: 42 but max is 0 [ 203.273092][ T24] usb 3-1: config 190 has an invalid descriptor of length 0, skipping remainder of the config [ 203.293449][ T24] usb 3-1: config 190 has no interface number 0 [ 203.307375][ T24] usb 3-1: config 190 interface 42 has no altsetting 0 [ 203.319728][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=77.12 [ 203.337532][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.354409][ T24] usb 3-1: Product: syz [ 203.359382][ T24] usb 3-1: Manufacturer: syz [ 203.366843][ T24] usb 3-1: SerialNumber: syz [ 203.377890][ T30] audit: type=1804 audit(1757102942.948:38): pid=7887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.620" name="/newroot/119/bus/file0" dev="overlay" ino=756 res=1 errno=0 [ 203.399636][ C1] vkms_vblank_simulate: vblank timer overrun [ 203.615524][ T7877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.625848][ T7877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.717630][ T984] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 203.872519][ T984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.877404][ T24] usb 3-1: USB disconnect, device number 52 [ 203.891100][ T984] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 203.917042][ T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.945875][ T984] usb 5-1: config 0 descriptor?? [ 204.370958][ T7889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.380323][ T7889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.408663][ T984] usbhid 5-1:0.0: can't add hid device: -71 [ 204.428734][ T984] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 204.453394][ T984] usb 5-1: USB disconnect, device number 47 [ 204.767689][ T24] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 204.887620][ T984] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 204.940274][ T24] usb 2-1: config 0 has an invalid interface number: 168 but max is 0 [ 204.949175][ T24] usb 2-1: config 0 has no interface number 0 [ 204.955676][ T24] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=dd.b8 [ 204.978070][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.998752][ T24] usb 2-1: config 0 descriptor?? [ 205.019814][ T24] lan78xx 2-1:0.168 (unnamed net_device) (uninitialized): USB bus speed not supported [ 205.040949][ T24] lan78xx 2-1:0.168: probe with driver lan78xx failed with error -5 [ 205.056203][ T984] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.081456][ T984] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.084753][ T30] audit: type=1804 audit(1757102944.658:39): pid=7907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.629" name="/newroot/121/bus/file0" dev="overlay" ino=776 res=1 errno=0 [ 205.102010][ T984] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 205.124448][ T984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.137138][ T984] usb 3-1: Product: syz [ 205.137772][ T7909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.144319][ T984] usb 3-1: Manufacturer: syz [ 205.154554][ T7909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.159502][ T984] usb 3-1: SerialNumber: syz [ 205.208820][ T7909] Bluetooth: MGMT ver 1.23 [ 205.222625][ T7903] comedi comedi3: comedi_config --init_data is deprecated [ 205.234452][ T24] usb 2-1: USB disconnect, device number 54 [ 205.396519][ T984] usb 3-1: 0:2 : does not exist [ 205.415400][ T984] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 205.449610][ T984] usb 3-1: USB disconnect, device number 53 [ 205.781155][ T7920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.792165][ T7920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.803661][ T24] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 205.871720][ T7921] netlink: 60 bytes leftover after parsing attributes in process `syz.3.634'. [ 205.881261][ T7920] netlink: 60 bytes leftover after parsing attributes in process `syz.3.634'. [ 205.947705][ T24] usb 5-1: device descriptor read/64, error -71 [ 206.197738][ T24] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 206.337654][ T24] usb 5-1: device descriptor read/64, error -71 [ 206.445555][ T7927] Sensor A: ================= START STATUS ================= [ 206.456614][ T7927] Sensor A: Test Pattern: 75% Colorbar [ 206.458155][ T24] usb usb5-port1: attempt power cycle [ 206.464377][ T7927] Sensor A: Show Information: All [ 206.473131][ T7927] Sensor A: Vertical Flip: false [ 206.478167][ T7927] Sensor A: Horizontal Flip: false [ 206.483307][ T7927] Sensor A: Brightness: 128 [ 206.487909][ T7927] Sensor A: Contrast: 128 [ 206.492379][ T7927] Sensor A: Hue: 0 [ 206.496228][ T7927] Sensor A: Saturation: 128 [ 206.501253][ T7927] Sensor A: ================== END STATUS ================== [ 206.511834][ T7928] serio: Serial port ptm1 [ 206.633045][ T7928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.642474][ T7928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.807739][ T24] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 206.834825][ T24] usb 5-1: device descriptor read/8, error -71 [ 206.851926][ T30] audit: type=1804 audit(1757102946.428:40): pid=7932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.639" name="/newroot/170/bus/file0" dev="overlay" ino=1065 res=1 errno=0 [ 206.967795][ T5949] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 207.077654][ T24] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 207.098286][ T24] usb 5-1: device descriptor read/8, error -71 [ 207.129936][ T5949] usb 2-1: Using ep0 maxpacket: 8 [ 207.146377][ T5949] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 207.156363][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.165112][ T5949] usb 2-1: Product: syz [ 207.179875][ T5949] usb 2-1: Manufacturer: syz [ 207.187226][ T5949] usb 2-1: SerialNumber: syz [ 207.199008][ T5949] usb 2-1: config 0 descriptor?? [ 207.210148][ T5949] gspca_main: se401-2.14.0 probing 047d:5003 [ 207.216614][ T24] usb usb5-port1: unable to enumerate USB device [ 207.614748][ T5949] gspca_se401: ExtraFeatures: 48 [ 207.620005][ T5949] gspca_se401: Frame size: 8192x0 bayer [ 207.823296][ T5949] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input23 [ 207.838710][ T5949] usb 2-1: USB disconnect, device number 55 [ 208.106758][ T7965] fuse: Bad value for 'user_id' [ 208.114361][ T7965] fuse: Bad value for 'user_id' [ 208.125136][ T7965] fuse: Bad value for 'user_id' [ 208.130354][ T7965] fuse: Bad value for 'user_id' [ 208.136057][ T7965] fuse: Bad value for 'user_id' [ 208.141630][ T7965] fuse: Bad value for 'user_id' [ 208.537762][ T5949] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 208.608670][ T5870] Bluetooth: hci4: command 0x1003 tx timeout [ 208.615953][ T5861] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 208.622719][ T1219] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 208.677673][ T5949] usb 3-1: device descriptor read/64, error -71 [ 208.797768][ T1219] usb 2-1: Using ep0 maxpacket: 32 [ 208.804825][ T1219] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 208.814308][ T1219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.825325][ T1219] usb 2-1: config 0 descriptor?? [ 208.836138][ T1219] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 208.917778][ T5949] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 208.957645][ T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 209.047801][ T5949] usb 3-1: device descriptor read/64, error -71 [ 209.112384][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.122261][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 209.135687][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 209.145195][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.167943][ T10] usb 5-1: config 0 descriptor?? [ 209.177062][ T5949] usb usb3-port1: attempt power cycle [ 209.439072][ T7976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.454354][ T7976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.464659][ T7976] fuse: Unknown parameter '!4:/]Хa9Fކ?\)qY*8NHmˇcvzOP3h|ks(a'YZϓ/]\}xt[`uN˕Fcۚ]_{0i0x0000000000000005' [ 209.494493][ T1219] gspca_nw80x: reg_w err -71 [ 209.504642][ T1219] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 209.515708][ T1219] usb 2-1: USB disconnect, device number 56 [ 209.537673][ T5949] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 209.568658][ T5949] usb 3-1: device descriptor read/8, error -71 [ 209.721223][ T10] kovaplus 0003:1E7D:2D50.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 209.807622][ T5949] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 209.848434][ T5949] usb 3-1: device descriptor read/8, error -71 [ 209.962339][ T5949] usb usb3-port1: unable to enumerate USB device [ 210.221413][ T7993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.233884][ T7993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.408698][ T5949] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 210.589346][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.599503][ T5949] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 210.609274][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.622128][ T5949] usb 2-1: config 0 descriptor?? [ 210.838086][ T7991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.859225][ T7991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.950963][ T7996] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 210.960763][ T7996] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 211.098407][ T5949] itetech 0003:258A:6A88.0010: unbalanced collection at end of report description [ 211.121026][ T5949] itetech 0003:258A:6A88.0010: probe with driver itetech failed with error -22 [ 211.290335][ T7991] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 211.303621][ T7991] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 211.332199][ T1219] usb 2-1: USB disconnect, device number 57 [ 211.717677][ T5949] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 211.727699][ T5865] Bluetooth: hci4: command 0x1003 tx timeout [ 211.727746][ T5861] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 211.827149][ T10] kovaplus 0003:1E7D:2D50.000F: couldn't init struct kovaplus_device [ 211.849566][ T5949] usb 3-1: device descriptor read/64, error -71 [ 211.867851][ T10] kovaplus 0003:1E7D:2D50.000F: couldn't install mouse [ 211.883901][ T10] kovaplus 0003:1E7D:2D50.000F: probe with driver kovaplus failed with error -71 [ 211.901842][ T10] usb 5-1: USB disconnect, device number 52 [ 211.934387][ T8008] capability: warning: `syz.4.661' uses 32-bit capabilities (legacy support in use) [ 212.087856][ T5949] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 212.130432][ T5861] Bluetooth: hci1: command 0x0406 tx timeout [ 212.136334][ T5865] Bluetooth: hci2: command 0x0406 tx timeout [ 212.197745][ T984] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 212.227732][ T5949] usb 3-1: device descriptor read/64, error -71 [ 212.344689][ T5949] usb usb3-port1: attempt power cycle [ 212.362097][ T984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 212.374538][ T984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 212.385651][ T984] usb 2-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 212.397012][ T984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.397740][ T24] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 212.418779][ T984] usb 2-1: config 0 descriptor?? [ 212.426102][ T8010] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 212.590999][ T24] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 212.600953][ T24] usb 5-1: config 0 has no interface number 0 [ 212.607129][ T24] usb 5-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9 [ 212.624956][ T24] usb 5-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid maxpacket 1123, setting to 64 [ 212.647260][ T24] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 212.654358][ T8026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.662008][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.671085][ T8026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.676274][ T24] usb 5-1: Product: syz [ 212.689248][ T24] usb 5-1: Manufacturer: syz [ 212.693888][ T24] usb 5-1: SerialNumber: syz [ 212.707116][ T24] usb 5-1: config 0 descriptor?? [ 212.708029][ T5949] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 212.721924][ T8015] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 212.724906][ T8026] netlink: 168 bytes leftover after parsing attributes in process `syz.3.667'. [ 212.739453][ T5949] usb 3-1: device descriptor read/8, error -71 [ 212.850907][ T8010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.867460][ T8010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.907092][ T984] glorious 0003:22D4:1503.0011: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.1-1/input0 [ 212.990431][ T5949] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 213.019239][ T5949] usb 3-1: device descriptor read/8, error -71 [ 213.087272][ T8010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.098739][ T8010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.127125][ T984] usb 2-1: USB disconnect, device number 58 [ 213.142062][ T5949] usb usb3-port1: unable to enumerate USB device [ 213.678801][ T8050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.690516][ T8050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.692350][ T984] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 213.707803][ T8050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.717738][ T8050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.726561][ T8050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.736593][ T8050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.746253][ T8050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.755544][ T8050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.765518][ T8050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.776149][ T8050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.790746][ T8050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.801014][ T8050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.827727][ T984] usb 2-1: device descriptor read/64, error -71 [ 214.067674][ T984] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 214.199424][ T984] usb 2-1: device descriptor read/64, error -71 [ 214.310747][ T984] usb usb2-port1: attempt power cycle [ 214.657770][ T984] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 214.689073][ T984] usb 2-1: device descriptor read/8, error -71 [ 214.927648][ T984] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 214.948705][ T984] usb 2-1: device descriptor read/8, error -71 [ 215.060668][ T984] usb usb2-port1: unable to enumerate USB device [ 215.092464][ T24] qcserial 5-1:0.49: Qualcomm USB modem converter detected [ 215.107784][ T5869] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 215.112096][ T24] usb 5-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 215.137998][ T24] usb 5-1: USB disconnect, device number 53 [ 215.189082][ T24] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 215.205613][ T24] qcserial 5-1:0.49: device disconnected [ 215.282972][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.308855][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.332838][ T5869] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 215.342994][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.370693][ T5869] usb 3-1: config 0 descriptor?? [ 215.570081][ T8084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.579414][ T8084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.592438][ T5870] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 215.769111][ T1219] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 215.797040][ T5869] usbhid 3-1:0.0: can't add hid device: -71 [ 215.808078][ T5869] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 215.821488][ T5869] usb 3-1: USB disconnect, device number 62 [ 215.927764][ T1219] usb 5-1: Using ep0 maxpacket: 32 [ 215.935454][ T1219] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.947197][ T1219] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 215.956461][ T1219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.966487][ T1219] usb 5-1: config 0 descriptor?? [ 215.980880][ T1219] hub 5-1:0.0: USB hub found [ 216.180702][ T1219] hub 5-1:0.0: 5 ports detected [ 216.202769][ T1219] hub 5-1:0.0: insufficient power available to use all downstream ports [ 216.317116][ T8089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.327587][ T8089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.387265][ T8080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.396430][ T8080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.405576][ T1219] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 216.413527][ T1219] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 216.429589][ T1219] usbhid 5-1:0.0: can't add hid device: -71 [ 216.435835][ T1219] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 216.470372][ T1219] usb 5-1: USB disconnect, device number 54 [ 216.867613][ T5954] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 217.047733][ T5954] usb 2-1: Using ep0 maxpacket: 16 [ 217.055387][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.067100][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.077024][ T5954] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 217.086646][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.100433][ T5954] usb 2-1: config 0 descriptor?? [ 217.278005][ T5869] usb 3-1: new low-speed USB device number 63 using dummy_hcd [ 217.427645][ T5869] usb 3-1: Invalid ep0 maxpacket: 32 [ 217.558661][ T5869] usb 3-1: new low-speed USB device number 64 using dummy_hcd [ 217.583094][ T5954] konepure 0003:1E7D:2DB4.0012: unknown main item tag 0x0 [ 217.591761][ T5954] konepure 0003:1E7D:2DB4.0012: unknown main item tag 0x0 [ 217.603791][ T5954] konepure 0003:1E7D:2DB4.0012: unknown main item tag 0x0 [ 217.618367][ T5954] konepure 0003:1E7D:2DB4.0012: unknown main item tag 0x0 [ 217.648451][ T5954] konepure 0003:1E7D:2DB4.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.1-1/input0 [ 217.739467][ T5869] usb 3-1: Invalid ep0 maxpacket: 32 [ 217.757198][ T5869] usb usb3-port1: attempt power cycle [ 218.046000][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.691'. [ 218.128064][ T5869] usb 3-1: new low-speed USB device number 65 using dummy_hcd [ 218.158966][ T5869] usb 3-1: Invalid ep0 maxpacket: 32 [ 218.295125][ T5869] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 218.340545][ T5869] usb 3-1: Invalid ep0 maxpacket: 32 [ 218.346828][ T5949] usb 2-1: USB disconnect, device number 63 [ 218.363922][ T5869] usb usb3-port1: unable to enumerate USB device [ 218.747598][ T1219] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 218.897622][ T1219] usb 5-1: Using ep0 maxpacket: 8 [ 218.897646][ T8111] netlink: 'syz.1.693': attribute type 1 has an invalid length. [ 218.921893][ T1219] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 218.940054][ T1219] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.952027][ T1219] usb 5-1: Product: syz [ 218.956333][ T1219] usb 5-1: Manufacturer: syz [ 218.961362][ T1219] usb 5-1: SerialNumber: syz [ 218.988057][ T1219] usb 5-1: config 0 descriptor?? [ 218.997954][ T1219] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 219.008537][ T1219] dvb-usb: bulk message failed: -22 (2/0) [ 219.016254][ T1219] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 219.027008][ T1219] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 219.037407][ T1219] usb 5-1: media controller created [ 219.070042][ T1219] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 219.096715][ T1219] dvb-usb: bulk message failed: -22 (1/0) [ 219.104902][ T1219] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 219.125859][ T1219] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24 [ 219.142222][ T1219] dvb-usb: schedule remote query interval to 50 msecs. [ 219.149724][ T1219] dvb-usb: bulk message failed: -22 (2/0) [ 219.155453][ T1219] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 219.210085][ T1219] dvb-usb: bulk message failed: -22 (1/0) [ 219.216504][ T1219] dvb-usb: error while querying for an remote control event. [ 219.288272][ T1219] dvb-usb: bulk message failed: -22 (1/0) [ 219.295776][ T1219] dvb-usb: error while querying for an remote control event. [ 219.357620][ T1219] dvb-usb: bulk message failed: -22 (1/0) [ 219.365161][ T1219] dvb-usb: error while querying for an remote control event. [ 219.367791][ T5869] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 219.438023][ T1219] dvb-usb: bulk message failed: -22 (1/0) [ 219.444855][ T1219] dvb-usb: error while querying for an remote control event. [ 219.491536][ T8128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.500857][ T8128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.517902][ T1219] dvb-usb: bulk message failed: -22 (1/0) [ 219.524445][ T1219] dvb-usb: error while querying for an remote control event. [ 219.529426][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 219.547590][ T5869] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 219.556849][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.568484][ T5869] usb 2-1: config 0 descriptor?? [ 219.587731][ T1219] dvb-usb: bulk message failed: -22 (1/0) [ 219.593540][ T1219] dvb-usb: error while querying for an remote control event. [ 219.659137][ T1219] dvb-usb: bulk message failed: -22 (1/0) [ 219.665123][ T1219] dvb-usb: error while querying for an remote control event. [ 219.714899][ T8128] netlink: 88 bytes leftover after parsing attributes in process `syz.3.699'. [ 219.726414][ T8128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.735408][ T8128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.743381][ T1219] dvb-usb: bulk message failed: -22 (1/0) [ 219.749238][ T1219] dvb-usb: error while querying for an remote control event. [ 219.807708][ T1219] dvb-usb: bulk message failed: -22 (1/0) [ 219.813673][ T1219] dvb-usb: error while querying for an remote control event. [ 219.880170][ T1219] dvb-usb: bulk message failed: -22 (1/0) [ 219.886018][ T1219] dvb-usb: error while querying for an remote control event. [ 219.947610][ T1219] dvb-usb: bulk message failed: -22 (1/0) [ 219.953508][ T1219] dvb-usb: error while querying for an remote control event. [ 219.987421][ T5869] microsoft 0003:045E:009D.0013: item fetching failed at offset 2/5 [ 219.996334][ T5869] microsoft 0003:045E:009D.0013: parse failed [ 220.002772][ T5869] microsoft 0003:045E:009D.0013: probe with driver microsoft failed with error -22 [ 220.018678][ T1219] dvb-usb: bulk message failed: -22 (1/0) [ 220.024555][ T1219] dvb-usb: error while querying for an remote control event. [ 220.088518][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 220.094301][ T24] dvb-usb: error while querying for an remote control event. [ 220.157590][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 220.163464][ T24] dvb-usb: error while querying for an remote control event. [ 220.184856][ T8115] overlayfs: conflicting lowerdir path [ 220.192228][ T1219] usb 2-1: USB disconnect, device number 64 [ 220.227675][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 220.233725][ T24] dvb-usb: error while querying for an remote control event. [ 220.297566][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 220.310302][ T24] dvb-usb: error while querying for an remote control event. [ 220.343361][ T8132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.352489][ T8132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.378371][ T1219] dvb-usb: bulk message failed: -22 (1/0) [ 220.384329][ T1219] dvb-usb: error while querying for an remote control event. [ 220.447574][ T1219] dvb-usb: bulk message failed: -22 (1/0) [ 220.453392][ T1219] dvb-usb: error while querying for an remote control event. [ 220.519563][ T1219] dvb-usb: bulk message failed: -22 (1/0) [ 220.525526][ T1219] dvb-usb: error while querying for an remote control event. [ 220.587611][ T1219] dvb-usb: bulk message failed: -22 (1/0) [ 220.593475][ T1219] dvb-usb: error while querying for an remote control event. [ 220.657604][ T1219] dvb-usb: bulk message failed: -22 (1/0) [ 220.663440][ T1219] dvb-usb: error while querying for an remote control event. [ 220.728638][ T1219] dvb-usb: bulk message failed: -22 (1/0) [ 220.744126][ T1219] dvb-usb: error while querying for an remote control event. [ 220.752006][ T8136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.702'. [ 220.822187][ T1219] dvb-usb: bulk message failed: -22 (1/0) [ 220.828501][ T1219] dvb-usb: error while querying for an remote control event. [ 220.889003][ T1219] dvb-usb: bulk message failed: -22 (1/0) [ 220.903553][ T1219] dvb-usb: error while querying for an remote control event. [ 220.984166][ T1219] dvb-usb: bulk message failed: -22 (1/0) [ 220.996210][ T8143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.007859][ T1219] dvb-usb: error while querying for an remote control event. [ 221.020416][ T8143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.069863][ T1219] dvb-usb: bulk message failed: -22 (1/0) [ 221.083029][ T1219] dvb-usb: error while querying for an remote control event. [ 221.158926][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 221.161225][ T5869] usb 5-1: USB disconnect, device number 55 [ 221.165051][ T5929] dvb-usb: error while querying for an remote control event. [ 221.265032][ T5869] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 221.357732][ T1219] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 221.367884][ T984] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 221.382406][ T8153] 9pnet: Found fid 0 not clunked [ 221.497654][ T984] usb 3-1: device descriptor read/64, error -71 [ 221.541694][ T1219] usb 2-1: unable to get BOS descriptor or descriptor too short [ 221.567382][ T1219] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 221.583692][ T1219] usb 2-1: can't read configurations, error -71 [ 221.650938][ T8157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.663098][ T8157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.737650][ T984] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 221.867720][ T984] usb 3-1: device descriptor read/64, error -71 [ 221.977901][ T984] usb usb3-port1: attempt power cycle [ 222.282735][ T8163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.306955][ T8163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.318073][ T984] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 222.352905][ T984] usb 3-1: device descriptor read/8, error -71 [ 222.368069][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 222.467621][ T1219] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 222.617798][ T984] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 222.627676][ T1219] usb 2-1: Using ep0 maxpacket: 32 [ 222.634759][ T1219] usb 2-1: unable to get BOS descriptor or descriptor too short [ 222.645461][ T1219] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 222.648284][ T984] usb 3-1: device descriptor read/8, error -71 [ 222.655081][ T1219] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 222.670942][ T1219] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 222.680094][ T1219] usb 2-1: config 128 has no interface number 0 [ 222.686414][ T1219] usb 2-1: config 128 interface 127 altsetting 14 has an endpoint descriptor with address 0x37, changing to 0x7 [ 222.699192][ T1219] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 222.710551][ T1219] usb 2-1: config 128 interface 127 has no altsetting 0 [ 222.722166][ T1219] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 222.731421][ T1219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.739943][ T1219] usb 2-1: Product: syz [ 222.744134][ T1219] usb 2-1: Manufacturer: syz [ 222.748783][ T1219] usb 2-1: SerialNumber: syz [ 222.775598][ T984] usb usb3-port1: unable to enumerate USB device [ 223.033787][ T1219] usb 2-1: USB disconnect, device number 66 [ 223.064198][ T6052] udevd[6052]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.830320][ T8202] Invalid ELF header magic: != ELF [ 223.858594][ T8203] Invalid ELF header magic: != ELF [ 223.866455][ T8202] Invalid ELF header magic: != ELF [ 223.927358][ T8205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.955205][ T8205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.980195][ T8207] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 224.168675][ T8215] sctp: [Deprecated]: syz.2.725 (pid 8215) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.168675][ T8215] Use struct sctp_sack_info instead [ 224.257586][ T43] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 224.427801][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 224.436006][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.452495][ T43] usb 2-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=46.08 [ 224.461922][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.470332][ T43] usb 2-1: Product: syz [ 224.474548][ T43] usb 2-1: Manufacturer: syz [ 224.479344][ T43] usb 2-1: SerialNumber: syz [ 224.486839][ T43] usb 2-1: config 0 descriptor?? [ 224.500066][ T43] comedi comedi5: Wrong number of endpoints [ 224.506119][ T43] dt9812 2-1:0.0: driver 'dt9812' failed to auto-configure device. [ 224.534091][ T5869] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 224.645933][ T8223] netlink: 56 bytes leftover after parsing attributes in process `syz.3.728'. [ 224.708020][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 224.725587][ T5869] usb 3-1: unable to get BOS descriptor or descriptor too short [ 224.748212][ T5869] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 224.756236][ T5869] usb 3-1: can't read configurations, error -71 [ 224.862806][ T1219] usb 2-1: USB disconnect, device number 67 [ 224.987327][ T8228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.003957][ T8228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.020615][ T8228] netlink: 'syz.4.730': attribute type 4 has an invalid length. [ 225.026325][ T8229] netlink: 'syz.4.730': attribute type 4 has an invalid length. [ 225.218149][ T984] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 225.305828][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 225.369798][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 225.386352][ T984] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 225.420691][ T984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 225.434301][ T984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 225.438207][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 225.456047][ T984] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 225.470328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 225.482618][ T984] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 225.492514][ T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.525288][ T984] usb 5-1: config 0 descriptor?? [ 225.545677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 225.566944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 225.576256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 225.584961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 225.595977][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 225.606961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 225.794533][ T984] usbhid 5-1:0.0: can't add hid device: -71 [ 225.822323][ T5869] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 225.847344][ T984] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 225.880640][ T984] usb 5-1: USB disconnect, device number 56 [ 225.934579][ T8241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.959348][ T8241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.021939][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 226.034825][ T5869] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 226.067037][ T5869] usb 3-1: config 0 has no interface number 0 [ 226.080175][ T5869] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 226.089581][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.097811][ T5869] usb 3-1: Product: syz [ 226.102216][ T5869] usb 3-1: Manufacturer: syz [ 226.106837][ T5869] usb 3-1: SerialNumber: syz [ 226.137194][ T5869] usb 3-1: config 0 descriptor?? [ 226.154497][ T5869] smsc95xx v2.0.0 [ 226.173933][ T8244] netlink: 36 bytes leftover after parsing attributes in process `syz.1.735'. [ 226.578213][ T984] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 226.607858][ T43] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 226.737633][ T984] usb 5-1: Using ep0 maxpacket: 16 [ 226.745753][ T984] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.757667][ T43] usb 2-1: device descriptor read/64, error -71 [ 226.760770][ T984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 226.793069][ T984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 226.806178][ T984] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 226.817651][ T984] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.834372][ T984] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 226.844107][ T984] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 226.852404][ T984] usb 5-1: Manufacturer: syz [ 226.861013][ T984] usb 5-1: config 0 descriptor?? [ 226.990567][ T8255] netlink: 'syz.3.740': attribute type 4 has an invalid length. [ 226.999574][ T43] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 227.014869][ T8255] netlink: 'syz.3.740': attribute type 4 has an invalid length. [ 227.082342][ T8248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.094395][ T8248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.146117][ T43] usb 2-1: device descriptor read/64, error -71 [ 227.197292][ T30] audit: type=1804 audit(1757102966.768:41): pid=8260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.742" name="/newroot/220/bus/file0" dev="overlay" ino=1347 res=1 errno=0 [ 227.228565][ T984] rc_core: IR keymap rc-hauppauge not found [ 227.234850][ T984] Registered IR keymap rc-empty [ 227.245837][ T984] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.268016][ T43] usb usb2-port1: attempt power cycle [ 227.270564][ T984] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.311156][ T984] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 227.333537][ T984] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input26 [ 227.368191][ T984] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.382074][ T5869] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 227.422561][ T5869] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 227.434002][ T5869] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 227.445922][ T984] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.454977][ T5869] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 227.469557][ T5869] usb 3-1: USB disconnect, device number 72 [ 227.477789][ T984] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.498759][ T984] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.524346][ T984] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.548002][ T984] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.569515][ T984] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.588049][ T984] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.607833][ T984] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.637655][ T984] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 227.637758][ T43] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 227.662338][ T984] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 227.677120][ T984] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 227.688763][ T43] usb 2-1: device descriptor read/8, error -71 [ 227.694800][ T984] usb 5-1: USB disconnect, device number 57 [ 227.951154][ T43] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 227.991703][ T43] usb 2-1: device descriptor read/8, error -71 [ 228.119221][ T43] usb usb2-port1: unable to enumerate USB device [ 228.142759][ T8277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.153288][ T8277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.215834][ T8280] syz_tun: mtu less than device minimum [ 228.327836][ T1219] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 228.408909][ T30] audit: type=1804 audit(1757102967.988:42): pid=8291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.752" name="/newroot/149/bus/file0" dev="overlay" ino=927 res=1 errno=0 [ 228.409477][ T8291] evm: overlay not supported [ 228.477651][ T1219] usb 3-1: device descriptor read/64, error -71 [ 228.530129][ T8296] delete_channel: no stack [ 228.535785][ T8296] delete_channel: no stack [ 228.737673][ T1219] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 228.877952][ T1219] usb 3-1: device descriptor read/64, error -71 [ 229.018144][ T1219] usb usb3-port1: attempt power cycle [ 229.378060][ T1219] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 229.427861][ T1219] usb 3-1: device descriptor read/8, error -71 [ 229.587985][ T984] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 229.677630][ T1219] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 229.710046][ T1219] usb 3-1: device descriptor read/8, error -71 [ 229.737726][ T984] usb 5-1: device descriptor read/64, error -71 [ 229.818195][ T8322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.831538][ T1219] usb usb3-port1: unable to enumerate USB device [ 229.850652][ T8322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.977736][ T984] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 230.117572][ T984] usb 5-1: device descriptor read/64, error -71 [ 230.228087][ T984] usb usb5-port1: attempt power cycle [ 230.591535][ T984] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 230.611824][ T8332] netlink: 104 bytes leftover after parsing attributes in process `syz.1.768'. [ 230.629968][ T984] usb 5-1: device descriptor read/8, error -71 [ 230.867736][ T984] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 230.899809][ T984] usb 5-1: device descriptor read/8, error -71 [ 230.939871][ T1219] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 231.008792][ T984] usb usb5-port1: unable to enumerate USB device [ 231.097650][ T1219] usb 2-1: Using ep0 maxpacket: 16 [ 231.121435][ T1219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.148894][ T1219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.161839][ T1219] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 231.178519][ T1219] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 231.190394][ T1219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.204319][ T1219] usb 2-1: config 0 descriptor?? [ 231.497699][ T43] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 231.633312][ T1219] microsoft 0003:045E:07DA.0014: ignoring exceeding usage max [ 231.649958][ T1219] microsoft 0003:045E:07DA.0014: unknown main item tag 0x4 [ 231.661160][ T1219] microsoft 0003:045E:07DA.0014: item fetching failed at offset 33/34 [ 231.671253][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 231.689556][ T1219] microsoft 0003:045E:07DA.0014: parse failed [ 231.697209][ T43] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 231.709229][ T1219] microsoft 0003:045E:07DA.0014: probe with driver microsoft failed with error -22 [ 231.720872][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.748442][ T43] usb 3-1: config 0 descriptor?? [ 231.756773][ T8340] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 231.956716][ T8344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.974670][ T8344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.048108][ T8349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.057399][ T8349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.177045][ T8340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.186868][ T8340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.271669][ T43] belkin 0003:050D:3201.0015: item fetching failed at offset 0/3 [ 232.280395][ T43] belkin 0003:050D:3201.0015: parse failed [ 232.286378][ T43] belkin 0003:050D:3201.0015: probe with driver belkin failed with error -22 [ 232.395788][ T8353] fuse: Bad value for 'fd' [ 232.571452][ T8358] No source specified [ 232.576122][ T8358] binder: 8357:8358 ioctl c00c620f 0 returned -14 [ 232.981439][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.781'. [ 232.992971][ T8374] netlink: 'syz.3.781': attribute type 11 has an invalid length. [ 233.002293][ T8374] netlink: 'syz.3.781': attribute type 6 has an invalid length. [ 233.027769][ T5949] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 233.157735][ T5949] usb 5-1: device descriptor read/64, error -71 [ 233.398404][ T5949] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 233.527645][ T5949] usb 5-1: device descriptor read/64, error -71 [ 233.639059][ T5949] usb usb5-port1: attempt power cycle [ 233.702451][ T43] usb 2-1: USB disconnect, device number 72 [ 233.975149][ T30] audit: type=1326 audit(1757102973.548:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.3.784" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe824b8ebe9 code=0x0 [ 233.980333][ T5949] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 234.032140][ T5949] usb 5-1: device descriptor read/8, error -71 [ 234.096357][ T8385] netlink: 4464 bytes leftover after parsing attributes in process `syz.3.784'. [ 234.259197][ T984] usb 3-1: USB disconnect, device number 77 [ 234.287928][ T5949] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 234.318478][ T5949] usb 5-1: device descriptor read/8, error -71 [ 234.428279][ T5949] usb usb5-port1: unable to enumerate USB device [ 234.647671][ T984] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 234.797762][ T984] usb 3-1: Using ep0 maxpacket: 8 [ 234.805095][ T984] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.816908][ T984] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 200 [ 234.827605][ T984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 234.837369][ T984] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 234.847417][ T984] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.879924][ T984] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 234.901821][ T8390] netlink: 16 bytes leftover after parsing attributes in process `syz.3.787'. [ 234.915401][ T8390] netlink: 16 bytes leftover after parsing attributes in process `syz.3.787'. [ 234.918144][ T984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.948785][ T984] usb 3-1: config 0 descriptor?? [ 234.955567][ T8388] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 235.173914][ T8388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.187252][ T8388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.282454][ T43] usb 3-1: USB disconnect, device number 78 [ 235.437798][ T984] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 235.602257][ T984] usb 2-1: unable to get BOS descriptor or descriptor too short [ 235.621098][ T984] usb 2-1: config 14 has an invalid interface number: 21 but max is 0 [ 235.627605][ T8405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.635463][ T984] usb 2-1: config 14 has no interface number 0 [ 235.643622][ T8406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.647094][ T984] usb 2-1: config 14 interface 21 has no altsetting 0 [ 235.656568][ T8405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.657010][ T8406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.688458][ T984] usb 2-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 235.699134][ T984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.708402][ T984] usb 2-1: Product: syz [ 235.712706][ T984] usb 2-1: Manufacturer: syz [ 235.717634][ T984] usb 2-1: SerialNumber: syz [ 235.739974][ T8406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.749680][ T8406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.068698][ T984] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 236.087743][ T984] usb 2-1: MIDIStreaming interface descriptor not found [ 236.160208][ T984] usb 2-1: USB disconnect, device number 73 [ 236.401986][ T8421] openvswitch: netlink: Key type 169 is out of range max 32 [ 236.429532][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:14.21/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.463615][ T8422] openvswitch: netlink: Key type 169 is out of range max 32 [ 236.487711][ T10] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 236.663419][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 236.680469][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 236.706248][ T10] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 236.740922][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.770493][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 236.818380][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.855963][ T10] usb 5-1: Product: syz [ 236.865234][ T10] usb 5-1: Manufacturer: syz [ 236.882290][ T10] usb 5-1: SerialNumber: syz [ 236.897867][ T43] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 237.097689][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 237.110600][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 237.133410][ T43] usb 2-1: config 4 has an invalid interface number: 46 but max is 0 [ 237.150813][ T43] usb 2-1: config 4 has no interface number 0 [ 237.157286][ T43] usb 2-1: config 4 interface 46 has no altsetting 0 [ 237.168967][ T30] audit: type=1804 audit(1757102976.738:44): pid=8447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.802" name="/newroot/248/bus/file0" dev="overlay" ino=1510 res=1 errno=0 [ 237.190905][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.201431][ T43] usb 2-1: New USB device found, idVendor=12d1, idProduct=c130, bcdDevice=c1.93 [ 237.211004][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.231056][ T43] usb 2-1: Product: syz [ 237.235358][ T43] usb 2-1: Manufacturer: syz [ 237.251343][ T43] usb 2-1: SerialNumber: syz [ 237.317721][ T5929] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 237.468987][ T5929] usb 3-1: Using ep0 maxpacket: 32 [ 237.484582][ T5929] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 237.495913][ T5929] usb 3-1: config 0 has no interface number 0 [ 237.503958][ T43] option 2-1:4.46: GSM modem (1-port) converter detected [ 237.511333][ T5929] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 237.528930][ T43] usb 2-1: USB disconnect, device number 74 [ 237.535148][ T5929] usb 3-1: config 0 interface 85 has no altsetting 0 [ 237.549241][ T43] option 2-1:4.46: device disconnected [ 237.559172][ T5929] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 237.572747][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.607575][ T5929] usb 3-1: Product: syz [ 237.612885][ T5929] usb 3-1: Manufacturer: syz [ 237.620854][ T5929] usb 3-1: SerialNumber: syz [ 237.637720][ T5929] usb 3-1: config 0 descriptor?? [ 237.654708][ T10] usb 5-1: 0:2 : does not exist [ 237.702940][ T10] usb 5-1: USB disconnect, device number 66 [ 237.761455][ T8457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.766662][ T6052] udevd[6052]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.786775][ T8457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.053865][ T8460] [U]  [ 238.185086][ T8466] netlink: 'syz.1.810': attribute type 21 has an invalid length. [ 238.342788][ T5929] appletouch 3-1:0.85: Geyser mode initialized. [ 238.354565][ T5929] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input28 [ 238.502498][ T8477] netlink: 36 bytes leftover after parsing attributes in process `syz.4.814'. [ 238.527758][ T984] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 238.584441][ T30] audit: type=1800 audit(1757102978.158:45): pid=8479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.815" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 238.704043][ T984] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 238.723013][ T984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.754691][ T984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1628, setting to 1024 [ 238.776313][ T984] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 238.808610][ T984] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 238.827729][ T984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.848529][ T984] usb 2-1: config 0 descriptor?? [ 238.862147][ T8473] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 238.903111][ T8489] netlink: 20 bytes leftover after parsing attributes in process `syz.4.819'. [ 239.323349][ T8473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.345200][ T8473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.348542][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 239.378172][ T5929] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 239.389382][ T10] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 239.557622][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 239.578089][ T984] usbhid 2-1:0.0: can't add hid device: -71 [ 239.584275][ T984] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 239.597028][ T5929] usb 5-1: unable to get BOS descriptor or descriptor too short [ 239.623438][ T984] usb 2-1: USB disconnect, device number 75 [ 239.623488][ T5929] usb 5-1: config 255 has an invalid interface number: 48 but max is 0 [ 239.643033][ T5929] usb 5-1: config 255 has no interface number 0 [ 239.653358][ T5929] usb 5-1: config 255 interface 48 has no altsetting 0 [ 239.664316][ T8516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.685195][ T5929] usb 5-1: New USB device found, idVendor=2013, idProduct=024f, bcdDevice=e8.70 [ 239.691997][ T8516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.702432][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.717806][ T5929] usb 5-1: Product: syz [ 239.722139][ T5929] usb 5-1: Manufacturer: syz [ 239.726860][ T5929] usb 5-1: SerialNumber: syz [ 239.962558][ T5929] em28xx 5-1:255.48: audio device (2013:024f): interface 48, class 1 [ 239.980252][ T5929] usb 5-1: USB disconnect, device number 67 [ 240.083667][ T24] usb 3-1: USB disconnect, device number 79 [ 240.125281][ T24] appletouch 3-1:0.85: input: appletouch disconnected [ 240.326200][ T8526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.339417][ T8526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.348005][ T8527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.358593][ T8527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.382697][ T8526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.406475][ T8526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.482051][ T8531] netlink: 28 bytes leftover after parsing attributes in process `syz.1.830'. [ 240.622641][ T24] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 240.787737][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 240.793448][ T24] usb 3-1: too many configurations: 181, using maximum allowed: 8 [ 240.805111][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 240.812983][ T24] usb 3-1: can't read configurations, error -61 [ 240.947958][ T24] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 241.070792][ T4794] Bluetooth: hci4: Frame reassembly failed (-84) [ 241.127857][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 241.134757][ T24] usb 3-1: too many configurations: 181, using maximum allowed: 8 [ 241.151067][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 241.170210][ T24] usb 3-1: can't read configurations, error -61 [ 241.192929][ T24] usb usb3-port1: attempt power cycle [ 241.557867][ T24] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 241.570980][ T43] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 241.571299][ T8554] netlink: 42496 bytes leftover after parsing attributes in process `syz.4.838'. [ 241.590884][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 241.599147][ T24] usb 3-1: too many configurations: 181, using maximum allowed: 8 [ 241.612485][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 241.622813][ T24] usb 3-1: can't read configurations, error -61 [ 241.718613][ T8559] "syz.4.839" (8559) uses obsolete ecb(arc4) skcipher [ 241.757575][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 241.762927][ T24] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 241.773753][ T43] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 241.782406][ T43] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 241.791487][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 241.800660][ T43] usb 2-1: config 1 has no interface number 0 [ 241.806983][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 241.812407][ T43] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 241.826036][ T43] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 241.835321][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.843654][ T24] usb 3-1: too many configurations: 181, using maximum allowed: 8 [ 241.858699][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 241.866984][ T24] usb 3-1: can't read configurations, error -61 [ 241.883319][ T43] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 241.889917][ T24] usb usb3-port1: unable to enumerate USB device [ 242.137182][ T8551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.153896][ T8551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.169761][ T43] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 242.342884][ T8565] overlayfs: failed to resolve './file1': -2 [ 243.087623][ T5870] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 243.094435][ T53] Bluetooth: hci4: command 0x1003 tx timeout [ 243.107412][ T984] usb 2-1: USB disconnect, device number 76 [ 243.136083][ T984] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 243.227664][ T10] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 243.377704][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 243.385904][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 243.395391][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 243.403058][ T10] usb 5-1: can't read configurations, error -61 [ 243.539969][ T10] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 243.708445][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 243.712901][ T43] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 243.716677][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 243.746082][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 243.754978][ T10] usb 5-1: can't read configurations, error -61 [ 243.762573][ T10] usb usb5-port1: attempt power cycle [ 243.897639][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 243.905031][ T43] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 243.915318][ T43] usb 3-1: config 0 has no interface number 0 [ 243.922186][ T43] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 243.934293][ T43] usb 3-1: config 0 interface 196 has no altsetting 0 [ 243.943197][ T43] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 243.952503][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.960700][ T43] usb 3-1: Product: syz [ 243.965059][ T43] usb 3-1: Manufacturer: syz [ 243.969887][ T43] usb 3-1: SerialNumber: syz [ 243.976940][ T43] usb 3-1: config 0 descriptor?? [ 243.983823][ T8576] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 243.984852][ T984] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 244.109447][ T10] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 244.139723][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 244.146906][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 244.155255][ T984] usb 2-1: Using ep0 maxpacket: 8 [ 244.162858][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 244.170791][ T10] usb 5-1: can't read configurations, error -61 [ 244.179490][ T984] usb 2-1: unable to get BOS descriptor or descriptor too short [ 244.188553][ T984] usb 2-1: config 8 has an invalid interface number: 24 but max is 0 [ 244.196767][ T984] usb 2-1: config 8 has no interface number 0 [ 244.200418][ T8576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.208197][ T984] usb 2-1: config 8 interface 24 has no altsetting 0 [ 244.222411][ T8576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.224658][ T984] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 244.245577][ T984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.254663][ T984] usb 2-1: Product: syz [ 244.263812][ T984] usb 2-1: Manufacturer: syz [ 244.268595][ T984] usb 2-1: SerialNumber: syz [ 244.272327][ T43] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 244.300975][ T43] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 244.317886][ T10] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 244.321775][ T43] usb 3-1: USB disconnect, device number 84 [ 244.339791][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 244.351369][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 244.366672][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 244.376617][ T10] usb 5-1: can't read configurations, error -61 [ 244.386532][ T10] usb usb5-port1: unable to enumerate USB device [ 244.490313][ T984] vmk80xx 2-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 244.503659][ T984] usb 2-1: USB disconnect, device number 77 [ 244.603789][ T30] audit: type=1804 audit(1757102984.178:46): pid=8590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.849" name="/newroot/206/bus/file0" dev="overlay" ino=1259 res=1 errno=0 [ 245.036155][ T8604] netlink: 'syz.1.855': attribute type 11 has an invalid length. [ 245.045632][ T43] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 245.115088][ T8606] mkiss: ax0: crc mode is auto. [ 245.198966][ T43] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.212054][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 245.219670][ T43] usb 3-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.00 [ 245.229570][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.240123][ T43] usb 3-1: config 0 descriptor?? [ 245.417821][ T984] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 245.581928][ T984] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.593807][ T984] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 245.603173][ T984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.614438][ T984] usb 2-1: config 0 descriptor?? [ 245.627421][ T984] pwc: Askey VC010 type 2 USB webcam detected. [ 245.829939][ T8607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.840710][ T8607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.862296][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 245.872950][ T984] pwc: recv_control_msg error -71 req 02 val 2b00 [ 245.875483][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 245.902183][ T984] pwc: recv_control_msg error -71 req 02 val 2700 [ 245.913366][ T43] usb 3-1: USB disconnect, device number 85 [ 245.920343][ T984] pwc: recv_control_msg error -71 req 02 val 2c00 [ 245.934030][ T984] pwc: recv_control_msg error -71 req 04 val 1000 [ 245.969211][ T984] pwc: recv_control_msg error -71 req 04 val 1300 [ 245.978232][ T984] pwc: recv_control_msg error -71 req 04 val 1400 [ 245.985440][ T984] pwc: recv_control_msg error -71 req 02 val 2000 [ 246.008408][ T984] pwc: recv_control_msg error -71 req 02 val 2100 [ 246.034099][ T984] pwc: recv_control_msg error -71 req 04 val 1500 [ 246.048233][ T984] pwc: recv_control_msg error -71 req 02 val 2500 [ 246.061751][ T984] pwc: recv_control_msg error -71 req 02 val 2400 [ 246.070305][ T984] pwc: recv_control_msg error -71 req 02 val 2600 [ 246.079190][ T984] pwc: recv_control_msg error -71 req 02 val 2900 [ 246.088494][ T984] pwc: recv_control_msg error -71 req 02 val 2800 [ 246.095737][ T984] pwc: recv_control_msg error -71 req 04 val 1100 [ 246.112288][ T984] pwc: recv_control_msg error -71 req 04 val 1200 [ 246.124869][ T984] pwc: Registered as video103. [ 246.134249][ T984] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input31 [ 246.163257][ T984] usb 2-1: USB disconnect, device number 78 [ 246.407879][ T30] audit: type=1804 audit(1757102985.978:47): pid=8621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.860" name="/newroot/208/bus/file0" dev="overlay" ino=1278 res=1 errno=0 [ 246.467631][ T5949] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 246.617554][ T5949] usb 5-1: Using ep0 maxpacket: 16 [ 246.624555][ T5949] usb 5-1: too many configurations: 60, using maximum allowed: 8 [ 246.648452][ T5949] usb 5-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 246.659130][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 246.669364][ T5949] usb 5-1: Product: syz [ 246.673594][ T5949] usb 5-1: Manufacturer: syz [ 246.678717][ T5949] usb 5-1: SerialNumber: syz [ 246.690039][ T5949] usb 5-1: config 0 descriptor?? [ 246.705794][ T5949] pwc: Philips SPC 880NC USB webcam detected. [ 246.926685][ T8618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.948133][ T8618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.961590][ T24] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 247.121681][ T24] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 247.130135][ T24] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 247.142010][ T24] usb 3-1: config 220 has no interface number 2 [ 247.148961][ T24] usb 3-1: config 220 interface 1 altsetting 5 has an endpoint descriptor with address 0x6F, changing to 0xF [ 247.162179][ T24] usb 3-1: config 220 interface 1 altsetting 5 endpoint 0xF has an invalid bInterval 104, changing to 10 [ 247.174868][ T24] usb 3-1: config 220 interface 1 altsetting 5 endpoint 0xF has invalid maxpacket 41325, setting to 1024 [ 247.186580][ T24] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 247.199830][ T24] usb 3-1: config 220 interface 0 has no altsetting 0 [ 247.206632][ T24] usb 3-1: config 220 interface 76 has no altsetting 0 [ 247.213553][ T24] usb 3-1: config 220 interface 1 has no altsetting 0 [ 247.217862][ T10] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 247.226064][ T24] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 247.237644][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.245690][ T24] usb 3-1: Product: syz [ 247.252209][ T24] usb 3-1: Manufacturer: syz [ 247.256839][ T24] usb 3-1: SerialNumber: syz [ 247.380314][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.390527][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 247.403934][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 247.417606][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.432379][ T10] usb 2-1: config 0 descriptor?? [ 247.488523][ T24] usb 3-1: selecting invalid altsetting 0 [ 247.500963][ T24] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 247.530965][ T5949] pwc: Warning: more than 1 configuration available. [ 247.536148][ T24] usb 3-1: No valid video chain found. [ 247.566274][ T5949] pwc: Failed to set LED on/off time (-71) [ 247.572349][ T24] usb 3-1: selecting invalid altsetting 0 [ 247.572384][ T24] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 247.589025][ T24] usb 3-1: USB disconnect, device number 86 [ 247.607687][ T5949] pwc: send_video_command error -71 [ 247.613306][ T5949] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 247.630528][ T8633] overlayfs: failed to resolve './file1': -2 [ 247.651767][ T5949] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 247.682198][ T5949] usb 5-1: USB disconnect, device number 72 [ 247.726109][ T8641] netlink: 14 bytes leftover after parsing attributes in process `syz.3.867'. [ 247.852507][ T10] kovaplus 0003:1E7D:2D50.0017: unknown main item tag 0x1 [ 247.874721][ T10] kovaplus 0003:1E7D:2D50.0017: item fetching failed at offset 3/5 [ 247.891283][ T10] kovaplus 0003:1E7D:2D50.0017: parse failed [ 247.908472][ T10] kovaplus 0003:1E7D:2D50.0017: probe with driver kovaplus failed with error -22 [ 248.142256][ T8651] Invalid source name [ 248.158109][ T30] audit: type=1804 audit(1757102987.728:48): pid=8651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.871" name="/newroot/180/bus/file0" dev="overlay" ino=1119 res=1 errno=0 [ 248.179908][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.181128][ T8653] sctp: [Deprecated]: syz.2.872 (pid 8653) Use of int in max_burst socket option deprecated. [ 248.181128][ T8653] Use struct sctp_assoc_value instead [ 248.272706][ T43] usb 2-1: USB disconnect, device number 79 [ 248.491075][ T8666] netlink: 60 bytes leftover after parsing attributes in process `syz.4.878'. [ 248.527140][ T8666] netlink: 60 bytes leftover after parsing attributes in process `syz.4.878'. [ 248.682238][ T8672] kvm: user requested TSC rate below hardware speed [ 248.743765][ T8677] tipc: Enabling of bearer rejected, failed to enable media [ 249.079333][ T43] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 249.147684][ T24] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 249.249545][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 249.255619][ T43] usb 5-1: no configurations [ 249.267569][ T43] usb 5-1: can't read configurations, error -22 [ 249.326851][ T24] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 249.349492][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.367681][ T5929] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 249.381658][ T24] usb 2-1: config 0 descriptor?? [ 249.407977][ T43] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 249.420343][ T24] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 249.557240][ T5929] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 249.577949][ T5929] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.606647][ T5929] usb 3-1: config 0 interface 0 has no altsetting 0 [ 249.613596][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 249.620366][ T43] usb 5-1: no configurations [ 249.625425][ T43] usb 5-1: can't read configurations, error -22 [ 249.645328][ T5929] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 249.659445][ T43] usb usb5-port1: attempt power cycle [ 249.674642][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.701736][ T5929] usb 3-1: config 0 descriptor?? [ 249.756937][ T8711] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 249.833921][ T8709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.858022][ T8709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.958160][ T24] gspca_sn9c2028: read1 error -110 [ 249.967651][ T24] gspca_sn9c2028: read1 error -32 [ 249.994820][ T24] gspca_sn9c2028: read1 error -32 [ 250.000582][ T24] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -32 [ 250.027779][ T43] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 250.041209][ T24] usb 2-1: USB disconnect, device number 80 [ 250.069193][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 250.087975][ T43] usb 5-1: no configurations [ 250.093605][ T43] usb 5-1: can't read configurations, error -22 [ 250.151428][ T5929] holtek 0003:1241:5015.0018: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.2-1/input0 [ 250.173065][ T5929] holtek 0003:1241:5015.0018: no inputs found [ 250.237621][ T43] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 250.289460][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 250.295369][ T43] usb 5-1: no configurations [ 250.307938][ T43] usb 5-1: can't read configurations, error -22 [ 250.327920][ T43] usb usb5-port1: unable to enumerate USB device [ 250.372344][ T8688] netlink: 16 bytes leftover after parsing attributes in process `syz.2.886'. [ 250.394881][ T8688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.436172][ T8688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.021231][ T8735] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 252.021281][ T8735] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 252.119359][ T43] usb 3-1: USB disconnect, device number 87 [ 252.364890][ T8746] netlink: 'syz.3.903': attribute type 10 has an invalid length. [ 252.587902][ T43] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 252.630887][ T8749] netlink: 176 bytes leftover after parsing attributes in process `syz.3.904'. [ 252.763591][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 252.778540][ T43] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 252.813824][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 39485, setting to 64 [ 252.853762][ T43] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 252.865545][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.875870][ T43] usb 2-1: Product: syz [ 252.880203][ T43] usb 2-1: Manufacturer: syz [ 252.884911][ T43] usb 2-1: SerialNumber: syz [ 252.893085][ T43] usb 2-1: config 0 descriptor?? [ 252.900203][ T8745] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 252.931140][ T43] radioshark2 2-1:0.0: Invalid radioSHARK2 device [ 252.944871][ T43] radioshark2 2-1:0.0: probe with driver radioshark2 failed with error -22 [ 252.986296][ T8751] netlink: 'syz.4.905': attribute type 1 has an invalid length. [ 253.145602][ T43] usb 2-1: USB disconnect, device number 81 [ 253.237712][ T24] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 253.329776][ T8756] Set syz0 is full, maxelem 0 reached [ 253.336055][ T8756] netlink: 'syz.2.906': attribute type 3 has an invalid length. [ 253.344358][ T8756] netlink: 4308 bytes leftover after parsing attributes in process `syz.2.906'. [ 253.389596][ T24] usb 5-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 253.413993][ T24] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 253.427737][ T24] usb 5-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 253.443924][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.452505][ T8758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.453799][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 253.465949][ T8758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.470528][ T24] usb 5-1: SerialNumber: syz [ 253.708621][ T24] usb 5-1: bad CDC descriptors [ 253.732856][ T24] usb 5-1: USB disconnect, device number 77 [ 254.053052][ T8773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.065889][ T8773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.547581][ T24] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 254.702990][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 254.713380][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 254.725349][ T24] usb 5-1: config 4 has an invalid interface number: 91 but max is 0 [ 254.735920][ T24] usb 5-1: config 4 has no interface number 0 [ 254.749756][ T24] usb 5-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=6c.05 [ 254.760724][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.769469][ T24] usb 5-1: Product: syz [ 254.773687][ T24] usb 5-1: Manufacturer: syz [ 254.778840][ T24] usb 5-1: SerialNumber: syz [ 254.901487][ T8789] fuse: Bad value for 'fd' [ 255.001096][ T8779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.014671][ T8779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.043437][ T24] empeg 5-1:4.91: empeg converter detected [ 255.054355][ T24] usb 5-1: active config #4 != 1 ?? [ 255.072615][ T24] usb 5-1: USB disconnect, device number 78 [ 255.233723][ T8795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.244533][ T8795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.417638][ T5870] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 255.417722][ T5929] usb 2-1: new low-speed USB device number 82 using dummy_hcd [ 255.602743][ T5929] usb 2-1: Invalid ep0 maxpacket: 16 [ 255.747764][ T5929] usb 2-1: new low-speed USB device number 83 using dummy_hcd [ 255.847955][ T5928] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 255.855585][ T8808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.870586][ T8808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.897678][ T5929] usb 2-1: Invalid ep0 maxpacket: 16 [ 255.903558][ T5929] usb usb2-port1: attempt power cycle [ 255.909111][ T24] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 256.007709][ T5928] usb 5-1: Using ep0 maxpacket: 32 [ 256.014561][ T5928] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.027926][ T5928] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 256.037112][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.048628][ T5928] usb 5-1: config 0 descriptor?? [ 256.067682][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 256.075082][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 256.084570][ T24] usb 3-1: config 1 has an invalid interface number: 172 but max is 0 [ 256.092951][ T24] usb 3-1: config 1 has no interface number 0 [ 256.099586][ T24] usb 3-1: config 1 interface 172 has no altsetting 0 [ 256.110872][ T24] usb 3-1: string descriptor 0 read error: -22 [ 256.117338][ T24] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=b0.f3 [ 256.126632][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.139952][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.140046][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.160154][ T24] peak_usb 3-1:1.172: probe with driver peak_usb failed with error 172 [ 256.257725][ T5929] usb 2-1: new low-speed USB device number 84 using dummy_hcd [ 256.278281][ T5929] usb 2-1: Invalid ep0 maxpacket: 16 [ 256.380188][ T43] usb 3-1: USB disconnect, device number 88 [ 256.407702][ T5929] usb 2-1: new low-speed USB device number 85 using dummy_hcd [ 256.440943][ T5929] usb 2-1: Invalid ep0 maxpacket: 16 [ 256.460926][ T5929] usb usb2-port1: unable to enumerate USB device [ 256.479511][ T5928] steelseries 0003:1038:1410.0019: collection stack underflow [ 256.506603][ T5928] steelseries 0003:1038:1410.0019: item 0 0 0 12 parsing failed [ 256.521978][ T5928] steelseries 0003:1038:1410.0019: parse failed [ 256.529544][ T5928] steelseries 0003:1038:1410.0019: probe with driver steelseries failed with error -22 [ 256.550871][ T8817] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2468227365 (78983275680 ns) > initial count (4166372640 ns). Using initial count to start timer. [ 256.572938][ T8817] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 256.679638][ T5928] usb 5-1: USB disconnect, device number 79 [ 256.777644][ T43] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 256.949565][ T43] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 256.967512][ T43] usb 3-1: config 0 has no interface number 0 [ 256.973696][ T43] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 256.990716][ T43] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 257.000325][ T43] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 257.012595][ T43] usb 3-1: Product: syz [ 257.016975][ T43] usb 3-1: SerialNumber: syz [ 257.025891][ T43] usb 3-1: config 0 descriptor?? [ 257.038411][ T43] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 257.253693][ T8816] tmpfs: Bad value for 'nr_inodes' [ 257.336628][ T8831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.350381][ T8831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.385410][ T8833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.392486][ T5929] usb 3-1: USB disconnect, device number 89 [ 257.397446][ T8833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.418874][ T8833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.431205][ T8833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.445882][ T8833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.455397][ T8833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.527787][ T43] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 257.576231][ T8842] netlink: 666 bytes leftover after parsing attributes in process `syz.3.935'. [ 257.633417][ T8845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.642629][ T8845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.658502][ T8845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.667245][ T8845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.690301][ T43] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 257.701327][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.712497][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.722734][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 257.736023][ T43] usb 5-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 257.745202][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.756250][ T43] usb 5-1: config 0 descriptor?? [ 258.271750][ T43] waltop 0003:172F:0502.001A: item fetching failed at offset 0/3 [ 258.300173][ T43] waltop 0003:172F:0502.001A: probe with driver waltop failed with error -22 [ 258.348261][ T5928] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 258.426841][ T8862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.441813][ T8862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.441922][ T8863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.461411][ T8863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.520574][ T5928] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 258.530553][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.539923][ T5928] usb 3-1: Product: syz [ 258.544284][ T5928] usb 3-1: Manufacturer: syz [ 258.549094][ T5928] usb 3-1: SerialNumber: syz [ 258.555872][ T5928] usb 3-1: config 0 descriptor?? [ 258.565495][ T5928] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 258.708263][ T43] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 258.867706][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 258.874719][ T43] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 258.884368][ T43] usb 2-1: config 0 has no interface number 0 [ 258.890614][ T43] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 258.901622][ T43] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 258.913417][ T43] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 258.926404][ T43] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 258.936772][ T43] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 258.949137][ T43] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 258.959164][ T43] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 258.966712][ T8854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.972170][ T43] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29793, setting to 1024 [ 258.982710][ T5928] gspca_sq905c: sq905c_read: usb_control_msg failed (-32) [ 258.997800][ T5928] sq905c 3-1:0.0: Reading version command failed [ 259.000828][ T8854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.004229][ T5928] sq905c 3-1:0.0: probe with driver sq905c failed with error -32 [ 259.023726][ T43] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 259.032213][ T5928] usb 3-1: USB disconnect, device number 90 [ 259.046647][ T43] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.070082][ T43] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 259.107754][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.123410][ T43] usb 2-1: Product: syz [ 259.127203][ T8867] input: syz1 as /devices/virtual/input/input32 [ 259.128449][ T43] usb 2-1: Manufacturer: syz [ 259.139789][ T43] usb 2-1: SerialNumber: syz [ 259.160279][ T43] usb 2-1: config 0 descriptor?? [ 259.174780][ T8864] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 259.183264][ T8864] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 259.199269][ T43] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 259.211400][ T43] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 259.243001][ T43] scsi host1: microtekX6 [ 259.273977][ T8871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.286798][ T8871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.442147][ T5929] usb 2-1: USB disconnect, device number 86 [ 259.877653][ T43] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 260.027587][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 260.039558][ T43] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 260.051570][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.061379][ T43] usb 3-1: Product: syz [ 260.065743][ T43] usb 3-1: Manufacturer: syz [ 260.073442][ T43] usb 3-1: SerialNumber: syz [ 260.082126][ T43] usb 3-1: config 0 descriptor?? [ 260.103473][ T43] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 260.112756][ T43] dvb-usb: bulk message failed: -22 (2/0) [ 260.132324][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 260.149011][ T43] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 260.161762][ T43] usb 3-1: media controller created [ 260.212403][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 260.308419][ T984] usb 5-1: USB disconnect, device number 80 [ 260.529175][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.947'. [ 260.597198][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 260.749419][ T43] DVB: Unable to find symbol mt352_attach() [ 260.755386][ T43] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 260.809938][ T984] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 260.870252][ T43] rc_core: IR keymap rc-dvico-portable not found [ 260.876831][ T43] Registered IR keymap rc-empty [ 260.900111][ T43] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 260.942489][ T43] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input33 [ 260.976945][ T43] dvb-usb: schedule remote query interval to 100 msecs. [ 260.985056][ T43] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 261.041769][ T43] usb 3-1: USB disconnect, device number 91 [ 261.143922][ T30] audit: type=1326 audit(1757103000.718:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.4.951" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff14a78ebe9 code=0x0 [ 261.191504][ T8893] nbd0: detected capacity change from 0 to 127 [ 261.235105][ T5870] block nbd0: Receive control failed (result -32) [ 261.238433][ T5875] block nbd0: Send control failed (result -32) [ 261.248227][ T53] block nbd0: Receive control failed (result -32) [ 261.284156][ T5875] block nbd0: Request send failed, requeueing [ 261.292418][ T43] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 261.295649][ T51] block nbd0: Dead connection, failed to find a fallback [ 261.316814][ T51] block nbd0: shutting down sockets [ 261.322460][ T51] blk_print_req_error: 3 callbacks suppressed [ 261.322477][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.347341][ T51] Buffer I/O error on dev nbd0, logical block 0, async page read [ 261.361277][ T5875] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.379630][ T5875] Buffer I/O error on dev nbd0, logical block 1, async page read [ 261.388245][ T5875] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.398186][ T5875] Buffer I/O error on dev nbd0, logical block 2, async page read [ 261.408401][ T5875] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.417830][ T5875] Buffer I/O error on dev nbd0, logical block 3, async page read [ 261.427333][ T8909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.439100][ T5875] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.448368][ T5875] Buffer I/O error on dev nbd0, logical block 0, async page read [ 261.448970][ T8909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.456381][ T5875] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.474436][ T5875] Buffer I/O error on dev nbd0, logical block 1, async page read [ 261.482519][ T5875] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.492401][ T5875] Buffer I/O error on dev nbd0, logical block 2, async page read [ 261.500613][ T5875] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.511939][ T5875] Buffer I/O error on dev nbd0, logical block 3, async page read [ 261.537849][ T5875] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.547124][ T5875] Buffer I/O error on dev nbd0, logical block 0, async page read [ 261.587141][ T5875] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.596405][ T5875] Buffer I/O error on dev nbd0, logical block 1, async page read [ 261.620774][ T5875] ldm_validate_partition_table(): Disk read failed. [ 261.643461][ T5875] Dev nbd0: unable to read RDB block 0 [ 261.650779][ T8909] netlink: 256 bytes leftover after parsing attributes in process `syz.3.953'. [ 261.675585][ T5875] nbd0: unable to read partition table [ 261.707200][ T5875] ldm_validate_partition_table(): Disk read failed. [ 261.740505][ T5875] Dev nbd0: unable to read RDB block 0 [ 261.756373][ T5875] nbd0: unable to read partition table [ 261.831905][ T8918] 9pnet: p9_errstr2errno: server reported unknown error @ [ 262.108008][ T8928] 9p: Unknown uid 00000000004294967295 [ 262.340715][ T8938] netlink: 'syz.3.964': attribute type 12 has an invalid length. [ 262.349498][ T8938] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.964'. [ 262.418067][ T30] audit: type=1800 audit(1757103001.988:50): pid=8941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.965" name="memory.events" dev="tmpfs" ino=1191 res=0 errno=0 [ 262.442041][ T30] audit: type=1804 audit(1757103001.998:51): pid=8941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.965" name="/newroot/194/memory.events" dev="tmpfs" ino=1191 res=1 errno=0 [ 262.461385][ T43] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 262.508539][ T5929] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 262.568904][ T8944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.966'. [ 262.579128][ T8944] netlink: 'syz.3.966': attribute type 1 has an invalid length. [ 262.587140][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.966'. [ 262.647894][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 262.660041][ T43] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 262.669636][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.678725][ T43] usb 2-1: Product: syz [ 262.683799][ T5929] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 262.692707][ T5929] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 262.703144][ T43] usb 2-1: Manufacturer: syz [ 262.713327][ T43] usb 2-1: SerialNumber: syz [ 262.720581][ T5929] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 262.731214][ T43] usb 2-1: config 0 descriptor?? [ 262.744307][ T5929] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 262.760048][ T43] gspca_main: se401-2.14.0 probing 047d:5003 [ 262.766762][ T5929] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 262.793391][ T5929] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 262.818513][ T5928] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 262.818735][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 262.835008][ T5929] usb 3-1: Product: syz [ 262.839872][ T5929] usb 3-1: Manufacturer: syz [ 262.870225][ T5929] cdc_wdm 3-1:1.0: skipping garbage [ 262.876314][ T5929] cdc_wdm 3-1:1.0: skipping garbage [ 262.890517][ T5929] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 262.896455][ T8955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.898714][ T8955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.909209][ T5929] cdc_wdm 3-1:1.0: Unknown control protocol [ 262.918503][ T8955] Invalid ELF header magic: != ELF [ 262.925905][ T8955] Invalid ELF header magic: != ELF [ 263.016120][ T5928] usb 5-1: not running at top speed; connect to a high speed hub [ 263.025740][ T5928] usb 5-1: config 2 has an invalid interface number: 36 but max is 0 [ 263.034072][ T5928] usb 5-1: config 2 has an invalid descriptor of length 102, skipping remainder of the config [ 263.045694][ T5928] usb 5-1: config 2 has no interface number 0 [ 263.052651][ T5928] usb 5-1: config 2 interface 36 altsetting 168 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 263.063883][ T5928] usb 5-1: config 2 interface 36 altsetting 168 endpoint 0x8 has invalid maxpacket 64962, setting to 64 [ 263.075228][ T5928] usb 5-1: config 2 interface 36 altsetting 168 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 263.086417][ T5928] usb 5-1: config 2 interface 36 altsetting 168 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 263.098198][ T5928] usb 5-1: config 2 interface 36 altsetting 168 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 263.111643][ T5928] usb 5-1: config 2 interface 36 has no altsetting 0 [ 263.120781][ T5928] usb 5-1: New USB device found, idVendor=0f11, idProduct=2080, bcdDevice=bb.87 [ 263.129911][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.137977][ T5928] usb 5-1: Product: syz [ 263.142357][ T5928] usb 5-1: Manufacturer: syz [ 263.148535][ T5928] usb 5-1: SerialNumber: syz [ 263.157897][ T8946] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 263.170054][ T8932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.177412][ T43] gspca_se401: Wrong descriptor type [ 263.179235][ T8932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.379101][ T5928] ldusb 5-1:2.36: Interrupt in endpoint not found [ 263.393577][ T5928] usb 5-1: USB disconnect, device number 82 [ 263.405867][ T43] usb 2-1: USB disconnect, device number 87 [ 263.565106][ T8961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.575387][ T8961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.940567][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.972'. [ 263.949592][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.972'. [ 264.060255][ T8970] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 264.121351][ T30] audit: type=1804 audit(1757103003.698:52): pid=8972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.975" name="/newroot/212/bus/file0" dev="overlay" ino=1206 res=1 errno=0 [ 264.185157][ T8975] netlink: 'syz.1.975': attribute type 2 has an invalid length. [ 264.204534][ T8975] netlink: 'syz.1.975': attribute type 4 has an invalid length. [ 264.274909][ T8983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.290538][ T8983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.440329][ T24] usb 3-1: USB disconnect, device number 92 [ 264.616646][ T8992] dlm: no locking on control device [ 264.992821][ T984] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 265.147765][ T984] usb 2-1: Using ep0 maxpacket: 16 [ 265.158664][ T984] usb 2-1: unable to get BOS descriptor or descriptor too short [ 265.166872][ T9003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.178403][ T984] usb 2-1: config 250 has an invalid interface number: 88 but max is 0 [ 265.179894][ T9003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.189784][ T984] usb 2-1: config 250 has no interface number 0 [ 265.202800][ T984] usb 2-1: config 250 interface 88 has no altsetting 0 [ 265.204107][ T9003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.221146][ T984] usb 2-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=cf.c9 [ 265.226439][ T9003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.248027][ T984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.250091][ T9003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.265993][ T984] usb 2-1: Product: syz [ 265.270655][ T984] usb 2-1: Manufacturer: syz [ 265.275188][ T9003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.275274][ T984] usb 2-1: SerialNumber: syz [ 265.292599][ T9003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.308290][ T9003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.324259][ T9003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.335989][ T9003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.376775][ T9003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.394068][ T9003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.515935][ T9015] netlink: 132 bytes leftover after parsing attributes in process `syz.3.989'. [ 265.518943][ T984] qmi_wwan 2-1:250.88: bogus CDC Union: master=0, slave=0 [ 265.537193][ T984] qmi_wwan 2-1:250.88: probe with driver qmi_wwan failed with error -22 [ 265.560192][ T984] usb 2-1: USB disconnect, device number 88 [ 265.707607][ T24] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 265.888086][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 265.906040][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 265.915956][ T24] usb 3-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 265.937517][ T24] usb 3-1: config 9 has an invalid interface number: 46 but max is 1 [ 265.953182][ T24] usb 3-1: config 9 has no interface number 1 [ 265.959955][ T24] usb 3-1: config 9 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 72, setting to 64 [ 265.971946][ T24] usb 3-1: config 9 interface 0 altsetting 0 has a duplicate endpoint with address 0x84, skipping [ 265.983147][ T24] usb 3-1: config 9 interface 0 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 265.993887][ T24] usb 3-1: config 9 interface 46 altsetting 101 has a duplicate endpoint with address 0x8, skipping [ 266.004824][ T24] usb 3-1: config 9 interface 46 altsetting 101 has a duplicate endpoint with address 0x4, skipping [ 266.019037][ T24] usb 3-1: config 9 interface 46 altsetting 101 bulk endpoint 0xD has invalid maxpacket 32 [ 266.038691][ T24] usb 3-1: config 9 interface 46 altsetting 101 has a duplicate endpoint with address 0xA, skipping [ 266.066047][ T24] usb 3-1: config 9 interface 46 altsetting 101 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 266.068214][ T984] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 266.091038][ T9030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.995'. [ 266.091260][ T24] usb 3-1: config 9 interface 46 altsetting 101 has a duplicate endpoint with address 0x5, skipping [ 266.103768][ T9031] binder: binder_mmap: 9029 200000001000-20000000b000 bad vm_flags failed -1 [ 266.130408][ T24] usb 3-1: config 9 interface 46 altsetting 101 has a duplicate endpoint with address 0xD, skipping [ 266.159746][ T24] usb 3-1: config 9 interface 46 altsetting 101 has an invalid descriptor for endpoint zero, skipping [ 266.186209][ T24] usb 3-1: config 9 interface 46 altsetting 101 has a duplicate endpoint with address 0x8, skipping [ 266.199195][ T24] usb 3-1: config 9 interface 46 altsetting 101 has a duplicate endpoint with address 0xA, skipping [ 266.210412][ T24] usb 3-1: config 9 interface 46 has no altsetting 0 [ 266.222282][ T5870] Bluetooth: hci3: unexpected event for opcode 0x0c46 [ 266.233337][ T24] usb 3-1: New USB device found, idVendor=16d8, idProduct=7213, bcdDevice=33.c6 [ 266.243490][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.251796][ T24] usb 3-1: Product: syz [ 266.251851][ T984] usb 5-1: Using ep0 maxpacket: 8 [ 266.256236][ T24] usb 3-1: Manufacturer: syz [ 266.266423][ T24] usb 3-1: SerialNumber: syz [ 266.286043][ T9033] syzkaller1: entered promiscuous mode [ 266.292721][ T9035] block nbd3: Attempted send on invalid socket [ 266.295817][ T984] usb 5-1: unable to get BOS descriptor or descriptor too short [ 266.301606][ T9035] hfs: can't find a HFS filesystem on dev nbd3 [ 266.310619][ T9033] syzkaller1: entered allmulticast mode [ 266.323704][ T984] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 266.336335][ T984] usb 5-1: config 1 has no interface number 1 [ 266.343976][ T9035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.346580][ T984] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 266.355529][ T9035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.374683][ T984] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 266.412303][ T984] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 266.423545][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.432686][ T984] usb 5-1: Product: syz [ 266.437261][ T984] usb 5-1: Manufacturer: syz [ 266.441989][ T984] usb 5-1: SerialNumber: syz [ 266.458432][ T9037] netlink: 16 bytes leftover after parsing attributes in process `syz.3.997'. [ 266.533456][ T24] option 3-1:9.46: GSM modem (1-port) converter detected [ 266.563057][ T24] usb 3-1: USB disconnect, device number 93 [ 266.591365][ T24] option 3-1:9.46: device disconnected [ 266.671055][ T9041] 9pnet: p9_errstr2errno: server reported unknown error ܰK< [ 266.682859][ T9041] [U] [ 266.690451][ T9040] [U] [ 266.731209][ T984] usb 5-1: USB disconnect, device number 83 [ 267.467606][ T5929] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 267.620776][ T9056] comedi comedi3: comedi_config --init_data is deprecated [ 267.654378][ T5929] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 267.673843][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.692091][ T5929] usb 5-1: Product: syz [ 267.696477][ T5929] usb 5-1: Manufacturer: syz [ 267.711331][ T5929] usb 5-1: SerialNumber: syz [ 268.096248][ T9061] blk_print_req_error: 139 callbacks suppressed [ 268.096272][ T9061] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 268.115002][ T9061] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 268.127236][ T9061] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1007'. [ 268.210614][ T9063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.222400][ T9063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.917723][ T24] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 269.093351][ T24] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 269.102671][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.111275][ T24] usb 2-1: Product: syz [ 269.115530][ T24] usb 2-1: Manufacturer: syz [ 269.120282][ T24] usb 2-1: SerialNumber: syz [ 269.128356][ T24] usb 2-1: config 0 descriptor?? [ 269.138185][ T24] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 269.248615][ T53] Bluetooth: hci4: command 0x1003 tx timeout [ 269.248769][ T5870] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 269.367688][ T24] sonixb 2-1:0.0: Error reading register 00: -32 [ 269.393393][ T24] usb 2-1: USB disconnect, device number 89 [ 269.508458][ T9079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.530585][ T9079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.851991][ T9090] CIFS: iocharset name too long [ 269.975245][ T9097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.990217][ T9097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.012885][ T9097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.025079][ T9097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.112987][ T9100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.152936][ T9100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.263607][ T9106] binder: 9105:9106 ioctl c0306201 2000000004c0 returned -14 [ 270.426041][ T9113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.438562][ T9113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.453588][ T9112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.470907][ T9112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.638508][ T5949] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 270.651918][ T9132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.666812][ T9132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.810862][ T5949] usb 2-1: Using ep0 maxpacket: 8 [ 270.832305][ T5949] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 270.841955][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.850623][ T5949] usb 2-1: Product: syz [ 270.854951][ T5949] usb 2-1: Manufacturer: syz [ 270.863704][ T5949] usb 2-1: SerialNumber: syz [ 270.872355][ T5949] usb 2-1: config 0 descriptor?? [ 270.878177][ T24] usb 3-1: new low-speed USB device number 94 using dummy_hcd [ 270.884278][ T5949] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 270.894208][ T5949] dvb-usb: bulk message failed: -22 (2/0) [ 270.904281][ T5949] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 270.914982][ T5949] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 270.924102][ T5949] usb 2-1: media controller created [ 270.952972][ T5949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 271.031389][ T24] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 271.039954][ T24] usb 3-1: config 0 has no interface number 0 [ 271.046342][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 271.059342][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 271.070342][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 271.082270][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 271.093720][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 271.117596][ T24] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 271.148862][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 271.168138][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.189333][ T24] usb 3-1: config 0 descriptor?? [ 271.195416][ T9131] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 271.236261][ T9131] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 271.277976][ T24] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 271.340814][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1023'. [ 271.420139][ T5949] dvb-usb: bulk message failed: -22 (1/0) [ 271.460024][ T10] usb 3-1: USB disconnect, device number 94 [ 271.472545][ T5949] DVB: Unable to find symbol mt352_attach() [ 271.479026][ T5949] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 271.492852][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 271.592952][ T5949] rc_core: IR keymap rc-dvico-portable not found [ 271.599811][ T5949] Registered IR keymap rc-empty [ 271.607334][ T5949] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 271.628363][ T5949] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input36 [ 271.671076][ T5949] dvb-usb: schedule remote query interval to 100 msecs. [ 271.692595][ T5949] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 271.725662][ T5949] usb 2-1: USB disconnect, device number 90 [ 271.897295][ T5949] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 272.597789][ T24] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 272.678188][ T5954] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 272.687638][ T5870] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 272.688038][ T53] Bluetooth: hci4: command 0x1003 tx timeout [ 272.758534][ T24] usb 2-1: config 0 has an invalid descriptor of length 100, skipping remainder of the config [ 272.778298][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 40655, setting to 64 [ 272.792966][ T9167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.802200][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.803205][ T9167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.822225][ T24] usb 2-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 272.841641][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.850704][ T24] usb 2-1: Product: syz [ 272.855050][ T24] usb 2-1: Manufacturer: syz [ 272.861397][ T24] usb 2-1: SerialNumber: syz [ 272.870209][ T24] usb 2-1: config 0 descriptor?? [ 272.882513][ T24] ti_usb_3410_5052 2-1:0.0: required endpoints missing [ 272.901717][ T5954] usb 3-1: config 3 has an invalid interface number: 179 but max is 0 [ 272.917760][ T5954] usb 3-1: config 3 has no interface number 0 [ 272.934160][ T5954] usb 3-1: config 3 interface 179 has no altsetting 0 [ 272.956328][ T9169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.972764][ T9169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.978835][ T5954] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 272.989937][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.998937][ T5954] usb 3-1: Product: syz [ 273.003275][ T5954] usb 3-1: Manufacturer: syz [ 273.005075][ T9169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.008841][ T5954] usb 3-1: SerialNumber: syz [ 273.023745][ T9169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.086731][ T43] usb 2-1: USB disconnect, device number 91 [ 273.234703][ T5954] go7007 3-1:3.179: probe with driver go7007 failed with error -12 [ 273.246142][ T5954] usb 3-1: USB disconnect, device number 95 [ 273.514935][ T9174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.525502][ T9174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.536182][ T9174] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1041'. [ 273.650433][ T5929] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -ETIMEDOUT [ 273.679284][ T5929] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 273.692904][ T5929] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 273.714593][ T5929] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -110 [ 273.910678][ T5949] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 274.073713][ T5949] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 274.093289][ T5949] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.123740][ T5949] usb 2-1: config 0 has no interface number 0 [ 274.139230][ T36] Bluetooth: Error in BCSP hdr checksum [ 274.147156][ T5949] usb 2-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=44.ca [ 274.159770][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.172229][ T5949] usb 2-1: Product: syz [ 274.176549][ T5949] usb 2-1: Manufacturer: syz [ 274.187706][ T5949] usb 2-1: SerialNumber: syz [ 274.199631][ T5949] usb 2-1: config 0 descriptor?? [ 274.212049][ T5949] HFC-S_USB 2-1:0.238: probe with driver HFC-S_USB failed with error -5 [ 274.399175][ T4794] Bluetooth: Error in BCSP hdr checksum [ 274.417874][ T984] usb 2-1: USB disconnect, device number 92 [ 274.640575][ T9198] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1051'. [ 274.658251][ T36] Bluetooth: Error in BCSP hdr checksum [ 274.786999][ T9200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.802969][ T9200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.919093][ T36] Bluetooth: Error in BCSP hdr checksum [ 275.247863][ T5954] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 275.410379][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.440378][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.467818][ T5954] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 275.487259][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.492053][ T9206] syzkaller1: entered promiscuous mode [ 275.501284][ T9206] syzkaller1: entered allmulticast mode [ 275.512367][ T5954] usb 2-1: config 0 descriptor?? [ 275.626046][ T9213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.637098][ T9213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.887913][ T53] Bluetooth: hci4: command 0x1003 tx timeout [ 275.895661][ T5870] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 275.973250][ T5954] cp2112 0003:10C4:EA90.001B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 276.134385][ T5954] cp2112 0003:10C4:EA90.001B: error requesting version [ 276.170402][ T5954] cp2112 0003:10C4:EA90.001B: probe with driver cp2112 failed with error -71 [ 276.207137][ T5954] usb 2-1: USB disconnect, device number 93 [ 276.376174][ T9221] overlayfs: conflicting lowerdir path [ 276.864098][ T9233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.968721][ T10] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 277.127569][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 277.140003][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.157581][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.187119][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 277.212053][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.237887][ T984] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 277.256509][ T10] usb 2-1: config 0 descriptor?? [ 277.397690][ T984] usb 3-1: Using ep0 maxpacket: 32 [ 277.409154][ T984] usb 3-1: config 0 has an invalid interface number: 202 but max is 0 [ 277.417866][ T984] usb 3-1: config 0 has no interface number 0 [ 277.424035][ T984] usb 3-1: config 0 interface 202 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 277.459754][ T984] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 277.504672][ T984] usb 3-1: New USB device strings: Mfr=56, Product=87, SerialNumber=3 [ 277.522811][ T984] usb 3-1: Product: syz [ 277.527174][ T984] usb 3-1: Manufacturer: syz [ 277.532419][ T984] usb 3-1: SerialNumber: syz [ 277.557344][ T984] usb 3-1: config 0 descriptor?? [ 277.591183][ T984] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 277.734384][ T10] savu 0003:1E7D:2D5A.001C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 277.769464][ T9236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.780993][ T9236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.800626][ T9236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.814434][ T9236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.872907][ T36] usb 3-1: Failed to submit usb control message: -71 [ 277.874346][ T984] usb 3-1: USB disconnect, device number 96 [ 277.896538][ T36] usb 3-1: unable to send the bmi data to the device: -71 [ 277.926664][ T36] usb 3-1: unable to get target info from device [ 277.943552][ T36] usb 3-1: could not get target info (-71) [ 277.962478][ T36] usb 3-1: could not probe fw (-71) [ 278.254754][ T5928] usb 2-1: USB disconnect, device number 94 [ 278.378765][ T9261] [ 278.381251][ T9261] ====================================================== [ 278.388311][ T9261] WARNING: possible circular locking dependency detected [ 278.395352][ T9261] syzkaller #0 Not tainted [ 278.399784][ T9261] ------------------------------------------------------ [ 278.406825][ T9261] syz.1.1069/9261 is trying to acquire lock: [ 278.412824][ T9261] ffffffff8e642920 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x48/0x710 [ 278.422704][ T9261] [ 278.422704][ T9261] but task is already holding lock: [ 278.430348][ T9261] ffff88805ed9f520 (k-sk_lock-AF_INET/1){+.+.}-{0:0}, at: __mptcp_close_ssk+0x25f/0xfd0 [ 278.440227][ T9261] [ 278.440227][ T9261] which lock already depends on the new lock. [ 278.440227][ T9261] [ 278.451285][ T9261] [ 278.451285][ T9261] the existing dependency chain (in reverse order) is: [ 278.460504][ T9261] [ 278.460504][ T9261] -> #7 (k-sk_lock-AF_INET/1){+.+.}-{0:0}: [ 278.468639][ T9261] lock_acquire+0x120/0x360 [ 278.473712][ T9261] lock_sock_nested+0x48/0x100 [ 278.479270][ T9261] mptcp_subflow_create_socket+0x137/0x7d0 [ 278.485649][ T9261] __mptcp_nmpc_sk+0x148/0x760 [ 278.490975][ T9261] mptcp_connect+0x71/0x830 [ 278.496126][ T9261] __inet_stream_connect+0x2ab/0xe80 [ 278.501951][ T9261] inet_stream_connect+0x66/0xa0 [ 278.507421][ T9261] __sys_connect+0x313/0x440 [ 278.512535][ T9261] __x64_sys_connect+0x7a/0x90 [ 278.517821][ T9261] do_syscall_64+0xfa/0xfa0 [ 278.522841][ T9261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.529345][ T9261] [ 278.529345][ T9261] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 278.537003][ T9261] lock_acquire+0x120/0x360 [ 278.542038][ T9261] lock_sock_nested+0x48/0x100 [ 278.547412][ T9261] tcp_sendmsg+0x21/0x50 [ 278.552247][ T9261] __sock_sendmsg+0x19c/0x270 [ 278.557454][ T9261] sock_sendmsg+0x158/0x230 [ 278.562490][ T9261] __sock_xmit+0x1c1/0x470 [ 278.567435][ T9261] nbd_send_cmd+0x863/0x1ba0 [ 278.572721][ T9261] nbd_queue_rq+0xcdb/0xf10 [ 278.577742][ T9261] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 278.583900][ T9261] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 278.590759][ T9261] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 278.597377][ T9261] blk_mq_run_hw_queue+0x348/0x4f0 [ 278.603246][ T9261] blk_mq_dispatch_list+0xd0c/0xe00 [ 278.608970][ T9261] blk_mq_flush_plug_list+0x469/0x550 [ 278.614893][ T9261] __blk_flush_plug+0x3d3/0x4b0 [ 278.620393][ T9261] __submit_bio+0x2d3/0x5a0 [ 278.625439][ T9261] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 278.631606][ T9261] __bread_gfp+0x216/0x3c0 [ 278.636553][ T9261] udf_load_vrs+0x365/0xf20 [ 278.641583][ T9261] udf_fill_super+0x5ad/0x17a0 [ 278.646975][ T9261] get_tree_bdev_flags+0x40b/0x4d0 [ 278.652669][ T9261] vfs_get_tree+0x8f/0x2b0 [ 278.657717][ T9261] do_new_mount+0x302/0xa10 [ 278.663023][ T9261] __se_sys_mount+0x313/0x410 [ 278.668330][ T9261] do_syscall_64+0xfa/0xfa0 [ 278.673363][ T9261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.679779][ T9261] [ 278.679779][ T9261] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 278.687435][ T9261] lock_acquire+0x120/0x360 [ 278.692469][ T9261] __mutex_lock+0x187/0x1350 [ 278.697579][ T9261] nbd_queue_rq+0x257/0xf10 [ 278.702689][ T9261] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 278.709022][ T9261] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 278.716051][ T9261] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 278.722658][ T9261] blk_mq_run_hw_queue+0x348/0x4f0 [ 278.728290][ T9261] blk_mq_dispatch_list+0xd0c/0xe00 [ 278.734104][ T9261] blk_mq_flush_plug_list+0x469/0x550 [ 278.740188][ T9261] __blk_flush_plug+0x3d3/0x4b0 [ 278.745571][ T9261] __submit_bio+0x2d3/0x5a0 [ 278.750679][ T9261] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 278.756840][ T9261] __bread_gfp+0x216/0x3c0 [ 278.761784][ T9261] udf_load_vrs+0x365/0xf20 [ 278.766898][ T9261] udf_fill_super+0x5ad/0x17a0 [ 278.772202][ T9261] get_tree_bdev_flags+0x40b/0x4d0 [ 278.778244][ T9261] vfs_get_tree+0x8f/0x2b0 [ 278.783193][ T9261] do_new_mount+0x302/0xa10 [ 278.788224][ T9261] __se_sys_mount+0x313/0x410 [ 278.793530][ T9261] do_syscall_64+0xfa/0xfa0 [ 278.798739][ T9261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.805432][ T9261] [ 278.805432][ T9261] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 278.812664][ T9261] lock_acquire+0x120/0x360 [ 278.817805][ T9261] __mutex_lock+0x187/0x1350 [ 278.822949][ T9261] nbd_queue_rq+0xc8/0xf10 [ 278.827990][ T9261] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 278.834071][ T9261] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 278.841015][ T9261] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 278.847704][ T9261] blk_mq_run_hw_queue+0x348/0x4f0 [ 278.853619][ T9261] blk_mq_dispatch_list+0xd0c/0xe00 [ 278.859633][ T9261] blk_mq_flush_plug_list+0x469/0x550 [ 278.865549][ T9261] __blk_flush_plug+0x3d3/0x4b0 [ 278.871032][ T9261] __submit_bio+0x2d3/0x5a0 [ 278.876087][ T9261] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 278.882375][ T9261] __bread_gfp+0x216/0x3c0 [ 278.887333][ T9261] udf_load_vrs+0x365/0xf20 [ 278.892640][ T9261] udf_fill_super+0x5ad/0x17a0 [ 278.897947][ T9261] get_tree_bdev_flags+0x40b/0x4d0 [ 278.903584][ T9261] vfs_get_tree+0x8f/0x2b0 [ 278.908525][ T9261] do_new_mount+0x302/0xa10 [ 278.913560][ T9261] __se_sys_mount+0x313/0x410 [ 278.918763][ T9261] do_syscall_64+0xfa/0xfa0 [ 278.923786][ T9261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.930197][ T9261] [ 278.930197][ T9261] -> #3 (set->srcu){.+.+}-{0:0}: [ 278.937324][ T9261] lock_sync+0xba/0x160 [ 278.941997][ T9261] __synchronize_srcu+0x96/0x3a0 [ 278.947458][ T9261] elevator_switch+0x12b/0x640 [ 278.952765][ T9261] elevator_change+0x2d4/0x450 [ 278.958148][ T9261] elevator_set_default+0x186/0x260 [ 278.963967][ T9261] blk_register_queue+0x34e/0x3f0 [ 278.969526][ T9261] __add_disk+0x677/0xd50 [ 278.974472][ T9261] add_disk_fwnode+0xfc/0x480 [ 278.979780][ T9261] nbd_dev_add+0x717/0xae0 [ 278.984825][ T9261] nbd_init+0x168/0x1f0 [ 278.989621][ T9261] do_one_initcall+0x233/0x820 [ 278.995000][ T9261] do_initcall_level+0x104/0x190 [ 279.000517][ T9261] do_initcalls+0x59/0xa0 [ 279.005421][ T9261] kernel_init_freeable+0x334/0x4b0 [ 279.011168][ T9261] kernel_init+0x1d/0x1d0 [ 279.016048][ T9261] ret_from_fork+0x47c/0x820 [ 279.021439][ T9261] ret_from_fork_asm+0x1a/0x30 [ 279.026739][ T9261] [ 279.026739][ T9261] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 279.034564][ T9261] lock_acquire+0x120/0x360 [ 279.039592][ T9261] __mutex_lock+0x187/0x1350 [ 279.044713][ T9261] elevator_change+0x19b/0x450 [ 279.050115][ T9261] elevator_set_none+0x42/0xb0 [ 279.055416][ T9261] blk_mq_update_nr_hw_queues+0x598/0x1aa0 [ 279.061755][ T9261] nbd_start_device+0x17f/0xb10 [ 279.067242][ T9261] nbd_genl_connect+0x135b/0x18f0 [ 279.072842][ T9261] genl_family_rcv_msg_doit+0x212/0x300 [ 279.078914][ T9261] genl_rcv_msg+0x60e/0x790 [ 279.083945][ T9261] netlink_rcv_skb+0x208/0x470 [ 279.089247][ T9261] genl_rcv+0x28/0x40 [ 279.093799][ T9261] netlink_unicast+0x82c/0x9e0 [ 279.099287][ T9261] netlink_sendmsg+0x805/0xb30 [ 279.104677][ T9261] __sock_sendmsg+0x219/0x270 [ 279.110065][ T9261] ____sys_sendmsg+0x505/0x830 [ 279.115372][ T9261] ___sys_sendmsg+0x21f/0x2a0 [ 279.120744][ T9261] __x64_sys_sendmsg+0x19b/0x260 [ 279.126219][ T9261] do_syscall_64+0xfa/0xfa0 [ 279.131256][ T9261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.137771][ T9261] [ 279.137771][ T9261] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 279.146560][ T9261] lock_acquire+0x120/0x360 [ 279.151587][ T9261] blk_alloc_queue+0x538/0x620 [ 279.156880][ T9261] __blk_mq_alloc_disk+0x15c/0x340 [ 279.162514][ T9261] nbd_dev_add+0x46c/0xae0 [ 279.167543][ T9261] nbd_init+0x168/0x1f0 [ 279.172224][ T9261] do_one_initcall+0x233/0x820 [ 279.177506][ T9261] do_initcall_level+0x104/0x190 [ 279.183058][ T9261] do_initcalls+0x59/0xa0 [ 279.187934][ T9261] kernel_init_freeable+0x334/0x4b0 [ 279.193685][ T9261] kernel_init+0x1d/0x1d0 [ 279.198535][ T9261] ret_from_fork+0x47c/0x820 [ 279.204080][ T9261] ret_from_fork_asm+0x1a/0x30 [ 279.209363][ T9261] [ 279.209363][ T9261] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 279.216661][ T9261] validate_chain+0xb9b/0x2140 [ 279.221949][ T9261] __lock_acquire+0xab9/0xd20 [ 279.227149][ T9261] lock_acquire+0x120/0x360 [ 279.232171][ T9261] fs_reclaim_acquire+0x72/0x100 [ 279.237630][ T9261] kmem_cache_alloc_node_noprof+0x48/0x710 [ 279.243956][ T9261] __alloc_skb+0x112/0x2d0 [ 279.248888][ T9261] tcp_send_active_reset+0x8c/0x6d0 [ 279.254704][ T9261] tcp_disconnect+0x171/0x1b40 [ 279.260105][ T9261] __mptcp_close_ssk+0x482/0xfd0 [ 279.265566][ T9261] mptcp_do_fastclose+0x175/0x1f0 [ 279.271118][ T9261] __mptcp_close+0x1b2/0xa10 [ 279.276237][ T9261] mptcp_close+0x28/0x1a0 [ 279.281095][ T9261] inet_release+0x141/0x190 [ 279.286123][ T9261] sock_close+0xc3/0x240 [ 279.290898][ T9261] __fput+0x449/0xa70 [ 279.295427][ T9261] task_work_run+0x1d1/0x260 [ 279.300543][ T9261] exit_to_user_mode_loop+0xec/0x130 [ 279.306367][ T9261] do_syscall_64+0x2bd/0xfa0 [ 279.311480][ T9261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.317890][ T9261] [ 279.317890][ T9261] other info that might help us debug this: [ 279.317890][ T9261] [ 279.328113][ T9261] Chain exists of: [ 279.328113][ T9261] fs_reclaim --> sk_lock-AF_INET --> k-sk_lock-AF_INET/1 [ 279.328113][ T9261] [ 279.341628][ T9261] Possible unsafe locking scenario: [ 279.341628][ T9261] [ 279.349073][ T9261] CPU0 CPU1 [ 279.354618][ T9261] ---- ---- [ 279.360063][ T9261] lock(k-sk_lock-AF_INET/1); [ 279.364831][ T9261] lock(sk_lock-AF_INET); [ 279.371776][ T9261] lock(k-sk_lock-AF_INET/1); [ 279.379067][ T9261] lock(fs_reclaim); [ 279.383047][ T9261] [ 279.383047][ T9261] *** DEADLOCK *** [ 279.383047][ T9261] [ 279.391197][ T9261] 3 locks held by syz.1.1069/9261: [ 279.396490][ T9261] #0: ffff88805a1ad288 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 279.406861][ T9261] #1: ffff88803212a660 (sk_lock-AF_INET){+.+.}-{0:0}, at: mptcp_close+0x1d/0x1a0 [ 279.416100][ T9261] #2: ffff88805ed9f520 (k-sk_lock-AF_INET/1){+.+.}-{0:0}, at: __mptcp_close_ssk+0x25f/0xfd0 [ 279.426290][ T9261] [ 279.426290][ T9261] stack backtrace: [ 279.432263][ T9261] CPU: 0 UID: 0 PID: 9261 Comm: syz.1.1069 Not tainted syzkaller #0 PREEMPT(full) [ 279.432282][ T9261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 279.432292][ T9261] Call Trace: [ 279.432299][ T9261] [ 279.432306][ T9261] dump_stack_lvl+0x189/0x250 [ 279.432322][ T9261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.432335][ T9261] ? __pfx__printk+0x10/0x10 [ 279.432358][ T9261] ? print_lock_name+0xde/0x100 [ 279.432379][ T9261] print_circular_bug+0x2ee/0x310 [ 279.432401][ T9261] check_noncircular+0x134/0x160 [ 279.432423][ T9261] validate_chain+0xb9b/0x2140 [ 279.432446][ T9261] ? __lock_acquire+0xab9/0xd20 [ 279.432471][ T9261] __lock_acquire+0xab9/0xd20 [ 279.432488][ T9261] ? kmem_cache_alloc_node_noprof+0x48/0x710 [ 279.432503][ T9261] lock_acquire+0x120/0x360 [ 279.432518][ T9261] ? kmem_cache_alloc_node_noprof+0x48/0x710 [ 279.432533][ T9261] ? rcu_is_watching+0x15/0xb0 [ 279.432553][ T9261] ? trace_inet_sock_set_state+0x80/0x200 [ 279.432577][ T9261] fs_reclaim_acquire+0x72/0x100 [ 279.432594][ T9261] ? kmem_cache_alloc_node_noprof+0x48/0x710 [ 279.432608][ T9261] kmem_cache_alloc_node_noprof+0x48/0x710 [ 279.432622][ T9261] ? __alloc_skb+0x112/0x2d0 [ 279.432635][ T9261] ? __pfx_tcp_set_state+0x10/0x10 [ 279.432657][ T9261] __alloc_skb+0x112/0x2d0 [ 279.432672][ T9261] tcp_send_active_reset+0x8c/0x6d0 [ 279.432691][ T9261] tcp_disconnect+0x171/0x1b40 [ 279.432716][ T9261] __mptcp_close_ssk+0x482/0xfd0 [ 279.432736][ T9261] mptcp_do_fastclose+0x175/0x1f0 [ 279.432755][ T9261] __mptcp_close+0x1b2/0xa10 [ 279.432773][ T9261] ? __local_bh_enable_ip+0x12d/0x1c0 [ 279.432793][ T9261] ? do_raw_spin_unlock+0x122/0x240 [ 279.432817][ T9261] mptcp_close+0x28/0x1a0 [ 279.432839][ T9261] inet_release+0x141/0x190 [ 279.432859][ T9261] sock_close+0xc3/0x240 [ 279.432878][ T9261] ? __pfx_sock_close+0x10/0x10 [ 279.432896][ T9261] __fput+0x449/0xa70 [ 279.432913][ T9261] task_work_run+0x1d1/0x260 [ 279.432928][ T9261] ? __pfx_task_work_run+0x10/0x10 [ 279.432944][ T9261] ? exit_to_user_mode_loop+0x40/0x130 [ 279.432961][ T9261] exit_to_user_mode_loop+0xec/0x130 [ 279.432977][ T9261] do_syscall_64+0x2bd/0xfa0 [ 279.432991][ T9261] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.433005][ T9261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.433019][ T9261] ? clear_bhb_loop+0x60/0xb0 [ 279.433035][ T9261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.433050][ T9261] RIP: 0033:0x7fea66f8ebe9 [ 279.433063][ T9261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.433077][ T9261] RSP: 002b:00007ffc7d861138 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 279.433093][ T9261] RAX: 0000000000000000 RBX: 0000000000043f02 RCX: 00007fea66f8ebe9 [ 279.433104][ T9261] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 279.433113][ T9261] RBP: 00007fea671c7da0 R08: 0000000000000001 R09: 0000000c7d86142f [ 279.433123][ T9261] R10: 0000001b32020000 R11: 0000000000000246 R12: 00007fea671c5fac [ 279.433134][ T9261] R13: 00007fea671c5fa0 R14: ffffffffffffffff R15: 00007ffc7d861250 [ 279.433150][ T9261] [ 280.128654][ T53] Bluetooth: hci4: command 0x1003 tx timeout [ 280.135187][ T5870] Bluetooth: hci4: Opcode 0x1003 failed: -110