last executing test programs: 4m28.285965728s ago: executing program 0 (id=44): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) rmdir(&(0x7f0000000000)='./file0\x00') write$cgroup_pid(r1, 0x0, 0x0) 4m28.034313681s ago: executing program 0 (id=47): r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='stat\x00') pread64(r1, &(0x7f0000000140)=""/15, 0xf, 0x4) 4m27.758297254s ago: executing program 0 (id=50): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x1ffd, 0x2}, 0x14) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f00000000c0)="ab", 0x1, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) 4m27.346941084s ago: executing program 0 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x202) 4m27.138571834s ago: executing program 0 (id=65): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) rt_sigaction(0x20, 0x0, &(0x7f0000000380)={&(0x7f0000000180)="f20f34c4e1f82b710026f3440faedac4e27d1d318f491891c6c4617167302e3e660fe6a30e000000f04383720406426e420f01da", 0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m26.332632028s ago: executing program 2 (id=61): preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f0000000100)=""/245, 0xf5}], 0x1, 0x2c3, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m26.142473103s ago: executing program 2 (id=62): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x7f) 4m26.055220597s ago: executing program 2 (id=64): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f00000000c0)="ab", 0x1, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) 4m25.967463755s ago: executing program 2 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x202) 4m25.747694852s ago: executing program 2 (id=75): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x202) 4m25.613510625s ago: executing program 0 (id=69): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000400)=0x4, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x8051) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) 4m25.20597344s ago: executing program 32 (id=69): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000400)=0x4, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x8051) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) 4m25.19711823s ago: executing program 2 (id=71): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x800) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) read(r0, &(0x7f0000000040)=""/142, 0x3f) 4m25.085288224s ago: executing program 33 (id=71): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x800) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) read(r0, &(0x7f0000000040)=""/142, 0x3f) 4m9.288984862s ago: executing program 5 (id=79): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x202) 4m9.078368687s ago: executing program 5 (id=142): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m8.569500565s ago: executing program 5 (id=144): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xd5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x7f) (fail_nth: 1) 4m7.908807513s ago: executing program 34 (id=144): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xd5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x7f) (fail_nth: 1) 6.08458731s ago: executing program 1 (id=1535): socket$packet(0x11, 0x2, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x0, {0x1, 0x0, 0x4, 0x3, 0x3, 0x80000001}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x8000}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x1, 0x420000, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x3, 0x1, 0x20, 0x3, 0x200, 0x4000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20007], [0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x20000000, 0x40000000, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0xfffffffc, 0x9, 0x8c, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xfffffffc], [0x0, 0x4, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0xb78, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x3, 0x8000000, 0x520, 0xffffffff, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffc, 0xaf, 0x10001, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0x0, 0x5, 0x2], [0x81, 0xfff, 0x0, 0x4, 0x0, 0x0, 0xe17, 0xe, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000001, 0x1, 0x7fff, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x3, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x3, 0x3, 0xfffffffd, 0x53591b27, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0x7, 0x0, 0x0, 0x10000, 0x80000000, 0x1000000]}, 0x45c) 5.958462871s ago: executing program 1 (id=1536): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x80, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) poll(&(0x7f0000000140)=[{r0, 0x3101}], 0x1, 0x1) r1 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000) close_range(r2, 0xffffffffffffffff, 0x100000000000000) preadv(r1, 0x0, 0x0, 0x4, 0xb) 5.825439147s ago: executing program 1 (id=1537): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000040)={0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000a0f00"], 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b03, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x20011, r0, 0xf648d000) madvise(&(0x7f00002a7000/0x1000)=nil, 0x1000, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.888310757s ago: executing program 3 (id=1542): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f00007c1000/0x2000)=nil, 0x2000, 0x15) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x807, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x17) r1 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000002480)=""/4100, 0x1004}, {&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000001980)=""/236, 0xec}], 0x4}}], 0x1, 0x40010122, 0x0) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) r3 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000200), 0x4) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r5, &(0x7f0000001180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000000100)={0x10, 0xfffffffffffffffe, r6}, 0x10) 3.897508575s ago: executing program 4 (id=1547): r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x6) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'caif0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x6) (async) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'caif0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x2, 0x300) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) (async) 3.87034484s ago: executing program 3 (id=1548): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x3, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x6000, 0x0}}], 0x2, 0x8c4) 3.741469772s ago: executing program 4 (id=1550): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x8800, 0x88) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="2a000200010078", 0x7) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34324142, 0x4, 0xfffefffe, 0x0, 0x9, 0x0, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000200)={0x81, 0x1, 0x2, "a1d3ad15155a07bde7ef722cb8d9da39a3f7f49e6e81fa9793ade8493fc3a378", 0x50565559}) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x32, &(0x7f0000000040)="c4eb447efeccea5eea49c086ff02040000773c15", 0x14) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x6a27f823, @empty, 0xae42}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'bridge_slave_0\x00'}) read$FUSE(r0, &(0x7f0000001480)={0x2020}, 0x2020) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200820}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=@getspdinfo={0x14, 0x25, 0x800, 0x70bd28, 0x25dfdbfc, 0x6, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc014}, 0x20004044) mount(&(0x7f0000000500)=@nullb, &(0x7f0000000540)='./file0\x00', &(0x7f0000000000)='pvfs2\x00', 0x82008, 0x0) 3.689236971s ago: executing program 3 (id=1551): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) (async) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000300)=0x200000000) (async) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='hfsplus\x00', 0x2000c2, 0x0) 3.569726799s ago: executing program 1 (id=1552): set_mempolicy(0x8006, &(0x7f0000000040)=0x401, 0x5) (async) set_mempolicy(0x8006, &(0x7f0000000040)=0x401, 0x5) r0 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) read$hidraw(r0, &(0x7f0000000080)=""/210, 0xd2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) (async) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000000080)) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000006c0), 0xe533b34364c3d4d9, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r3 = syz_open_pts(r2, 0x140) fcntl$setstatus(r3, 0x4, 0x102800) write(r3, &(0x7f0000000800)="56017cac57be36e3c08fdaa55382f3c8d64afcc866c64125db8eda0f062c5f65e80899ab235e83c2ce383465d97d33059409bfde4ef5bb83cdc57fbb095ec975b92004", 0x43) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats={0x11}}) (async) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats={0x11}}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000540)={&(0x7f0000000400)=""/62, 0x10a000, 0x1800, 0x7fffffff, 0x3}, 0x20) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000540)={&(0x7f0000000400)=""/62, 0x10a000, 0x1800, 0x7fffffff, 0x3}, 0x20) write$UHID_CREATE(r6, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x81}}, 0x120) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000940)={0x3, 0x2a, 0xd}) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000780)={0x8001, 0xc, 0xf58b, 0x3ff, 0xfffd}) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"/507], 0x7c}, 0x1, 0x0, 0x0, 0x20004005}, 0x8000) (async) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"/507], 0x7c}, 0x1, 0x0, 0x0, 0x20004005}, 0x8000) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x41720, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x41720, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_FPU(r10, 0x81a0ae8c, &(0x7f0000000100)) add_key$user(&(0x7f0000000200), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000580)="0706677723b8a37f19b37e0f9f12066bb78a6a322f28cb301825eddc42c667fc68b43d7df9f4c1843c000000802684fff43955079736fa5c80d8a13ff6d937e2ce13a387100487c31c09706b6bf145eb1baf68eeb9fa416d2681491bd6a3098fe1a6741d65b0a5b407eeebef4f85b76d3c90753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b07aa753b8727f25773c98cd6a78c06b758992b03ba1e2e0a9f103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11c5b22cfa7b2a6c03d943416d4f5dde9984ff056eb5986f064f7cc552ab63f1b554d3800ae76255af6a6fdec51fd2c3fdec79e270402a87317f1f75e6cef70bdb65cfd99ef1dffffe3af979e305b7d7f70d1ab5cf0f32abb5201b72d9753", 0x118, 0x0) 3.433532137s ago: executing program 3 (id=1553): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x8, 0x3, 0x0) getsockname$l2tp(r0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) 3.38115331s ago: executing program 4 (id=1554): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000600), 0x1000, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa2bb1000) ptrace(0x10, r2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000080)=@string={0x2}}, {0x0, 0x0}]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0xca, 0x4, 0x9, @loopback, @remote, 0x40, 0x8000, 0x10, 0x9}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x18}, 0x4e, r3}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x4, 0x1, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x0, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x797, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xe, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xfffffff7, 0x4, 0x7, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xfffffed2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x3, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x8, 0x1000007, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x80000009, 0x0, 0x5, 0x4, 0x401, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x3, 0x0, 0x11e, 0xa4, 0x0, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x1000068], [0x1, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x405, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0xa, 0xa, 0x8, 0x7, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0x40, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x0, 0xb, 0x0, 0xffff, 0x7, 0xc, 0x2, 0x81, 0x9, 0x2, 0x7, 0x100, 0x7, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x201, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17cb, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb757, 0x2, 0x11b, 0x996, 0x54, 0x8c1, 0x0, 0x5, 0x4, 0x2, 0x5, 0x10000400, 0x9, 0x5, 0x3, 0xfffffffb, 0xc, 0x6]}, 0x45c) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e3, &(0x7f0000000140)={r4}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0) 3.232841995s ago: executing program 1 (id=1555): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0x6c3ca000) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x18e040, &(0x7f0000000280)={[{@index_on}, {@metacopy_off}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@uuid_on}]}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @local, 0x6}, 0x32) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000140)=0x4, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000180)={0x84, &(0x7f00000027c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) 2.514857841s ago: executing program 3 (id=1558): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0xe79b04dd2a128718, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x4040810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) getpeername$inet(r6, &(0x7f0000000380)={0x2, 0x0, @initdev}, &(0x7f00000003c0)=0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendfile(r0, r0, 0x0, 0x7ffff000) 2.009710454s ago: executing program 6 (id=1559): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x3, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x97ff, 0x0}}], 0x2, 0x8c4) 1.796934374s ago: executing program 6 (id=1560): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x1) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000180)=0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 1.48892978s ago: executing program 4 (id=1561): mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0) r0 = syz_usb_connect$printer(0x6, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x7, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0x7a, 0x4a}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0xa1, 0xd, 0xf6, 0x10, 0xe}, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1a, 0x3, 0xfe, 0x8000, 0x56}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc65}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1007}}, {0x54, &(0x7f0000000280)=@string={0x54, 0x3, "95af9e845bc2a642aa865ed6317eaf0c8f6df450fb418f380ea79ffb0a09eb6ca34fd2396a7a0b1b603063f18b632c78bd8c64b0ec9d39b7bce2ba04f27ce0c43609a75f47bce2b6a417961651b5fb3ee875"}}]}) syz_usb_disconnect(r0) 813.493495ms ago: executing program 6 (id=1562): clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x401, 0x86, 0xfffffffffffffffe, 0x9, 0x7, 0xb, 0x651, 0xffffffff, 0x9657, 0x0, 0x7fffffff, 0x0, 0x0, 0xb, 0x80000000000000, 0xcc3, 0x1, 0x1, 0x94d6, 0xff, 0xfffffffd, 0x8, 0x8, 0xfffffffffffffffa, 0x3, 0x6}) socket(0xf, 0x3, 0xff) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006d0001"], 0x28}], 0x1}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000540), 0x0, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc0305602, &(0x7f0000000400)={0x0, 0x0, [0x0, 0x2000]}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4000000) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000080)=ANY=[]) ioctl$KVM_GET_VCPU_EVENTS(r4, 0xc048aeca, &(0x7f0000000080)) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='virtiofs\x00', 0x200000, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) 710.015214ms ago: executing program 6 (id=1563): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x28011, r0, 0xe3e1a000) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x1f, 0x4) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x1000000}, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0xfffd, 0xa, 0x20, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x13}, {0x0, 0xffffffffffffffff}, {0x0, 0x2ab9}, {0x0, 0x11, 0xff}, 0x0, 0x0, 0xa, 0x2, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20004005}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000580), 0x4) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f00000002c0)) 643.388333ms ago: executing program 3 (id=1564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3749bbf5}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x80}, 0x1, 0x0, 0x0, 0xc000}, 0x402c001) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x800) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000200)={0x1ff, 0x5, 0x0, 'queue1\x00'}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x0, @tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}, 0x4}}, @isdn={0x22, 0x40, 0x2, 0x5, 0x6}, @llc={0x1a, 0x103, 0x5, 0x93, 0x7, 0xff}, 0xe9c, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)='veth1_macvtap\x00', 0x4, 0x4, 0x1}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xdc, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffffff7}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xda1e}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0xdc}}, 0x8090) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x6c, r4, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xa, 0x4c}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "6c9149ff1de49e9316daade0bf"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "06ba"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004010}, 0x40000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x1b8, 0x1, 0x2, 0xb73cfb53469b99b1, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x800}, @CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x30}}]}, @CTA_EXPECT_NAT={0x130, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xe4, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4080}, 0x80) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000940)=0x1) preadv2(r0, &(0x7f0000001c80)=[{&(0x7f0000000980)=""/127, 0x7f}, {&(0x7f0000000a00)=""/124, 0x7c}, {&(0x7f0000000a80)=""/177, 0xb1}, {&(0x7f0000000b40)=""/46, 0x2e}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/248, 0xf8}], 0x6, 0x0, 0x1, 0x10) r6 = creat(&(0x7f0000001d00)='./file0\x00', 0xe9) r7 = accept4(r0, &(0x7f0000001d40)=@l2tp={0x2, 0x0, @empty}, &(0x7f0000001dc0)=0x80, 0x80800) connect$pppoe(r7, &(0x7f0000001e00)={0x18, 0x0, {0x1, @random="2f390bd79133", 'veth1_to_batadv\x00'}}, 0x1e) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000001e40)=""/22, &(0x7f0000001e80)=0x16) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001ec0)) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000001f00)={'macsec0\x00', 0xadb5}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001f80), r7) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000002240)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002200)={&(0x7f0000001fc0)={0x210, r8, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xad}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x513}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x375d}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa5fc}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010102}}}}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x632}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8499}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5f}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc35b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd1}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x80}, 0x20) ioctl$KVM_RUN(r6, 0xae80, 0x0) close_range(r0, r7, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r7, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x22000004}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x20, r4, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x39e799c5, 0x5f}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) r9 = openat$cgroup_devices(r6, &(0x7f0000002380)='devices.allow\x00', 0x2, 0x0) dup(r9) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f0000002400)=@attr_set_pmu={0x0, 0x1, 0x1, &(0x7f00000023c0)=0x3e8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002440)) syz_usb_connect(0x5, 0xbb4, &(0x7f0000002480)={{0x12, 0x1, 0x110, 0xe1, 0xd1, 0xc1, 0x10, 0x1b3d, 0x15d, 0xa6e2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba2, 0x3, 0x5, 0x80, 0xa0, 0x5, [{{0x9, 0x4, 0x5d, 0x6, 0x3, 0x86, 0xf8, 0x51, 0x4, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "ac50921deb"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x7f, 0x7ff, 0x9}, [@mdlm_detail={0xcd, 0x24, 0x13, 0x4d, "84e70ab9f779dc96c4ce5d5ef436ebfca7461a3b3b44e34f0f225e10fee02009ab3d866ba9b38549ef12b5c362a9c98d87feb4c89c257428a0c07cab76a279c8ad9ce4fb8d153e84aec51c63554927bae6a0ed17628513cdad79022391ceaaf9c0dbbbb75be44e9a221727f93fbfa7ec3edfda39df9266dc9f07b1b0c93b603df05b67887b9b1785f8e4a48ee1473a40d5f062ff5f5ebbcbadc35ac8810caca03fc055b27e294271a00a05b965631cebc7122e3a32d2d96aaaed49cc88519da253a66b7a45ff007f2d"}]}], [{{0x9, 0x5, 0x8, 0x10, 0x200, 0x9e, 0x80}}, {{0x9, 0x5, 0x7, 0x8, 0x20, 0x2, 0x0, 0x7f}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x80, 0x0, 0x9, [@generic={0x65, 0x4, "d38681d2b0343fb96dbda6767fcf8878ad50ecd47250008c95e23dda8c6eb501297d48eca877767df1955614f3e14a261e86f4ba9dccfdfc274b796150ac38c270cf60275ce5852d6d15365511289c0288c1c1bdfc9a4eae52e95bf7875e92ad7e2d44"}]}}]}}, {{0x9, 0x4, 0x43, 0xe9, 0xc, 0xc3, 0x68, 0xfa, 0x6, [], [{{0x9, 0x5, 0x9, 0x0, 0x8, 0x3, 0xb5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3b, 0x101}, @generic={0xa4, 0x23, "47e837c03449c81b4b8f99cbf5066f3af248139aa67b68c52fca05062a4a60a72b9be07fcce76fd7be2a8838e93167d71b2367372bb2b791af0399cc7b18a3c3f189a09415a24596ac1ff959c376e2c0b8ff5577119d69c1f371ed1ed84484fb9f136f0f30dfecb8f9ed56486a1465c6143dc091779643adb83564b88a20b633c659708f812f756b72ecd8c23ea91b5572f061e4e739386c2ec870730a48c050ef69"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x8, 0x2, 0x82}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x40, 0xb9, 0x2}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x8, 0x8, 0x1, [@generic={0x95, 0x21, "002b113cd0ecf5283f251935ac88bd272233a826d7173d5c25bd887be79287d3f059fa9108a06a100ce3b0c4c31663f2ad061941b129d47581b5b9b874be770da2a5f7b6912e3159f353352c83ad105fb3f12403d99da44e1fe0d9d5f012be6473abcc926be53bc4909eca2e63b5f6e8a038182a4d8e1c660fc826afe4f0ccda3bbdf80f87d02846b049bcfc99c8c34bc79b5d"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x7f}]}}, {{0x9, 0x5, 0x6, 0x4, 0x40, 0x4f, 0x2, 0xf, [@generic={0xc3, 0xf, "6c0c4f84af216bfb037b337f8816217a5956fc2739742bb0440c226bbabaddf46d83a9ba1b7b7d5150cd4333f6209eba250942fe420da989f1c55b18175a36bf1802a8514617522c29cbfad28638925db989839f0b9148f29afc55813ed8b361635159e60c91833c6bc9108d6935998227794393caa9ea74f726562fb57fbcf637a412571aa3435e5eb4d5c8c991e0c57d14bb6d44a87b0c7093736899558e1bcb1e03ac65dfdb71fb5c71ec650ff146f5ca4334c3cf0f10d755d5c60598779f42"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x800}]}}, {{0x9, 0x5, 0x6, 0x1, 0x0, 0x9, 0xea, 0x2, [@generic={0xb8, 0x7, "bbe30252c58ec68e16dbca92b2bdb7a37d6e003682c57ddf05de96d66df054f5be313277ec4ab7e00e72ad97de0d7c9576037a2de4d75744260c539eecd01367115685d045744e3d4d595921e8765da4f2557f5767253b4bcaabc4b96bc708ead6799d2ebb15c5fba3715df3c4597f4eef63e50fae39e7a7f649abfb6e77232fa36299e5c98c6ca3eb6a3fb848b2aa04e747533397f2800b5846b47f2e4aaafe08eeaa157106d2e3907851a2e487d0d08e57dd09025e"}, @generic={0x4e, 0x21, "c682f848bfb50a0c2d36e2cae950c1002a4b48bb522f14004a58ca9e85a9e0d5447990f79480905a97980fca12100ba7ddb114d8bce64c5b8b4941827d4628b6c2ee10d22d503d244c7b5007"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x4, 0x7, 0x1, [@generic={0x1d, 0x4, "c3d440689a3254d2bc5084756a98ffbbd1360621e1049d06d6d642"}, @generic={0xcd, 0x4, "69acedf611eb64b6a9eb6d36a6c7359e469001f8f3f784b73cfe70ce21a2ffe6c53908cc57529358f40322739bfbc9b1ab1950411dbfef0b8baeb194f4317da4cac15f1e066c353f43c622aa72dd4b281d30369b4b649ff4a5de74d86bec9e39090fa841b8415b5c45b36920fc44368a2930b892cbe72e4ea0f7dfcd3ee177182fdfcb05b189d4265865fc0efce35db69e0d0b71bc12944cc8db418bd783a37e0f7706a3f488054f08f1281df379a29aa328fe0219231b8059104b5f17e2bfb4fd8dede9244b8582dd532e"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x8, 0x9, 0x81, 0x2}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x4, 0x9, 0x1}}, {{0x9, 0x5, 0xf, 0x2, 0x20, 0xd, 0x8b, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x2}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x7, 0x3b, 0x3, [@generic={0xb8, 0x29, "c9077964f0484fd2cc2f461d88f8728d51677a42033bfd141c6abb59b9cc93527894739bf18b621f858793211c17271f38497b5531b0acb08d2a2d07b4a7fcb6872e18672f5954922dbb0a744e9dcee3adf6e6ab27a5b0028a6d15691c9c71bdb8232f48b73cda34b0d8e2e9ff46484019384cd0daa8f1b465035130b4b280f12864331aa2b62ccac4deedc65312f5621a036656365369fb25eed70eedd16f2aa56b675f5e854b67436f9ac47adb61ceb82581bf3f9b"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x2}]}}, {{0x9, 0x5, 0xb, 0xc, 0x20, 0xf3, 0x40, 0x8, [@generic={0x9e, 0x4, "243c5cf94418af997debe414eb9dcc4dbeb66360177074cc160b5790c4cae0e5bf6e4625ae980fe51c6773090eb01167a0fe49a21f5750032b5de37b362d8b6d89bf1b545a1e8ed9534b37eb42481a2623bd45a431bf7eccf51383f7df872508532b5f90c6ac47c0f73e9ad42e3ca4e771cf409709191527f012c9ca4bfac9ee5ea435d7b7ed97c3b9f03ebf233d03bdb0fcf6e341034d685cfc3d59"}]}}]}}, {{0x9, 0x4, 0x42, 0x6, 0xc, 0xff, 0x2, 0xcd, 0x2, [@uac_as={[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x2, 0xff, 0x9, "3da75f"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x7e, 0x3, 0xfe, 0x9, "84a21be12d3901b5"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x5, 0x5}]}], [{{0x9, 0x5, 0x1, 0x8, 0x40, 0x7, 0xf8, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x8}, @generic={0xe2, 0x22, "20dcc13524e3df201345a5e9d851add633f8df741bfb59ac9b1ede15cd8e3bbefc332d663ee1c00b4f948b13069576feefc4e97d0bf58530ee9f4a56675ca4e217021ab00b2d27a6d11882635ba2b68fa0a9490d29f0e9834345438f54e1874418c5ca6e983a75aa6b1b24e0554a766fbe57dcaa9a0c3d62e0d1cb7a13f861fbca8931a517a8a88cac7e08a4fe49dd953b2cec23de9aa8dfbd650d82080422be261285cd5d8e769ae65188a93cc82db5013865422cee530719f5539a89a17fc80ab93b26d2253fa92bbab28c7a2e19501ac848e8d32c50dc6fc4d0c513728604"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x10, 0x8, 0xc3, 0x3, [@generic={0x58, 0x4, "d8a5550ac7a92490a320e208aeca7f537e5a8b09b98d77f7e4ad9900e40a67aacf252386bf5a3a0e12a7eb587a1f117a2a7f8c590e4bee741d05eaca05d0410ed0c06515ae0e907c15f4b4c8346a8dba1ade380e7117"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x40, 0x7, 0x3, 0xf4}}, {{0x9, 0x5, 0xc, 0xc, 0x400, 0x5, 0x8}}, {{0x9, 0x5, 0x1, 0xf, 0x40, 0x8, 0x3, 0x0, [@generic={0xab, 0xb, "9093347211a6ad8e69187b22355f9063533e609a5099b16a1a1724e3336b944759c8971c036329077ce62352c9e95f78508e633d61b765ba7636d79815bb72768cf1b2f3754698f8a838bd8cd69d4e4e6676a6950278c89d9c903000b994b50f23560a0209cdb0e39f417a45610c64d3527c8c0fb9c185fe9ae2644cc2f29b770f139818d6228fc66fe50a97e618d515908a6a8e70993bf27eb45bef1eb3512d0071412128e20cb993"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0xf, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5f, 0x6}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x9, 0x5, 0x0, [@generic={0xc8, 0x11, "09cfafd844b70ef1e677935cf5ca7dc2394c1aba32590c72bc796c13f5cc8f40623e34f8796fcf279a2ce7552abb5ade95f4aa79fe0f5805905f1bf69e61b1b5d08f2bb4be7eafc9d1603a95847d2fc8188518b5f0c4b25bc538baf0ee6817af5f79c1525437626d564372409964fb32d4fba9f2dc8f8055a872828dbe041c97ec575ee43b58a0fa737ea3575254284d74daf17b77998e190a9b3a07fbdec45a0abd0ccb2545ac0b2b53d3cb4c51110ad8ebf14d069278ed0af0e4940ac677675c4b7a64a640"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x200, 0x9, 0x3, 0xee, [@generic={0xde, 0x23, "e5f929d1a334c2c8c54c9ea6bb708f0d25f622748f4ea9768092fcc56ee6fc2ad4f7293e3e5aab49433baeeb0b1cf1513805b08c468eb492ff07a5775abbf881cf07b3f8cdf64f68c96a478bda6af3ebd90fab9b5da1217575f355a7a6841ddee871bcc0e6586b7102f2e5ea1365cc5a39891411633b292cc64359dc2d7dfb984b5441a77849af1372bc6f4e865189af0787f22c924ed85fd2f95976a3a8715be2050f9280d44d0ec39eb18e7892883a16cddf46db41e921897420d24ba5e139885561556aef0c36d468c1d5dc0be5e888db70a81c0de2b9a130a5d4"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x3ff, 0x4, 0x81, 0x5}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x2, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x401}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xf, 0x1}]}}, {{0x9, 0x5, 0x4, 0xf52b2e0e8365e909, 0x400, 0x40, 0x7, 0xa}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x9, 0x95, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xe, 0x6}]}}]}}]}}]}}, &(0x7f0000003300)={0xa, &(0x7f0000003040)={0xa, 0x6, 0x201, 0x5, 0x43, 0x3, 0x20, 0x6}, 0x20, &(0x7f0000003080)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x6, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "655aeca543d87293b9da706b16b0d6e3"}]}, 0x6, [{0x4, &(0x7f00000030c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0x9b, &(0x7f0000003100)=@string={0x9b, 0x3, "63dbd73fac88c7240374fdb6aaab67f7cd787972f3b9429aa7ca9159976a9d3228a47d4aebdd00cd3cb6affcc65fb4f54eaa7cea1e0393e5c7ea2e0860317adee95d80288ce342a546eef4fe6373b449ddcac546b5cb12571e46936f1fb69c72f7b91d742217f6b2821275004b7f64a60df3c2dc302d00904d65004256eb0497a9889128ba154110b178591f4812d46d6601dc9e12ef855d3f"}}, {0x46, &(0x7f00000031c0)=@string={0x46, 0x3, "b38af9e323e1abd9b7049d1dce8102f4b32d61e02c3306a8d2a560e3878d20e16b2a53f9921caa266899e55a64f7231bfa5a5180b6d084ad741968f0547889cfefa754a3"}}, {0x4, &(0x7f0000003240)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000003280)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f00000032c0)=@lang_id={0x4, 0x3, 0x4001}}]}) 549.51224ms ago: executing program 4 (id=1565): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0xe2, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x68120100, 0x0, 0x54, 0x6}, 0x9c) 427.975754ms ago: executing program 4 (id=1566): r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x10, 0x672983) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x202000, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES32=r0]) ioctl$HIDIOCSREPORT(r0, 0x400c4808, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, r0, 0x0) madvise(&(0x7f00007c1000/0x2000)=nil, 0x2000, 0x15) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x100000, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0xb8ff, 0x2000c000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$COMEDI_BUFCONFIG(r1, 0x8020640d, &(0x7f0000000180)={0x9a, 0x6, 0x5ae6fefe, 0xf}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r4, 0x2000) 159.881315ms ago: executing program 6 (id=1567): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r1 = dup(r0) write$cgroup_int(r1, &(0x7f00000000c0)=0x100000001, 0x12) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x101022, 0x1d1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000003010104000000000000000002000000240001001400018008000100e0000001080003"], 0x38}}, 0x0) read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000002200)={0x9, 0x0, [{0x5, 0x4, 0xfffff99f, [0xfffffffd, 0x9, 0xfffffffd, 0x3, 0x4, 0x1, 0x4]}, {0x3, 0xc, 0x1, [0x6, 0x10000, 0xe, 0xffffffd5, 0x400005, 0xe, 0x6a47, 0x9]}, {0x4, 0x78a6d07, 0xfffffff9, [0x6, 0x0, 0x9, 0x9, 0x2, 0xe, 0x1000, 0x9]}, {0x5, 0x4, 0x711, [0x7, 0x3, 0x0, 0x4, 0xfffffff9, 0x8, 0x400, 0x80000001]}, {0x10002, 0x1, 0xfffffff8, [0x2, 0x6, 0x4, 0xb0, 0x4, 0xfffffffe, 0x9, 0x6]}, {0x9, 0x2, 0x9, [0x4c, 0x1, 0x7fffffff, 0x1, 0x7, 0x1, 0x401, 0xfffffffe]}, {0xff, 0x100, 0xbc3, [0x5, 0xd8d7, 0xca, 0xffffffc0, 0x4, 0x6, 0x5, 0x7]}, {0x80000001, 0xcfd, 0x2, [0x5, 0x1, 0xe16, 0x3, 0x1, 0x7, 0x0, 0x80000000]}, {0x3ff, 0xffff26ed, 0x3, [0xfffffffe, 0x101, 0x7, 0x80001001, 0x22, 0x10000, 0x8]}]}) 189.571µs ago: executing program 1 (id=1568): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x191840, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000019, 0x20011, r0, 0x6c3ca000) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r1, &(0x7f0000000200), 0x48) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a"], 0x7c}}, 0x4040) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = dup(r6) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f0000000000)={0x2f, {0x0, 0x0, 0x10000007}}) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000000000007000000ffffffff"]) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r8, 0x7b2, &(0x7f0000000180)={&(0x7f0000000580)=[0x99ee, 0x9, 0x3, 0x1, 0x2, 0x8, 0x200, 0x6, 0x4, 0x7fff, 0x8, 0x5, 0x101, 0x10001, 0x8, 0x7, 0x800, 0xcb2, 0x2, 0x4, 0x5, 0x0, 0x9, 0xf15, 0xb, 0x0, 0x0, 0x1, 0x5, 0x30, 0x8, 0x8e, 0x24f, 0x6, 0x8, 0x8001, 0x7, 0x7, 0x2, 0x83, 0x2, 0x2, 0x4f44, 0x5, 0x9, 0xc, 0xa, 0x5, 0x4, 0x0, 0x81, 0xffff, 0x8, 0xc, 0x2, 0x7, 0xda6d, 0xfffffffd, 0x3, 0x400, 0xd7, 0x5, 0x510, 0x4ea0, 0x7, 0x1, 0x1000, 0x1, 0x5, 0x0, 0x5, 0x8, 0x3, 0xff, 0x80000001, 0x5, 0x5, 0x97a3, 0x8, 0x7, 0xa2ee, 0x2, 0x3, 0xfffffffc, 0x1, 0x800, 0x8, 0x8, 0x6, 0x80000000, 0x5, 0x8ae, 0x0, 0x80000000, 0xfffffffc, 0x8, 0x7, 0x3, 0x400, 0xc, 0x1, 0x9, 0x400, 0xe, 0x0, 0x9, 0x400, 0xd, 0xfffffff8, 0x7, 0x3, 0xc50, 0xffffffff, 0x3, 0x0, 0x8, 0xfffffffa, 0xe, 0x8, 0x0, 0x9, 0x0, 0x4, 0x8, 0x4, 0xff, 0x0, 0x5, 0x1, 0x3, 0x8, 0x9, 0x8, 0x8, 0x1, 0xfffffeff, 0xffffff80, 0x8, 0x1, 0x0, 0x8, 0x10, 0x7ff, 0xb, 0x8, 0x6, 0xc9, 0x3, 0x9, 0x100, 0x9, 0xfffffffc, 0x1, 0x4, 0x57, 0x5, 0xfffffff6, 0x0, 0x4, 0x2, 0x0, 0xfffffffe, 0x2, 0x1, 0x9, 0xffffffff, 0xd, 0x8, 0x9, 0x74e, 0x7, 0xc8, 0x3ff, 0x2, 0x3, 0x6dc2, 0xffffffff, 0x8, 0xffffff4f, 0x1, 0x7, 0x6, 0xffffff00, 0x9, 0x2, 0x200, 0xfffffff7, 0x8, 0x621, 0x2, 0x7, 0x0, 0x5, 0x10, 0xa, 0x216e, 0xd365, 0xf9, 0x0, 0xb45, 0xed2, 0x49e041fe, 0x5, 0x8000, 0x8, 0x6, 0x9, 0xffff, 0xfffffff9, 0x3, 0x3, 0x4000, 0x1, 0x6, 0xd0, 0x9, 0x0, 0x51, 0xffffffff, 0x5, 0x1, 0x7, 0x401, 0xe, 0x101, 0x8, 0x10001, 0x4, 0x3, 0x8, 0x6a3e, 0x4, 0x1000, 0x4a, 0x2, 0x9b0, 0xce, 0x8, 0x5, 0x0, 0x0, 0xfffffff9, 0x101, 0x9, 0x3, 0xe6, 0xefb, 0x6, 0x1, 0x8, 0x1, 0x0, 0x3, 0xfff, 0xbf73, 0x3, 0x101, 0x7, 0x6, 0x0, 0x2, 0xf, 0x57cb, 0xfcae, 0x2, 0x3ae6, 0x1, 0xda, 0x7f, 0x7, 0x6, 0x1, 0x2, 0x200, 0x2, 0x7ff, 0x10001, 0xc8, 0xce56, 0x81, 0x9, 0xe, 0x1000, 0x8c, 0x1, 0xe, 0x9, 0x7, 0x2, 0x6, 0x30, 0x1ff, 0xfffffffe, 0xec3f, 0x2, 0xb, 0x554, 0x1, 0x7, 0x7, 0x6, 0x0, 0xcc, 0x5, 0x17f, 0x3, 0x1, 0x8, 0x2, 0x5, 0xd6, 0x8, 0x955, 0x3, 0xffffffff, 0x4, 0xffff, 0x6, 0x51, 0x7d8a, 0x7, 0x3, 0x4, 0xfffffff2, 0x1, 0x4, 0x5, 0xa, 0x7, 0x6, 0x3, 0x3, 0x8, 0x800, 0x10, 0x40, 0x1, 0xe9b, 0x3, 0x7, 0x9, 0x401, 0x4, 0xfe54, 0x6, 0x7735, 0xf02, 0x6, 0x5, 0x7, 0x5, 0x10000, 0xc, 0x91, 0x1, 0x4, 0x3, 0x9, 0x0, 0xfffffe3b, 0xffff, 0x2, 0x45a, 0x6, 0x346, 0x2, 0x981, 0x1, 0x8ec, 0x200, 0x1, 0xaeb, 0x33, 0x4, 0x9, 0x7fffffff, 0x5, 0x2, 0x2, 0x1, 0x1, 0x9, 0x2475, 0x3324, 0x4000, 0x1, 0x7, 0xfff, 0x4, 0x0, 0x9, 0xec, 0x1, 0x2, 0x4, 0x80000001, 0xfffffff7, 0x9, 0x0, 0x29, 0x80000001, 0x988, 0xd36d, 0x1, 0x503b, 0x0, 0x7, 0x4, 0x3, 0x8, 0x7, 0x7, 0x7, 0x8, 0x7, 0x8, 0x0, 0x8001, 0x80000000, 0xffff0001, 0x7ff, 0xfffff2b5, 0xfffffffe, 0x4, 0x0, 0x8001, 0x80000001, 0x1, 0x45, 0x3, 0x1000, 0x1, 0x91, 0x8, 0x9, 0x8, 0xfffffffd, 0x2, 0x80000000, 0xc17, 0x1, 0x91b, 0x7f, 0x5, 0x2, 0x9, 0x6, 0x2, 0x3ff, 0x3, 0x21, 0x2, 0x0, 0x1, 0x4, 0xb24, 0xfffffff9, 0xf, 0xf, 0xa, 0x8, 0x10, 0xc, 0x4a919e34, 0x8f, 0xfffffff2, 0x1, 0x8, 0xffffff80, 0x4, 0x7fff, 0xffffff4c, 0x200, 0x2, 0x8d6e, 0x40, 0x2, 0x81, 0x3, 0x7, 0x380000, 0x1, 0x1e, 0x8000, 0x7, 0x7, 0xf, 0x40, 0x8, 0xffffffff, 0x7, 0x3, 0x6c, 0x8, 0x8, 0x9, 0x1, 0xc8, 0x1, 0x7, 0x4, 0x1, 0x5, 0x7, 0xffff, 0x6, 0xfffffffa, 0x8001, 0x4, 0x6, 0x401, 0x3, 0x4eb90764, 0x5, 0x7, 0x6, 0x1, 0x6, 0x7, 0x7, 0x3, 0x4, 0x3, 0x8, 0x0, 0xffffff00, 0x8, 0xba2, 0x0, 0x9, 0x5, 0x1, 0x2, 0x0, 0x200, 0x10001, 0x4, 0x5, 0x80, 0x0, 0x5, 0x0, 0x7, 0x6df, 0x80, 0x4a7, 0x7, 0x30b0, 0x9, 0x8, 0xd2ff, 0x0, 0x9, 0xffff, 0x81, 0x80000000, 0x10000, 0x4, 0x0, 0x4, 0x6, 0x80000001, 0x5, 0x5, 0x3, 0x4, 0x5, 0x2242, 0x0, 0xc7, 0xfffffff9, 0x3ff, 0xfff, 0x1ff, 0x6, 0x2, 0xfffffffb, 0x80000001, 0x2, 0xa8, 0x8, 0x5, 0x0, 0x10, 0x7fffffff, 0x11bf, 0x9, 0xfffffff8, 0xffffffff, 0x57, 0x1, 0xffffffff, 0xceb9, 0xff, 0x7fffffff, 0x1, 0x7fffffff, 0x0, 0xfffff800, 0xf, 0x1000, 0x4, 0x4, 0x1, 0x10, 0x10001, 0x0, 0x400, 0xfffffffb, 0xfff, 0xfffffff8, 0xed, 0xc45, 0x5, 0x6, 0x9, 0x0, 0x2, 0x3, 0x95d, 0x3, 0x0, 0x4, 0x6, 0x1, 0x3ff, 0xffffffff, 0x6, 0xa, 0x10001, 0x100, 0x10, 0x6, 0x8, 0xffffff80, 0x3, 0x6, 0xfffffffe, 0x8, 0x861f, 0xfffffffd, 0x82, 0x1, 0x7fffffff, 0x101, 0x2, 0x1, 0x7fffffff, 0x4, 0x9, 0x6, 0xacfa5c59, 0x4, 0x9, 0x9, 0xf, 0x8, 0xf8, 0x401, 0x5, 0x3, 0x5, 0xb, 0x5, 0x2, 0x0, 0x9, 0x0, 0x8000, 0x7, 0xb, 0x0, 0x489, 0x51a5, 0xc95, 0xdc8, 0x5ab, 0xeca6, 0x1, 0x8, 0x4, 0x6, 0x10001, 0xff, 0x4, 0x2, 0xfff, 0x800, 0xff, 0x100000, 0x7ff, 0xc, 0x0, 0x9, 0x7f, 0x893a, 0xff800000, 0x6, 0x6, 0x0, 0x9, 0x1, 0x3, 0x10000, 0x1, 0x4, 0x3, 0x6, 0x401, 0x1ff, 0x2, 0x4, 0x0, 0xffffffff, 0x4ce, 0x2, 0x9, 0x9, 0x0, 0x0, 0xd3, 0x5, 0x80, 0x9, 0x0, 0x7, 0x3a, 0x5, 0xe, 0x0, 0x38, 0x4d52, 0x2, 0xc00, 0x8, 0x1, 0xaa, 0x0, 0x2, 0xaf, 0x4, 0x810, 0x2c, 0x0, 0x4, 0x9, 0x8, 0x2, 0x7, 0x0, 0x7fff, 0x7, 0x8, 0x2, 0xfffffffc, 0xd0f5, 0x5, 0x80000000, 0x5, 0x8, 0x1000, 0x10001, 0x8, 0x2, 0x9, 0x6, 0x6314, 0xe, 0x4, 0x7, 0x6, 0x4, 0xfff, 0x7, 0x5, 0xb07, 0x2, 0x7fff, 0x6, 0x7, 0x44f, 0x2, 0x9, 0x9, 0x7fffffff, 0xcf4c, 0x81, 0x5, 0x6, 0x7f, 0x6, 0x3, 0x400, 0x0, 0x9, 0x2, 0x61, 0xcfc, 0x1000, 0x4, 0x7, 0x4, 0xa1dc784, 0x1, 0xfffffff8, 0x4, 0xa, 0x9e, 0x1, 0x7fff, 0x0, 0x1, 0xfffffffa, 0x8, 0x3, 0x3, 0x5, 0x1, 0x400, 0x1, 0x1d5, 0xc8d, 0x6, 0xee8c9a59, 0x6, 0x0, 0x7, 0x81, 0x6406dcfe, 0x8, 0x9, 0x8, 0x9, 0xcb, 0x1ff, 0xfffffffc, 0x7, 0x1ff, 0x2, 0x3, 0x9, 0x0, 0x1, 0x8, 0x0, 0x400, 0x2, 0xffffffff, 0x7, 0x5, 0x5f8, 0x8, 0x8, 0x1, 0xfffffffe, 0x5, 0x1, 0x9, 0x3, 0x4, 0x101, 0x8000, 0x7, 0x1, 0x1, 0xfffffffc, 0x6, 0x7, 0x2, 0x1, 0x7, 0x80000000, 0x5, 0x1, 0x0, 0x0, 0x6, 0x8000, 0x2, 0x9, 0xb, 0x7, 0x6, 0x5, 0x200, 0x2, 0x8, 0x5, 0xb87, 0x8, 0x9, 0x7, 0xfffffffd, 0x400, 0x4, 0xffff0644, 0xa, 0xffffffff, 0x4, 0x4, 0x5b, 0x4, 0x7, 0x0, 0x81, 0x400, 0x1, 0x5f, 0x2, 0x0, 0x9, 0x101, 0x1000, 0x9, 0x8, 0x6, 0x1, 0x5, 0xa50, 0x7, 0x7fff, 0x80000000, 0xa00, 0x2, 0x4100, 0x7ed2, 0xe39, 0xfffff542, 0x4, 0x101, 0x1, 0xa, 0xa, 0x4, 0x6, 0x4, 0x0, 0x5, 0x7, 0x80000000, 0x7, 0x4, 0x2, 0x7fff, 0x1, 0x7, 0x8, 0x2, 0x0, 0x4, 0x5, 0x81, 0x0, 0x6, 0x5, 0x8000, 0xbf7, 0xfffffff7, 0x1000, 0xfffffffb, 0x80, 0x2, 0x1, 0x7fff, 0x7, 0x1, 0x9fc, 0x9, 0x7, 0x4, 0x1c2e, 0x4, 0x1ff, 0xffffffff, 0xb, 0x1000, 0xf77, 0x17d838df, 0x7, 0x7, 0x4, 0x4, 0x5, 0x5, 0x9, 0x9, 0x78, 0xdb9e, 0xc, 0x8, 0x7, 0x1, 0xffffff00, 0x6f1c, 0x1, 0x7eb, 0x8, 0x3072, 0x4, 0x4, 0x7ff, 0x5, 0x9, 0x800, 0x457, 0xff0000, 0xffff, 0x7, 0x4, 0xe5, 0x1, 0x7, 0x200, 0x0, 0xd, 0x6, 0xd, 0x9, 0x6, 0x7ff, 0x1, 0x2, 0x101, 0xff], 0x2, 0x400, 0x37af}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=1569): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) (async) listen(r0, 0xe) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x5708e000) kernel console output (not intermixed with test programs): 6 [ 237.491218][ T5941] usb 4-1: Manufacturer: syz [ 237.495936][ T5941] usb 4-1: SerialNumber: syz [ 237.631369][ T927] usb 2-1-port1: cannot reset (err = -110) [ 237.644621][ T927] usb 2-1-port1: cannot reset (err = -32) [ 237.660710][ T927] usb 2-1-port1: Cannot enable. Maybe the USB cable is bad? [ 237.669511][ T10] usb 2-1: USB disconnect, device number 8 [ 237.691779][ T927] usb 2-1-port1: attempt power cycle [ 237.977535][ T9245] sctp: [Deprecated]: syz.4.810 (pid 9245) Use of int in maxseg socket option. [ 237.977535][ T9245] Use struct sctp_assoc_value instead [ 238.285757][ T5941] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 238.321561][ T5941] usb 4-1: USB disconnect, device number 15 [ 238.561366][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 238.731900][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 238.738999][ T10] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 238.761570][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.772889][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.785405][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.801394][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.831202][ T10] usb 7-1: Product: syz [ 238.835673][ T10] usb 7-1: Manufacturer: syz [ 238.840343][ T10] usb 7-1: SerialNumber: syz [ 239.014380][ T9261] sp0: Synchronizing with TNC [ 239.286649][ T10] usb 7-1: 0:2 : does not exist [ 239.351144][ T5911] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 239.526838][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 239.567901][ T5911] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 239.601417][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.609482][ T5911] usb 5-1: Product: syz [ 239.651883][ T5911] usb 5-1: Manufacturer: syz [ 239.656573][ T5911] usb 5-1: SerialNumber: syz [ 239.675077][ T5911] usb 5-1: config 0 descriptor?? [ 239.687591][ T5911] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 239.706995][ T10] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 239.732607][ T5911] usb 5-1: Detected FT232H [ 239.869409][ T10] usb 7-1: USB disconnect, device number 15 [ 239.936682][ T5983] udevd[5983]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.545263][ T9285] kvm: kvm [9284]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x4000003d) = 0xff [ 240.563940][ T9287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.824'. [ 240.589906][ T9287] /dev/rnullb0: Can't open blockdev [ 240.811297][ T927] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 240.986845][ T927] usb 7-1: unable to get BOS descriptor or descriptor too short [ 241.023223][ T927] usb 7-1: config 9 has an invalid interface number: 64 but max is 0 [ 241.058802][ T927] usb 7-1: config 9 has no interface number 0 [ 241.085898][ T927] usb 7-1: config 9 interface 64 has no altsetting 0 [ 241.114511][ T927] usb 7-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=1e.21 [ 241.134686][ T927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.173322][ T927] usb 7-1: Product: syz [ 241.193086][ T927] usb 7-1: Manufacturer: syz [ 241.210331][ T927] usb 7-1: SerialNumber: syz [ 242.035853][ T9261] [U] [ 242.039895][ T5911] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 242.059479][ T5911] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 242.068800][ T5911] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 242.082179][ T5911] usb 5-1: USB disconnect, device number 15 [ 242.095534][ T5911] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 242.106085][ T5911] ftdi_sio 5-1:0.0: device disconnected [ 242.896582][ T9332] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 242.907981][ T9332] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 243.169317][ T927] cxacru 7-1:9.64: cxacru_bind: interface has incorrect endpoints [ 243.184413][ T927] cxacru 7-1:9.64: usbatm_usb_probe: bind failed: -19! [ 243.203417][ T927] usb 7-1: USB disconnect, device number 16 [ 243.223939][ T9337] input: syz1 as /devices/virtual/input/input27 [ 243.678043][ T9350] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 243.707228][ T9350] CIFS mount error: No usable UNC path provided in device string! [ 243.707228][ T9350] [ 243.718715][ T9350] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 245.086096][ T9355] netlink: 'syz.3.844': attribute type 10 has an invalid length. [ 245.134190][ T9355] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 245.314540][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 245.451057][ T10] usb 2-1: device descriptor read/64, error -71 [ 245.590147][ T30] audit: type=1326 audit(1754609017.455:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9375 comm="syz.4.851" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f029df8ebe9 code=0x0 [ 245.611823][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.701412][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 245.739580][ T9382] NILFS (rnullb0): couldn't find nilfs on the device [ 245.775135][ T9381] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 245.786717][ T9381] overlayfs: overlapping lowerdir path [ 245.831248][ T10] usb 2-1: device descriptor read/64, error -71 [ 245.941642][ T10] usb usb2-port1: attempt power cycle [ 246.291167][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 246.323108][ T10] usb 2-1: device descriptor read/8, error -71 [ 246.583475][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 246.606821][ T9394] /dev/rnullb0: Can't open blockdev [ 246.623288][ T10] usb 2-1: device descriptor read/8, error -71 [ 246.653281][ T5944] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 246.744751][ T10] usb usb2-port1: unable to enumerate USB device [ 246.789748][ T9398] /dev/rnullb0: Can't open blockdev [ 246.838193][ T5944] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.866514][ T5944] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 246.890662][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.927959][ T5944] usb 4-1: Product: syz [ 246.933904][ T5944] usb 4-1: Manufacturer: syz [ 246.938758][ T5944] usb 4-1: SerialNumber: syz [ 246.959085][ T5944] usb 4-1: config 0 descriptor?? [ 246.972416][ T5944] ims_pcu 4-1:0.0: Missing CDC union descriptor [ 246.982681][ T5944] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 247.058340][ T9407] netlink: 128 bytes leftover after parsing attributes in process `syz.6.863'. [ 247.069652][ T9407] netlink: 20 bytes leftover after parsing attributes in process `syz.6.863'. [ 247.190529][ T9409] warning: `syz.4.864' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 247.219341][ T43] usb 4-1: USB disconnect, device number 16 [ 247.361220][ T24] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 247.441235][ T5941] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 247.511237][ T24] usb 7-1: device descriptor read/64, error -71 [ 247.593741][ T5941] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 247.610200][ T5941] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 247.625273][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.633820][ T5941] usb 5-1: Product: syz [ 247.638026][ T5941] usb 5-1: Manufacturer: syz [ 247.646919][ T5941] usb 5-1: SerialNumber: syz [ 247.751189][ T24] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 247.881729][ T24] usb 7-1: device descriptor read/64, error -71 [ 247.899219][ T5941] usb 5-1: selecting invalid altsetting 1 [ 247.927643][ T5941] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 247.927788][ T5941] dvb_usb_lmedm04 5-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 247.958663][ T5941] usb 5-1: USB disconnect, device number 16 [ 248.003845][ T24] usb usb7-port1: attempt power cycle [ 248.045684][ T9422] netlink: 32 bytes leftover after parsing attributes in process `syz.3.869'. [ 248.060143][ T9422] CIFS mount error: No usable UNC path provided in device string! [ 248.060143][ T9422] [ 248.072655][ T9422] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 248.349047][ T9431] hpfs: Bad magic ... probably not HPFS [ 248.371293][ T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 248.404988][ T24] usb 7-1: device descriptor read/8, error -71 [ 248.661087][ T24] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 248.682351][ T24] usb 7-1: device descriptor read/8, error -71 [ 248.813084][ T24] usb usb7-port1: unable to enumerate USB device [ 249.026353][ T9453] vxfs: WRONG superblock magic 00000000 at 1 [ 249.035231][ T9453] vxfs: WRONG superblock magic 00000000 at 8 [ 249.044071][ T9453] vxfs: can't find superblock. [ 249.303444][ T30] audit: type=1326 audit(1754609021.175:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9465 comm="syz.1.884" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc24e78ebe9 code=0x0 [ 249.404723][ T9467] 9pnet_fd: Insufficient options for proto=fd [ 249.441077][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 249.508707][ T9470] vxfs: WRONG superblock magic 00000000 at 1 [ 249.515749][ T9470] vxfs: WRONG superblock magic 00000000 at 8 [ 249.522595][ T5941] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 249.534262][ T9470] vxfs: can't find superblock. [ 249.611017][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 249.625233][ T24] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 249.635630][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.638530][ T24] usb 5-1: config 0 descriptor?? [ 249.643764][ T24] hso 5-1:0.0: Can't find BULK IN endpoint [ 249.696368][ T5941] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 249.708505][ T5941] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 249.719199][ T5941] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 249.728366][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.748017][ T9460] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 249.763427][ T5941] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 249.910050][ T9477] syz.4.883: attempt to access beyond end of device [ 249.910050][ T9477] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 249.949348][ T9477] syz.4.883: attempt to access beyond end of device [ 249.949348][ T9477] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 249.973464][ T5941] usb 4-1: USB disconnect, device number 17 [ 249.995987][ T9477] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 250.015717][ T9477] syz.4.883: attempt to access beyond end of device [ 250.015717][ T9477] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 250.039112][ T9477] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 250.050494][ T9477] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 250.065027][ T9477] UDF-fs: Scanning with blocksize 1024 failed [ 250.077917][ T9477] syz.4.883: attempt to access beyond end of device [ 250.077917][ T9477] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 250.106054][ T9477] syz.4.883: attempt to access beyond end of device [ 250.106054][ T9477] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 250.123721][ T9477] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 250.141494][ T9477] syz.4.883: attempt to access beyond end of device [ 250.141494][ T9477] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 250.170869][ T9477] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 250.192848][ T9460] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 250.202582][ T9477] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 250.210331][ T9477] UDF-fs: Scanning with blocksize 2048 failed [ 250.220855][ T9477] syz.4.883: attempt to access beyond end of device [ 250.220855][ T9477] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 250.234560][ T9477] syz.4.883: attempt to access beyond end of device [ 250.234560][ T9477] nbd4: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 250.248893][ T9477] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 250.260088][ T9477] syz.4.883: attempt to access beyond end of device [ 250.260088][ T9477] nbd4: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 250.273909][ T9477] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 250.311008][ T9477] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 250.348683][ T9477] UDF-fs: Scanning with blocksize 4096 failed [ 250.357930][ T9477] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 250.427666][ T927] usb 5-1: USB disconnect, device number 17 [ 250.629502][ T9495] qnx4: no qnx4 filesystem (no root dir). [ 250.875017][ T9504] input: syz1 as /devices/virtual/input/input29 [ 250.905920][ T9507] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3149642683 (6299285366 ns) > initial count (6299189260 ns). Using initial count to start timer. [ 251.309490][ T9519] /dev/rnullb0: Can't open blockdev [ 251.690741][ T9528] netlink: 'syz.1.902': attribute type 1 has an invalid length. [ 251.729535][ T9528] netlink: 'syz.1.902': attribute type 3 has an invalid length. [ 251.742481][ T9533] /dev/rnullb0: Can't open blockdev [ 251.797901][ T9528] netlink: 132 bytes leftover after parsing attributes in process `syz.1.902'. [ 252.107155][ T9543] FAULT_INJECTION: forcing a failure. [ 252.107155][ T9543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.125014][ T9543] CPU: 1 UID: 0 PID: 9543 Comm: syz.1.905 Not tainted 6.16.0-next-20250807-syzkaller #0 PREEMPT(full) [ 252.125048][ T9543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 252.125075][ T9543] Call Trace: [ 252.125085][ T9543] [ 252.125094][ T9543] dump_stack_lvl+0x189/0x250 [ 252.125133][ T9543] ? __pfx____ratelimit+0x10/0x10 [ 252.125168][ T9543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.125200][ T9543] ? __pfx__printk+0x10/0x10 [ 252.125247][ T9543] should_fail_ex+0x414/0x560 [ 252.125283][ T9543] _copy_to_user+0x31/0xb0 [ 252.125311][ T9543] simple_read_from_buffer+0xe1/0x170 [ 252.125347][ T9543] proc_fail_nth_read+0x1b3/0x220 [ 252.125373][ T9543] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 252.125398][ T9543] ? rw_verify_area+0x2a6/0x4d0 [ 252.125422][ T9543] ? __lock_acquire+0xab9/0xd20 [ 252.125445][ T9543] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 252.125468][ T9543] vfs_read+0x1fd/0xa30 [ 252.125492][ T9543] ? fdget_pos+0x247/0x320 [ 252.125527][ T9543] ? __pfx___mutex_lock+0x10/0x10 [ 252.125562][ T9543] ? __pfx_vfs_read+0x10/0x10 [ 252.125597][ T9543] ? __fget_files+0x2a/0x420 [ 252.125632][ T9543] ? __fget_files+0x3a0/0x420 [ 252.125661][ T9543] ? __fget_files+0x2a/0x420 [ 252.125701][ T9543] ksys_read+0x145/0x250 [ 252.125725][ T9543] ? __fget_files+0x3a0/0x420 [ 252.125756][ T9543] ? __pfx_ksys_read+0x10/0x10 [ 252.125788][ T9543] ? do_syscall_64+0xbe/0x3b0 [ 252.125813][ T9543] do_syscall_64+0xfa/0x3b0 [ 252.125831][ T9543] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.125864][ T9543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.125886][ T9543] ? clear_bhb_loop+0x60/0xb0 [ 252.125912][ T9543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.125934][ T9543] RIP: 0033:0x7fc24e78d5fc [ 252.125954][ T9543] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 252.125974][ T9543] RSP: 002b:00007fc24f6a1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 252.125998][ T9543] RAX: ffffffffffffffda RBX: 00007fc24e9b6090 RCX: 00007fc24e78d5fc [ 252.126014][ T9543] RDX: 000000000000000f RSI: 00007fc24f6a10a0 RDI: 0000000000000006 [ 252.126028][ T9543] RBP: 00007fc24f6a1090 R08: 0000000000000000 R09: 0000000000000000 [ 252.126042][ T9543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.126055][ T9543] R13: 00007fc24e9b6128 R14: 00007fc24e9b6090 R15: 00007ffce42f2638 [ 252.126090][ T9543] [ 252.380891][ T9542] input: syz1 as /devices/virtual/input/input30 [ 252.604829][ T30] audit: type=1326 audit(1754609024.475:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.1.910" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc24e78ebe9 code=0x0 [ 254.049479][ T9577] /dev/rnullb0: Can't open blockdev [ 254.067499][ T9577] capability: warning: `syz.1.916' uses deprecated v2 capabilities in a way that may be insecure [ 254.081835][ T9577] ucma_write: process 732 (syz.1.916) changed security contexts after opening file descriptor, this is not allowed. [ 255.019813][ T9585] netlink: 164 bytes leftover after parsing attributes in process `syz.1.919'. [ 255.226197][ T9590] input: syz1 as /devices/virtual/input/input31 [ 255.242439][ T9592] vxfs: WRONG superblock magic 00000000 at 1 [ 255.253182][ T9592] vxfs: WRONG superblock magic 00000000 at 8 [ 255.267003][ T9592] vxfs: can't find superblock. [ 255.292993][ T9594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.021120][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 256.203496][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 256.221791][ T24] usb 5-1: config 0 has an invalid interface number: 86 but max is 0 [ 256.234955][ T24] usb 5-1: config 0 has no interface number 0 [ 256.249863][ T24] usb 5-1: config 0 interface 86 altsetting 2 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 256.264576][ T24] usb 5-1: config 0 interface 86 has no altsetting 0 [ 256.304474][ T24] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=33.7a [ 256.317574][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.350971][ T24] usb 5-1: Product: syz [ 256.355287][ T24] usb 5-1: Manufacturer: syz [ 256.367831][ T24] usb 5-1: SerialNumber: syz [ 256.389942][ T24] usb 5-1: config 0 descriptor?? [ 256.653323][ T9614] hpfs: Bad magic ... probably not HPFS [ 256.686150][ T24] usb 5-1: USB disconnect, device number 18 [ 256.804543][ T9634] input: syz1 as /devices/virtual/input/input32 [ 257.310157][ T9640] FAULT_INJECTION: forcing a failure. [ 257.310157][ T9640] name failslab, interval 1, probability 0, space 0, times 0 [ 257.323792][ T9640] CPU: 1 UID: 0 PID: 9640 Comm: syz.1.935 Not tainted 6.16.0-next-20250807-syzkaller #0 PREEMPT(full) [ 257.323824][ T9640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 257.323838][ T9640] Call Trace: [ 257.323847][ T9640] [ 257.323856][ T9640] dump_stack_lvl+0x189/0x250 [ 257.323894][ T9640] ? __pfx____ratelimit+0x10/0x10 [ 257.323927][ T9640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.323960][ T9640] ? __pfx__printk+0x10/0x10 [ 257.323998][ T9640] ? __pfx___might_resched+0x10/0x10 [ 257.324025][ T9640] ? fs_reclaim_acquire+0x7d/0x100 [ 257.324056][ T9640] should_fail_ex+0x414/0x560 [ 257.324102][ T9640] should_failslab+0xa8/0x100 [ 257.324128][ T9640] kmem_cache_alloc_noprof+0x73/0x3c0 [ 257.324150][ T9640] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 257.324186][ T9640] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 257.324230][ T9640] mmu_topup_memory_caches+0x21/0x170 [ 257.324256][ T9640] kvm_mmu_load+0x9d/0x22f0 [ 257.324276][ T9640] ? queue_delayed_work_on+0x1f7/0x280 [ 257.324312][ T9640] ? kvm_end_pvclock_update+0x2c4/0x3b0 [ 257.324335][ T9640] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 257.324366][ T9640] ? kvm_apic_has_interrupt+0x744/0x770 [ 257.324406][ T9640] vcpu_run+0x484e/0x6fa0 [ 257.324509][ T9640] ? __pfx_vcpu_run+0x10/0x10 [ 257.324538][ T9640] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 257.324568][ T9640] ? rcu_is_watching+0x15/0xb0 [ 257.324601][ T9640] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 257.324628][ T9640] ? __mutex_trylock_common+0x153/0x260 [ 257.324663][ T9640] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 257.324685][ T9640] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 257.324709][ T9640] ? rcu_is_watching+0x15/0xb0 [ 257.324737][ T9640] ? trace_contention_end+0x39/0x120 [ 257.324766][ T9640] ? look_up_lock_class+0x74/0x170 [ 257.324800][ T9640] ? register_lock_class+0x51/0x320 [ 257.324832][ T9640] ? __lock_acquire+0xab9/0xd20 [ 257.324890][ T9640] kvm_vcpu_ioctl+0x95c/0xe90 [ 257.324931][ T9640] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 257.324961][ T9640] ? __lock_acquire+0xab9/0xd20 [ 257.325010][ T9640] ? __fget_files+0x2a/0x420 [ 257.325043][ T9640] ? __fget_files+0x2a/0x420 [ 257.325078][ T9640] ? __fget_files+0x3a0/0x420 [ 257.325106][ T9640] ? __fget_files+0x2a/0x420 [ 257.325140][ T9640] ? bpf_lsm_file_ioctl+0x9/0x20 [ 257.325161][ T9640] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 257.325195][ T9640] __se_sys_ioctl+0xf9/0x170 [ 257.325222][ T9640] do_syscall_64+0xfa/0x3b0 [ 257.325241][ T9640] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.325271][ T9640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.325294][ T9640] ? clear_bhb_loop+0x60/0xb0 [ 257.325320][ T9640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.325339][ T9640] RIP: 0033:0x7fc24e78ebe9 [ 257.325357][ T9640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.325374][ T9640] RSP: 002b:00007fc24f6c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.325397][ T9640] RAX: ffffffffffffffda RBX: 00007fc24e9b5fa0 RCX: 00007fc24e78ebe9 [ 257.325414][ T9640] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 257.325426][ T9640] RBP: 00007fc24f6c3090 R08: 0000000000000000 R09: 0000000000000000 [ 257.325440][ T9640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 257.325453][ T9640] R13: 00007fc24e9b6038 R14: 00007fc24e9b5fa0 R15: 00007ffce42f2638 [ 257.325487][ T9640] [ 257.735305][ T9645] No control pipe specified [ 258.837869][ T9656] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 259.292168][ T9662] input: syz1 as /devices/virtual/input/input33 [ 261.222947][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.243908][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.646455][ T9700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.663136][ T9700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.694697][ T9702] input: syz1 as /devices/virtual/input/input34 [ 264.873630][ T9706] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 264.921367][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 265.121168][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 265.136649][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 265.146044][ T24] usb 5-1: config 129 has an invalid interface number: 147 but max is 0 [ 265.155162][ T24] usb 5-1: config 129 has no interface number 0 [ 265.164128][ T24] usb 5-1: config 129 interface 147 altsetting 133 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 265.176059][ T24] usb 5-1: config 129 interface 147 has no altsetting 0 [ 265.185976][ T24] usb 5-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=80.af [ 265.197272][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.206436][ T24] usb 5-1: Product: syz [ 265.210730][ T24] usb 5-1: Manufacturer: syz [ 265.229079][ T24] usb 5-1: SerialNumber: syz [ 266.822999][ T24] peak_usb 5-1:129.147 can0: unable to request usb[type=0 value=1] err=-71 [ 266.851100][ T24] peak_usb 5-1:129.147: unable to read PCAN-USB Pro FD firmware info (err -71) [ 267.043758][ T24] peak_usb 5-1:129.147: probe with driver peak_usb failed with error -71 [ 267.062654][ T9736] process 'syz.1.965' launched './file2' with NULL argv: empty string added [ 267.088982][ T9738] /dev/rnullb0: Can't open blockdev [ 267.101536][ T9731] FAULT_INJECTION: forcing a failure. [ 267.101536][ T9731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.125233][ T24] usb 5-1: USB disconnect, device number 19 [ 267.132599][ T9731] CPU: 1 UID: 0 PID: 9731 Comm: syz.3.963 Not tainted 6.16.0-next-20250807-syzkaller #0 PREEMPT(full) [ 267.132631][ T9731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.132645][ T9731] Call Trace: [ 267.132654][ T9731] [ 267.132663][ T9731] dump_stack_lvl+0x189/0x250 [ 267.132701][ T9731] ? __pfx____ratelimit+0x10/0x10 [ 267.132735][ T9731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.132765][ T9731] ? __pfx__printk+0x10/0x10 [ 267.132795][ T9731] ? __might_fault+0xb0/0x130 [ 267.132831][ T9731] should_fail_ex+0x414/0x560 [ 267.132866][ T9731] _copy_from_iter+0x1db/0x16f0 [ 267.132904][ T9731] ? rcu_is_watching+0x15/0xb0 [ 267.132931][ T9731] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 267.132953][ T9731] ? __pfx__copy_from_iter+0x10/0x10 [ 267.132977][ T9731] ? __local_bh_enable_ip+0x12d/0x1c0 [ 267.133000][ T9731] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.133029][ T9731] skb_copy_datagram_from_iter+0xf5/0x720 [ 267.133053][ T9731] ? __lock_acquire+0xab9/0xd20 [ 267.133075][ T9731] ? iov_iter_single_seg_count+0xc9/0x2f0 [ 267.133099][ T9731] tun_get_user+0x1691/0x3e20 [ 267.133143][ T9731] ? __pfx_tun_get_user+0x10/0x10 [ 267.133180][ T9731] ? ref_tracker_alloc+0x318/0x460 [ 267.133206][ T9731] ? __lock_acquire+0xab9/0xd20 [ 267.133232][ T9731] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 267.133267][ T9731] ? tun_get+0x1c/0x2f0 [ 267.133295][ T9731] ? tun_get+0x1c/0x2f0 [ 267.133315][ T9731] ? tun_get+0x1c/0x2f0 [ 267.133341][ T9731] tun_chr_write_iter+0x113/0x200 [ 267.133366][ T9731] do_iter_readv_writev+0x61c/0x8b0 [ 267.133404][ T9731] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 267.133430][ T9731] ? common_file_perm+0x1b5/0x230 [ 267.133463][ T9731] ? bpf_lsm_file_permission+0x9/0x20 [ 267.133495][ T9731] ? security_file_permission+0x75/0x290 [ 267.133522][ T9731] ? rw_verify_area+0x255/0x4d0 [ 267.133549][ T9731] vfs_writev+0x31a/0x960 [ 267.133585][ T9731] ? __lock_acquire+0xab9/0xd20 [ 267.133611][ T9731] ? __pfx_vfs_writev+0x10/0x10 [ 267.133658][ T9731] ? __fget_files+0x2a/0x420 [ 267.133692][ T9731] ? __fget_files+0x3a0/0x420 [ 267.133720][ T9731] ? __fget_files+0x2a/0x420 [ 267.133757][ T9731] do_writev+0x14d/0x2d0 [ 267.133792][ T9731] ? __pfx_do_writev+0x10/0x10 [ 267.133821][ T9731] ? rcu_is_watching+0x15/0xb0 [ 267.133854][ T9731] ? do_syscall_64+0xbe/0x3b0 [ 267.133879][ T9731] do_syscall_64+0xfa/0x3b0 [ 267.133908][ T9731] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.133941][ T9731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.133963][ T9731] ? clear_bhb_loop+0x60/0xb0 [ 267.133990][ T9731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.134011][ T9731] RIP: 0033:0x7f3cbc38ebe9 [ 267.134032][ T9731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.134051][ T9731] RSP: 002b:00007f3cba5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 267.134074][ T9731] RAX: ffffffffffffffda RBX: 00007f3cbc5b6090 RCX: 00007f3cbc38ebe9 [ 267.134091][ T9731] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 267.134105][ T9731] RBP: 00007f3cba5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 267.134119][ T9731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.134132][ T9731] R13: 00007f3cbc5b6128 R14: 00007f3cbc5b6090 R15: 00007ffc8a466d38 [ 267.134168][ T9731] [ 267.492219][ T9742] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 267.499780][ T9742] VFS: Can't find a romfs filesystem on dev rnullb0. [ 267.499780][ T9742] [ 268.247577][ T9764] afs: Unknown parameter 'flok' [ 268.259514][ T30] audit: type=1326 audit(1754609040.125:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9763 comm="syz.6.971" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe11278ebe9 code=0x0 [ 269.238746][ T9790] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.451025][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 269.631266][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 269.639983][ T24] usb 5-1: too many configurations: 97, using maximum allowed: 8 [ 269.665909][ T24] usb 5-1: config 6 has an invalid interface number: 43 but max is 0 [ 269.681250][ T24] usb 5-1: config 6 has no interface number 0 [ 269.693219][ T24] usb 5-1: config 6 has an invalid interface number: 43 but max is 0 [ 269.701901][ T24] usb 5-1: config 6 has no interface number 0 [ 269.709467][ T24] usb 5-1: config 6 has an invalid interface number: 43 but max is 0 [ 269.728773][ T24] usb 5-1: config 6 has no interface number 0 [ 269.751419][ T24] usb 5-1: config 6 has an invalid interface number: 43 but max is 0 [ 269.759676][ T24] usb 5-1: config 6 has no interface number 0 [ 269.778322][ T24] usb 5-1: config 6 has an invalid interface number: 43 but max is 0 [ 269.795278][ T24] usb 5-1: config 6 has no interface number 0 [ 269.811369][ T24] usb 5-1: config 6 has an invalid interface number: 43 but max is 0 [ 269.819574][ T24] usb 5-1: config 6 has no interface number 0 [ 269.836549][ T24] usb 5-1: config 6 has an invalid interface number: 43 but max is 0 [ 269.856874][ T24] usb 5-1: config 6 has no interface number 0 [ 269.873430][ T24] usb 5-1: config 6 has an invalid interface number: 43 but max is 0 [ 269.881748][ T24] usb 5-1: config 6 has no interface number 0 [ 270.027819][ T9793] netlink: 12 bytes leftover after parsing attributes in process `syz.6.979'. [ 271.738693][ T9803] /dev/rnullb0: Can't open blockdev [ 272.221022][ T24] usb 5-1: string descriptor 0 read error: -71 [ 272.227391][ T24] usb 5-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 272.240700][ T24] usb 5-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 272.262076][ T24] usb 5-1: rejected 8 configurations due to insufficient available bus power [ 272.271047][ T24] usb 5-1: no configuration chosen from 8 choices [ 272.312495][ T24] usb 5-1: USB disconnect, device number 20 [ 272.314476][ T9811] FAULT_INJECTION: forcing a failure. [ 272.314476][ T9811] name failslab, interval 1, probability 0, space 0, times 0 [ 272.403562][ T9811] CPU: 1 UID: 0 PID: 9811 Comm: syz.6.984 Not tainted 6.16.0-next-20250807-syzkaller #0 PREEMPT(full) [ 272.403596][ T9811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 272.403610][ T9811] Call Trace: [ 272.403620][ T9811] [ 272.403630][ T9811] dump_stack_lvl+0x189/0x250 [ 272.403676][ T9811] ? __pfx____ratelimit+0x10/0x10 [ 272.403710][ T9811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.403743][ T9811] ? __pfx__printk+0x10/0x10 [ 272.403782][ T9811] ? __pfx___might_resched+0x10/0x10 [ 272.403809][ T9811] ? fs_reclaim_acquire+0x7d/0x100 [ 272.403841][ T9811] should_fail_ex+0x414/0x560 [ 272.403878][ T9811] should_failslab+0xa8/0x100 [ 272.403906][ T9811] kmem_cache_alloc_noprof+0x73/0x3c0 [ 272.403929][ T9811] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 272.403965][ T9811] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 272.404011][ T9811] mmu_topup_memory_caches+0x21/0x170 [ 272.404037][ T9811] kvm_mmu_load+0x9d/0x22f0 [ 272.404058][ T9811] ? queue_delayed_work_on+0x1f7/0x280 [ 272.404095][ T9811] ? kvm_end_pvclock_update+0x2c4/0x3b0 [ 272.404120][ T9811] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 272.404151][ T9811] ? kvm_apic_has_interrupt+0x744/0x770 [ 272.404192][ T9811] vcpu_run+0x484e/0x6fa0 [ 272.404295][ T9811] ? __pfx_vcpu_run+0x10/0x10 [ 272.404324][ T9811] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 272.404354][ T9811] ? rcu_is_watching+0x15/0xb0 [ 272.404387][ T9811] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 272.404415][ T9811] ? __mutex_trylock_common+0x153/0x260 [ 272.404451][ T9811] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 272.404473][ T9811] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 272.404497][ T9811] ? rcu_is_watching+0x15/0xb0 [ 272.404526][ T9811] ? trace_contention_end+0x39/0x120 [ 272.404560][ T9811] ? look_up_lock_class+0x74/0x170 [ 272.404595][ T9811] ? register_lock_class+0x51/0x320 [ 272.404626][ T9811] ? __lock_acquire+0xab9/0xd20 [ 272.404692][ T9811] kvm_vcpu_ioctl+0x95c/0xe90 [ 272.404733][ T9811] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 272.404764][ T9811] ? __lock_acquire+0xab9/0xd20 [ 272.404813][ T9811] ? __fget_files+0x2a/0x420 [ 272.404846][ T9811] ? __fget_files+0x2a/0x420 [ 272.404875][ T9811] ? __fget_files+0x3a0/0x420 [ 272.404903][ T9811] ? __fget_files+0x2a/0x420 [ 272.404937][ T9811] ? bpf_lsm_file_ioctl+0x9/0x20 [ 272.404957][ T9811] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 272.404990][ T9811] __se_sys_ioctl+0xf9/0x170 [ 272.405017][ T9811] do_syscall_64+0xfa/0x3b0 [ 272.405035][ T9811] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.405067][ T9811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.405089][ T9811] ? clear_bhb_loop+0x60/0xb0 [ 272.405115][ T9811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.405136][ T9811] RIP: 0033:0x7fe11278ebe9 [ 272.405155][ T9811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.405174][ T9811] RSP: 002b:00007fe1135b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.405197][ T9811] RAX: ffffffffffffffda RBX: 00007fe1129b5fa0 RCX: 00007fe11278ebe9 [ 272.405214][ T9811] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 272.405227][ T9811] RBP: 00007fe1135b8090 R08: 0000000000000000 R09: 0000000000000000 [ 272.405240][ T9811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 272.405253][ T9811] R13: 00007fe1129b6038 R14: 00007fe1129b5fa0 R15: 00007ffebe0405d8 [ 272.405288][ T9811] [ 272.880771][ T9819] mmap: syz.4.986 (9819) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 273.398747][ T9835] /dev/rnullb0: Can't open blockdev [ 273.552503][ T9840] netlink: 'syz.4.993': attribute type 7 has an invalid length. [ 273.560258][ T9839] netlink: 216 bytes leftover after parsing attributes in process `syz.3.991'. [ 273.600378][ T9840] netlink: 'syz.4.993': attribute type 5 has an invalid length. [ 273.619737][ T9840] netlink: 17 bytes leftover after parsing attributes in process `syz.4.993'. [ 273.951216][ T9845] picdev_read: 162 callbacks suppressed [ 273.951239][ T9845] kvm: pic: non byte read [ 273.971118][ T9845] kvm: pic: non byte read [ 273.975621][ T9845] kvm: pic: non byte read [ 273.980179][ T9845] kvm: pic: non byte read [ 274.001701][ T9845] kvm: pic: non byte read [ 274.011249][ T9845] kvm: pic: non byte read [ 274.015855][ T9845] kvm: pic: non byte read [ 274.031157][ T9845] kvm: pic: non byte read [ 274.036552][ T9845] kvm: pic: non byte read [ 274.041198][ T9845] kvm: pic: non byte read [ 274.219897][ T9849] input: syz1 as /devices/virtual/input/input35 [ 274.493609][ T9853] FAULT_INJECTION: forcing a failure. [ 274.493609][ T9853] name failslab, interval 1, probability 0, space 0, times 0 [ 274.549524][ T9853] CPU: 1 UID: 0 PID: 9853 Comm: syz.6.997 Not tainted 6.16.0-next-20250807-syzkaller #0 PREEMPT(full) [ 274.549557][ T9853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 274.549571][ T9853] Call Trace: [ 274.549580][ T9853] [ 274.549589][ T9853] dump_stack_lvl+0x189/0x250 [ 274.549628][ T9853] ? __pfx____ratelimit+0x10/0x10 [ 274.549662][ T9853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.549694][ T9853] ? __pfx__printk+0x10/0x10 [ 274.549733][ T9853] ? __pfx___might_resched+0x10/0x10 [ 274.549759][ T9853] ? fs_reclaim_acquire+0x7d/0x100 [ 274.549793][ T9853] should_fail_ex+0x414/0x560 [ 274.549829][ T9853] should_failslab+0xa8/0x100 [ 274.549857][ T9853] kmem_cache_alloc_noprof+0x73/0x3c0 [ 274.549880][ T9853] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 274.549916][ T9853] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 274.549961][ T9853] mmu_topup_memory_caches+0x21/0x170 [ 274.549987][ T9853] kvm_mmu_load+0x9d/0x22f0 [ 274.550008][ T9853] ? queue_delayed_work_on+0x1f7/0x280 [ 274.550043][ T9853] ? kvm_end_pvclock_update+0x2c4/0x3b0 [ 274.550068][ T9853] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 274.550099][ T9853] ? kvm_apic_has_interrupt+0x744/0x770 [ 274.550140][ T9853] vcpu_run+0x484e/0x6fa0 [ 274.550252][ T9853] ? __pfx_vcpu_run+0x10/0x10 [ 274.550281][ T9853] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 274.550312][ T9853] ? rcu_is_watching+0x15/0xb0 [ 274.550346][ T9853] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 274.550377][ T9853] ? __mutex_trylock_common+0x153/0x260 [ 274.550413][ T9853] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 274.550435][ T9853] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 274.550459][ T9853] ? rcu_is_watching+0x15/0xb0 [ 274.550488][ T9853] ? trace_contention_end+0x39/0x120 [ 274.550518][ T9853] ? look_up_lock_class+0x74/0x170 [ 274.550553][ T9853] ? register_lock_class+0x51/0x320 [ 274.550585][ T9853] ? __lock_acquire+0xab9/0xd20 [ 274.550643][ T9853] kvm_vcpu_ioctl+0x95c/0xe90 [ 274.550685][ T9853] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 274.550717][ T9853] ? __lock_acquire+0xab9/0xd20 [ 274.550764][ T9853] ? __fget_files+0x2a/0x420 [ 274.550799][ T9853] ? __fget_files+0x2a/0x420 [ 274.550829][ T9853] ? __fget_files+0x3a0/0x420 [ 274.550857][ T9853] ? __fget_files+0x2a/0x420 [ 274.550891][ T9853] ? bpf_lsm_file_ioctl+0x9/0x20 [ 274.550909][ T9853] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 274.550941][ T9853] __se_sys_ioctl+0xf9/0x170 [ 274.550966][ T9853] do_syscall_64+0xfa/0x3b0 [ 274.550984][ T9853] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.551014][ T9853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.551034][ T9853] ? clear_bhb_loop+0x60/0xb0 [ 274.551059][ T9853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.551080][ T9853] RIP: 0033:0x7fe11278ebe9 [ 274.551100][ T9853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.551118][ T9853] RSP: 002b:00007fe1135b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.551140][ T9853] RAX: ffffffffffffffda RBX: 00007fe1129b5fa0 RCX: 00007fe11278ebe9 [ 274.551155][ T9853] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 274.551168][ T9853] RBP: 00007fe1135b8090 R08: 0000000000000000 R09: 0000000000000000 [ 274.551180][ T9853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 274.551193][ T9853] R13: 00007fe1129b6038 R14: 00007fe1129b5fa0 R15: 00007ffebe0405d8 [ 274.551236][ T9853] [ 275.048515][ T9861] /dev/rnullb0: Can't open blockdev [ 275.432977][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1003'. [ 275.442251][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1003'. [ 275.802610][ T9878] ieee802154 phy0 wpan0: encryption failed: -22 [ 275.937918][ T9880] input: syz1 as /devices/virtual/input/input36 [ 276.017147][ T9882] /dev/rnullb0: Can't open blockdev [ 276.616500][ T30] audit: type=1400 audit(1754609048.485:17): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name="&00000000000000000000" pid=9896 comm="syz.3.1011" [ 276.643644][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1011'. [ 277.716904][ T9918] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 277.735541][ T9918] /dev/rnullb0: Can't open blockdev [ 278.231188][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 278.372017][ T10] usb 4-1: device descriptor read/64, error -71 [ 278.645058][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 278.802514][ T10] usb 4-1: device descriptor read/64, error -71 [ 278.849255][ T9933] FAULT_INJECTION: forcing a failure. [ 278.849255][ T9933] name failslab, interval 1, probability 0, space 0, times 0 [ 278.864782][ T9933] CPU: 0 UID: 0 PID: 9933 Comm: syz.6.1022 Not tainted 6.16.0-next-20250807-syzkaller #0 PREEMPT(full) [ 278.864819][ T9933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 278.864834][ T9933] Call Trace: [ 278.864843][ T9933] [ 278.864851][ T9933] dump_stack_lvl+0x189/0x250 [ 278.864888][ T9933] ? __pfx____ratelimit+0x10/0x10 [ 278.864920][ T9933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.864952][ T9933] ? __pfx__printk+0x10/0x10 [ 278.864989][ T9933] ? __pfx___might_resched+0x10/0x10 [ 278.865015][ T9933] ? fs_reclaim_acquire+0x7d/0x100 [ 278.865047][ T9933] should_fail_ex+0x414/0x560 [ 278.865083][ T9933] should_failslab+0xa8/0x100 [ 278.865110][ T9933] kmem_cache_alloc_noprof+0x73/0x3c0 [ 278.865129][ T9933] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 278.865159][ T9933] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 278.865195][ T9933] mmu_topup_memory_caches+0x21/0x170 [ 278.865216][ T9933] kvm_mmu_load+0x9d/0x22f0 [ 278.865232][ T9933] ? queue_delayed_work_on+0x1f7/0x280 [ 278.865261][ T9933] ? kvm_end_pvclock_update+0x2c4/0x3b0 [ 278.865281][ T9933] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 278.865306][ T9933] ? kvm_apic_has_interrupt+0x744/0x770 [ 278.865337][ T9933] vcpu_run+0x484e/0x6fa0 [ 278.865414][ T9933] ? __pfx_vcpu_run+0x10/0x10 [ 278.865436][ T9933] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 278.865462][ T9933] ? rcu_is_watching+0x15/0xb0 [ 278.865489][ T9933] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 278.865510][ T9933] ? __mutex_trylock_common+0x153/0x260 [ 278.865538][ T9933] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 278.865556][ T9933] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 278.865574][ T9933] ? rcu_is_watching+0x15/0xb0 [ 278.865597][ T9933] ? trace_contention_end+0x39/0x120 [ 278.865621][ T9933] ? look_up_lock_class+0x74/0x170 [ 278.865649][ T9933] ? register_lock_class+0x51/0x320 [ 278.865674][ T9933] ? __lock_acquire+0xab9/0xd20 [ 278.865718][ T9933] kvm_vcpu_ioctl+0x95c/0xe90 [ 278.865751][ T9933] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 278.865776][ T9933] ? __lock_acquire+0xab9/0xd20 [ 278.865823][ T9933] ? __fget_files+0x2a/0x420 [ 278.865850][ T9933] ? __fget_files+0x2a/0x420 [ 278.865873][ T9933] ? __fget_files+0x3a0/0x420 [ 278.865896][ T9933] ? __fget_files+0x2a/0x420 [ 278.865922][ T9933] ? bpf_lsm_file_ioctl+0x9/0x20 [ 278.865940][ T9933] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 278.865967][ T9933] __se_sys_ioctl+0xf9/0x170 [ 278.865989][ T9933] do_syscall_64+0xfa/0x3b0 [ 278.866003][ T9933] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.866029][ T9933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.866047][ T9933] ? clear_bhb_loop+0x60/0xb0 [ 278.866070][ T9933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.866087][ T9933] RIP: 0033:0x7fe11278ebe9 [ 278.866102][ T9933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.866118][ T9933] RSP: 002b:00007fe1135b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.866136][ T9933] RAX: ffffffffffffffda RBX: 00007fe1129b5fa0 RCX: 00007fe11278ebe9 [ 278.866149][ T9933] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 278.866159][ T9933] RBP: 00007fe1135b8090 R08: 0000000000000000 R09: 0000000000000000 [ 278.866170][ T9933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 278.866180][ T9933] R13: 00007fe1129b6038 R14: 00007fe1129b5fa0 R15: 00007ffebe0405d8 [ 278.866206][ T9933] [ 279.287118][ T10] usb usb4-port1: attempt power cycle [ 279.631077][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 279.677723][ T10] usb 4-1: device descriptor read/8, error -71 [ 279.725173][ T9949] binder: 9944:9949 ioctl c018620c 200000000580 returned -22 [ 279.733026][ T9950] binder: 9944:9950 ioctl c018620c 200000000580 returned -22 [ 279.931292][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 279.951032][ T5941] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 279.966401][ T10] usb 4-1: device descriptor read/8, error -71 [ 280.098253][ T10] usb usb4-port1: unable to enumerate USB device [ 280.116449][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 280.137585][ T5941] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 280.157593][ T5941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.181470][ T5941] usb 7-1: config 0 descriptor?? [ 280.187452][ T9946] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 280.884108][ T9947] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1027'. [ 280.905314][ T9955] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1027'. [ 280.921758][ T5941] elan 0003:04F3:0755.0007: unknown main item tag 0x0 [ 280.928631][ T5941] elan 0003:04F3:0755.0007: item fetching failed at offset 3/5 [ 280.951741][ T5941] elan 0003:04F3:0755.0007: Hid Parse failed [ 280.957998][ T5941] elan 0003:04F3:0755.0007: probe with driver elan failed with error -22 [ 281.391005][ T10] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 281.558542][ T10] usb 4-1: config index 0 descriptor too short (expected 13649, got 18) [ 281.582501][ T10] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=a3.c0 [ 281.604279][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.620675][ T10] usb 4-1: Product: syz [ 281.644648][ T10] usb 4-1: Manufacturer: syz [ 281.651835][ T10] usb 4-1: SerialNumber: syz [ 281.873921][ T9957] netlink: 'syz.3.1029': attribute type 2 has an invalid length. [ 281.889741][ T9957] /dev/rnullb0: Can't open blockdev [ 281.921480][ T10] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 281.946513][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 281.968409][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 281.989278][ T10] usb 4-1: USB disconnect, device number 22 [ 282.534018][ T9974] FAULT_INJECTION: forcing a failure. [ 282.534018][ T9974] name failslab, interval 1, probability 0, space 0, times 0 [ 282.555081][ T9974] CPU: 0 UID: 0 PID: 9974 Comm: syz.1.1033 Not tainted 6.16.0-next-20250807-syzkaller #0 PREEMPT(full) [ 282.555113][ T9974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 282.555127][ T9974] Call Trace: [ 282.555136][ T9974] [ 282.555146][ T9974] dump_stack_lvl+0x189/0x250 [ 282.555185][ T9974] ? __pfx____ratelimit+0x10/0x10 [ 282.555218][ T9974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.555251][ T9974] ? __pfx__printk+0x10/0x10 [ 282.555290][ T9974] ? __pfx___might_resched+0x10/0x10 [ 282.555317][ T9974] ? fs_reclaim_acquire+0x7d/0x100 [ 282.555350][ T9974] should_fail_ex+0x414/0x560 [ 282.555382][ T9974] should_failslab+0xa8/0x100 [ 282.555409][ T9974] kmem_cache_alloc_noprof+0x73/0x3c0 [ 282.555430][ T9974] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 282.555466][ T9974] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 282.555508][ T9974] mmu_topup_memory_caches+0x21/0x170 [ 282.555542][ T9974] kvm_mmu_load+0x9d/0x22f0 [ 282.555561][ T9974] ? queue_delayed_work_on+0x1f7/0x280 [ 282.555594][ T9974] ? kvm_end_pvclock_update+0x2c4/0x3b0 [ 282.555615][ T9974] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 282.555646][ T9974] ? kvm_apic_has_interrupt+0x744/0x770 [ 282.555683][ T9974] vcpu_run+0x484e/0x6fa0 [ 282.555783][ T9974] ? __pfx_vcpu_run+0x10/0x10 [ 282.555812][ T9974] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 282.555842][ T9974] ? rcu_is_watching+0x15/0xb0 [ 282.555876][ T9974] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 282.555904][ T9974] ? __mutex_trylock_common+0x153/0x260 [ 282.555939][ T9974] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 282.555962][ T9974] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 282.555985][ T9974] ? rcu_is_watching+0x15/0xb0 [ 282.556012][ T9974] ? trace_contention_end+0x39/0x120 [ 282.556040][ T9974] ? look_up_lock_class+0x74/0x170 [ 282.556072][ T9974] ? register_lock_class+0x51/0x320 [ 282.556100][ T9974] ? __lock_acquire+0xab9/0xd20 [ 282.556152][ T9974] kvm_vcpu_ioctl+0x95c/0xe90 [ 282.556190][ T9974] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 282.556219][ T9974] ? __lock_acquire+0xab9/0xd20 [ 282.556263][ T9974] ? __fget_files+0x2a/0x420 [ 282.556295][ T9974] ? __fget_files+0x2a/0x420 [ 282.556320][ T9974] ? __fget_files+0x3a0/0x420 [ 282.556347][ T9974] ? __fget_files+0x2a/0x420 [ 282.556378][ T9974] ? bpf_lsm_file_ioctl+0x9/0x20 [ 282.556399][ T9974] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 282.556431][ T9974] __se_sys_ioctl+0xf9/0x170 [ 282.556458][ T9974] do_syscall_64+0xfa/0x3b0 [ 282.556477][ T9974] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.556508][ T9974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.556538][ T9974] ? clear_bhb_loop+0x60/0xb0 [ 282.556566][ T9974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.556587][ T9974] RIP: 0033:0x7fc24e78ebe9 [ 282.556608][ T9974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.556627][ T9974] RSP: 002b:00007fc24f6c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.556650][ T9974] RAX: ffffffffffffffda RBX: 00007fc24e9b5fa0 RCX: 00007fc24e78ebe9 [ 282.556666][ T9974] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 282.556679][ T9974] RBP: 00007fc24f6c3090 R08: 0000000000000000 R09: 0000000000000000 [ 282.556693][ T9974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 282.556706][ T9974] R13: 00007fc24e9b6038 R14: 00007fc24e9b5fa0 R15: 00007ffce42f2638 [ 282.556742][ T9974] [ 283.058742][ T10] usb 7-1: USB disconnect, device number 21 [ 283.192687][ T9985] /dev/rnullb0: Can't open blockdev [ 283.251409][ T5941] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 283.432971][ T5941] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 283.442973][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.471041][ T24] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 283.483023][ T5941] usb 4-1: config 0 descriptor?? [ 283.541269][ T10] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 283.672864][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.691534][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 283.699620][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.709355][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 283.732008][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 283.744301][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.752362][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 283.768850][ T24] usb 5-1: SerialNumber: syz [ 283.792414][ T24] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 283.794453][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 283.801339][ T24] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 283.820080][ T24] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 283.841841][ T10] usb 7-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 283.896393][ T5941] ath6kl: Unsupported hardware version: 0x0 [ 283.908422][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.917174][ T5941] ath6kl: Failed to init ath6kl core: -22 [ 283.935650][ T10] usb 7-1: config 0 descriptor?? [ 283.942523][ T5941] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 284.088443][ T5911] usb 5-1: USB disconnect, device number 21 [ 284.117249][ T5941] usb 4-1: USB disconnect, device number 23 [ 284.317978][T10000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1042'. [ 284.408751][ T10] nintendo 0003:057E:2019.0008: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.6-1/input0 [ 284.521274][ T10] nintendo 0003:057E:2019.0008: Failed to get joycon info; ret=-38 [ 284.529470][ T10] nintendo 0003:057E:2019.0008: Failed to retrieve controller info; ret=-38 [ 284.546941][ T10] nintendo 0003:057E:2019.0008: Failed to initialize controller; ret=-38 [ 284.559421][ T10] nintendo 0003:057E:2019.0008: probe - fail = -38 [ 284.570843][ T10] nintendo 0003:057E:2019.0008: probe with driver nintendo failed with error -38 [ 284.759675][T10009] input: syz1 as /devices/virtual/input/input37 [ 284.795102][ T5941] usb 7-1: USB disconnect, device number 22 [ 284.910072][T10013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 285.891012][ T5941] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 286.064979][ T5941] usb 7-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 286.092787][ T5941] usb 7-1: config 1 interface 0 altsetting 6 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 286.114348][ T5941] usb 7-1: config 1 interface 0 has no altsetting 0 [ 286.132236][ T5941] usb 7-1: New USB device found, idVendor=056a, idProduct=0041, bcdDevice= 0.40 [ 286.144998][ T5941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.162528][ T5941] usb 7-1: Product: 콍靀姉햃ж詟熌晑䊻멖㯁碘뻁暐쒢彮㫎㑮翫ꢨ䕺琟র苜︻绠虮겻븟䙐検៻窪Ꙟ邟硓ᶯ壡ﹲ녜꽒沀罹✈粒릧㹙뫤˜૯쏗緄摙䠶ƚ [ 286.220955][ T5941] usb 7-1: Manufacturer: Ы [ 286.421889][T10044] /dev/rnullb0: Can't open blockdev [ 286.455215][ T5941] usbhid 7-1:1.0: can't add hid device: -71 [ 286.464831][ T5941] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 286.495674][ T5941] usb 7-1: USB disconnect, device number 23 [ 286.821277][ T927] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 286.984782][ T927] usb 2-1: Using ep0 maxpacket: 32 [ 287.005129][ T927] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 287.021084][ T927] usb 2-1: config 0 has no interface number 0 [ 287.027293][ T927] usb 2-1: config 0 interface 184 has no altsetting 0 [ 287.061221][T10068] openvswitch: netlink: EtherType 0 is less than min 600 [ 287.070653][ T5864] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 287.074476][ T927] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 287.111439][ T927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.119503][ T927] usb 2-1: Product: syz [ 287.139128][ T927] usb 2-1: Manufacturer: syz [ 287.152717][ T927] usb 2-1: SerialNumber: syz [ 287.168528][ T927] usb 2-1: config 0 descriptor?? [ 287.189366][ T927] smsc75xx v1.0.0 [ 287.264668][T10073] netlink: 'syz.4.1064': attribute type 27 has an invalid length. [ 287.375013][T10078] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1064'. [ 287.603301][ T927] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 287.618081][ T927] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 287.669392][ T927] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 287.706146][ T927] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 288.305453][T10082] /dev/rnullb0: Can't open blockdev [ 288.777581][T10101] nftables ruleset with unbound set [ 288.822115][ T1214] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 288.991019][ T1214] usb 4-1: Using ep0 maxpacket: 16 [ 288.998302][ T1214] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.008781][ T1214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.025975][ T1214] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 289.070513][ T1214] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 289.087936][ T1214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.122164][ T1214] usb 4-1: config 0 descriptor?? [ 289.585460][ T1214] nintendo 0003:057E:2019.0009: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.3-1/input0 [ 289.625675][T10113] vxcan1: entered allmulticast mode [ 289.701992][ T1214] nintendo 0003:057E:2019.0009: Failed to get joycon info; ret=-38 [ 289.740511][ T1214] nintendo 0003:057E:2019.0009: Failed to retrieve controller info; ret=-38 [ 289.765376][ T1214] nintendo 0003:057E:2019.0009: Failed to initialize controller; ret=-38 [ 289.795524][ T1214] nintendo 0003:057E:2019.0009: probe - fail = -38 [ 289.813121][ T1214] nintendo 0003:057E:2019.0009: probe with driver nintendo failed with error -38 [ 289.936462][T10117] /dev/rnullb0: Can't open blockdev [ 289.968451][ T5941] usb 2-1: USB disconnect, device number 17 [ 289.974411][ T1214] usb 4-1: USB disconnect, device number 24 [ 290.089145][T10123] /dev/rnullb0: Can't open blockdev [ 290.506694][T10138] /dev/rnullb0: Can't open blockdev [ 290.575281][T10142] /dev/rnullb0: Can't open blockdev [ 290.751754][T10155] /dev/rnullb0: Can't open blockdev [ 290.891651][ T5941] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 291.521599][ T927] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 291.666454][T10185] input: syz1 as /devices/virtual/input/input38 [ 291.712486][ T927] usb 5-1: Using ep0 maxpacket: 16 [ 291.736156][ T927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.764419][ T927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.786483][ T927] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 291.799997][ T927] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 291.823376][ T927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.867238][ T927] usb 5-1: config 0 descriptor?? [ 292.319318][ T927] nintendo 0003:057E:2019.000A: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.4-1/input0 [ 292.391318][ T927] nintendo 0003:057E:2019.000A: Failed to get joycon info; ret=-38 [ 292.409524][ T927] nintendo 0003:057E:2019.000A: Failed to retrieve controller info; ret=-38 [ 292.429847][ T927] nintendo 0003:057E:2019.000A: Failed to initialize controller; ret=-38 [ 292.475500][ T927] nintendo 0003:057E:2019.000A: probe - fail = -38 [ 292.486756][ T927] nintendo 0003:057E:2019.000A: probe with driver nintendo failed with error -38 [ 292.594924][T10207] /dev/rnullb0: Can't open blockdev [ 292.743607][T10212] input: syz1 as /devices/virtual/input/input39 [ 292.813379][ T927] usb 5-1: USB disconnect, device number 22 [ 292.927119][T10216] block nbd6: NBD_DISCONNECT [ 292.933975][T10216] /dev/rnullb0: Can't open blockdev [ 293.343205][T10223] /dev/rnullb0: Can't open blockdev [ 293.351509][T10223] /dev/rnullb0: Can't open blockdev [ 293.736370][T10241] netlink: 'syz.4.1116': attribute type 29 has an invalid length. [ 293.748892][T10241] netlink: 'syz.4.1116': attribute type 29 has an invalid length. [ 293.758802][T10238] /dev/rnullb0: Can't open blockdev [ 293.759037][T10241] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1116'. [ 293.777275][T10241] /dev/rnullb0: Can't open blockdev [ 293.908140][T10244] input: syz1 as /devices/virtual/input/input40 [ 293.971087][ T1214] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 293.974329][T10249] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 293.994472][T10249] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 294.064424][T10249] /dev/rnullb0: Can't open blockdev [ 294.150503][ T1214] usb 4-1: unable to get BOS descriptor or descriptor too short [ 294.175284][ T1214] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 294.203880][ T1214] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 294.218972][T10253] /dev/rnullb0: Can't open blockdev [ 294.248687][ T1214] usb 4-1: config 1 interface 0 has no altsetting 1 [ 294.264770][ T1214] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 294.275380][ T1214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.295308][T10261] /dev/rnullb0: Can't open blockdev [ 294.301416][ T1214] usb 4-1: Product: syz [ 294.305722][ T1214] usb 4-1: Manufacturer: syz [ 294.346415][ T1214] usb 4-1: SerialNumber: syz [ 294.376235][ T1214] smsusb:smsusb_probe: board id=8, interface number 0 [ 294.575865][ T1214] smsusb:smsusb_probe: Device initialized with return code -19 [ 294.784244][T10242] /dev/rnullb0: Can't open blockdev [ 294.814404][ T927] usb 4-1: USB disconnect, device number 26 [ 295.099258][T10287] input: syz1 as /devices/virtual/input/input41 [ 295.153296][T10290] /dev/rnullb0: Can't open blockdev [ 295.367096][T10296] /dev/rnullb0: Can't open blockdev [ 296.005576][T10305] /dev/rnullb0: Can't open blockdev [ 296.400278][T10313] /dev/rnullb0: Can't open blockdev [ 296.661124][ T1214] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 296.821238][ T1214] usb 4-1: device descriptor read/64, error -71 [ 297.061083][ T1214] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 297.097479][T10316] input: syz1 as /devices/virtual/input/input42 [ 297.211137][ T1214] usb 4-1: device descriptor read/64, error -71 [ 297.331773][ T1214] usb usb4-port1: attempt power cycle [ 297.501044][ T5911] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 297.808688][ T1214] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 297.828918][T10325] syzkaller1: entered promiscuous mode [ 297.831059][ T5911] usb 5-1: Invalid ep0 maxpacket: 32 [ 297.836527][T10325] syzkaller1: entered allmulticast mode [ 297.840863][ T1214] usb 4-1: device descriptor read/8, error -71 [ 297.981010][ T5911] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 298.103240][ T1214] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 298.141890][ T5911] usb 5-1: Invalid ep0 maxpacket: 32 [ 298.149025][ T1214] usb 4-1: device descriptor read/8, error -71 [ 298.157981][ T5911] usb usb5-port1: attempt power cycle [ 298.271325][ T1214] usb usb4-port1: unable to enumerate USB device [ 298.478119][T10337] xfrm0: mtu less than device minimum [ 298.501161][ T5911] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 298.534933][ T5911] usb 5-1: Invalid ep0 maxpacket: 32 [ 298.681875][ T5911] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 298.703117][ T5911] usb 5-1: Invalid ep0 maxpacket: 32 [ 298.708790][ T5911] usb usb5-port1: unable to enumerate USB device [ 298.901049][ T5941] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 298.970550][T10344] input: syz1 as /devices/virtual/input/input43 [ 299.060997][ T5941] usb 7-1: Using ep0 maxpacket: 16 [ 299.079745][ T5941] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.101010][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.121105][ T5941] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 299.135225][ T5941] usb 7-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 299.144474][ T5941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.173032][ T5941] usb 7-1: config 0 descriptor?? [ 299.305851][T10346] fuse: Unknown parameter '0x0000000000000003' [ 299.318803][T10346] /dev/rnullb0: Can't open blockdev [ 299.681984][ T5941] nintendo 0003:057E:2019.000B: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.6-1/input0 [ 299.751671][ T5941] nintendo 0003:057E:2019.000B: Failed to get joycon info; ret=-38 [ 299.760305][ T5941] nintendo 0003:057E:2019.000B: Failed to retrieve controller info; ret=-38 [ 299.773338][ T5941] nintendo 0003:057E:2019.000B: Failed to initialize controller; ret=-38 [ 299.801654][T10356] /dev/rnullb0: Can't open blockdev [ 299.820582][ T5941] nintendo 0003:057E:2019.000B: probe - fail = -38 [ 299.865851][ T5941] nintendo 0003:057E:2019.000B: probe with driver nintendo failed with error -38 [ 299.910988][ T5943] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 300.061425][ T5944] usb 7-1: USB disconnect, device number 24 [ 300.083990][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 300.108917][ T5943] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 300.131519][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 300.143401][ T5943] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 300.153885][ T5943] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 300.162698][ T5943] usb 4-1: Manufacturer: syz [ 300.174045][ T5943] usb 4-1: config 0 descriptor?? [ 300.183332][ T5943] smsusb:smsusb_probe: board id=9, interface number 0 [ 300.192748][ T5943] smsusb:smsusb_probe: Device initialized with return code -19 [ 300.198114][T10367] /dev/rnullb0: Can't open blockdev [ 300.395733][ T5944] usb 4-1: USB disconnect, device number 31 [ 300.622259][T10375] syzkaller0: entered promiscuous mode [ 300.628112][T10375] syzkaller0: entered allmulticast mode [ 300.745284][T10379] netlink: 8752 bytes leftover after parsing attributes in process `syz.4.1158'. [ 300.766046][T10379] openvswitch: netlink: Flow key attr not present in new flow. [ 301.024071][ T5944] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 301.830252][T10391] sctp: [Deprecated]: syz.6.1162 (pid 10391) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.830252][T10391] Use struct sctp_sack_info instead [ 302.034607][ T5944] usb 5-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 302.270990][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.297494][ T5944] usb 5-1: config 0 descriptor?? [ 302.333449][ T5944] usbhid 5-1:0.0: can't add hid device: -22 [ 302.339534][ T5944] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 302.729687][T10401] /dev/rnullb0: Can't open blockdev [ 302.768073][T10398] binder: 10397:10398 unknown command 0 [ 302.788499][T10398] binder: 10397:10398 ioctl c0306201 200000000080 returned -22 [ 303.041173][ T5943] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 303.213172][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.231235][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.261314][ T5943] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 303.270507][ T5943] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.294121][ T5943] usb 7-1: config 0 descriptor?? [ 304.201434][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 304.592413][ T5944] usb 5-1: USB disconnect, device number 27 [ 304.691031][ T5941] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 304.881524][ T5941] usb 4-1: Using ep0 maxpacket: 16 [ 304.909005][ T5941] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 304.941141][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 304.962645][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 304.989136][ T5941] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 305.012994][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.032139][ T5941] usb 4-1: Product: syz [ 305.036399][ T5941] usb 4-1: Manufacturer: syz [ 305.054401][ T5941] usb 4-1: SerialNumber: syz [ 305.073390][ T5941] usb 4-1: config 0 descriptor?? [ 305.089485][ T5941] appledisplay 4-1:0.0: Submitting URB failed [ 305.099908][ T5941] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -5 [ 305.549769][ T5941] usb 4-1: USB disconnect, device number 32 [ 305.582460][ T1214] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 305.749542][ T1214] usb 2-1: unable to get BOS descriptor or descriptor too short [ 305.768221][ T1214] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x1 is Bulk; changing to Interrupt [ 305.788049][T10434] /dev/rnullb0: Can't open blockdev [ 305.794254][ T1214] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x82 is Bulk; changing to Interrupt [ 305.798759][ T5943] hid-led 0003:27B8:01ED.000C: probe with driver hid-led failed with error -71 [ 305.825888][ T1214] usb 2-1: config 1 interface 0 has no altsetting 0 [ 305.848388][ T1214] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 305.880871][ T5943] usb 7-1: USB disconnect, device number 25 [ 305.887313][ T1214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.887344][ T1214] usb 2-1: SerialNumber: Њ [ 305.914314][T10431] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 305.931172][T10431] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 306.086611][T10440] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 306.115016][T10443] /dev/rnullb0: Can't open blockdev [ 306.317502][T10449] /dev/rnullb0: Can't open blockdev [ 306.341520][T10451] /dev/sg0: Can't lookup blockdev [ 306.515610][T10431] /dev/rnullb0: Can't open blockdev [ 306.761406][ T927] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 306.924332][ T927] usb 7-1: Using ep0 maxpacket: 16 [ 306.934771][ T927] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.950249][ T927] usb 7-1: config 0 has no interfaces? [ 306.964180][ T927] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 306.975124][ T927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.987372][ T927] usb 7-1: Product: syz [ 306.994024][ T927] usb 7-1: Manufacturer: syz [ 307.003871][ T927] usb 7-1: SerialNumber: syz [ 307.012941][ T927] usb 7-1: config 0 descriptor?? [ 308.372928][ T1214] usb 2-1: USB disconnect, device number 18 [ 309.171757][ T927] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 309.314098][T10506] /dev/rnullb0: Can't open blockdev [ 309.362016][ T927] usb 2-1: Using ep0 maxpacket: 16 [ 309.377130][ T927] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 309.398142][ T927] usb 2-1: config 0 has no interface number 0 [ 309.438978][ T927] usb 2-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.442346][T10508] IPv6: syztnl0: Disabled Multicast RS [ 309.458745][ T927] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 309.469355][T10508] /dev/rnullb0: Can't open blockdev [ 309.475114][ T927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.489404][T10510] /dev/rnullb0: Can't open blockdev [ 309.531144][ T927] usb 2-1: Product: syz [ 309.536899][ T927] usb 2-1: Manufacturer: syz [ 309.543627][ T5911] usb 7-1: USB disconnect, device number 26 [ 309.543714][ T927] usb 2-1: SerialNumber: syz [ 309.564126][ T927] usb 2-1: config 0 descriptor?? [ 309.597450][ T927] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 309.786536][ T927] usb 2-1: USB disconnect, device number 19 [ 309.797423][ T7339] usb 2-1: Failed to submit usb control message: -71 [ 309.811336][ T7339] usb 2-1: unable to send the bmi data to the device: -71 [ 309.818760][ T7339] usb 2-1: unable to get target info from device [ 309.844856][ T7339] usb 2-1: could not get target info (-71) [ 309.867842][ T7339] usb 2-1: could not probe fw (-71) [ 310.035234][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1205'. [ 310.801287][ T927] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 310.965143][T10541] /dev/rnullb0: Can't open blockdev [ 311.003183][ T927] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.025382][ T927] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.051889][ T927] usb 4-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 311.080956][ T927] usb 4-1: config 0 interface 0 has no altsetting 0 [ 311.091268][ T927] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 311.111458][ T927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.124936][ T927] usb 4-1: config 0 descriptor?? [ 311.315698][ T5864] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 311.315729][T10549] /dev/rnullb0: Can't open blockdev [ 311.340238][ T927] usbhid 4-1:0.0: can't add hid device: -71 [ 311.359194][ T927] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 311.396312][ T927] usb 4-1: USB disconnect, device number 33 [ 311.574670][T10555] picdev_read: 76 callbacks suppressed [ 311.574693][T10555] kvm: pic: non byte read [ 311.602984][T10555] kvm: pic: non byte read [ 311.607489][T10555] kvm: pic: non byte read [ 311.619599][T10555] kvm: pic: non byte read [ 311.631937][T10555] kvm: pic: non byte read [ 311.636611][T10555] kvm: pic: non byte read [ 311.642053][T10555] kvm: pic: non byte read [ 311.647544][T10555] kvm: pic: non byte read [ 311.652380][T10555] kvm: pic: non byte read [ 311.656803][T10555] kvm: pic: non byte read [ 311.685344][ T1214] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 311.841467][ T1214] usb 5-1: Using ep0 maxpacket: 8 [ 311.849816][ T5911] hid-generic 0008:0006:0007.000D: unknown main item tag 0x0 [ 311.861525][ T5911] hid-generic 0008:0006:0007.000D: unknown main item tag 0x0 [ 311.869313][ T5911] hid-generic 0008:0006:0007.000D: unknown main item tag 0x0 [ 311.877816][ T1214] usb 5-1: config 5 has an invalid interface number: 143 but max is 2 [ 311.892747][ T1214] usb 5-1: config 5 has an invalid interface number: 6 but max is 2 [ 311.903663][ T5911] hid-generic 0008:0006:0007.000D: unknown main item tag 0x0 [ 311.915598][ T1214] usb 5-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 311.931095][ T5911] hid-generic 0008:0006:0007.000D: unknown main item tag 0x0 [ 311.944269][ T5911] hid-generic 0008:0006:0007.000D: unknown main item tag 0x0 [ 311.954792][ T1214] usb 5-1: config 5 has an invalid interface number: 94 but max is 2 [ 311.965889][ T5911] hid-generic 0008:0006:0007.000D: unknown main item tag 0x0 [ 311.974468][ T1214] usb 5-1: config 5 has an invalid descriptor of length 230, skipping remainder of the config [ 311.987632][ T5911] hid-generic 0008:0006:0007.000D: unknown main item tag 0x0 [ 312.008227][ T1214] usb 5-1: config 5 has no interface number 0 [ 312.015640][ T5911] hid-generic 0008:0006:0007.000D: unknown main item tag 0x0 [ 312.029492][ T1214] usb 5-1: config 5 has no interface number 1 [ 312.047995][ T1214] usb 5-1: config 5 has no interface number 2 [ 312.056460][ T5911] hid-generic 0008:0006:0007.000D: unknown main item tag 0x0 [ 312.069006][ T1214] usb 5-1: config 5 interface 143 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 312.094113][ T5911] hid-generic 0008:0006:0007.000D: hidraw0: HID v0.0b Device [syz1] on syz1 [ 312.107129][ T1214] usb 5-1: too many endpoints for config 5 interface 6 altsetting 7: 122, using maximum allowed: 30 [ 312.135472][ T1214] usb 5-1: config 5 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 122 [ 312.164092][ T1214] usb 5-1: config 5 interface 94 altsetting 79 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 312.214436][T10570] /dev/rnullb0: Can't open blockdev [ 312.220555][ T1214] usb 5-1: config 5 interface 143 has no altsetting 0 [ 312.238120][ T1214] usb 5-1: config 5 interface 6 has no altsetting 0 [ 312.270612][ T1214] usb 5-1: config 5 interface 94 has no altsetting 0 [ 312.289167][T10568] fido_id[10568]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 312.326618][ T1214] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=fc.f3 [ 312.342548][ T1214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.366926][ T1214] usb 5-1: Product: syz [ 312.378890][ T1214] usb 5-1: Manufacturer: syz [ 312.394228][ T1214] usb 5-1: SerialNumber: syz [ 312.408550][T10572] /dev/rnullb0: Can't open blockdev [ 312.445738][T10574] Bluetooth: MGMT ver 1.23 [ 312.663675][T10583] /dev/rnullb0: Can't open blockdev [ 312.701619][ T927] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 312.779404][ T1214] uvcvideo 5-1:5.143: probe with driver uvcvideo failed with error -22 [ 312.831417][ T1214] usb 5-1: USB disconnect, device number 28 [ 312.874653][ T927] usb 4-1: unable to get BOS descriptor or descriptor too short [ 312.897017][ T927] usb 4-1: not running at top speed; connect to a high speed hub [ 312.933067][T10592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 312.939695][ T927] usb 4-1: config 5 has an invalid interface number: 64 but max is 0 [ 312.958798][ T927] usb 4-1: config 5 has no interface number 0 [ 312.974030][ T927] usb 4-1: config 5 interface 64 has no altsetting 0 [ 312.975643][T10592] /dev/rnullb0: Can't open blockdev [ 312.984127][ T927] usb 4-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=28.39 [ 312.998812][ T927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.010621][ T927] usb 4-1: Product: syz [ 313.018164][ T927] usb 4-1: Manufacturer: syz [ 313.023139][ T927] usb 4-1: SerialNumber: syz [ 313.266039][T10574] syzkaller1: entered promiscuous mode [ 313.271998][T10574] syzkaller1: entered allmulticast mode [ 313.293766][T10575] /dev/rnullb0: Can't open blockdev [ 313.533686][ T927] snd-usb-audio 4-1:5.64: probe with driver snd-usb-audio failed with error -71 [ 313.553134][ T927] usb 4-1: USB disconnect, device number 34 [ 314.064001][T10610] syzkaller1: entered promiscuous mode [ 314.070325][T10610] syzkaller1: entered allmulticast mode [ 314.094157][T10610] syz.1.1233: attempt to access beyond end of device [ 314.094157][T10610] loop1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 314.121655][T10610] SQUASHFS error: Failed to read block 0x0: -5 [ 314.137234][T10610] unable to read squashfs_super_block [ 314.156469][T10612] sp0: Synchronizing with TNC [ 314.284857][T10612] /dev/rnullb0: Can't open blockdev [ 314.414314][T10618] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1235'. [ 314.427758][T10617] /dev/rnullb0: Can't open blockdev [ 314.435317][T10615] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1235'. [ 314.457780][T10618] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1235'. [ 314.497880][T10615] /dev/rnullb0: Can't open blockdev [ 315.585338][T10654] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1249'. [ 315.602282][T10654] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1249'. [ 315.625006][T10654] program syz.3.1249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.635028][T10650] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1248'. [ 315.645950][T10654] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1249'. [ 315.781034][T10658] /dev/rnullb0: Can't open blockdev [ 316.265148][T10674] /dev/rnullb0: Can't open blockdev [ 317.263342][T10690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.276751][T10690] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 317.292950][T10690] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 317.886973][T10701] input: syz1 as /devices/virtual/input/input44 [ 318.482263][T10705] comedi comedi0: dt2801: I/O port conflict (0x3,2) [ 319.575020][T10707] loop2: detected capacity change from 0 to 7 [ 319.592297][T10707] Dev loop2: unable to read RDB block 7 [ 319.598136][T10707] loop2: AHDI p1 p2 p3 [ 319.605167][T10707] loop2: partition table partially beyond EOD, truncated [ 319.613909][T10707] loop2: p1 start 1601398130 is beyond EOD, truncated [ 319.621331][T10707] loop2: p2 start 1702059890 is beyond EOD, truncated [ 320.171996][ T1214] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 320.316421][ T1214] usb 7-1: device descriptor read/64, error -71 [ 320.561886][ T1214] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 320.649488][ T30] audit: type=1326 audit(1754609092.515:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.3.1269" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cbc38ebe9 code=0x0 [ 320.701349][ T1214] usb 7-1: device descriptor read/64, error -71 [ 320.767215][T10720] /dev/rnullb0: Can't open blockdev [ 320.812460][ T1214] usb usb7-port1: attempt power cycle [ 321.167107][ T1214] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 321.171344][ T5941] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 321.201809][ T1214] usb 7-1: device descriptor read/8, error -71 [ 321.322220][ T5941] usb 2-1: device descriptor read/64, error -71 [ 321.441204][ T1214] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 321.471674][ T1214] usb 7-1: device descriptor read/8, error -71 [ 321.581174][ T5941] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 321.584681][ T1214] usb usb7-port1: unable to enumerate USB device [ 321.743004][ T5941] usb 2-1: device descriptor read/64, error -71 [ 321.862467][ T5941] usb usb2-port1: attempt power cycle [ 322.111358][T10724] /dev/rnullb0: Can't open blockdev [ 322.231023][ T5941] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 322.265305][ T5941] usb 2-1: device descriptor read/8, error -71 [ 322.522701][ T5941] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 322.564827][ T5941] usb 2-1: device descriptor read/8, error -71 [ 322.598672][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.605331][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.692132][ T5941] usb usb2-port1: unable to enumerate USB device [ 323.050598][T10742] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.368023][ T30] audit: type=1800 audit(1754609095.235:19): pid=10750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1279" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 323.403335][T10750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.422840][T10750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.661318][ T5941] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 323.833541][ T5941] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.853141][ T5941] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=c0.c5 [ 323.875753][ T5941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.927453][ T5941] usb 7-1: config 0 descriptor?? [ 324.294356][T10751] /dev/rnullb0: Can't open blockdev [ 324.301773][T10750] /dev/rnullb0: Can't open blockdev [ 324.316705][ T5941] usb 7-1: string descriptor 0 read error: -71 [ 324.332471][ T5941] hub 7-1:0.0: bad descriptor, ignoring hub [ 324.350459][ T5941] hub 7-1:0.0: probe with driver hub failed with error -5 [ 324.382459][ T5941] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 324.384068][ T7339] usb 7-1: Failed to submit usb control message: -71 [ 324.405834][ T7339] usb 7-1: unable to send the bmi data to the device: -71 [ 324.413555][ T7339] usb 7-1: unable to get target info from device [ 324.420751][ T7339] usb 7-1: could not get target info (-71) [ 324.429983][ T5941] usb 7-1: USB disconnect, device number 31 [ 324.436056][ T7339] usb 7-1: could not probe fw (-71) [ 324.648077][T10764] /dev/rnullb0: Can't open blockdev [ 324.657308][T10766] /dev/rnullb0: Can't open blockdev [ 325.191045][ T5911] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 325.351657][ T5911] usb 7-1: Using ep0 maxpacket: 8 [ 325.369904][ T5911] usb 7-1: New USB device found, idVendor=15c2, idProduct=0043, bcdDevice= 2.c9 [ 325.393012][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.415815][ T5911] usb 7-1: Product: syz [ 325.422535][ T5911] usb 7-1: Manufacturer: syz [ 325.431849][ T5911] usb 7-1: SerialNumber: syz [ 325.455924][ T5911] usb 7-1: config 0 descriptor?? [ 325.483187][ T5911] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 325.492674][ T5911] imon 7-1:0.0: unable to initialize intf0, err -19 [ 325.499352][ T5911] imon:imon_probe: failed to initialize context! [ 325.506717][ T5911] imon 7-1:0.0: unable to register, err -19 [ 325.596423][T10777] NILFS (nbd3): device size too small [ 325.602206][ T927] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 325.768166][ T927] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 325.801032][ T927] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 325.841053][ T927] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 325.901336][ T5911] usb 7-1: USB disconnect, device number 32 [ 325.907961][ T927] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 325.933007][ T927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.964328][ T927] usb 5-1: Product: syz [ 325.968827][ T927] usb 5-1: Manufacturer: syz [ 325.992754][ T927] usb 5-1: SerialNumber: syz [ 326.013678][T10783] fuse: Unknown parameter 'user00000000000000000000' [ 326.025488][ T927] usb 5-1: config 0 descriptor?? [ 326.208875][T10786] input: syz1 as /devices/virtual/input/input45 [ 326.248934][T10775] /dev/rnullb0: Can't open blockdev [ 326.269898][ T927] usb 5-1: USB disconnect, device number 29 [ 326.616300][T10792] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1296'. [ 327.080289][T10810] input: syz1 as /devices/virtual/input/input46 [ 327.086885][ T5943] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 327.285068][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 327.301415][ T5943] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 327.317341][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 327.337676][ T5943] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 327.347548][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.360796][ T5943] usb 4-1: Product: syz [ 327.368642][ T5943] usb 4-1: Manufacturer: syz [ 327.369987][T10817] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 327.375202][ T5943] usb 4-1: SerialNumber: syz [ 327.381615][T10817] /dev/rnullb0: Can't open blockdev [ 327.402880][ T5943] usb 4-1: config 0 descriptor?? [ 327.409618][T10798] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 327.422424][ T5943] usb 4-1: ucan: probing device on interface #0 [ 327.428881][ T5943] usb 4-1: ucan: invalid in_ep MaxPacketSize [ 327.435958][ T5943] usb 4-1: ucan: probe failed; try to update the device firmware [ 327.495107][T10819] /dev/rnullb0: Can't open blockdev [ 327.625229][T10798] /dev/rnullb0: Can't open blockdev [ 327.647587][T10798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.683519][T10798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.743451][T10832] /dev/rnullb0: Can't open blockdev [ 327.776363][ T10] usb 4-1: USB disconnect, device number 35 [ 327.987093][T10843] input: syz1 as /devices/virtual/input/input47 [ 328.463392][T10851] nvme_fabrics: missing parameter 'transport=%s' [ 328.478113][T10851] nvme_fabrics: missing parameter 'nqn=%s' [ 329.011136][ T5943] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 329.091046][ T5941] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 329.143429][ T5943] usb 2-1: device descriptor read/64, error -71 [ 329.241126][ T5941] usb 7-1: Using ep0 maxpacket: 16 [ 329.252484][ T5941] usb 7-1: config 0 has an invalid descriptor of length 253, skipping remainder of the config [ 329.266418][ T5941] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 329.283529][ T5941] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 329.297982][ T5941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.308125][ T5941] usb 7-1: Product: syz [ 329.317799][ T5941] usb 7-1: Manufacturer: syz [ 329.323019][ T5941] usb 7-1: SerialNumber: syz [ 329.335741][ T5941] r8152-cfgselector 7-1: Unknown version 0x0000 [ 329.342981][ T5941] r8152-cfgselector 7-1: config 0 descriptor?? [ 329.402004][ T5943] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 329.551021][ T5943] usb 2-1: device descriptor read/64, error -71 [ 329.661514][ T5943] usb usb2-port1: attempt power cycle [ 329.750115][T10868] vxcan0: tx address claim with dest, not broadcast [ 330.011707][ T5943] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 330.036660][ T5943] usb 2-1: device descriptor read/8, error -71 [ 330.092350][ T5941] r8152-cfgselector 7-1: USB disconnect, device number 33 [ 330.209007][T10875] input: syz1 as /devices/virtual/input/input48 [ 330.250636][T10877] /dev/rnullb0: Can't open blockdev [ 330.283792][ T5943] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 330.331791][ T5943] usb 2-1: device descriptor read/8, error -71 [ 330.461658][ T5943] usb usb2-port1: unable to enumerate USB device [ 330.467358][T10883] overlay: ./file0 is not a directory [ 331.508961][T10897] /dev/rnullb0: Can't open blockdev [ 331.821661][T10906] input: syz1 as /devices/virtual/input/input49 [ 331.841709][ T1214] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 332.012348][ T1214] usb 2-1: Using ep0 maxpacket: 16 [ 332.021773][ T1214] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.044799][ T1214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.076400][ T1214] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 332.099893][ T1214] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 332.122380][ T1214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.139304][ T1214] usb 2-1: config 0 descriptor?? [ 332.281188][ T5941] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 332.361452][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 332.441078][ T5941] usb 7-1: Using ep0 maxpacket: 32 [ 332.448775][ T5941] usb 7-1: unable to get BOS descriptor or descriptor too short [ 332.458042][ T5941] usb 7-1: config 1 has an invalid descriptor of length 149, skipping remainder of the config [ 332.468413][ T5911] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 332.471029][ T5941] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 332.492070][ T5941] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 332.504938][ T5941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.513147][ T5941] usb 7-1: Product: syz [ 332.517348][ T5941] usb 7-1: Manufacturer: syz [ 332.525096][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 332.525206][ T5941] usb 7-1: SerialNumber: syz [ 332.537734][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 332.562556][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 332.576117][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 332.589858][ T1214] nintendo 0003:057E:2019.000E: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 332.602258][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 332.619705][ T5911] usb 5-1: device descriptor read/64, error -71 [ 332.626349][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.644964][ T10] usb 4-1: config 0 descriptor?? [ 332.661208][ T1214] nintendo 0003:057E:2019.000E: Failed to get joycon info; ret=-38 [ 332.669266][ T1214] nintendo 0003:057E:2019.000E: Failed to retrieve controller info; ret=-38 [ 332.687999][ T1214] nintendo 0003:057E:2019.000E: Failed to initialize controller; ret=-38 [ 332.716050][ T1214] nintendo 0003:057E:2019.000E: probe - fail = -38 [ 332.724781][ T1214] nintendo 0003:057E:2019.000E: probe with driver nintendo failed with error -38 [ 332.862155][ T5911] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 332.974629][ T1214] usb 2-1: USB disconnect, device number 28 [ 333.021082][ T5911] usb 5-1: device descriptor read/64, error -71 [ 333.054436][ T5941] usb 7-1: USB disconnect, device number 34 [ 333.117523][ T10] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 333.161187][ T5911] usb usb5-port1: attempt power cycle [ 333.511480][ T5911] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 333.537767][ T5911] usb 5-1: device descriptor read/8, error -71 [ 333.726857][T10914] Malformed UNC in devname [ 333.726857][T10914] [ 333.734068][T10914] CIFS: VFS: Malformed UNC in devname [ 333.754959][ T10] usb 4-1: USB disconnect, device number 36 [ 333.781366][ T5911] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 333.811519][ T5911] usb 5-1: device descriptor read/8, error -71 [ 333.821703][T10931] netlink: 'syz.6.1339': attribute type 1 has an invalid length. [ 333.830555][T10931] /dev/rnullb0: Can't open blockdev [ 333.921339][ T5911] usb usb5-port1: unable to enumerate USB device [ 334.434913][T10937] netlink: 320 bytes leftover after parsing attributes in process `syz.1.1341'. [ 334.447535][T10937] /dev/rnullb0: Can't open blockdev [ 334.457518][T10937] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1341'. [ 334.534346][T10940] input: syz1 as /devices/virtual/input/input51 [ 334.631316][ T5911] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 334.714749][ T5864] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 334.788609][T10942] raw_sendmsg: syz.6.1344 forgot to set AF_INET. Fix it! [ 334.802963][ T5911] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2031, setting to 1024 [ 334.831124][ T5911] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 334.841095][ T5911] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 334.876246][ T5911] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 334.889307][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.897743][ T5911] usb 4-1: Product: ࡃ [ 334.902080][ T5911] usb 4-1: Manufacturer: М [ 334.906697][ T5911] usb 4-1: SerialNumber:   [ 334.918298][T10935] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 335.142607][ T5911] cdc_ncm 4-1:1.0: bind() failure [ 335.185767][ T5911] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 335.194346][ T5911] cdc_ncm 4-1:1.1: bind() failure [ 335.214984][ T5911] usb 4-1: USB disconnect, device number 37 [ 335.618936][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1350'. [ 335.646028][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1350'. [ 335.656104][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1350'. [ 335.700217][T10961] cgroup: Need name or subsystem set [ 335.707803][T10961] /dev/rnullb0: Can't open blockdev [ 335.810740][T10965] input: syz1 as /devices/virtual/input/input52 [ 336.591176][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 336.649478][T10989] syzkaller0: left promiscuous mode [ 336.655460][T10989] syzkaller0: left allmulticast mode [ 336.667984][T10989] tipc: Started in network mode [ 336.675088][T10989] tipc: Node identity f2eec14e4579, cluster identity 4711 [ 336.686233][T10989] tipc: Enabled bearer , priority 0 [ 336.755494][ T5864] Bluetooth: hci0: command 0x0406 tx timeout [ 336.759136][T10994] /dev/rnullb0: Can't open blockdev [ 336.761964][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 336.784277][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 336.797043][ T10] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 336.811306][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.827003][ T10] usb 2-1: Product: syz [ 336.836008][ T10] usb 2-1: Manufacturer: syz [ 336.840670][ T10] usb 2-1: SerialNumber: syz [ 336.914101][ T10] usb 2-1: config 0 descriptor?? [ 336.935084][ T10] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 337.137708][ T10] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 337.154902][ T10] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 337.403672][ T10] usb 2-1: USB disconnect, device number 29 [ 337.605456][T10999] /dev/rnullb0: Can't open blockdev [ 337.680099][T11001] netlink: 'syz.6.1364': attribute type 10 has an invalid length. [ 337.766445][T11001] team0: Port device dummy0 added [ 337.814571][ T927] tipc: Node number set to 3080175950 [ 337.937728][T11013] /dev/rnullb0: Can't open blockdev [ 337.991050][ T5943] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 338.121423][T11017] /dev/rnullb0: Can't open blockdev [ 338.170543][ T5943] usb 7-1: Using ep0 maxpacket: 16 [ 338.184092][T11022] No control pipe specified [ 338.203682][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.229405][T11024] fuse: Bad value for 'fd' [ 338.237795][T11024] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1370'. [ 338.280534][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.326698][ T5943] usb 7-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 338.357295][ T5943] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.394773][ T5943] usb 7-1: config 0 descriptor?? [ 338.419345][T11030] input: syz1 as /devices/virtual/input/input53 [ 338.753553][ T5864] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 338.763924][ T5864] Bluetooth: hci0: Injecting HCI hardware error event [ 338.773388][ T5864] Bluetooth: hci0: hardware error 0x00 [ 338.850256][ T5943] creative-sb0540 0003:041E:3100.0010: item fetching failed at offset 1/5 [ 338.917733][ T5943] creative-sb0540 0003:041E:3100.0010: parse failed [ 338.937058][ T5943] creative-sb0540 0003:041E:3100.0010: probe with driver creative-sb0540 failed with error -22 [ 338.947598][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1375'. [ 338.959726][T11041] tmpfs: Unknown parameter ' ' [ 338.966392][T11041] /dev/rnullb0: Can't open blockdev [ 339.018991][T11005] netlink: 'syz.6.1364': attribute type 10 has an invalid length. [ 339.104458][T11005] team0: Port device dummy0 removed [ 339.127156][T11005] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 339.205614][ T5943] usb 7-1: USB disconnect, device number 35 [ 339.458856][T11053] /dev/rnullb0: Can't open blockdev [ 339.778658][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 339.780563][T11058] AppArmor: change_hat: Invalid input ']9/o6}U Z}@aU>}Q%PiUR *RL' [ 339.912087][T11047] /dev/rnullb0: Can't open blockdev [ 340.061749][T11064] netlink: 77 bytes leftover after parsing attributes in process `syz.6.1382'. [ 340.081964][ T5941] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 340.095541][T11064] /dev/rnullb0: Can't open blockdev [ 340.238847][T11068] /dev/rnullb0: Can't open blockdev [ 340.255003][ T5941] usb 4-1: Using ep0 maxpacket: 8 [ 340.265745][ T5941] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 340.276162][ T5941] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 340.277998][T11068] rtc_cmos 00:00: Alarms can be up to one day in the future [ 340.287888][ T5941] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 340.312143][ T5941] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 340.327017][ T5941] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 340.340699][ T5941] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 340.356372][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.595726][ T5941] usb 4-1: GET_CAPABILITIES returned 0 [ 340.611000][ T5941] usbtmc 4-1:16.0: can't read capabilities [ 340.815512][ T5941] usb 4-1: USB disconnect, device number 38 [ 340.819626][T11077] /dev/rnullb0: Can't open blockdev [ 340.831005][ T5864] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 341.299051][T11097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.322929][T11097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.518213][T11102] netlink: 'syz.4.1393': attribute type 1 has an invalid length. [ 341.560745][T11102] /dev/rnullb0: Can't open blockdev [ 341.690459][T11108] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1395'. [ 341.701062][T11108] /dev/rnullb0: Can't open blockdev [ 341.818320][T11114] netlink: 'syz.1.1397': attribute type 4 has an invalid length. [ 342.241215][ T5911] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 342.414103][ T5911] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 342.424542][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.433764][ T5911] usb 7-1: Product: syz [ 342.439470][ T5911] usb 7-1: Manufacturer: syz [ 342.446870][ T5911] usb 7-1: SerialNumber: syz [ 342.460023][ T5911] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 342.479608][ T10] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 343.551082][ T10] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 343.572407][ T10] ath9k_htc: Failed to initialize the device [ 343.646865][ T10] usb 7-1: ath9k_htc: USB layer deinitialized [ 344.478134][T11133] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1401'. [ 344.957617][ T5911] usb 7-1: USB disconnect, device number 36 [ 345.455821][T11173] Invalid source name [ 345.479252][T11173] UBIFS error (pid: 11173): cannot open "./file0", error -22 [ 345.500564][T11173] /dev/rnullb0: Can't open blockdev [ 346.311646][T11205] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1420'. [ 346.378174][T11205] 9pnet_fd: Insufficient options for proto=fd [ 347.109396][T11214] netlink: 'syz.4.1423': attribute type 1 has an invalid length. [ 347.142855][T11214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1423'. [ 347.197848][T11214] /dev/rnullb0: Can't open blockdev [ 347.593924][T11221] /dev/rnullb0: Can't open blockdev [ 347.824841][T11232] /dev/rnullb0: Can't open blockdev [ 347.898145][T11238] 9pnet_fd: Insufficient options for proto=fd [ 348.087849][T11247] netlink: 'syz.3.1434': attribute type 33 has an invalid length. [ 348.111239][T11247] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1434'. [ 348.136150][T11247] /dev/rnullb0: Can't open blockdev [ 348.401156][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 348.481152][T11254] /dev/rnullb0: Can't open blockdev [ 348.491166][ T5943] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 348.563665][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 348.570775][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.582072][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.593307][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 348.606572][ T10] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 348.615761][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.626710][ T10] usb 2-1: config 0 descriptor?? [ 348.652651][ T5943] usb 4-1: not running at top speed; connect to a high speed hub [ 348.662485][ T5943] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 348.673060][ T5943] usb 4-1: config 1 has no interface number 1 [ 348.679526][ T5943] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 348.699752][ T5943] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 348.709655][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.721967][ T5943] usb 4-1: Product: syz [ 348.726180][ T5943] usb 4-1: Manufacturer: syz [ 348.732579][ T5943] usb 4-1: SerialNumber: syz [ 348.849974][T11249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.885982][T11249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.967735][T11251] pimreg: entered allmulticast mode [ 349.004945][T11251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1436'. [ 349.063018][T11267] netlink: 248 bytes leftover after parsing attributes in process `syz.6.1439'. [ 349.146635][ T10] nintendo 0003:057E:2019.0011: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 349.176606][T11274] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1440'. [ 349.205436][T11274] netlink: 'syz.6.1440': attribute type 4 has an invalid length. [ 349.233559][T11274] netlink: 'syz.6.1440': attribute type 4 has an invalid length. [ 349.241943][ T10] nintendo 0003:057E:2019.0011: Failed to get joycon info; ret=-38 [ 349.249941][ T10] nintendo 0003:057E:2019.0011: Failed to retrieve controller info; ret=-38 [ 349.305859][ T10] nintendo 0003:057E:2019.0011: Failed to initialize controller; ret=-38 [ 349.356878][ T10] nintendo 0003:057E:2019.0011: probe - fail = -38 [ 349.388908][ T10] nintendo 0003:057E:2019.0011: probe with driver nintendo failed with error -38 [ 349.498205][T11282] ./cgroup: Can't lookup blockdev [ 349.674317][T11286] input: syz1 as /devices/virtual/input/input55 [ 349.968445][T11292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.995227][T11292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.654695][ T5941] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 350.818484][T11313] fuse: Unknown parameter 'user00000000000000000000' [ 350.825793][ T5941] usb 5-1: Using ep0 maxpacket: 8 [ 350.836253][ T5941] usb 5-1: config index 0 descriptor too short (expected 49674, got 18) [ 350.850304][ T5941] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 25 [ 350.860597][ T5941] usb 5-1: can't read configurations, error -22 [ 351.001225][ T5941] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 351.161046][ T5941] usb 5-1: Using ep0 maxpacket: 8 [ 351.166251][ T24] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 351.181232][ T5941] usb 5-1: config index 0 descriptor too short (expected 49674, got 18) [ 351.189917][ T5941] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 25 [ 351.202816][ T5941] usb 5-1: can't read configurations, error -22 [ 351.205705][ T10] usb 2-1: USB disconnect, device number 30 [ 351.209604][ T5941] usb usb5-port1: attempt power cycle [ 351.321259][ T24] usb 7-1: device descriptor read/64, error -71 [ 351.349435][ T5943] usb 4-1: failed to enable PITCH for EP 0x82 [ 351.404601][T11320] netlink: 'syz.3.1455': attribute type 1 has an invalid length. [ 351.438496][ T5943] usb 4-1: USB disconnect, device number 39 [ 351.488212][T11320] /dev/rnullb0: Can't open blockdev [ 351.561043][ T24] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 351.571209][ T5941] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 351.616537][ T5941] usb 5-1: Using ep0 maxpacket: 8 [ 351.634684][T10359] udevd[10359]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.674915][ T5941] usb 5-1: config index 0 descriptor too short (expected 49674, got 18) [ 351.684142][ T5941] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 25 [ 351.694456][ T5941] usb 5-1: can't read configurations, error -22 [ 352.544863][ T24] usb 7-1: device descriptor read/64, error -71 [ 352.597905][T11335] /dev/rnullb0: Can't open blockdev [ 352.611084][ T5941] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 352.642393][ T5941] usb 5-1: Using ep0 maxpacket: 8 [ 352.670717][ T5941] usb 5-1: config index 0 descriptor too short (expected 49674, got 18) [ 352.680354][ T5941] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 25 [ 352.691275][ T24] usb usb7-port1: attempt power cycle [ 352.700706][ T5941] usb 5-1: can't read configurations, error -22 [ 352.708393][ T5941] usb usb5-port1: unable to enumerate USB device [ 353.005241][T11356] /dev/rnullb0: Can't open blockdev [ 353.041019][ T24] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 353.071763][ T24] usb 7-1: device descriptor read/8, error -71 [ 353.321161][ T24] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 353.363994][ T24] usb 7-1: device descriptor read/8, error -71 [ 353.474576][ T24] usb usb7-port1: unable to enumerate USB device [ 353.817668][T11371] /dev/rnullb0: Can't open blockdev [ 353.864490][ T24] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 353.918124][T11375] kvm: emulating exchange as write [ 354.018286][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1472'. [ 354.031675][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 354.053049][ T24] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 354.072807][T11380] /dev/rnullb0: Can't open blockdev [ 354.081123][ T24] usb 5-1: config 0 has no interface number 0 [ 354.111782][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=e9.e9 [ 354.131675][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.139742][ T24] usb 5-1: Product: syz [ 354.152740][ T24] usb 5-1: Manufacturer: syz [ 354.157497][ T24] usb 5-1: SerialNumber: syz [ 354.166999][ T24] usb 5-1: config 0 descriptor?? [ 354.186618][ T24] mcba_usb 5-1:0.29: Can't find endpoints [ 354.334213][ T5944] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 354.522004][ T5944] usb 4-1: Using ep0 maxpacket: 32 [ 354.529903][ T5944] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.553549][ T5944] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.563563][ T5944] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 354.579701][ T5944] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 354.591106][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 354.599664][ T5944] usb 4-1: Product: syz [ 354.604102][ T5944] usb 4-1: Manufacturer: syz [ 354.608825][ T5944] usb 4-1: SerialNumber: syz [ 354.629747][ T5944] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input56 [ 354.997809][ T5944] usb 4-1: USB disconnect, device number 40 [ 355.067344][ T5944] appletouch 4-1:1.0: input: appletouch disconnected [ 355.196396][T11397] 9pnet_fd: Insufficient options for proto=fd [ 355.440983][ T5911] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 355.591077][ T5911] usb 7-1: device descriptor read/64, error -71 [ 355.605574][T11399] /dev/rnullb0: Can't open blockdev [ 355.831161][ T5911] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 355.992196][ T5911] usb 7-1: device descriptor read/64, error -71 [ 356.111656][ T5911] usb usb7-port1: attempt power cycle [ 356.265387][T11411] fuse: Unknown parameter 'user00000000000000000000' [ 356.293669][T11407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1480'. [ 356.464227][ T5911] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 356.495716][ T5911] usb 7-1: device descriptor read/8, error -71 [ 356.617501][ T24] usb 5-1: USB disconnect, device number 38 [ 356.762061][ T5911] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 356.794271][ T5911] usb 7-1: device descriptor read/8, error -71 [ 356.945381][ T5911] usb usb7-port1: unable to enumerate USB device [ 357.336512][T11434] /dev/rnullb0: Can't open blockdev [ 358.001080][ T24] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 358.132003][ T24] usb 5-1: device descriptor read/64, error -71 [ 358.285976][T11454] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 358.312788][T11454] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 358.342062][T11454] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 358.380999][ T24] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 358.488067][T11463] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 358.502568][T11463] overlayfs: failed to set xattr on upper [ 358.508620][T11463] overlayfs: ...falling back to redirect_dir=nofollow. [ 358.517115][ T24] usb 5-1: device descriptor read/64, error -71 [ 358.532238][T11463] overlayfs: ...falling back to metacopy=off. [ 358.539523][T11463] overlayfs: ...falling back to index=off. [ 358.548677][T11463] overlayfs: ...falling back to uuid=null. [ 358.641559][ T24] usb usb5-port1: attempt power cycle [ 358.885788][T11481] input: syz1 as /devices/virtual/input/input57 [ 358.911349][ T5983] udevd[5983]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 359.001080][ T24] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 359.050304][ T24] usb 5-1: device descriptor read/8, error -71 [ 359.311099][ T24] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 359.333689][ T24] usb 5-1: device descriptor read/8, error -71 [ 359.457409][ T24] usb usb5-port1: unable to enumerate USB device [ 359.573148][T11493] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 359.610290][T11493] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 359.861197][ T5911] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 359.945652][T11503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1509'. [ 359.996445][T11505] /dev/rnullb0: Can't open blockdev [ 360.021049][ T5911] usb 7-1: Using ep0 maxpacket: 16 [ 360.027952][ T5911] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.038589][ T5911] usb 7-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 360.048457][ T5911] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 360.060041][ T5911] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 360.070827][ T5911] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 360.082147][ T5911] usb 7-1: config 1 interface 1 has no altsetting 0 [ 360.092856][ T5911] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 360.102220][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.110362][ T5911] usb 7-1: Product: syz [ 360.114758][ T5911] usb 7-1: Manufacturer: syz [ 360.119489][ T5911] usb 7-1: SerialNumber: syz [ 360.236048][T11510] input: syz1 as /devices/virtual/input/input58 [ 360.325476][T11512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1513'. [ 360.552272][ T5911] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 360.570491][ T5911] usb 7-1: 2:1 : format type 9 is not supported yet [ 360.632034][ T5911] usb 7-1: USB disconnect, device number 45 [ 360.925635][T11530] /dev/rnullb0: Can't open blockdev [ 361.108513][T11532] /dev/rnullb0: Can't open blockdev [ 361.181139][ T927] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 361.188914][ T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 361.248941][T11536] netlink: 'syz.3.1520': attribute type 12 has an invalid length. [ 361.269511][T11538] input: syz1 as /devices/virtual/input/input60 [ 361.363159][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 361.373070][ T927] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 361.396000][ T24] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 32 [ 361.411001][ T927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.428346][ T24] usb 2-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 361.442216][ T927] usb 5-1: config 0 has no interface number 0 [ 361.449592][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 361.458145][ T927] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 361.468240][ T927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.478680][ T927] usb 5-1: Product: syz [ 361.484395][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 361.494157][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.502559][ T927] usb 5-1: Manufacturer: syz [ 361.507383][ T927] usb 5-1: SerialNumber: syz [ 361.516067][ T24] usb 2-1: Product: ꌜꐊ⾳ [ 361.525444][ T927] usb 5-1: config 0 descriptor?? [ 361.530974][ T24] usb 2-1: Manufacturer: 铄螘綾໒છ䠅㫃넿냣瑬跶뻇縌轗鱱㕕姰䫧黥᫫瘛郅ꃙ▰箬띠萀랞ヿ䐠돛五낲ↄ⯋졚롃倏榱衫祤ࢉ檖熸ﾯ帕蔯㥚箙롮䋍厁橨田Ⴢ駶ꖢ둩콝򰔳秼쾤´䑧霳歼⳾肋옍녘쉰巹˯楼껜᫧苲ꍠ霤鑔獦⮧锻왒늯⢗湾쫪ꬴ萡뇗ힾ [ 361.562348][ T24] usb 2-1: SerialNumber: syz [ 361.569004][ T927] hub 5-1:0.31: bad descriptor, ignoring hub [ 361.576009][ T927] hub 5-1:0.31: probe with driver hub failed with error -5 [ 361.587273][ T927] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 361.596126][ T927] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 361.609453][T11529] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 361.618370][T11529] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 361.634411][ T927] usb 5-1: Failed to create links for entity 6 [ 361.641741][ T927] usb 5-1: Failed to register entities (-22). [ 361.799679][T11527] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1516'. [ 361.927289][ T30] audit: type=1107 audit(1754609133.795:20): pid=11547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='t(Ś+ ,\H`7}fL)j`Q' [ 362.073481][ T24] usb 2-1: USB disconnect, device number 31 [ 362.291827][ T5943] usb 5-1: USB disconnect, device number 43 [ 362.344686][T11558] /dev/rnullb0: Can't open blockdev [ 362.395712][T11563] /dev/rnullb0: Can't open blockdev [ 362.501545][T11567] /dev/rnullb0: Can't open blockdev [ 362.519733][T11567] 9pnet_fd: Insufficient options for proto=fd [ 362.594935][T11570] /dev/rnullb0: Can't open blockdev [ 362.731085][T11577] input: syz1 as /devices/virtual/input/input61 [ 363.185250][ T5943] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 363.241859][ T10] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 363.279813][T11589] /dev/rnullb0: Can't open blockdev [ 363.351609][ T5943] usb 2-1: Using ep0 maxpacket: 8 [ 363.365456][ T5943] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 363.374632][ T5943] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 363.389076][ T5943] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 363.391359][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 363.412789][ T5943] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 363.424774][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 363.425496][ T5943] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.453878][ T5943] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 363.462250][ T10] usb 5-1: config 1 has an invalid interface number: 172 but max is 0 [ 363.464359][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.479732][ T10] usb 5-1: config 1 has no interface number 0 [ 363.496304][ T10] usb 5-1: config 1 interface 172 has no altsetting 0 [ 363.513695][ T10] usb 5-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=b0.f3 [ 363.531365][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.546587][ T10] usb 5-1: Product: syz [ 363.559101][T11593] netlink: 'syz.3.1541': attribute type 16 has an invalid length. [ 363.571061][ T10] usb 5-1: Manufacturer: syz [ 363.581234][ T10] usb 5-1: SerialNumber: syz [ 363.675813][T11593] /dev/rnullb0: Can't open blockdev [ 363.721824][ T5943] usb 2-1: usb_control_msg returned -32 [ 363.748196][ T5943] usbtmc 2-1:16.0: can't read capabilities [ 363.813965][ T10] peak_usb 5-1:1.172: probe with driver peak_usb failed with error 172 [ 363.852696][ T10] usb 5-1: USB disconnect, device number 44 [ 364.548261][T11608] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 364.635002][ T10] usb 2-1: USB disconnect, device number 32 [ 364.814340][T11618] /dev/rnullb0: Can't open blockdev [ 364.875303][T11620] /dev/rnullb0: Can't open blockdev [ 364.886722][T11621] /dev/rnullb0: Can't open blockdev [ 365.012251][T11626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.032667][T11628] Bluetooth: MGMT ver 1.23 [ 365.123755][T11632] syz.3.1551: attempt to access beyond end of device [ 365.123755][T11632] loop3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 365.180449][T11632] hfsplus: unable to find HFS+ superblock [ 365.633328][T11646] netlink: 'syz.6.1556': attribute type 1 has an invalid length. [ 365.666477][T11646] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1556'. [ 365.732708][T11642] /dev/rnullb0: Can't open blockdev [ 366.071014][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 366.220988][ T10] usb 2-1: device descriptor read/64, error -71 [ 366.461198][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 366.601206][ T10] usb 2-1: device descriptor read/64, error -71 [ 366.721494][ T10] usb usb2-port1: attempt power cycle [ 367.081190][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 367.248112][ T10] usb 2-1: device descriptor read/8, error -71 [ 368.008628][T11669] virtio-fs: tag not found [ 368.015566][T11669] /dev/rnullb0: Can't open blockdev [ 368.051063][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 368.071782][ T10] usb 2-1: device descriptor read/8, error -71 [ 368.181455][ T10] usb usb2-port1: unable to enumerate USB device [ 368.472344][ T5911] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 368.631079][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 368.644007][ T5911] usb 4-1: config 5 has an invalid interface number: 93 but max is 2 [ 368.679897][ T5911] usb 4-1: config 5 has an invalid interface number: 211 but max is 2 [ 368.698139][ T5911] usb 4-1: config 5 has an invalid interface number: 67 but max is 2 [ 368.705427][T11686] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1567'. [ 368.726749][ T5911] usb 4-1: config 5 has an invalid interface number: 195 but max is 2 [ 368.761447][ T5911] usb 4-1: config 5 has an invalid interface number: 105 but max is 2 [ 368.778433][ T5911] usb 4-1: config 5 has an invalid interface number: 36 but max is 2 [ 368.794090][ T5911] usb 4-1: config 5 has an invalid interface number: 66 but max is 2 [ 368.831004][ T5911] usb 4-1: config 5 has an invalid interface number: 216 but max is 2 [ 368.856409][ T5911] usb 4-1: config 5 has 8 interfaces, different from the descriptor's value: 3 [ 368.880978][ T5911] usb 4-1: config 5 has no interface number 0 [ 368.894402][ T5911] usb 4-1: config 5 has no interface number 1 [ 368.928673][ T5911] usb 4-1: config 5 has no interface number 2 [ 368.945249][ T5911] usb 4-1: config 5 has no interface number 3 [ 368.973257][ T5911] usb 4-1: config 5 has no interface number 4 [ 368.979748][ C0] [ 368.979764][ C0] ============================= [ 368.979773][ C0] [ BUG: Invalid wait context ] [ 368.979791][ C0] 6.16.0-next-20250807-syzkaller #0 Not tainted [ 368.979804][ C0] ----------------------------- [ 368.979813][ C0] kworker/0:4/5911 is trying to lock: [ 368.979827][ C0] ffff888031f21410 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x1fb/0x9b0 [ 368.979896][ C0] other info that might help us debug this: [ 368.979905][ C0] context-{2:2} [ 368.979915][ C0] 6 locks held by kworker/0:4/5911: [ 368.979928][ C0] #0: ffff8880222ea948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 368.979994][ C0] #1: ffffc9000448fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 368.980058][ C0] #2: ffff888028044198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 368.980120][ C0] #3: ffffffff8e52e1a0 (console_lock){+.+.}-{0:0}, at: dev_vprintk_emit+0x337/0x3f0 [ 368.980188][ C0] #4: ffffffff8e415a70 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 368.980276][ C0] #5: ffff888031f21960 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x1c3/0x9b0 [ 368.980340][ C0] stack backtrace: [ 368.980358][ C0] CPU: 0 UID: 0 PID: 5911 Comm: kworker/0:4 Not tainted 6.16.0-next-20250807-syzkaller #0 PREEMPT(full) [ 368.980385][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 368.980402][ C0] Workqueue: usb_hub_wq hub_event [ 368.980435][ C0] Call Trace: [ 368.980443][ C0] [ 368.980452][ C0] dump_stack_lvl+0x189/0x250 [ 368.980487][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.980519][ C0] ? __pfx__printk+0x10/0x10 [ 368.980553][ C0] ? print_lock_name+0xde/0x100 [ 368.980585][ C0] __lock_acquire+0xbcb/0xd20 [ 368.980613][ C0] ? kvm_xen_set_evtchn_fast+0x1fb/0x9b0 [ 368.980641][ C0] lock_acquire+0x120/0x360 [ 368.980676][ C0] ? kvm_xen_set_evtchn_fast+0x1fb/0x9b0 [ 368.980712][ C0] _raw_read_lock_irqsave+0xaf/0x100 [ 368.980748][ C0] ? kvm_xen_set_evtchn_fast+0x1fb/0x9b0 [ 368.980776][ C0] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 368.980806][ C0] ? xa_load+0x1ea/0x210 [ 368.980830][ C0] kvm_xen_set_evtchn_fast+0x1fb/0x9b0 [ 368.980856][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 368.980887][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 368.980914][ C0] ? kvm_xen_set_evtchn_fast+0x1c3/0x9b0 [ 368.980943][ C0] xen_timer_callback+0x109/0x220 [ 368.980973][ C0] ? __pfx_xen_timer_callback+0x10/0x10 [ 368.981000][ C0] __hrtimer_run_queues+0x4e0/0xc60 [ 368.981037][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 368.981064][ C0] ? read_tsc+0x9/0x20 [ 368.981093][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 368.981134][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 368.981168][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 368.981199][ C0] [ 368.981207][ C0] [ 368.981214][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 368.981245][ C0] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 368.981280][ C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 f5 4f 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 e6 4f 1f 00 eb 06 e8 df 4f 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 9a bb 82 00 48 8b 1b 48 8b 44 24 [ 368.981299][ C0] RSP: 0018:ffffc9000448ed00 EFLAGS: 00000283 [ 368.981319][ C0] RAX: 1ffffffff1db8e8b RBX: ffffffff8edc7458 RCX: 0000000000100000 [ 368.981335][ C0] RDX: ffffc90015c45000 RSI: 000000000001c060 RDI: 000000000001c061 [ 368.981351][ C0] RBP: ffffc9000448ee50 R08: ffffffff8fe4be37 R09: 1ffffffff1fc97c6 [ 368.981368][ C0] R10: dffffc0000000000 R11: fffffbfff1fc97c7 R12: dffffc0000000000 [ 368.981385][ C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8edc7400 [ 368.981411][ C0] ? console_flush_all+0x13a/0xc40 [ 368.981448][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 368.981487][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 368.981511][ C0] console_unlock+0xc4/0x270 [ 368.981541][ C0] ? __pfx_console_unlock+0x10/0x10 [ 368.981572][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 368.981596][ C0] vprintk_emit+0x5b7/0x7a0 [ 368.981627][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 368.981656][ C0] ? stack_trace_save+0x9c/0xe0 [ 368.981696][ C0] ? __pfx_snprintf+0x10/0x10 [ 368.981729][ C0] dev_vprintk_emit+0x337/0x3f0 [ 368.981764][ C0] ? hub_event+0x2958/0x4a20 [ 368.981793][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 368.981835][ C0] dev_printk_emit+0xe0/0x130 [ 368.981874][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 368.981909][ C0] ? kasan_quarantine_put+0xdd/0x220 [ 368.981944][ C0] ? __dev_printk+0x131/0x190 [ 368.981971][ C0] _dev_notice+0x10a/0x160 [ 368.981994][ C0] ? __pfx__dev_notice+0x10/0x10 [ 368.982016][ C0] ? usb_get_descriptor+0xb1/0x3e0 [ 368.982043][ C0] ? usb_get_configuration+0x491/0x52e0 [ 368.982067][ C0] usb_get_configuration+0xe3a/0x52e0 [ 368.982089][ C0] ? stack_depot_save_flags+0x40/0x860 [ 368.982128][ C0] ? rcu_is_watching+0x15/0xb0 [ 368.982157][ C0] ? trace_rpm_return_int+0x83/0x200 [ 368.982195][ C0] ? __pfx_usb_get_configuration+0x10/0x10 [ 368.982223][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 368.982252][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.982285][ C0] usb_new_device+0x146/0x16f0 [ 368.982313][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 368.982350][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 368.982375][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 368.982403][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.982435][ C0] hub_event+0x2958/0x4a20 [ 368.982488][ C0] ? __pfx_hub_event+0x10/0x10 [ 368.982517][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 368.982548][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 368.982576][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 368.982603][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 368.982632][ C0] process_scheduled_works+0xade/0x17b0 [ 368.982685][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 368.982721][ C0] worker_thread+0x8a0/0xda0 [ 368.982751][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 368.982785][ C0] ? __kthread_parkme+0x7b/0x200 [ 368.982820][ C0] kthread+0x711/0x8a0 [ 368.982840][ C0] ? __pfx_worker_thread+0x10/0x10 [ 368.982868][ C0] ? __pfx_kthread+0x10/0x10 [ 368.982887][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 368.982916][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.982947][ C0] ? __pfx_kthread+0x10/0x10 [ 368.982965][ C0] ret_from_fork+0x3f9/0x770 [ 368.982994][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 368.983023][ C0] ? __switch_to_asm+0x39/0x70 [ 368.983044][ C0] ? __switch_to_asm+0x33/0x70 [ 368.983064][ C0] ? __pfx_kthread+0x10/0x10 [ 368.983082][ C0] ret_from_fork_asm+0x1a/0x30 [ 368.983111][ C0] [ 369.643450][ T5911] usb 4-1: config 5 has no interface number 5 [ 369.649655][ T5911] usb 4-1: config 5 has no interface number 6 [ 369.660583][ T5911] usb 4-1: config 5 has no interface number 7 [ 369.669455][ T5911] usb 4-1: config 5 interface 93 altsetting 6 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 369.681101][ T5911] usb 4-1: too many endpoints for config 5 interface 211 altsetting 134: 129, using maximum allowed: 30 [ 369.693386][ T5911] usb 4-1: config 5 interface 211 altsetting 134 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 369.707141][ T5911] usb 4-1: config 5 interface 67 altsetting 233 has a duplicate endpoint with address 0x9, skipping [ 369.718330][ T5911] usb 4-1: config 5 interface 67 altsetting 233 has a duplicate endpoint with address 0x8, skipping [ 369.729381][ T5911] usb 4-1: config 5 interface 67 altsetting 233 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 369.740573][ T5911] usb 4-1: config 5 interface 67 altsetting 233 has a duplicate endpoint with address 0x6, skipping [ 369.751507][ T5911] usb 4-1: config 5 interface 67 altsetting 233 has a duplicate endpoint with address 0x3, skipping [ 369.765129][ T5911] usb 4-1: config 5 interface 67 altsetting 233 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 369.779147][ T5911] usb 4-1: too many endpoints for config 5 interface 195 altsetting 212: 64, using maximum allowed: 30 [ 369.790432][ T5911] usb 4-1: config 5 interface 195 altsetting 212 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 369.803957][ T5911] usb 4-1: too many endpoints for config 5 interface 105 altsetting 172: 237, using maximum allowed: 30 [ 369.815206][ T5911] usb 4-1: config 5 interface 105 altsetting 172 bulk endpoint 0xC has invalid maxpacket 8 [ 369.825348][ T5911] usb 4-1: config 5 interface 105 altsetting 172 bulk endpoint 0xF has invalid maxpacket 32 [ 369.835497][ T5911] usb 4-1: config 5 interface 105 altsetting 172 has a duplicate endpoint with address 0xE, skipping [ 369.846482][ T5911] usb 4-1: config 5 interface 105 altsetting 172 has a duplicate endpoint with address 0xB, skipping [ 369.857413][ T5911] usb 4-1: config 5 interface 105 altsetting 172 has 5 endpoint descriptors, different from the interface descriptor's value: 237 [ 369.871056][ T5911] usb 4-1: too many endpoints for config 5 interface 36 altsetting 60: 92, using maximum allowed: 30 [ 369.882459][ T5911] usb 4-1: config 5 interface 36 altsetting 60 has 0 endpoint descriptors, different from the interface descriptor's value: 92 [ 369.895830][ T5911] usb 4-1: config 5 interface 66 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 369.906625][ T5911] usb 4-1: config 5 interface 66 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 369.919843][ T5911] usb 4-1: too many endpoints for config 5 interface 216 altsetting 165: 85, using maximum allowed: 30 [ 369.931002][ T5911] usb 4-1: config 5 interface 216 altsetting 165 has a duplicate endpoint with address 0x3, skipping [ 369.941939][ T5911] usb 4-1: config 5 interface 216 altsetting 165 has a duplicate endpoint with address 0xC, skipping [ 369.953103][ T5911] usb 4-1: config 5 interface 216 altsetting 165 has a duplicate endpoint with address 0x1, skipping [ 369.964062][ T5911] usb 4-1: config 5 interface 216 altsetting 165 has a duplicate endpoint with address 0x6, skipping [ 369.975085][ T5911] usb 4-1: config 5 interface 216 altsetting 165 has a duplicate endpoint with address 0xB, skipping [ 369.986486][ T5911] usb 4-1: config 5 interface 216 altsetting 165 has a duplicate endpoint with address 0xA, skipping [ 369.997489][ T5911] usb 4-1: config 5 interface 216 altsetting 165 has an invalid descriptor for endpoint zero, skipping [ 370.008713][ T5911] usb 4-1: config 5 interface 216 altsetting 165 endpoint 0x4 has an invalid bInterval 64, changing to 7 [ 370.019998][ T5911] usb 4-1: config 5 interface 216 altsetting 165 bulk endpoint 0x2 has invalid maxpacket 1023 [ 370.030522][ T5911] usb 4-1: config 5 interface 216 altsetting 165 has 10 endpoint descriptors, different from the interface descriptor's value: 85 [ 370.044016][ T5911] usb 4-1: config 5 interface 93 has no altsetting 0 [ 370.050723][ T5911] usb 4-1: config 5 interface 211 has no altsetting 0 [ 370.057587][ T5911] usb 4-1: config 5 interface 67 has no altsetting 0 [ 370.064417][ T5911] usb 4-1: config 5 interface 195 has no altsetting 0 [ 370.071265][ T5911] usb 4-1: config 5 interface 105 has no altsetting 0 [ 370.078073][ T5911] usb 4-1: config 5 interface 36 has no altsetting 0 [ 370.085551][ T5911] usb 4-1: config 5 interface 66 has no altsetting 0 [ 370.092428][ T5911] usb 4-1: config 5 interface 216 has no altsetting 0 [ 370.101183][ T5911] usb 4-1: New USB device found, idVendor=1b3d, idProduct=015d, bcdDevice=a6.e2 [ 370.110291][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.118868][ T5911] usb 4-1: Product: 誳ҷᶝ臎ⶳ㌬꠆ꗒ趇⩫肋Გ⚪饨嫥ᬣ嫺聑킶궄ᥴ硔쾉꟯ꍔ [ 370.131371][ T5911] usb 4-1: Manufacturer: 㿗袬Ⓡ球뛽ꮪ磍特맳驂쪧妑檗㊝ꐨ䩽촀똼ﲯ忆꩎̞࠮ㅠ巩⢀ꕂﻴ獣䦴쫝䛅쮵園䘞澓똟犜맷琝ᜢ닶ኂu罋Ꙥⴰ退敍䈀霄袩⢑ᖺ၁碱Ὑቈ淔Ŧ黜嶅 [ 370.154202][ T5911] usb 4-1: SerialNumber: ч [ 370.370576][ T5911] ftdi_sio 4-1:5.93: FTDI USB Serial Device converter detected [ 370.379073][ T5911] ftdi_sio ttyUSB0: unknown device type: 0xa6e2 [ 370.388444][ T5911] ftdi_sio 4-1:5.211: FTDI USB Serial Device converter detected [ 370.397320][ T5911] ftdi_sio ttyUSB1: unknown device type: 0xa6e2 [ 370.405745][ T5911] ftdi_sio 4-1:5.67: FTDI USB Serial Device converter detected [ 370.414033][ T5911] ftdi_sio ttyUSB2: unknown device type: 0xa6e2 [ 370.424070][ T5911] ftdi_sio 4-1:5.195: FTDI USB Serial Device converter detected [ 370.433035][ T5911] ftdi_sio ttyUSB3: unknown device type: 0xa6e2 [ 370.441431][ T5911] ftdi_sio 4-1:5.105: FTDI USB Serial Device converter detected [ 370.449832][ T5911] ftdi_sio ttyUSB4: unknown device type: 0xa6e2 [ 370.458884][ T5911] ftdi_sio 4-1:5.36: FTDI USB Serial Device converter detected [ 370.467095][ T5911] ftdi_sio ttyUSB5: unknown device type: 0xa6e2 [ 370.475395][ T5911] ftdi_sio 4-1:5.66: FTDI USB Serial Device converter detected [ 370.483572][ T5911] ftdi_sio ttyUSB6: unknown device type: 0xa6e2 [ 370.492774][ T5911] ftdi_sio 4-1:5.216: FTDI USB Serial Device converter detected [ 370.501758][ T5911] ftdi_sio ttyUSB7: unknown device type: 0xa6e2 [ 370.517488][ T5911] usb 4-1: USB disconnect, device number 41 [ 370.553980][ T5911] ftdi_sio 4-1:5.93: device disconnected [ 370.564686][ T5911] ftdi_sio 4-1:5.211: device disconnected [ 370.573035][ T5911] ftdi_sio 4-1:5.67: device disconnected [ 370.579775][ T5911] ftdi_sio 4-1:5.195: device disconnected [ 370.589817][ T5911] ftdi_sio 4-1:5.105: device disconnected [ 370.600586][ T5911] ftdi_sio 4-1:5.36: device disconnected [ 370.608919][ T5911] ftdi_sio 4-1:5.66: device disconnected [ 370.617244][ T5911] ftdi_sio 4-1:5.216: device disconnected