last executing test programs: 2m31.875517336s ago: executing program 0 (id=1489): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fadvise64(r0, 0x92, 0x1000, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@mcast1, 0x33, r3}) mmap(&(0x7f00000ea000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0xc0fe6000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) 2m31.644524433s ago: executing program 0 (id=1491): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$tipc(0x1e, 0x2, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@random={'user.', 'n\xe8'}) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) 2m31.072577664s ago: executing program 0 (id=1497): creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) 2m30.95603022s ago: executing program 0 (id=1498): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xc, 0x2) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0x1006) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000004900010000000000000000000a00076e08000000e000000114000180"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x0, 0x0, 0x47524247}}) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001) syz_open_dev$vim2m(&(0x7f0000000000), 0xc, 0x2) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b3234076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000004900010000000000000000000a00076e08000000e000000114000180"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x0, 0x0, 0x47524247}}) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0) (async) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001) (async) 2m30.941156395s ago: executing program 0 (id=1499): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) mount$nfs(&(0x7f0000000040)='T-+&[\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x15, &(0x7f00000001c0)=ANY=[@ANYBLOB="2ff1910e7d726ef56c6c6230002c2f6465762f726e756c6c6230002c5b255e9b2b2d2b29275c2c2846686c75fef286340bc5b40c2f6465762f726e756c6c6230002c5e2c2c2327f42e2c7b2c6f626a5f757365723d2f6465762f726e756c6c6230002c6f626a6d74a07065ab635757263d232b"]) 2m30.872756395s ago: executing program 0 (id=1500): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) prctl$PR_GET_KEEPCAPS(0x7) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) close(0x4) (async) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000140)={{r1}, 0x2, &(0x7f0000000100)=[0x9, 0x3], 0x10, 0x1}) (async, rerun: 32) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x42281, 0x0) (rerun: 32) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000280)=0x14) (async, rerun: 32) pselect6(0x12, &(0x7f0000000080)={0x1000000000000e, 0x9, 0x9, 0x10000000, 0x6, 0x8, 0xc2db, 0x7ff}, 0x0, 0x0, 0x0, 0x0) (rerun: 32) write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000002c0)={0x2a, 0x6, 0x0, {0x1, 0x4, 0x1, 0x0, '\x00'}}, 0x2a) (async) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f00000001c0)={0x0, 0x2}) 2m15.840973439s ago: executing program 32 (id=1500): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) prctl$PR_GET_KEEPCAPS(0x7) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) close(0x4) (async) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000140)={{r1}, 0x2, &(0x7f0000000100)=[0x9, 0x3], 0x10, 0x1}) (async, rerun: 32) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x42281, 0x0) (rerun: 32) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000280)=0x14) (async, rerun: 32) pselect6(0x12, &(0x7f0000000080)={0x1000000000000e, 0x9, 0x9, 0x10000000, 0x6, 0x8, 0xc2db, 0x7ff}, 0x0, 0x0, 0x0, 0x0) (rerun: 32) write$FUSE_NOTIFY_DELETE(r3, &(0x7f00000002c0)={0x2a, 0x6, 0x0, {0x1, 0x4, 0x1, 0x0, '\x00'}}, 0x2a) (async) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f00000001c0)={0x0, 0x2}) 1m48.279596819s ago: executing program 1 (id=1760): socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r10], 0x4) 1m48.162626496s ago: executing program 1 (id=1762): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)={0xd8, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "80845cad73a8a2f9f0fda264f5358ec36c9d413366680d80"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "73061838bbcc234eff4f6db33c590b6f1d0bbf99501caea8"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0xd8}, 0x1, 0x0, 0x0, 0x400c000}, 0xc2010) (async) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) (async) syz_usb_connect(0x2, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594ef"], 0x0) (async) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x45040) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PDEATHSIG(0x21, 0x1) (async) prctl$PR_MCE_KILL_GET(0x22) (async) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0xb5, 0xc1, 0x32, 0x40, 0x2c42, 0x16f8, 0x999, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x10, [{{0x9, 0x4, 0x4a, 0x0, 0x0, 0xdd, 0xa3, 0x6d}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x12000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r2, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x1) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000002c0)={0x14, 0x28, 0x1, 0x70bd2d, 0x25dfdbff, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4051}, 0x20000800) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0) 1m47.479257222s ago: executing program 1 (id=1765): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000040)={0xffff, 0xfffffff7, 0x0, 'queue1\x00', 0x7fff}) 1m47.363728347s ago: executing program 1 (id=1766): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)={0x20, 0x11, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0x9, 0x0, 0x0, 0x0, @str='%!\xf9[\x00'}]}]}, 0x20}], 0x1}, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x79, 0x1, 0x401}}}, 0x7) ioctl(r2, 0x2203, &(0x7f0000000000)) ioctl$RTC_AIE_ON(r2, 0x7001) fadvise64(r1, 0x92, 0x5, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r1, 0xa471a000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000020000003900000008000300", @ANYRES32=r7, @ANYBLOB="24005a8020000480140005"], 0x40}, 0x1, 0x0, 0x0, 0x200440c0}, 0x0) r8 = socket$netlink(0x10, 0x3, 0xb) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f0000000000)={'geneve1\x00', {0x2, 0x0, @initdev}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet_sctp(0x2, 0x5, 0x84) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r8) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x130, r11, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7f}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xb2, 0xa9, @random="68bae43b57ad7d4dd1652980cb86a8fd65afbd8e55e2e8b8695724e021b098060eab52ca8f483361764bd68e47ea0f6e738a4c4f8033c4d904cfcf96b0d525a300ed3a4bc951822383ca905ecb7200de4f3698db45b71722102cd8760f0d8534bac0b2d8f63e92b549c03546baa76ab3d1c96cae19876cda017408280a988e3fef50248dfa9b7f606565a539da7df18d3bcf1c883840400575d99cf5cc3d32e8c23870aef80ed30322d946c7fc32"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1000}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x130}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x24, r12, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r12, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r14}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x10) 1m47.092496065s ago: executing program 1 (id=1767): creat(&(0x7f0000000140)='./file0\x00', 0x71) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acdddff4bc6e17bd735b3576550a4", 0x3a}], 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x15, 0x3, 0x1, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$rds(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000380)=""/90, 0x5a}, {&(0x7f0000000740)=""/127, 0x7f}, {&(0x7f00000007c0)=""/2, 0x2}, {&(0x7f0000000240)=""/203, 0xcb}, {&(0x7f0000000900)=""/124, 0x7c}], 0x6, &(0x7f0000000a80)=[@rdma_dest={0x18, 0x114, 0x2, {0x9, 0x4}}, @mask_cswp={0x58, 0x114, 0x9, {{0x17, 0x80000000}, &(0x7f0000000100)=0x7, 0x0, 0x0, 0x7, 0x3, 0x5e13, 0x78, 0x1000000000000}}], 0x70, 0x4000000}, 0x4000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400840000000009040000028b8647000905e869690900000009050a"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004010}, 0x40) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m46.500183411s ago: executing program 1 (id=1774): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000180)={0x2, 0x4, 0x612d, 0x6}) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0xfffffffd, 0x2, 0x7, 0x6, r1}) sendfile(r0, r0, 0x0, 0x7ffff000) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02002400037f08000600f9ff0000ff010cbb9c8732f4e554cb523c47e26a0796dba33d255ec9744b455b15b5969feab5b167d978f20b915fe2ec2146855adfeaee419c6a8b2a8a3a8c7b895afb80f136afa67445a4b90778b95568c6c1e10866de9fd498f0b9ce2924040060f6b6f1ad41ef5fc095b7ee15378c93af9a882db7829c27af8a692ce49a96b67552eda31e3d0315bec3b37e0263d5f9aff091ead1d224994364337e107492f5ddf09bbde2a9f59aa7fa6b3fc130e974293f7beee625d09db9774e20a3d3e5ad4fec5fefcb95a608d17f777d9c51964c61bca5735c92"], 0x26) 1m31.447331174s ago: executing program 33 (id=1774): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000180)={0x2, 0x4, 0x612d, 0x6}) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0xfffffffd, 0x2, 0x7, 0x6, r1}) sendfile(r0, r0, 0x0, 0x7ffff000) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02002400037f08000600f9ff0000ff010cbb9c8732f4e554cb523c47e26a0796dba33d255ec9744b455b15b5969feab5b167d978f20b915fe2ec2146855adfeaee419c6a8b2a8a3a8c7b895afb80f136afa67445a4b90778b95568c6c1e10866de9fd498f0b9ce2924040060f6b6f1ad41ef5fc095b7ee15378c93af9a882db7829c27af8a692ce49a96b67552eda31e3d0315bec3b37e0263d5f9aff091ead1d224994364337e107492f5ddf09bbde2a9f59aa7fa6b3fc130e974293f7beee625d09db9774e20a3d3e5ad4fec5fefcb95a608d17f777d9c51964c61bca5735c92"], 0x26) 1m16.756229098s ago: executing program 5 (id=1997): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x8801}], 0x1, 0x40800) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0x2000200000a95c, 0x4, 0x4000000201, 0x1, 0x48cd, 0xfffffffffffffffc, 0x800000df}) statx(r6, &(0x7f0000000000)='./file0\x00', 0x4000, 0x24, &(0x7f00000002c0)) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/65, 0x51}, {&(0x7f0000000200)=""/80, 0x50}], 0x2, 0x0, 0x15}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 1m15.832243168s ago: executing program 5 (id=2003): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000008, 0x10, 0xffffffffffffffff, 0x10000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x22052, r0, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000008, 0x10, 0xffffffffffffffff, 0x10000000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x22052, r0, 0x2000) (async) 1m15.713408286s ago: executing program 5 (id=2005): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4a58c000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0xd, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x48}}, 0x20000400) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m15.430525036s ago: executing program 5 (id=2008): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000000)) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) fadvise64(r3, 0x94, 0x6e, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000) 1m15.270761907s ago: executing program 5 (id=2010): socket$inet_smc(0x2b, 0x1, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r10], 0x4) 1m15.20296419s ago: executing program 5 (id=2011): ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000080)={&(0x7f0000000040)=""/20, 0x14, 0x3}) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e087f7b0c"], 0xb) r0 = syz_open_procfs(0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x20c3) preadv(r1, &(0x7f0000003780)=[{&(0x7f0000002540)=""/171, 0xab}, {&(0x7f0000000200)}, {&(0x7f0000002600)=""/192, 0xc0}, {&(0x7f00000026c0)=""/139, 0x8b}, {&(0x7f0000000240)=""/20, 0x14}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x6, 0x0, 0x6) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4, 0x0, 0x9}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) ioctl$VIDIOC_REQBUFS(r3, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000001c0)={0x2a, 0x6, 0x0, {0x3, 0x3, 0x1, 0x0, '}'}}, 0x2a) sched_setattr(r2, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xfffffffffffffffe}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) write$tun(r4, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x1ed) sync() quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mount(&(0x7f0000000200)=@filename='./file0\x00', &(0x7f0000003800)='./file0\x00', &(0x7f0000003840)='adfs\x00', 0x80, &(0x7f0000003880)='[\x00') r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000280)) 1m0.088899924s ago: executing program 34 (id=2011): ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000080)={&(0x7f0000000040)=""/20, 0x14, 0x3}) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e087f7b0c"], 0xb) r0 = syz_open_procfs(0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x20c3) preadv(r1, &(0x7f0000003780)=[{&(0x7f0000002540)=""/171, 0xab}, {&(0x7f0000000200)}, {&(0x7f0000002600)=""/192, 0xc0}, {&(0x7f00000026c0)=""/139, 0x8b}, {&(0x7f0000000240)=""/20, 0x14}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x6, 0x0, 0x6) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4, 0x0, 0x9}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) ioctl$VIDIOC_REQBUFS(r3, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000001c0)={0x2a, 0x6, 0x0, {0x3, 0x3, 0x1, 0x0, '}'}}, 0x2a) sched_setattr(r2, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xfffffffffffffffe}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) write$tun(r4, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x1ed) sync() quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mount(&(0x7f0000000200)=@filename='./file0\x00', &(0x7f0000003800)='./file0\x00', &(0x7f0000003840)='adfs\x00', 0x80, &(0x7f0000003880)='[\x00') r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000280)) 7.905060881s ago: executing program 6 (id=2486): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@loopback, @in=@broadcast}}, {{@in=@dev}, 0x0, @in=@private}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) gettid() socket$nl_netfilter(0x10, 0x3, 0xc) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) 4.987322228s ago: executing program 6 (id=2517): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) socket$unix(0x1, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00') socket$inet_udp(0x2, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r1], 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x28011, r0, 0x2c39000) 1.863538848s ago: executing program 6 (id=2541): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x40800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2], 0x7c}}, 0x0) 1.781745254s ago: executing program 6 (id=2543): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x39, 0x1a, r0, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000000)) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000700)={0xffffffffffffffff, 0x3, 0x3, 0x0, 0x7}) setsockopt$inet_buf(r2, 0x0, 0x26, &(0x7f0000000100)="caab296b1aeb7d534cd031005bd7aff0b9f4a19aed30c807917b28ad496d7768105d0ea3b902537aa7316535785ec99399ab8c39629b68d8f00efe38779b32bfbea0cdc413ee593f6da2b4fbb0e41a253abcc7eacadb3c3309e2054050b177d8429a2e41eb385a80cd9ac91f79d3d236526fa93cc5fa106f28bbbd01c25a3ecca55a8994cbf33d622683f1c0800a5aedf12023bc4e038b5149f701140d86bcf0eae731f3c8", 0xa5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x27}, @l2cap_cid_signaling={{0x23}, [@l2cap_move_chan_req={{0xe, 0x0, 0x3}, {0x1, 0x8}}, @l2cap_conn_rsp={{0x3, 0x7f, 0x8}, {0x6, 0x400, 0x0, 0x21bf}}, @l2cap_move_chan_cfm={{0x10, 0x1a, 0x4}, {0x5, 0x1}}, @l2cap_disconn_req={{0x6, 0xa, 0x4}, {0x1, 0x101}}]}}, 0x2c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x74}}, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000040)={0xff, @loopback, 0x4e1e, 0x0, 'nq\x00', 0x20, 0x4, 0x8}, 0x2c) r5 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r5, &(0x7f0000001500)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x7080000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=[{0x18, 0x29, 0xb, "bde2"}], 0x18}}], 0x1, 0x0) iopl(0x3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x3}}}, 0x4) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x0, @any, 0xfc}}}, 0xb) 1.407784734s ago: executing program 2 (id=2550): pselect6(0x0, 0x0, &(0x7f0000000240)={0xfffffffffffffffe, 0x9, 0x5, 0x2000000000000e44, 0x0, 0x2, 0x48000000000000, 0x8}, 0x0, &(0x7f00000002c0), 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000340)="240000001a005f20f109dfc64d2609e00214f9df0700dd00007f000001fe000258dbef0f", 0x24) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r2 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) ftruncate(r3, 0x4a0e876b) munmap(&(0x7f0000012000/0x4000)=nil, 0x4000) write(r1, &(0x7f0000000400)="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", 0x1f000) pselect6(0x0, 0x0, &(0x7f0000000240)={0xfffffffffffffffe, 0x9, 0x5, 0x2000000000000e44, 0x0, 0x2, 0x48000000000000, 0x8}, 0x0, &(0x7f00000002c0), 0x0) (async) socket(0x10, 0x3, 0x0) (async) write(r0, &(0x7f0000000340)="240000001a005f20f109dfc64d2609e00214f9df0700dd00007f000001fe000258dbef0f", 0x24) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) (async) syz_pidfd_open(r2, 0x0) (async) ftruncate(r3, 0x4a0e876b) (async) munmap(&(0x7f0000012000/0x4000)=nil, 0x4000) (async) write(r1, &(0x7f0000000400)="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", 0x1f000) (async) 1.407622325s ago: executing program 3 (id=2551): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000000)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x4000000, 0x800, 0x4000000e}}) 1.367048864s ago: executing program 3 (id=2552): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x40800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB], 0x7c}}, 0x0) 1.293159013s ago: executing program 2 (id=2553): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000000)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x4000000, 0x800, 0x4000000e}}) (fail_nth: 1) 1.292500144s ago: executing program 3 (id=2554): socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4) 1.19152118s ago: executing program 3 (id=2555): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4002080}, 0x4000) 868.048086ms ago: executing program 3 (id=2556): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x1e}}, 0xc) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000004640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="18000000000000000100000001"], 0xd0, 0x800}}], 0x1, 0x40) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x7}, 0x8) listen(r0, 0xd) accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x80800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r5, 0x57789000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000551000/0x400000)=nil) 867.865686ms ago: executing program 2 (id=2557): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x5) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f028, 0x105}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) capset(&(0x7f0000000180)={0x20071026, r3}, &(0x7f00000001c0)={0x14b3dfd9, 0x5c1, 0x4e, 0x1, 0x7, 0x7}) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000000)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x3ffffff, 0x800, 0x4000000e}}) close_range(r0, r1, 0x2) 847.927819ms ago: executing program 6 (id=2558): socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r9], 0x4) 727.727931ms ago: executing program 4 (id=2560): ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f0000000000)=0xe5) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r0, 0x4008af7c, &(0x7f0000000080)={0x1, 0x8}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000200c}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x924, 0x70bd25, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20044040}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f00000001c0)={0x1a, 0x321, 0x8, 0x0, 0x9, 0x7}, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r3, 0x8004af7a, &(0x7f0000000240)) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000001280)={&(0x7f0000000280)=[0xfffffff7, 0xc6ad, 0x7, 0x4, 0x4, 0x7dd, 0x1e4, 0x1, 0x2, 0x3, 0x70, 0x6, 0x6, 0x101, 0x2c3, 0x4, 0x8, 0x2198, 0x400, 0x5, 0x7fffffff, 0x8, 0x5, 0x6, 0x8, 0x8, 0x6, 0x6, 0xffff7fff, 0x10, 0x3, 0xffff, 0xfe7, 0x2, 0xbd0, 0xb, 0xd, 0x1, 0xfffffffd, 0xfffffeff, 0x80000000, 0x6, 0xfffffffe, 0x80000000, 0x3, 0xfffffff2, 0x103e, 0xbd1f, 0x2, 0x4, 0x7, 0x9, 0x5, 0x200, 0xe00, 0xfffffff2, 0x4, 0x9, 0x800, 0x3, 0x9, 0x5, 0x3, 0x4, 0x5, 0x7, 0xd, 0x208, 0x23c9, 0x100, 0x4, 0xf, 0x8001, 0x401, 0x99e, 0xe, 0x6, 0x7, 0x9, 0x2, 0xffff8000, 0xbd1, 0x5, 0x4, 0xe19, 0x0, 0x3, 0x4, 0xffff, 0xe0d, 0x80, 0x10000, 0x5, 0x5, 0x1, 0x3, 0x0, 0x9dc1, 0xa, 0x7d, 0x6, 0x1, 0x3, 0x70, 0x0, 0xc000000, 0x4, 0xfff, 0x4000, 0x4, 0xf, 0x54, 0x4, 0x10000, 0x99, 0x7, 0xffff3584, 0xe, 0x8001, 0x7fff, 0x1, 0x8, 0xfffffc3d, 0x0, 0x7f, 0x2, 0x1, 0x4, 0x80, 0x8, 0xf25, 0xc534, 0x81, 0xf3, 0x7, 0x8, 0x3, 0x6, 0xc45, 0x8, 0x10001, 0x13ad, 0x97b1, 0x8, 0x9, 0x2, 0x1, 0x6, 0x4, 0xa, 0x578, 0x5, 0x7ff, 0xa26, 0x34bd3474, 0xa018, 0x3, 0x7, 0x299, 0xbe4d, 0x7, 0x1, 0x9, 0xfffffffc, 0xd0a, 0x3, 0x6, 0x1000, 0x1, 0x9, 0x3, 0x8, 0x0, 0x0, 0x0, 0x4, 0xd, 0x100, 0x4, 0x88000000, 0x80, 0x4502a229, 0x2d3a, 0x95c, 0x4, 0x7fff, 0x800, 0x8, 0x1, 0x7, 0x39, 0x3, 0xfff, 0x800, 0xfffffffa, 0xf, 0xe4f, 0x5, 0xe, 0x5, 0x5, 0x7, 0x1, 0x2, 0x2, 0x86ad, 0x0, 0x101, 0x6, 0x8, 0x4, 0x7fffffff, 0xa, 0x9, 0x1, 0x9, 0xd7e0, 0x6, 0x6, 0x3, 0x4, 0x1000, 0x80000001, 0x9, 0x10, 0x8, 0x2, 0x7a5, 0x2, 0xc, 0x7, 0x5, 0x1, 0x4, 0x9, 0x2, 0x800, 0x1, 0x2d88, 0x9, 0x2, 0xacc, 0x5, 0x2, 0x2, 0xffff, 0x7f, 0x1, 0x80, 0x7, 0x5, 0x4, 0xa, 0x415c, 0x9, 0x3, 0x7, 0x4, 0x1800, 0x6, 0xffff0001, 0x1, 0x9, 0x1, 0x3, 0x1000, 0x80000001, 0x80000000, 0x10040000, 0x1000000, 0x0, 0x3, 0x1, 0x8, 0xf4, 0x40, 0x0, 0x80000000, 0x7, 0x2, 0x3, 0x6, 0x4, 0x2, 0x0, 0x80000000, 0x62, 0x0, 0x5, 0x200, 0x2, 0x1, 0x4, 0x4e69, 0x9, 0x9ec, 0x200, 0xffffff01, 0xfffffff8, 0x8, 0x10001, 0xc8, 0x7, 0x4, 0x0, 0x4, 0x2, 0x10, 0x2, 0x5, 0x0, 0x80000000, 0x4, 0x9, 0x0, 0xd8c, 0x4c, 0x1, 0x3, 0x7, 0x9, 0x7, 0x3, 0x2, 0x4, 0x0, 0x6, 0x80, 0xd1, 0x4, 0x9, 0x0, 0x7, 0x500, 0x4, 0x7, 0x3, 0x6, 0x9, 0xdd, 0x7, 0x6, 0x401, 0x2, 0x2, 0x4, 0x1, 0x63, 0x4, 0x86, 0x5587, 0x10, 0x7ff, 0x8, 0x9, 0xfffffff7, 0xbf0, 0x40, 0x5, 0x0, 0x3, 0x6, 0x8, 0x3, 0x6, 0xe, 0x40, 0x40, 0xe9e, 0x8, 0x2, 0x1, 0x7, 0x3, 0x5, 0x0, 0x1ff, 0xffff0000, 0x3, 0x7, 0x81, 0x4, 0x111e, 0xfffffff2, 0x9, 0xa5c, 0x0, 0xfffffffc, 0x4, 0x3, 0x7fff, 0x6, 0xfffffff7, 0x0, 0xfffffffd, 0x0, 0x7, 0x3, 0x81, 0xaa16, 0xfffffff0, 0x1, 0x101, 0x81, 0x7f4b7d6d, 0x9, 0x0, 0x1, 0x3, 0x8, 0x0, 0x8, 0x595e, 0xf, 0x2, 0x1000, 0xbe, 0x8, 0x7, 0x6, 0x6, 0x200, 0x7, 0xe, 0xb6d9, 0x7, 0x0, 0x9e, 0x3, 0xa7a, 0x2, 0x7148, 0x8, 0x2, 0x9, 0xdae, 0x6, 0x9, 0x8c3, 0xbb, 0x4, 0x3ff, 0x8, 0x1, 0x8000, 0x8, 0x81, 0x5, 0x6, 0xfff, 0x4, 0x6, 0x40, 0x2, 0x80, 0x7, 0x0, 0xffffffff, 0xfffffffa, 0x8e, 0xcb, 0x7, 0x10000, 0x6, 0x6, 0x7, 0x3, 0xa75b, 0x80a, 0x9, 0x8d, 0x5, 0xd0, 0x1, 0x7ff, 0x3, 0x8, 0xffff, 0x1, 0x9, 0x0, 0x6ee, 0x3, 0x2, 0x2, 0x5, 0x2, 0xc, 0x91ae, 0x9, 0xca6, 0x400, 0x7, 0x6, 0xc50, 0x3, 0x4, 0x2, 0x3, 0x295, 0xfffffffa, 0x3, 0xfffff283, 0x8, 0x403, 0x721b, 0x2, 0x8001, 0x8, 0x2, 0xe3, 0x8ba6, 0x9, 0x8, 0xffffffff, 0x3, 0x1, 0xfff, 0xc72, 0x9c, 0x2111, 0x40, 0x0, 0x7, 0x5d15, 0x6, 0xb, 0x2, 0x9, 0x7, 0x2, 0x8, 0x10001, 0x8001, 0x6, 0x4, 0x1000, 0x1, 0x40000000, 0x7, 0x3, 0xffff8000, 0x0, 0xd, 0xbb68, 0xfffffff9, 0x6, 0xfffffffd, 0x6, 0xfffffff9, 0xa60c, 0xc7e, 0x101, 0x0, 0x9, 0x91f, 0x7, 0x7, 0xf7, 0x93a1, 0x3, 0x3, 0x4, 0xe, 0x9, 0x7, 0x6, 0x35f8800, 0x7, 0x6, 0x2, 0x1, 0x0, 0xc5, 0x11, 0xbe2, 0x101, 0x5d4edcce, 0x6b58, 0xd6e7, 0x70, 0x4, 0x1ff, 0x202, 0x1, 0x0, 0x9, 0x9ae, 0xfff, 0x500f, 0x6, 0xffff, 0x1ff, 0x0, 0x7, 0x3, 0x6, 0x8, 0x1ff, 0x9, 0x6, 0x6, 0x8, 0x2, 0x6, 0x7, 0xe24, 0x5, 0x7, 0x1ee2, 0xc70b, 0x44, 0x8, 0x4, 0x2, 0x6, 0x9, 0x1ff, 0x2c, 0x8, 0x401, 0x5, 0x1, 0x1, 0xead, 0x4, 0x7, 0x6, 0x5, 0x1, 0x7, 0x2, 0x9, 0x9ab, 0x4, 0x7, 0x1, 0x77a5, 0x5a9, 0x6, 0x4, 0x9, 0x83, 0x5, 0x401, 0x0, 0x2, 0x5, 0x3, 0xb, 0x40, 0x5, 0x1, 0x2, 0x6, 0x1d0, 0x4, 0x8001, 0x9, 0x6888, 0xce0, 0x5, 0xff06, 0x8, 0x3b733a6e, 0x0, 0x6, 0x5, 0xc, 0x6f, 0x4, 0xa, 0x8, 0x7fffffff, 0x77b, 0x6, 0x7f, 0xfffffffa, 0x5, 0x6, 0xa006, 0xaf, 0x3, 0xfff, 0x4, 0xa926, 0x0, 0x53e0, 0x8, 0x9, 0x9, 0x1ff, 0x7fffffff, 0x8001, 0x0, 0x6, 0x6, 0x9, 0x40100000, 0x2, 0xec5, 0x3, 0x9203, 0x10000, 0x636a, 0x9, 0x10000, 0x9, 0x9, 0x5, 0x800, 0x3, 0x9, 0x3, 0x9, 0xbebf, 0x5, 0xa08, 0x800, 0xffffffff, 0x0, 0x35, 0xff, 0x6, 0x5, 0x0, 0x8, 0xf, 0x8000, 0x1, 0x9c7, 0x9, 0xb58d, 0x4, 0xfffffffd, 0x200, 0x101, 0x1, 0x5, 0x10001, 0x96a, 0x3, 0xfffffff9, 0x80000001, 0x9, 0x7fff, 0x7, 0xffffd90f, 0x6, 0x7, 0xe256, 0x54, 0x3, 0xf79, 0x74e, 0x1, 0x4, 0x9, 0x8, 0x80000000, 0xbcdc, 0x1, 0x7, 0x7, 0x1, 0x8, 0x3, 0x78, 0x10000, 0x1, 0x5, 0x0, 0xe795, 0x0, 0x80000000, 0x101, 0x2, 0x2893, 0x1ff, 0x2, 0x1, 0x0, 0xfff, 0x20080000, 0x6, 0x7, 0x3, 0x4, 0x100, 0x6, 0x0, 0x9, 0x2, 0xe403, 0x0, 0xec7, 0xd917, 0xe92e, 0x8, 0x3, 0x8e, 0x0, 0xe8, 0x800, 0x4, 0xf61, 0xff, 0xfc75, 0x2400000, 0x7, 0x3, 0x8, 0x6, 0x3, 0x3ff, 0xc, 0x80000000, 0x46, 0x8000, 0x2, 0x0, 0xfffffffd, 0x942c, 0x2, 0x3, 0x0, 0x3, 0xd8c8, 0x2, 0x3, 0x71, 0xddc, 0x0, 0x6, 0x80, 0x7, 0x7f, 0x62c1, 0x12000000, 0x3, 0x9, 0x1, 0x8, 0x5, 0x7, 0x2, 0x1, 0x93a6, 0x3, 0x22e59eaf, 0x7, 0x11d54e9e, 0x10001, 0x6, 0xb5, 0x800, 0x7, 0x3, 0x2, 0x401, 0x1ff, 0x5, 0x7, 0x7fffffff, 0x51, 0xfffffeff, 0x10001, 0x6, 0x80000000, 0x80, 0xfffffff8, 0x9, 0x1, 0x2727, 0xffff8001, 0x6, 0xba, 0x9, 0xfffffffb, 0xb522, 0x8, 0xb, 0x7, 0x1, 0xa, 0x7fff, 0x8, 0xd9c1, 0x400, 0x0, 0x5, 0x0, 0x2ce, 0x2, 0xfff, 0x80000001, 0x0, 0x80000001, 0x80000000, 0xb8, 0x0, 0x4, 0x6, 0x8, 0x200, 0x8, 0x3, 0x0, 0x4, 0x6, 0x200, 0x7ff, 0x2, 0x3, 0x7ce, 0xaf, 0x8, 0xdc, 0x5, 0x5, 0x7fff, 0xa, 0x1, 0xff9, 0x6, 0x9, 0xe2, 0x80000000, 0x6, 0xd, 0xf, 0x9, 0x0, 0x6, 0x5, 0x0, 0x7f, 0x47, 0x6, 0x52774a8c, 0xfffffeff, 0xe, 0x3, 0x200, 0x10000, 0xffff, 0xfff, 0x1, 0x8, 0x5, 0x40, 0x3, 0x1, 0xda, 0x2, 0xd98b, 0x1000, 0x1, 0x4, 0x6, 0xb, 0x8, 0x77e, 0x4, 0x800, 0x6, 0x10, 0x7, 0x200, 0x1, 0x200, 0x1, 0xb, 0x3, 0x5, 0x100, 0xfffffc01, 0x0, 0x4, 0x1, 0x8, 0x8, 0x5, 0x3ff, 0xfba7, 0x7, 0x5, 0x6, 0x1, 0x3, 0x4, 0x1, 0x4, 0x5e152bd6, 0x7, 0x2, 0x4, 0x33f, 0x3, 0xf500000, 0x200, 0x1, 0x3, 0x1, 0x1ff, 0x1, 0x7, 0x2, 0x80, 0xaf04, 0x2, 0x1, 0x6, 0x4168, 0xa1, 0x9, 0x400, 0x0, 0xb9, 0x400, 0x313, 0x7fff, 0x7fffffff, 0x1000], 0x0, 0x400, 0x7}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000012c0)={r2}) getpeername$llc(r4, &(0x7f0000001300)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001340)=0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000013c0), r4) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000001540)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x3103008}, 0xc, &(0x7f0000001500)={&(0x7f0000001400)={0xc8, r5, 0x8, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x4000880) setsockopt(r2, 0x5, 0x339, &(0x7f0000001580)="4be4dece823bfb001f68e5302a446522e25c6a3d077009775c1e38511795a861d77278ac5c9eaf45835519da28a8ee2014176c5f007871268ca99e7b9827d417545d942db4604f", 0x47) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000001600)=0x1) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000001640)={0x0, @bt={0x9, 0x320, 0x0, 0x2, 0x1, 0xfff, 0x24000000, 0x0, 0x10001, 0x51ab8d35, 0x0, 0x9, 0x2, 0x1f0b, 0x0, 0x0, {0x1000, 0x7ff}, 0x6, 0xe}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r4) sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x20, r6, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfa9, 0x61}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000001840), 0x2, 0x0) r8 = creat(&(0x7f00000018c0)='./file0\x00', 0x55) ioctl$VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000001900)=@userptr={0xd72, 0x5, 0x4, 0x0, 0x3, {0x77359400}, {0x2, 0xc, 0xa, 0x17, 0x3, 0x1, "18dae3a6"}, 0x9, 0x2, {&(0x7f0000001880)}, 0x7, 0x0, r8}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000019c0), r4) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x24, r9, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x401}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0000}, 0x20008094) ioctl$SIOCNRDECOBS(r8, 0x89e2) ioctl$UFFDIO_WRITEPROTECT(r8, 0xc018aa06, &(0x7f0000001ac0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x4c, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x29}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x24}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) getsockname$netrom(r4, &(0x7f0000001c40)={{0x3, @rose}, [@default, @null, @remote, @remote, @default, @null, @rose, @null]}, &(0x7f0000001cc0)=0x48) 727.455572ms ago: executing program 2 (id=2561): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000000)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x4000000, 0x800, 0x4000000e}}) 721.887305ms ago: executing program 6 (id=2562): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x7fff, 0x3}, 0x1c) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) read(r0, &(0x7f0000000300)=""/152, 0x98) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000781000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x8000000000000001) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f0000000180)={0x3, 0x3f, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}) r5 = dup3(r2, r1, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x18, 0x0, &(0x7f00000002c0)=[@increfs, @clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) r7 = eventfd2(0xffffffff, 0x1) read$eventfd(r7, &(0x7f0000000040), 0x8) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04080400c9"], 0x7) fadvise64(r8, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r8, 0xa471a000) 645.377082ms ago: executing program 4 (id=2563): socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB, @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4) 537.683581ms ago: executing program 2 (id=2564): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x40800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB], 0x7c}}, 0x0) 534.672915ms ago: executing program 4 (id=2565): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, r1, 0x201, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4002080}, 0x4000) 472.467983ms ago: executing program 4 (id=2566): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2}) close_range(r0, r0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000140)={0x5, 0x85, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000040)={0x4, 0x8, 0x2}) 385.293579ms ago: executing program 4 (id=2567): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000000)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x4000000, 0x800, 0x4000000e}}) (fail_nth: 2) 384.304914ms ago: executing program 2 (id=2568): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e27, 0x41200003, @empty, 0xb}, 0x1c) r3 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000480)}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r4, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000080)="8e9eddcce4d879e9e60409a669d06f173891359ae7529cddb59350ba080abfa5edca1cb2e5fd43365753059b38caed5f4f87fac5ebae12fcda4e4f72f6100fe6358825fec456724f02ab32543a2a20eed01b4e8cc8ebf3f1416302fa4eecac0a525f7bf21ad8955cf6e469eb0b1d94f89d8e3bfe787ffb64bec98f67f9644badf1", 0x81}], 0x1, 0x0, 0x0, 0x800}}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x9, 0x3032, 0xffffffffffffffff, 0x1263b000) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000003680)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x3, 0x10, 0xf1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xedd2, 0x7, 0x8, 0x8a}, {0x6, 0x24, 0x1a, 0xb2a0, 0x1}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x5, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xc0, 0x8, 0xfd}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3, 0x9, 0xff}}}}}}}]}}, &(0x7f0000003bc0)={0x0, 0x0, 0x20, &(0x7f00000037c0)={0x5, 0xf, 0x20, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x10000, 0xff00, 0x101, [0x18, 0xc000]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x1, 0x3}]}}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) 167.117µs ago: executing program 3 (id=2569): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x25) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000008205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000040)={0xff, @private=0xa010100, 0x4e20, 0x0, 'nq\x00', 0x20, 0x9, 0x8}, 0x2c) 0s ago: executing program 4 (id=2570): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)={0x8, 0x1, 0x4, 0x8000006, 0x2, 0x0, [{0x101, 0x800, 0xfffffffffffffffe, '\x00', 0x1000}, {0x395, 0xfffffffffffffffb, 0x95, '\x00', 0x1208}]}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) kernel console output (not intermixed with test programs): :047F:FFFF.000C: unknown main item tag 0x0 [ 288.439233][ T981] dvb-usb: error while querying for an remote control event. [ 288.442072][ T6070] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 288.456022][ T6070] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 288.463444][ T6070] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 288.470998][ T6070] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 288.481884][ T6070] plantronics 0003:047F:FFFF.000C: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 288.578236][T13976] /dev/rnullb0: Can't open blockdev [ 288.584470][ T6070] usb 5-1: USB disconnect, device number 13 [ 288.615740][ T6652] dvb-usb: bulk message failed: -22 (1/0) [ 288.621588][ T6652] dvb-usb: error while querying for an remote control event. [ 288.728283][T14020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.738940][T14020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.785894][ T6652] dvb-usb: bulk message failed: -22 (1/0) [ 288.791662][ T6652] dvb-usb: error while querying for an remote control event. [ 288.956948][ T6652] dvb-usb: bulk message failed: -22 (1/0) [ 288.962734][ T6652] dvb-usb: error while querying for an remote control event. [ 289.125798][ T6652] dvb-usb: bulk message failed: -22 (1/0) [ 289.132185][ T6652] dvb-usb: error while querying for an remote control event. [ 289.133483][T14025] /dev/rnullb0: Can't open blockdev [ 289.151104][T14025] /dev/rnullb0: Can't open blockdev [ 289.296067][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 289.308406][ T984] dvb-usb: error while querying for an remote control event. [ 289.486182][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 289.491964][ T984] dvb-usb: error while querying for an remote control event. [ 289.501106][ T6652] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 289.668914][ T6652] usb 4-1: config 0 has too many interfaces: 132, using maximum allowed: 32 [ 289.687305][ T6652] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 132 [ 289.696475][ T981] dvb-usb: bulk message failed: -22 (1/0) [ 289.702258][ T981] dvb-usb: error while querying for an remote control event. [ 289.725659][ T6652] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 289.755865][ T6652] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 289.775767][ T6652] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 289.797302][ T6652] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 289.806709][ T6652] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.814723][ T6652] usb 4-1: Product: syz [ 289.825878][ T6652] usb 4-1: Manufacturer: syz [ 289.830516][ T6652] usb 4-1: SerialNumber: syz [ 289.849361][ T6652] usb 4-1: config 0 descriptor?? [ 289.867768][ T6652] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 289.907245][ T6652] dvb-usb: bulk message failed: -22 (1/0) [ 289.913037][ T6652] dvb-usb: error while querying for an remote control event. [ 290.069211][ T6652] usb 4-1: USB disconnect, device number 60 [ 290.090309][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 290.097920][ T984] dvb-usb: error while querying for an remote control event. [ 290.256098][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 290.262336][ T984] dvb-usb: error while querying for an remote control event. [ 290.425757][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 290.433819][ T984] dvb-usb: error while querying for an remote control event. [ 290.608227][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 290.628361][ T984] dvb-usb: error while querying for an remote control event. [ 290.797830][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 290.808079][ T984] dvb-usb: error while querying for an remote control event. [ 290.975077][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1791'. [ 290.986165][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 290.992000][ T984] dvb-usb: error while querying for an remote control event. [ 291.003330][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1791'. [ 291.017600][T14110] /dev/rnullb0: Can't open blockdev [ 291.165833][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 291.171614][ T984] dvb-usb: error while querying for an remote control event. [ 291.336581][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 291.342443][ T984] dvb-usb: error while querying for an remote control event. [ 291.505760][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 291.520105][ T984] dvb-usb: error while querying for an remote control event. [ 291.537278][T14142] 9pnet: Found fid 0 not clunked [ 291.685721][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 291.691754][ T984] dvb-usb: error while querying for an remote control event. [ 291.855957][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 291.863721][ T984] dvb-usb: error while querying for an remote control event. [ 291.909818][T14146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.923019][T14146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.046075][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 292.052901][ T984] dvb-usb: error while querying for an remote control event. [ 292.227680][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 292.242458][ T984] dvb-usb: error while querying for an remote control event. [ 292.405988][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 292.420657][ T984] dvb-usb: error while querying for an remote control event. [ 292.561585][T14161] /dev/rnullb0: Can't open blockdev [ 292.586495][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 292.592669][ T984] dvb-usb: error while querying for an remote control event. [ 292.756113][ T6652] dvb-usb: bulk message failed: -22 (1/0) [ 292.761962][ T6652] dvb-usb: error while querying for an remote control event. [ 292.896652][ T984] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 292.925756][ T6652] dvb-usb: bulk message failed: -22 (1/0) [ 292.931608][ T6652] dvb-usb: error while querying for an remote control event. [ 293.035833][ T984] usb 5-1: device descriptor read/64, error -71 [ 293.105897][ T6652] dvb-usb: bulk message failed: -22 (1/0) [ 293.111663][ T6652] dvb-usb: error while querying for an remote control event. [ 293.235931][ T6070] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 293.276336][ T6652] dvb-usb: bulk message failed: -22 (1/0) [ 293.282136][ T984] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 293.289832][ T6652] dvb-usb: error while querying for an remote control event. [ 293.388957][ T6070] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 293.398203][ T6070] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.406275][ T6070] usb 4-1: Product: syz [ 293.410438][ T6070] usb 4-1: Manufacturer: syz [ 293.415021][ T6070] usb 4-1: SerialNumber: syz [ 293.423770][ T6070] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 293.426322][ T984] usb 5-1: device descriptor read/64, error -71 [ 293.438722][ T1214] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 293.455828][ T6652] dvb-usb: bulk message failed: -22 (1/0) [ 293.463270][ T6652] dvb-usb: error while querying for an remote control event. [ 293.547689][ T984] usb usb5-port1: attempt power cycle [ 293.625795][ T6652] dvb-usb: bulk message failed: -22 (1/0) [ 293.631551][ T6652] dvb-usb: error while querying for an remote control event. [ 293.796492][ T6652] dvb-usb: bulk message failed: -22 (1/0) [ 293.802286][ T6652] dvb-usb: error while querying for an remote control event. [ 293.855575][ T6652] usb 4-1: USB disconnect, device number 61 [ 293.885854][ T984] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 293.907487][ T984] usb 5-1: device descriptor read/8, error -71 [ 293.965885][ T5863] dvb-usb: bulk message failed: -22 (1/0) [ 293.971635][ T5863] dvb-usb: error while querying for an remote control event. [ 294.136396][ T5863] dvb-usb: bulk message failed: -22 (1/0) [ 294.142187][ T5863] dvb-usb: error while querying for an remote control event. [ 294.149940][ T984] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 294.176287][ T984] usb 5-1: device descriptor read/8, error -71 [ 294.287518][ T984] usb usb5-port1: unable to enumerate USB device [ 294.315716][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 294.321496][ T984] dvb-usb: error while querying for an remote control event. [ 294.485901][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 294.491734][ T984] dvb-usb: error while querying for an remote control event. [ 294.515734][ T1214] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 294.522749][ T1214] ath9k_htc: Failed to initialize the device [ 294.532770][ T6652] usb 4-1: ath9k_htc: USB layer deinitialized [ 294.655978][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 294.662076][ T984] dvb-usb: error while querying for an remote control event. [ 294.809751][T14241] /dev/rnullb0: Can't open blockdev [ 294.817885][T14241] binder: BINDER_SET_CONTEXT_MGR already set [ 294.823902][T14241] binder: 14240:14241 ioctl 4018620d 200000000240 returned -16 [ 294.825874][ T6652] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 294.840376][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 294.844411][T14242] binder: 14240:14242 ioctl c0306201 200000000080 returned -14 [ 294.849254][ T984] dvb-usb: error while querying for an remote control event. [ 294.857045][T14242] binder: BINDER_SET_CONTEXT_MGR already set [ 294.868359][T14242] binder: 14240:14242 ioctl 4018620d 200000000040 returned -16 [ 294.989924][T14254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.998762][T14254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.008626][ T6652] usb 4-1: config 0 has too many interfaces: 132, using maximum allowed: 32 [ 295.017622][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 295.022508][T14254] /dev/rnullb0: Can't open blockdev [ 295.023376][ T984] dvb-usb: error while querying for an remote control event. [ 295.023413][ T6652] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 132 [ 295.045319][ T6652] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 295.057441][ T6652] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 295.068825][ T6652] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 295.080195][ T6652] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 295.089329][ T6652] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.098139][ T6652] usb 4-1: Product: syz [ 295.102327][ T6652] usb 4-1: Manufacturer: syz [ 295.106968][ T6652] usb 4-1: SerialNumber: syz [ 295.112864][ T6652] usb 4-1: config 0 descriptor?? [ 295.120555][ T6652] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 295.176293][ T6652] dvb-usb: bulk message failed: -22 (1/0) [ 295.182079][ T6652] dvb-usb: error while querying for an remote control event. [ 295.325452][ T6652] usb 4-1: USB disconnect, device number 62 [ 295.345851][ T981] dvb-usb: bulk message failed: -22 (1/0) [ 295.351643][ T981] dvb-usb: error while querying for an remote control event. [ 295.525927][ T981] dvb-usb: bulk message failed: -22 (1/0) [ 295.532824][ T981] dvb-usb: error while querying for an remote control event. [ 295.560657][T14269] /dev/rnullb0: Can't open blockdev [ 295.600355][T14272] netlink: 'syz.2.1816': attribute type 4 has an invalid length. [ 295.619537][T14272] netlink: 'syz.2.1816': attribute type 4 has an invalid length. [ 295.633807][T14272] /dev/rnullb0: Can't open blockdev [ 295.700536][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 295.707306][ T984] dvb-usb: error while querying for an remote control event. [ 295.865776][ T6652] dvb-usb: bulk message failed: -22 (1/0) [ 295.871562][ T6652] dvb-usb: error while querying for an remote control event. [ 296.047081][ T6652] dvb-usb: bulk message failed: -22 (1/0) [ 296.053026][ T6652] dvb-usb: error while querying for an remote control event. [ 296.217089][ T981] dvb-usb: bulk message failed: -22 (1/0) [ 296.222855][ T981] dvb-usb: error while querying for an remote control event. [ 296.325724][ T1214] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 296.386021][ T6652] dvb-usb: bulk message failed: -22 (1/0) [ 296.391826][ T6652] dvb-usb: error while querying for an remote control event. [ 296.499236][ T1214] usb 4-1: unable to get BOS descriptor or descriptor too short [ 296.508676][ T1214] usb 4-1: not running at top speed; connect to a high speed hub [ 296.516852][ T1214] usb 4-1: no configurations [ 296.521595][ T1214] usb 4-1: can't read configurations, error -22 [ 296.557188][ T6652] dvb-usb: bulk message failed: -22 (1/0) [ 296.564507][ T6652] dvb-usb: error while querying for an remote control event. [ 296.655746][ T1214] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 296.727779][T14331] /dev/rnullb0: Can't open blockdev [ 296.735887][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 296.741645][ T984] dvb-usb: error while querying for an remote control event. [ 296.817893][ T1214] usb 4-1: unable to get BOS descriptor or descriptor too short [ 296.826323][ T1214] usb 4-1: not running at top speed; connect to a high speed hub [ 296.834117][ T1214] usb 4-1: no configurations [ 296.845800][ T1214] usb 4-1: can't read configurations, error -22 [ 296.862475][ T1214] usb usb4-port1: attempt power cycle [ 296.895837][ T6652] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 296.905770][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 296.911893][ T984] dvb-usb: error while querying for an remote control event. [ 297.049300][ T6652] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 8 [ 297.061022][ T6652] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 297.075317][ T6652] usb 5-1: config 1 interface 0 has no altsetting 0 [ 297.085010][ T6652] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 297.094373][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 297.103323][ T984] dvb-usb: error while querying for an remote control event. [ 297.112164][ T6652] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.121301][ T6652] usb 5-1: Product: syz [ 297.125552][ T6652] usb 5-1: Manufacturer: 倊 [ 297.130587][ T6652] usb 5-1: SerialNumber: syz [ 297.141682][T14325] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 297.163687][T14325] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 297.215871][ T1214] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 297.237697][T14367] /dev/rnullb0: Can't open blockdev [ 297.250397][ T1214] usb 4-1: unable to get BOS descriptor or descriptor too short [ 297.266115][ T1214] usb 4-1: not running at top speed; connect to a high speed hub [ 297.275778][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 297.281549][ T984] dvb-usb: error while querying for an remote control event. [ 297.282434][ T1214] usb 4-1: no configurations [ 297.293663][ T1214] usb 4-1: can't read configurations, error -22 [ 297.392780][ T6652] usb 5-1: USB disconnect, device number 18 [ 297.425951][ T1214] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 297.465825][ T5863] dvb-usb: bulk message failed: -22 (1/0) [ 297.471618][ T5863] dvb-usb: error while querying for an remote control event. [ 297.486117][ T1214] usb 4-1: unable to get BOS descriptor or descriptor too short [ 297.563242][ T1214] usb 4-1: not running at top speed; connect to a high speed hub [ 297.575798][ T1214] usb 4-1: no configurations [ 297.580423][ T1214] usb 4-1: can't read configurations, error -22 [ 297.606032][ T1214] usb usb4-port1: unable to enumerate USB device [ 297.645712][ T6652] dvb-usb: bulk message failed: -22 (1/0) [ 297.657162][ T6652] dvb-usb: error while querying for an remote control event. [ 297.718029][T14387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.728070][T14387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.826239][ T6652] dvb-usb: bulk message failed: -22 (1/0) [ 297.832406][ T6652] dvb-usb: error while querying for an remote control event. [ 297.995803][ T5863] dvb-usb: bulk message failed: -22 (1/0) [ 298.003013][ T5863] dvb-usb: error while querying for an remote control event. [ 298.166960][ T5863] dvb-usb: bulk message failed: -22 (1/0) [ 298.172835][ T5863] dvb-usb: error while querying for an remote control event. [ 298.335717][ T5863] dvb-usb: bulk message failed: -22 (1/0) [ 298.343048][ T5863] dvb-usb: error while querying for an remote control event. [ 298.382203][T14415] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 298.506632][ T6652] dvb-usb: bulk message failed: -22 (1/0) [ 298.512415][ T6652] dvb-usb: error while querying for an remote control event. [ 298.675818][ T6652] dvb-usb: bulk message failed: -22 (1/0) [ 298.681612][ T6652] dvb-usb: error while querying for an remote control event. [ 298.810051][T14425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.819973][T14425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.828637][T14425] /dev/rnullb0: Can't open blockdev [ 298.834046][T14431] /dev/rnullb0: Can't open blockdev [ 298.845982][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 298.852520][ T984] dvb-usb: error while querying for an remote control event. [ 299.015760][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 299.021548][ T984] dvb-usb: error while querying for an remote control event. [ 299.045724][ T6652] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 299.153747][T14439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1835'. [ 299.196951][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 299.202830][ T984] dvb-usb: error while querying for an remote control event. [ 299.214079][ T6652] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.230787][ T6652] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 299.242834][ T6652] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 299.258232][ T6652] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.272483][ T6652] usb 5-1: Product: syz [ 299.278654][ T6652] usb 5-1: Manufacturer: syz [ 299.284795][ T6652] usb 5-1: SerialNumber: syz [ 299.547004][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 299.552800][ T984] dvb-usb: error while querying for an remote control event. [ 299.699847][T14461] /dev/rnullb0: Can't open blockdev [ 299.725982][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 299.731759][ T984] dvb-usb: error while querying for an remote control event. [ 299.772272][ T6652] usb 5-1: 0:2 : does not exist [ 299.789378][ T6652] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 299.805022][T14467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.817792][T14467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.830978][ T6652] usb 5-1: USB disconnect, device number 19 [ 299.868613][ T7270] udevd[7270]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.915914][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 299.921885][ T984] dvb-usb: error while querying for an remote control event. [ 300.085739][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 300.091544][ T984] dvb-usb: error while querying for an remote control event. [ 300.255796][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 300.261607][ T984] dvb-usb: error while querying for an remote control event. [ 300.425746][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 300.431539][ T984] dvb-usb: error while querying for an remote control event. [ 300.615844][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 300.622212][ T984] dvb-usb: error while querying for an remote control event. [ 300.772794][T14518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.782938][T14518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.795972][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 300.804506][ T984] dvb-usb: error while querying for an remote control event. [ 300.985797][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 300.991815][ T984] dvb-usb: error while querying for an remote control event. [ 301.158818][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 301.164781][ T984] dvb-usb: error while querying for an remote control event. [ 301.326063][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 301.335870][ T984] dvb-usb: error while querying for an remote control event. [ 301.495988][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 301.508232][ T984] dvb-usb: error while querying for an remote control event. [ 301.597914][T14533] /dev/rnullb0: Can't open blockdev [ 301.669385][T14539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.680650][T14539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.886259][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 301.893110][ T984] dvb-usb: error while querying for an remote control event. [ 302.062213][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 302.071979][ T984] dvb-usb: error while querying for an remote control event. [ 302.244762][ T984] dvb-usb: bulk message failed: -22 (1/0) [ 302.250625][ T984] dvb-usb: error while querying for an remote control event. [ 302.425976][ T5863] dvb-usb: bulk message failed: -22 (1/0) [ 302.431941][ T5863] dvb-usb: error while querying for an remote control event. [ 302.523080][T14577] /dev/rnullb0: Can't open blockdev [ 302.596198][ T5863] dvb-usb: bulk message failed: -22 (1/0) [ 302.602059][ T5863] dvb-usb: error while querying for an remote control event. [ 302.798485][ T5863] dvb-usb: bulk message failed: -22 (1/0) [ 302.818361][ T5863] dvb-usb: error while querying for an remote control event. [ 302.826516][ T984] usb 2-1: USB disconnect, device number 25 [ 302.850245][ T984] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 302.917583][ T5873] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 302.924927][ T5873] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 302.933441][ T5873] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 302.943972][ T5873] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 302.952641][ T5873] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 303.065776][ T1214] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 303.235923][T14607] chnl_net:caif_netlink_parms(): no params data found [ 303.237119][ T1214] usb 5-1: config 0 has too many interfaces: 132, using maximum allowed: 32 [ 303.272241][ T1214] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 132 [ 303.282375][ T1214] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 303.297113][ T1214] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 303.308571][ T1214] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 303.322737][ T1214] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 303.372091][T14607] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.389346][ T1214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.406883][T14607] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.422249][ T1214] usb 5-1: Product: syz [ 303.435238][ T1214] usb 5-1: Manufacturer: syz [ 303.443103][T14607] bridge_slave_0: entered allmulticast mode [ 303.453939][T14771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.469727][ T1214] usb 5-1: SerialNumber: syz [ 303.484164][T14607] bridge_slave_0: entered promiscuous mode [ 303.495179][ T1214] usb 5-1: config 0 descriptor?? [ 303.508295][T14771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.525534][T14607] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.550739][T14607] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.568619][ T1214] iguanair 5-1:0.0: probe with driver iguanair failed with error -12 [ 303.587400][T14607] bridge_slave_1: entered allmulticast mode [ 303.609505][T14607] bridge_slave_1: entered promiscuous mode [ 303.676906][T14607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.688611][T14607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.739253][T14607] team0: Port device team_slave_0 added [ 303.741679][T14834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1863'. [ 303.759279][T14607] team0: Port device team_slave_1 added [ 303.802005][T14607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.802546][ T9] usb 5-1: USB disconnect, device number 20 [ 303.824521][T14607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.852362][T14607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.853924][T14875] syz.3.1863 (14875): /proc/14830/oom_adj is deprecated, please use /proc/14830/oom_score_adj instead. [ 303.865893][T14607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.882456][T14607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.912983][T14607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.976935][T14607] hsr_slave_0: entered promiscuous mode [ 303.983310][T14607] hsr_slave_1: entered promiscuous mode [ 303.990952][T14607] debugfs: 'hsr0' already exists in 'hsr' [ 303.997637][T14607] Cannot create hsr debugfs directory [ 304.018636][T14889] /dev/rnullb0: Can't open blockdev [ 304.144806][T14607] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 304.155138][T14607] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 304.165431][T14607] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 304.175426][T14607] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 304.232578][T14607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.249132][T14607] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.259365][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.266611][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.278425][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.285505][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.459567][T14607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.663371][T14607] veth0_vlan: entered promiscuous mode [ 304.673722][T14607] veth1_vlan: entered promiscuous mode [ 304.696843][T14607] veth0_macvtap: entered promiscuous mode [ 304.706369][T14607] veth1_macvtap: entered promiscuous mode [ 304.731987][T14607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.744422][T14607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.769163][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.774459][T15017] /dev/rnullb0: Can't open blockdev [ 304.780885][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.804187][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.814436][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.886827][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.902379][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.954880][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.965084][T15043] batadv_slave_1: entered promiscuous mode [ 304.973239][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.987947][T15040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.998327][T15040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.006000][ T5873] Bluetooth: hci5: command tx timeout [ 305.011722][T15038] batadv_slave_1: left promiscuous mode [ 305.093100][T15056] netlink: 'syz.5.1874': attribute type 19 has an invalid length. [ 305.102093][T15056] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1874'. [ 305.192563][T15062] /dev/rnullb0: Can't open blockdev [ 305.444961][T15090] /dev/rnullb0: Can't open blockdev [ 305.456414][T15090] /dev/rnullb0: Can't open blockdev [ 305.472232][T15090] /dev/rnullb0: Can't open blockdev [ 305.478741][T15090] /dev/rnullb0: Can't open blockdev [ 305.484864][T15090] /dev/rnullb0: Can't open blockdev [ 305.491861][T15090] /dev/rnullb0: Can't open blockdev [ 305.498557][T15090] /dev/rnullb0: Can't open blockdev [ 305.505153][T15090] /dev/rnullb0: Can't open blockdev [ 305.512185][T15090] /dev/rnullb0: Can't open blockdev [ 305.512594][T15093] /dev/rnullb0: Can't open blockdev [ 305.518776][T15090] /dev/rnullb0: Can't open blockdev [ 305.529016][T15090] /dev/rnullb0: Can't open blockdev [ 305.534984][T15090] /dev/rnullb0: Can't open blockdev [ 305.560048][T15090] /dev/rnullb0: Can't open blockdev [ 305.572443][T15090] /dev/rnullb0: Can't open blockdev [ 305.583007][T15090] /dev/rnullb0: Can't open blockdev [ 305.603683][T15090] /dev/rnullb0: Can't open blockdev [ 305.624307][T15090] /dev/rnullb0: Can't open blockdev [ 305.653491][T15090] /dev/rnullb0: Can't open blockdev [ 305.676275][T15090] /dev/rnullb0: Can't open blockdev [ 305.684172][T15090] /dev/rnullb0: Can't open blockdev [ 305.690786][T15090] /dev/rnullb0: Can't open blockdev [ 305.697143][T15090] /dev/rnullb0: Can't open blockdev [ 305.703117][T15090] /dev/rnullb0: Can't open blockdev [ 305.709176][T15090] /dev/rnullb0: Can't open blockdev [ 305.715091][T15090] /dev/rnullb0: Can't open blockdev [ 305.750174][T15090] /dev/rnullb0: Can't open blockdev [ 305.763607][T15090] /dev/rnullb0: Can't open blockdev [ 305.789849][T15090] /dev/rnullb0: Can't open blockdev [ 305.808911][T15090] /dev/rnullb0: Can't open blockdev [ 305.814651][T15090] /dev/rnullb0: Can't open blockdev [ 305.853483][T15090] /dev/rnullb0: Can't open blockdev [ 305.861215][T15090] /dev/rnullb0: Can't open blockdev [ 305.867471][T15090] /dev/rnullb0: Can't open blockdev [ 306.026373][T15109] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 306.431651][T15146] netlink: 'syz.2.1892': attribute type 4 has an invalid length. [ 306.484911][T15146] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.507392][T15146] I/O error, dev loop2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.518816][T15146] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 306.530227][T15146] I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.576051][T15146] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 306.596990][T15146] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.632381][T15146] I/O error, dev loop2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.656907][T15146] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 306.685338][T15146] I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.711247][T15146] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 306.736726][T15146] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.759186][T15146] I/O error, dev loop2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.786539][T15146] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 306.803698][T15146] I/O error, dev loop2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.823651][T15154] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1894'. [ 306.839619][T15146] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 306.872716][T15146] I/O error, dev loop2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.914340][T15146] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 306.947882][T15146] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 306.997479][T15146] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 307.075774][ T5873] Bluetooth: hci5: command tx timeout [ 307.375952][ T6652] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 307.465905][ T5900] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 307.537825][ T6652] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.549419][ T6652] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.555764][ T1214] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 307.560076][ T6652] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 307.581406][ T6652] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.591427][ T6652] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.600889][ T6652] usb 5-1: config 0 descriptor?? [ 307.655703][ T5900] usb 6-1: Using ep0 maxpacket: 8 [ 307.662941][ T5900] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 307.674467][ T5900] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 307.684572][ T5900] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 307.694857][ T5900] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.708284][ T1214] usb 4-1: device descriptor read/64, error -71 [ 307.714569][ T5900] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 307.723975][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.822573][ T6652] usbhid 5-1:0.0: can't add hid device: -71 [ 307.831486][ T6652] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 307.841816][ T6652] usb 5-1: USB disconnect, device number 21 [ 307.858778][T15219] /dev/rnullb0: Can't open blockdev [ 307.939284][ T5900] usb 6-1: GET_CAPABILITIES returned 0 [ 307.944823][ T5900] usbtmc 6-1:16.0: can't read capabilities [ 307.951317][ T1214] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 308.095747][ T1214] usb 4-1: device descriptor read/64, error -71 [ 308.102706][T15248] /dev/rnullb0: Can't open blockdev [ 308.208115][ T1214] usb usb4-port1: attempt power cycle [ 308.332781][ T5863] usb 6-1: USB disconnect, device number 2 [ 308.575720][ T1214] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 308.603974][ T1214] usb 4-1: device descriptor read/8, error -71 [ 308.845893][ T1214] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 308.887610][ T1214] usb 4-1: device descriptor read/8, error -71 [ 308.977390][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1918'. [ 308.989136][ T5873] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 308.999292][ T5873] Bluetooth: Wrong link type (-22) [ 309.006050][ T1214] usb usb4-port1: unable to enumerate USB device [ 309.155805][ T5873] Bluetooth: hci5: command tx timeout [ 309.300686][T15349] binder: 15348:15349 ioctl c018620c 0 returned -14 [ 309.620088][T15380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1932'. [ 309.791271][ T49] Bluetooth: hci6: Frame reassembly failed (-84) [ 309.869637][T15403] fuse: Unknown parameter '00000000000000000003000000000000000000000000000000000000000000000000000000000000000' [ 309.944757][T15403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.960373][T15403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.963416][T15397] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 310.340914][T15417] binder: 15416:15417 ioctl c018620c 200000000280 returned -1 [ 310.384463][T15419] FAULT_INJECTION: forcing a failure. [ 310.384463][T15419] name failslab, interval 1, probability 0, space 0, times 0 [ 310.397760][T15419] CPU: 1 UID: 0 PID: 15419 Comm: syz.3.1939 Not tainted syzkaller #0 PREEMPT(full) [ 310.397786][T15419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 310.397810][T15419] Call Trace: [ 310.397818][T15419] [ 310.397825][T15419] dump_stack_lvl+0x189/0x250 [ 310.397858][T15419] ? __pfx____ratelimit+0x10/0x10 [ 310.397880][T15419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.397907][T15419] ? __pfx__printk+0x10/0x10 [ 310.397935][T15419] ? __pfx___might_resched+0x10/0x10 [ 310.397956][T15419] ? lock_acquire+0x5f/0x360 [ 310.397974][T15419] should_fail_ex+0x414/0x560 [ 310.398001][T15419] should_failslab+0xa8/0x100 [ 310.398019][T15419] __kmalloc_noprof+0xcb/0x4b0 [ 310.398044][T15419] ? kfree+0x4d/0x440 [ 310.398067][T15419] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 310.398094][T15419] tomoyo_realpath_from_path+0xe3/0x5d0 [ 310.398120][T15419] ? tomoyo_domain+0xd9/0x130 [ 310.398146][T15419] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 310.398166][T15419] tomoyo_path_number_perm+0x1e8/0x5a0 [ 310.398185][T15419] ? lock_release+0x4b/0x3e0 [ 310.398202][T15419] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 310.398223][T15419] ? rcu_is_watching+0x15/0xb0 [ 310.398243][T15419] ? lock_release+0x4b/0x3e0 [ 310.398258][T15419] ? vfs_write+0x956/0xb30 [ 310.398278][T15419] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 310.398314][T15419] ? __fget_files+0x3a0/0x420 [ 310.398334][T15419] ? __fget_files+0x2a/0x420 [ 310.398356][T15419] security_file_ioctl+0xcb/0x2d0 [ 310.398376][T15419] __se_sys_ioctl+0x47/0x170 [ 310.398404][T15419] do_syscall_64+0xfa/0xfa0 [ 310.398428][T15419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.398446][T15419] ? clear_bhb_loop+0x60/0xb0 [ 310.398466][T15419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.398484][T15419] RIP: 0033:0x7f047b78ebe9 [ 310.398504][T15419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.398521][T15419] RSP: 002b:00007f047c595038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.398540][T15419] RAX: ffffffffffffffda RBX: 00007f047b9b5fa0 RCX: 00007f047b78ebe9 [ 310.398553][T15419] RDX: 0000200000000280 RSI: 00000000c018620c RDI: 0000000000000003 [ 310.398565][T15419] RBP: 00007f047c595090 R08: 0000000000000000 R09: 0000000000000000 [ 310.398575][T15419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.398586][T15419] R13: 00007f047b9b6038 R14: 00007f047b9b5fa0 R15: 00007ffda12ef6f8 [ 310.398606][T15419] [ 310.398635][T15419] ERROR: Out of memory at tomoyo_realpath_from_path. [ 310.598042][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.664199][T15419] binder: 15418:15419 ioctl c018620c 200000000280 returned -1 [ 310.760658][T15445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.778372][T15445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.789307][T15447] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 310.792178][T15445] fuse: Unknown parameter 'grou00000000000000000000' [ 310.798486][T15447] /dev/rnullb0: Can't open blockdev [ 311.235759][ T5869] Bluetooth: hci5: command tx timeout [ 311.652327][T15470] binder: 15469:15470 ioctl c018620c 200000000280 returned -1 [ 311.762773][T15489] FAULT_INJECTION: forcing a failure. [ 311.762773][T15489] name failslab, interval 1, probability 0, space 0, times 0 [ 311.777962][T15489] CPU: 1 UID: 0 PID: 15489 Comm: syz.3.1953 Not tainted syzkaller #0 PREEMPT(full) [ 311.777990][T15489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 311.778001][T15489] Call Trace: [ 311.778008][T15489] [ 311.778016][T15489] dump_stack_lvl+0x189/0x250 [ 311.778062][T15489] ? __pfx____ratelimit+0x10/0x10 [ 311.778086][T15489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.778113][T15489] ? __pfx__printk+0x10/0x10 [ 311.778137][T15489] ? read_seqbegin+0x1ac/0x250 [ 311.778165][T15489] ? __pfx___might_resched+0x10/0x10 [ 311.778185][T15489] ? lock_acquire+0x5f/0x360 [ 311.778203][T15489] should_fail_ex+0x414/0x560 [ 311.778228][T15489] should_failslab+0xa8/0x100 [ 311.778245][T15489] __kmalloc_noprof+0xcb/0x4b0 [ 311.778275][T15489] ? tomoyo_encode+0x28b/0x550 [ 311.778300][T15489] tomoyo_encode+0x28b/0x550 [ 311.778326][T15489] tomoyo_realpath_from_path+0x58d/0x5d0 [ 311.778355][T15489] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 311.778375][T15489] tomoyo_path_number_perm+0x1e8/0x5a0 [ 311.778394][T15489] ? lock_release+0x4b/0x3e0 [ 311.778410][T15489] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 311.778432][T15489] ? rcu_is_watching+0x15/0xb0 [ 311.778452][T15489] ? lock_release+0x4b/0x3e0 [ 311.778467][T15489] ? vfs_write+0x956/0xb30 [ 311.778487][T15489] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 311.778551][T15489] ? __fget_files+0x3a0/0x420 [ 311.778572][T15489] ? __fget_files+0x2a/0x420 [ 311.778596][T15489] security_file_ioctl+0xcb/0x2d0 [ 311.778616][T15489] __se_sys_ioctl+0x47/0x170 [ 311.778647][T15489] do_syscall_64+0xfa/0xfa0 [ 311.778673][T15489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.778692][T15489] ? clear_bhb_loop+0x60/0xb0 [ 311.778713][T15489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.778732][T15489] RIP: 0033:0x7f047b78ebe9 [ 311.778748][T15489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.778765][T15489] RSP: 002b:00007f047c595038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.778797][T15489] RAX: ffffffffffffffda RBX: 00007f047b9b5fa0 RCX: 00007f047b78ebe9 [ 311.778810][T15489] RDX: 0000200000000280 RSI: 00000000c018620c RDI: 0000000000000003 [ 311.778821][T15489] RBP: 00007f047c595090 R08: 0000000000000000 R09: 0000000000000000 [ 311.778831][T15489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.778842][T15489] R13: 00007f047b9b6038 R14: 00007f047b9b5fa0 R15: 00007ffda12ef6f8 [ 311.778863][T15489] [ 311.779453][T15489] ERROR: Out of memory at tomoyo_realpath_from_path. [ 311.806898][ T5873] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 311.827928][ T5869] Bluetooth: hci6: command 0x1003 tx timeout [ 311.832071][T15489] binder: 15487:15489 ioctl c018620c 200000000280 returned -1 [ 312.105740][ T981] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 312.258246][ T981] usb 6-1: config 0 has an invalid interface number: 222 but max is 0 [ 312.271666][ T981] usb 6-1: config 0 has no interface number 0 [ 312.280208][ T981] usb 6-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 312.299883][ T981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.314102][ T981] usb 6-1: Product: syz [ 312.330297][ T981] usb 6-1: Manufacturer: syz [ 312.335057][ T981] usb 6-1: SerialNumber: syz [ 312.346068][ T981] usb 6-1: config 0 descriptor?? [ 312.426317][ T5863] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 312.456198][T15527] syzkaller1: entered promiscuous mode [ 312.461713][T15527] syzkaller1: entered allmulticast mode [ 312.554147][T15492] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 312.562151][T15492] /dev/rnullb0: Can't open blockdev [ 312.585748][ T5863] usb 5-1: Using ep0 maxpacket: 16 [ 312.596448][T15492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.623005][ T5863] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 312.637062][T15492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.638103][ T5863] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 312.659396][ T5863] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.670748][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.683770][ T5863] usb 5-1: Manufacturer: 䁉뉂僒亝哃츠脎曷삔㬻㡨쁰儜ক㷎։ὒꪃ뺽斠ဖ㒂覅힙誴젧꩞꒼髓띺ﹰ칙ퟬ锂뫠ᰠ澻蒞佶ੲ蹹벁埪鯮Յ⻞ᴊޑ嗌┄琪緮靎ﱯ⢕史萅쩇嬎擏꽯쐖ꛊ鷫豆ꧼ⪭⑆餬몉ꑷ㺟줥Ṇ唩Ụ扸莘ᵜ鈔䔇 [ 312.734072][ T5863] usb 5-1: SerialNumber: Т [ 312.752544][ T6652] usb 6-1: USB disconnect, device number 3 [ 313.020848][T15560] /dev/rnullb0: Can't open blockdev [ 313.122491][T15565] FAULT_INJECTION: forcing a failure. [ 313.122491][T15565] name failslab, interval 1, probability 0, space 0, times 0 [ 313.142168][T15565] CPU: 1 UID: 0 PID: 15565 Comm: syz.5.1965 Not tainted syzkaller #0 PREEMPT(full) [ 313.142197][T15565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 313.142209][T15565] Call Trace: [ 313.142216][T15565] [ 313.142224][T15565] dump_stack_lvl+0x189/0x250 [ 313.142263][T15565] ? __pfx____ratelimit+0x10/0x10 [ 313.142289][T15565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.142319][T15565] ? __pfx__printk+0x10/0x10 [ 313.142349][T15565] ? fs_reclaim_acquire+0x7d/0x100 [ 313.142369][T15565] ? rcu_is_watching+0x15/0xb0 [ 313.142392][T15565] ? __pfx___might_resched+0x10/0x10 [ 313.142412][T15565] ? lock_acquire+0x5f/0x360 [ 313.142432][T15565] should_fail_ex+0x414/0x560 [ 313.142462][T15565] should_failslab+0xa8/0x100 [ 313.142493][T15565] __kmalloc_cache_noprof+0x70/0x3a0 [ 313.142523][T15565] ? binder_get_thread+0x1c8/0x6d0 [ 313.142553][T15565] binder_get_thread+0x1c8/0x6d0 [ 313.142584][T15565] binder_ioctl+0x273/0x19c0 [ 313.142612][T15565] ? lock_release+0x4b/0x3e0 [ 313.142629][T15565] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 313.142651][T15565] ? kfree+0x18e/0x440 [ 313.142687][T15565] ? do_vfs_ioctl+0xbe8/0x1430 [ 313.142705][T15565] ? __pfx_binder_ioctl+0x10/0x10 [ 313.142732][T15565] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 313.142765][T15565] ? lock_release+0x4b/0x3e0 [ 313.142782][T15565] ? vfs_write+0x956/0xb30 [ 313.142804][T15565] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 313.142853][T15565] ? __fget_files+0x3a0/0x420 [ 313.142877][T15565] ? __fget_files+0x2a/0x420 [ 313.142901][T15565] ? bpf_lsm_file_ioctl+0x9/0x20 [ 313.142936][T15565] ? __pfx_binder_ioctl+0x10/0x10 [ 313.142963][T15565] __se_sys_ioctl+0xf9/0x170 [ 313.142994][T15565] do_syscall_64+0xfa/0xfa0 [ 313.143022][T15565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.143042][T15565] ? clear_bhb_loop+0x60/0xb0 [ 313.143064][T15565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.143084][T15565] RIP: 0033:0x7fe9f0d8ebe9 [ 313.143101][T15565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.143118][T15565] RSP: 002b:00007fe9f1cc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.143140][T15565] RAX: ffffffffffffffda RBX: 00007fe9f0fb5fa0 RCX: 00007fe9f0d8ebe9 [ 313.143155][T15565] RDX: 0000200000000280 RSI: 00000000c018620c RDI: 0000000000000003 [ 313.143167][T15565] RBP: 00007fe9f1cc4090 R08: 0000000000000000 R09: 0000000000000000 [ 313.143179][T15565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.143191][T15565] R13: 00007fe9f0fb6038 R14: 00007fe9f0fb5fa0 R15: 00007ffe60e83038 [ 313.143213][T15565] [ 313.143242][T15565] binder: 15564:15565 ioctl c018620c 200000000280 returned -12 [ 313.424944][ T5863] cdc_ncm 5-1:1.0: bind() failure [ 313.433400][ T5863] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 313.440313][ T5863] cdc_ncm 5-1:1.1: bind() failure [ 313.458842][ T5863] usb 5-1: USB disconnect, device number 22 [ 313.559262][T15582] /dev/rnullb0: Can't open blockdev [ 314.000864][T15594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.061917][T15594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.285730][ T6652] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 314.385855][T15613] /dev/rnullb0: Can't open blockdev [ 314.465837][ T6652] usb 5-1: Using ep0 maxpacket: 16 [ 314.477189][ T6652] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.487793][ T6652] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 314.515358][ T6652] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 314.528570][ T6652] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.561475][T15619] /dev/rnullb0: Can't open blockdev [ 314.566821][ T6652] usb 5-1: Product: syz [ 314.576486][ T6652] usb 5-1: Manufacturer: syz [ 314.591364][ T6652] usb 5-1: SerialNumber: syz [ 314.796154][T15632] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 314.823919][ T6652] usb 5-1: 0:2 : does not exist [ 314.824411][T15632] /dev/rnullb0: Can't open blockdev [ 314.855015][T15641] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1976'. [ 314.873326][ T6652] usb 5-1: USB disconnect, device number 23 [ 314.874826][T15634] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1976'. [ 314.967980][ T7270] udevd[7270]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 315.749987][T15688] binder: 15686:15688 ioctl c018620c 200000000280 returned -1 [ 315.777832][T15688] FAULT_INJECTION: forcing a failure. [ 315.777832][T15688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.796935][T15688] CPU: 0 UID: 0 PID: 15688 Comm: syz.2.1983 Not tainted syzkaller #0 PREEMPT(full) [ 315.796963][T15688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 315.796976][T15688] Call Trace: [ 315.796984][T15688] [ 315.796992][T15688] dump_stack_lvl+0x189/0x250 [ 315.797028][T15688] ? __pfx____ratelimit+0x10/0x10 [ 315.797053][T15688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.797084][T15688] ? __pfx__printk+0x10/0x10 [ 315.797116][T15688] ? rcu_is_watching+0x15/0xb0 [ 315.797139][T15688] should_fail_ex+0x414/0x560 [ 315.797169][T15688] _copy_to_user+0x31/0xb0 [ 315.797193][T15688] simple_read_from_buffer+0xe1/0x170 [ 315.797218][T15688] proc_fail_nth_read+0x1b3/0x220 [ 315.797248][T15688] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 315.797276][T15688] ? rw_verify_area+0x2a6/0x4d0 [ 315.797295][T15688] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 315.797323][T15688] vfs_read+0x200/0xa30 [ 315.797341][T15688] ? fdget_pos+0x247/0x320 [ 315.797367][T15688] ? __pfx___mutex_lock+0x10/0x10 [ 315.797402][T15688] ? __pfx_vfs_read+0x10/0x10 [ 315.797424][T15688] ? __fget_files+0x3a0/0x420 [ 315.797446][T15688] ? __fget_files+0x2a/0x420 [ 315.797473][T15688] ksys_read+0x145/0x250 [ 315.797493][T15688] ? __pfx_ksys_read+0x10/0x10 [ 315.797514][T15688] ? rcu_is_watching+0x15/0xb0 [ 315.797537][T15688] do_syscall_64+0xfa/0xfa0 [ 315.797564][T15688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.797584][T15688] ? clear_bhb_loop+0x60/0xb0 [ 315.797606][T15688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.797625][T15688] RIP: 0033:0x7f630a58d5fc [ 315.797643][T15688] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 315.797659][T15688] RSP: 002b:00007f630b3c5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 315.797680][T15688] RAX: ffffffffffffffda RBX: 00007f630a7b5fa0 RCX: 00007f630a58d5fc [ 315.797695][T15688] RDX: 000000000000000f RSI: 00007f630b3c50a0 RDI: 0000000000000004 [ 315.797708][T15688] RBP: 00007f630b3c5090 R08: 0000000000000000 R09: 0000000000000000 [ 315.797721][T15688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.797733][T15688] R13: 00007f630a7b6038 R14: 00007f630a7b5fa0 R15: 00007ffdb6db6808 [ 315.797756][T15688] [ 316.643717][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1988'. [ 316.768578][T15720] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1990'. [ 316.778904][T15716] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1990'. [ 316.792648][T15716] binder: 15715:15716 ioctl c018620c 200000000280 returned -1 [ 316.817279][T15716] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.241566][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.250062][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.725990][ T5900] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 317.895701][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 317.906855][ T5900] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 317.922610][ T5900] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 317.943001][ T5900] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 317.965446][ T5900] usb 5-1: config 1 interface 0 has no altsetting 0 [ 317.978026][ T5900] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 317.991813][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.001876][ T5900] usb 5-1: Product: syz [ 318.009325][ T5900] usb 5-1: Manufacturer: syz [ 318.014269][ T5900] usb 5-1: SerialNumber: syz [ 318.086929][T15775] new mount options do not match the existing superblock, will be ignored [ 318.097705][T15775] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 318.109050][T15775] /dev/rnullb0: Can't open blockdev [ 318.233132][ T5900] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 24 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 318.350582][T15798] /dev/rnullb0: Can't open blockdev [ 318.477514][T15805] binder: 15804:15805 ioctl c018620c 200000000280 returned -22 [ 318.981492][T15835] binder: 15831:15835 ioctl c018620c 200000000280 returned -1 [ 319.250413][T15848] /dev/rnullb0: Can't open blockdev [ 319.289291][T15850] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 319.299862][T15852] overlayfs: failed lookup in lower (/, name='file0', err=-66): unsupported object type [ 319.349231][T15850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.358672][T15850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.513908][T15865] binder: 15864:15865 ioctl c018620c 200000000280 returned -22 [ 319.595841][ T43] usb 4-1: new low-speed USB device number 71 using dummy_hcd [ 319.596905][T15871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.614643][T15871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.630416][T15871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.640441][T15871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.682404][T15881] netlink: 'syz.2.2018': attribute type 1 has an invalid length. [ 319.690926][T15881] netlink: 'syz.2.2018': attribute type 2 has an invalid length. [ 319.735838][ T43] usb 4-1: device descriptor read/64, error -71 [ 319.844602][T15897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.857961][T15897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.975772][ T43] usb 4-1: new low-speed USB device number 72 using dummy_hcd [ 320.105770][ T43] usb 4-1: device descriptor read/64, error -71 [ 320.217355][ T43] usb usb4-port1: attempt power cycle [ 320.479129][ T5900] usb 5-1: USB disconnect, device number 24 [ 320.505519][ T5900] usblp1: removed [ 320.565955][ T43] usb 4-1: new low-speed USB device number 73 using dummy_hcd [ 320.588896][ T43] usb 4-1: device descriptor read/8, error -71 [ 320.672279][T15939] binder: 15938:15939 ioctl c018620c 200000000280 returned -22 [ 320.721246][T15945] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 320.845821][ T43] usb 4-1: new low-speed USB device number 74 using dummy_hcd [ 320.880527][ T43] usb 4-1: device descriptor read/8, error -71 [ 320.996164][ T43] usb usb4-port1: unable to enumerate USB device [ 322.410100][T15992] /dev/rnullb0: Can't open blockdev [ 322.416970][T15992] devpts: Bad value for 'max' [ 322.455072][T15995] binder: 15994:15995 ioctl c018620c 200000000280 returned -22 [ 322.499124][T15997] /dev/rnullb0: Can't open blockdev [ 324.947245][T16039] binder: 16038:16039 ioctl c018620c 200000000280 returned -22 [ 325.072662][T16045] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2048'. [ 326.495902][ T6070] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 326.599465][ T36] Bluetooth: (null): Invalid header checksum [ 326.615704][ T36] Bluetooth: (null): Invalid header checksum [ 326.645698][ T6070] usb 5-1: Using ep0 maxpacket: 32 [ 326.655591][ T6070] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.680114][ T6070] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 326.705932][ T66] Bluetooth: (null): Invalid header checksum [ 326.708705][ T6070] usb 5-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 326.738176][ T6070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.768367][ T6070] usb 5-1: config 0 descriptor?? [ 326.827926][ T1116] Bluetooth: (null): Invalid header checksum [ 326.936482][ T66] Bluetooth: (null): Invalid header checksum [ 327.046199][ T49] Bluetooth: (null): Invalid header checksum [ 327.156240][ T36] Bluetooth: (null): Invalid header checksum [ 327.268381][ T49] Bluetooth: (null): Invalid header checksum [ 327.418527][T16101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.429290][T16101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.502173][ T6070] usb 5-1: USB disconnect, device number 25 [ 328.208394][T16123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.223192][T16123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.434211][ T5873] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 328.441360][ T5873] Bluetooth: Wrong link type (-22) [ 328.446964][ T5873] Bluetooth: hci4: hardware error 0x03 [ 328.489187][T16140] /dev/rnullb0: Can't open blockdev [ 328.567642][T16150] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2064'. [ 328.595226][T16153] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2065'. [ 328.610855][T16153] /dev/rnullb0: Can't open blockdev [ 328.774002][T16164] /dev/rnullb0: Can't open blockdev [ 328.839784][ T5869] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 328.849156][ T51] Bluetooth: hci3: hardware error 0x03 [ 329.034238][T16179] ./file1: Can't lookup blockdev [ 329.848748][T16186] binder: 16185:16186 ioctl c018620c 200000000280 returned -22 [ 330.057498][T16191] /dev/rnullb0: Can't open blockdev [ 330.375244][T16208] /dev/rnullb0: Can't open blockdev [ 330.475091][T16211] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 330.516529][ T5873] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 330.989693][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 332.113903][T16243] XFS (nullb0): Invalid superblock magic number [ 332.140816][T16259] XFS (nullb0): Invalid superblock magic number [ 332.156898][ T5900] usb 4-1: new low-speed USB device number 75 using dummy_hcd [ 332.325863][ T5900] usb 4-1: Invalid ep0 maxpacket: 16 [ 332.465786][ T5900] usb 4-1: new low-speed USB device number 76 using dummy_hcd [ 332.473885][T16285] binder: 16284:16285 ioctl c018620c 200000000280 returned -22 [ 332.571599][ T30] audit: type=1326 audit(1756421220.446:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16290 comm="syz.4.2099" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc800f8ebe9 code=0x0 [ 332.625834][ T5900] usb 4-1: Invalid ep0 maxpacket: 16 [ 332.632381][ T5900] usb usb4-port1: attempt power cycle [ 332.865924][ T1214] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 332.995883][ T5900] usb 4-1: new low-speed USB device number 77 using dummy_hcd [ 333.016369][ T5900] usb 4-1: Invalid ep0 maxpacket: 16 [ 333.035725][ T1214] usb 5-1: Using ep0 maxpacket: 32 [ 333.042858][ T1214] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 333.054438][ T1214] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 333.068302][ T1214] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 333.077519][ T1214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.085796][ T1214] usb 5-1: Product: 〙 [ 333.090104][ T1214] usb 5-1: Manufacturer: ࠓ [ 333.094722][ T1214] usb 5-1: SerialNumber: syz [ 333.155770][ T5900] usb 4-1: new low-speed USB device number 78 using dummy_hcd [ 333.187560][ T5900] usb 4-1: Invalid ep0 maxpacket: 16 [ 333.193076][ T5900] usb usb4-port1: unable to enumerate USB device [ 333.505935][T16291] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 333.513199][T16291] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 333.689423][T16315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.698483][T16315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.871133][ T1214] cdc_ncm 5-1:1.0: bind() failure [ 333.895932][ T1214] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 333.907596][ T1214] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 333.927179][ T1214] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 333.946808][ T1214] usb 5-1: USB disconnect, device number 26 [ 333.984895][T16333] binder: 16332:16333 ioctl c018620c 200000000280 returned -22 [ 334.153432][ T5873] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 334.160982][ T5873] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 334.168446][ T5873] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 334.169164][ T30] audit: type=1326 audit(1756421222.046:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16334 comm="syz.4.2106" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc800f8ebe9 code=0x0 [ 334.176757][ T5873] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 334.197211][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.212896][ T5873] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 334.351458][T16335] /dev/rnullb0: Can't open blockdev [ 334.489136][T16424] /dev/rnullb0: Can't open blockdev [ 334.495006][T16336] chnl_net:caif_netlink_parms(): no params data found [ 334.602318][T16336] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.610574][T16336] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.619623][T16336] bridge_slave_0: entered allmulticast mode [ 334.627720][T16336] bridge_slave_0: entered promiscuous mode [ 334.635016][T16336] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.642608][T16336] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.649980][T16336] bridge_slave_1: entered allmulticast mode [ 334.657227][T16336] bridge_slave_1: entered promiscuous mode [ 334.687003][T16336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.699242][T16336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.732852][T16336] team0: Port device team_slave_0 added [ 334.740801][T16336] team0: Port device team_slave_1 added [ 334.771236][T16336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.778478][T16336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.809780][T16336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.822904][T16336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.830613][T16336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.857205][T16336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.902664][T16336] hsr_slave_0: entered promiscuous mode [ 334.909745][T16336] hsr_slave_1: entered promiscuous mode [ 334.917299][T16336] debugfs: 'hsr0' already exists in 'hsr' [ 334.923048][T16336] Cannot create hsr debugfs directory [ 335.434130][T16703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.443882][T16703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.958909][T16336] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 336.013925][T16336] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 336.062574][T16336] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 336.077701][T16336] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 336.120236][T16727] /dev/rnullb0: Can't open blockdev [ 336.233422][T16336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.259945][T16336] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.271893][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.279054][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.289690][ T51] Bluetooth: hci6: command tx timeout [ 336.302393][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.309538][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.345822][ T6652] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 336.367319][T16336] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 336.463171][T16740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.473223][T16740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.489668][T16740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.515148][T16740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.517492][ T6652] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 336.546499][T16740] ./cgroup: Can't lookup blockdev [ 336.563326][ T6652] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 336.587659][ T6652] usb 4-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.40 [ 336.603032][T16336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.606101][ T6652] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.625911][ T6652] usb 4-1: Product: 〉 [ 336.635785][ T6652] usb 4-1: Manufacturer: 灘ꍳ餷큉䙢䲐瘄ᡜㅽ㍼蛑㧀ᚻ綜펪쉖㇘雪잆 [ 336.649695][ T6652] usb 4-1: SerialNumber: 섹쌚 [ 336.670012][T16717] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 336.680857][T16717] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 336.819841][T16336] veth0_vlan: entered promiscuous mode [ 336.831422][T16336] veth1_vlan: entered promiscuous mode [ 336.854732][T16336] veth0_macvtap: entered promiscuous mode [ 336.864135][T16336] veth1_macvtap: entered promiscuous mode [ 336.881749][T16336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.894581][T16336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.913581][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.924388][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.925811][ T6652] usbhid 4-1:1.0: can't add hid device: -71 [ 336.940093][ T6652] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 336.951136][ T6652] usb 4-1: USB disconnect, device number 79 [ 336.957707][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.976814][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.011464][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.022147][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.044867][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.054140][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.799051][T16825] fuse: Bad value for 'user_id' [ 337.804040][T16825] fuse: Bad value for 'user_id' [ 338.115259][T16831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.140115][T16831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.154372][T16839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.167473][T16839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.212796][T16853] /dev/rnullb0: Can't open blockdev [ 338.355880][ T51] Bluetooth: hci6: command tx timeout [ 338.485803][ T5900] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 338.565830][ T9] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 338.637798][ T5900] usb 5-1: config index 0 descriptor too short (expected 19492, got 36) [ 338.646317][ T5900] usb 5-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 338.654927][ T5900] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 338.664093][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 338.675173][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.685267][ T5900] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 338.699209][ T5900] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 338.708680][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.723715][ T5900] usb 5-1: config 0 descriptor?? [ 338.732928][ T9] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 338.744151][ T9] usb 4-1: config 6 has no interface number 0 [ 338.758228][ T9] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 338.768838][ T9] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 338.781577][ T9] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid maxpacket 14385, setting to 64 [ 338.799268][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 338.814483][ T9] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 338.825291][ T9] usb 4-1: Product: syz [ 338.831511][ T9] usb 4-1: Manufacturer: syz [ 338.840021][ T9] usb 4-1: SerialNumber: syz [ 338.855058][ T9] hso 4-1:6.2: Failed to find BULK IN ep [ 339.140009][ T5900] usbhid 5-1:0.0: can't add hid device: -71 [ 339.148315][T16901] netlink: 'syz.2.2138': attribute type 1 has an invalid length. [ 339.150100][ T5900] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 339.157217][T16901] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2138'. [ 339.179684][ T5900] usb 5-1: USB disconnect, device number 27 [ 339.186791][T16901] netlink: 'syz.2.2138': attribute type 1 has an invalid length. [ 339.193967][ T6652] usb 4-1: USB disconnect, device number 80 [ 339.207720][T16901] netlink: 'syz.2.2138': attribute type 2 has an invalid length. [ 339.691011][T16918] 9p: Unknown parameter 'k' [ 339.943199][T16934] /dev/rnullb0: Can't open blockdev [ 340.057465][T16947] /dev/rnullb0: Can't open blockdev [ 340.205953][ T1214] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 340.251160][T16972] MTD: Couldn't look up '/dev/sr0': -2 [ 340.331435][ T5873] Bluetooth: hci6: hardware error 0x03 [ 340.376299][ T1214] usb 4-1: Using ep0 maxpacket: 8 [ 340.395206][ T1214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 340.406122][ T1214] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 340.419400][T16983] /dev/rnullb0: Can't open blockdev [ 340.427357][ T1214] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 340.441584][ T1214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.462166][ T1214] usb 4-1: Product: syz [ 340.470363][ T1214] usb 4-1: Manufacturer: syz [ 340.481668][ T1214] usb 4-1: SerialNumber: syz [ 340.490020][ T1214] usb 4-1: config 0 descriptor?? [ 340.591444][T17002] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 340.746609][T17008] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 340.754344][T17008] /dev/rnullb0: Can't open blockdev [ 340.950857][ T5900] usb 4-1: USB disconnect, device number 81 [ 341.012876][ T6652] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 341.025046][T17042] gfs2: gfs2 mount does not exist [ 341.186339][ T6652] usb 5-1: Using ep0 maxpacket: 32 [ 341.202230][ T6652] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 341.219414][ T6652] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 341.233760][ T6652] usb 5-1: config 0 has no interface number 0 [ 341.244746][ T6652] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 341.255000][ T6652] usb 5-1: config 0 has no interface number 0 [ 341.264633][ T6652] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 341.269503][T17064] /dev/rnullb0: Can't open blockdev [ 341.274295][T17065] /dev/rnullb0: Can't open blockdev [ 341.289661][ T6652] usb 5-1: config 0 has no interface number 0 [ 341.296845][ T6652] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 341.315322][ T6652] usb 5-1: config 0 has no interface number 0 [ 341.325995][ T6652] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 341.334036][ T6652] usb 5-1: config 0 has no interface number 0 [ 341.335912][ T5900] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 341.349844][ T6652] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 341.361479][ T6652] usb 5-1: config 0 has no interface number 0 [ 341.381368][ T6652] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 341.383817][T17073] /dev/rnullb0: Can't open blockdev [ 341.401275][ T6652] usb 5-1: config 0 has no interface number 0 [ 341.417316][ T6652] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 341.425345][ T6652] usb 5-1: config 0 has no interface number 0 [ 341.443912][ T6652] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 341.456818][ T6652] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.478524][ T6652] usb 5-1: Product: syz [ 341.483017][ T6652] usb 5-1: Manufacturer: syz [ 341.488873][ T6652] usb 5-1: SerialNumber: syz [ 341.495056][ T6652] usb 5-1: config 0 descriptor?? [ 341.502385][ T6652] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 341.518248][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.549519][ T5900] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.566929][ T5900] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 341.578144][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.596473][ T5900] usb 4-1: config 0 descriptor?? [ 341.725475][T17094] binder: Bad value for 'stats' [ 342.013634][ T5900] hid_parser_main: 5 callbacks suppressed [ 342.013657][ T5900] ortek 0003:1223:3F07.000D: unknown main item tag 0x6 [ 342.026511][ T5900] ortek 0003:1223:3F07.000D: report_id 29495 is invalid [ 342.033535][ T5900] ortek 0003:1223:3F07.000D: item 0 2 1 8 parsing failed [ 342.041954][ T5900] ortek 0003:1223:3F07.000D: probe with driver ortek failed with error -22 [ 342.215712][ T5900] usb 4-1: USB disconnect, device number 82 [ 342.355942][ T5873] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 342.688248][T17120] hfsplus: unable to find HFS+ superblock [ 342.695304][T17121] netlink: 'syz.2.2179': attribute type 13 has an invalid length. [ 342.704778][T17121] macvtap0: entered promiscuous mode [ 342.712664][T17121] macvtap0: refused to change device tx_queue_len [ 342.712940][T17125] /dev/rnullb0: Can't open blockdev [ 342.827606][T17128] orangefs_devreq_open: device cannot be opened in blocking mode [ 342.854994][T17128] orangefs_devreq_open: device cannot be opened in blocking mode [ 342.865161][T17128] /dev/rnullb0: Can't open blockdev [ 343.072862][T17146] /dev/rnullb0: Can't open blockdev [ 343.667900][T17176] bridge0: entered promiscuous mode [ 343.673338][T17176] bridge0: entered allmulticast mode [ 343.737547][T17194] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 343.744551][T17194] /dev/rnullb0: Can't open blockdev [ 343.793685][ T6652] etas_es58x 5-1:0.2: could not retrieve the product info string [ 343.839715][ T6652] usb 5-1: USB disconnect, device number 28 [ 343.857895][ T6652] etas_es58x 5-1:0.2: Disconnecting syz syz [ 344.020793][T17236] /dev/rnullb0: Can't open blockdev [ 344.038018][T17236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.048923][T17236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.058747][T17236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2200'. [ 344.067873][T17236] bridge_slave_1: left allmulticast mode [ 344.073557][T17236] bridge_slave_1: left promiscuous mode [ 344.080605][T17236] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.089465][T17236] bridge_slave_0: left allmulticast mode [ 344.095278][T17236] bridge_slave_0: left promiscuous mode [ 344.105219][T17236] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.285880][ T6652] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 344.449294][ T6652] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.465586][ T6652] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.478379][ T6652] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 344.487534][ T6652] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.500586][ T6652] usb 5-1: config 0 descriptor?? [ 344.913595][ T6652] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 344.921568][ T6652] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 344.928845][ T6652] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 344.931099][T17273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.936573][ T6652] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 344.952129][ T6652] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 344.953189][T17273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.962320][ T6652] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 344.976933][ T6652] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 344.989465][ T6652] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 345.112216][ T6652] cp2112 0003:10C4:EA90.000E: Part Number: 0x00 Device Version: 0x00 [ 345.314069][T17224] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2199'. [ 345.351090][ T6652] cp2112 0003:10C4:EA90.000E: error requesting SMBus config [ 345.364779][ T6652] cp2112 0003:10C4:EA90.000E: probe with driver cp2112 failed with error -71 [ 345.383069][ T6652] usb 5-1: USB disconnect, device number 29 [ 346.544318][T17333] /dev/rnullb0: Can't open blockdev [ 346.634689][T17341] /dev/rnullb0: Can't open blockdev [ 346.642611][T17341] /dev/rnullb0: Can't open blockdev [ 346.703124][T17347] /dev/rnullb0: Can't open blockdev [ 346.835779][ T51] Bluetooth: hci5: command 0x0405 tx timeout [ 346.940146][T17377] netlink: 'syz.6.2218': attribute type 1 has an invalid length. [ 346.950267][T17377] netlink: 'syz.6.2218': attribute type 11 has an invalid length. [ 346.960604][T17377] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2218'. [ 347.146056][T17393] /dev/rnullb0: Can't open blockdev [ 347.206632][ T6652] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 347.356629][ T6652] usb 4-1: device descriptor read/64, error -71 [ 347.595702][ T6652] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 347.725732][ T6652] usb 4-1: device descriptor read/64, error -71 [ 347.836415][ T6652] usb usb4-port1: attempt power cycle [ 347.911217][T17427] /dev/rnullb0: Can't open blockdev [ 348.003990][T17433] overlayfs: failed to resolve 'xino=auto': -2 [ 348.017585][T17433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.042915][T17433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.178233][ T6652] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 348.216250][ T6652] usb 4-1: device descriptor read/8, error -71 [ 348.465832][ T6652] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 348.486941][ T6652] usb 4-1: device descriptor read/8, error -71 [ 348.545783][ T981] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 348.596489][ T6652] usb usb4-port1: unable to enumerate USB device [ 348.697826][ T981] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 348.709498][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 348.720631][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 348.731228][ T981] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 348.744588][ T981] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 348.754662][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.764268][ T981] usb 5-1: config 0 descriptor?? [ 349.173830][ T981] plantronics 0003:047F:FFFF.000F: ignoring exceeding usage max [ 349.187818][ T981] plantronics 0003:047F:FFFF.000F: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 349.375555][ T9] usb 5-1: USB disconnect, device number 30 [ 349.378704][T17454] /dev/rnullb0: Can't open blockdev [ 349.957549][T17505] /dev/rnullb0: Can't open blockdev [ 351.006774][T17523] /dev/rnullb0: Can't open blockdev [ 351.080418][T17526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.092528][T17526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.144009][T17536] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 351.161306][T17538] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 351.338745][T17557] pim6reg: entered allmulticast mode [ 351.346205][T17557] /dev/rnullb0: Can't open blockdev [ 351.935814][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 352.097667][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 352.109722][ T9] usb 5-1: config 0 has no interface number 0 [ 352.123427][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.138934][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.140933][T17592] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2256'. [ 352.149898][ T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 352.171533][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.205482][ T9] usb 5-1: config 0 descriptor?? [ 352.418785][T17574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.447022][T17574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.447844][T17623] /dev/rnullb0: Can't open blockdev [ 352.516944][ T5900] usb 3-1: USB disconnect, device number 66 [ 352.575773][ T1214] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 352.688408][ T9] uclogic 0003:256C:006D.0010: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input1 [ 352.704583][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 352.719570][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 352.726952][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 352.739764][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 352.747434][ T1214] usb 4-1: Using ep0 maxpacket: 32 [ 352.762122][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 352.775202][ T1214] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 352.787428][ T1214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.800260][ T1214] usb 4-1: config 0 descriptor?? [ 352.814225][ T1214] gspca_main: sq930x-2.14.0 probing 041e:403c [ 352.851886][T17650] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2263'. [ 352.909254][ T6652] usb 5-1: USB disconnect, device number 31 [ 353.019390][T17650] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 353.042368][ T1214] gspca_sq930x: ucbus_write failed -71 [ 353.057754][ T1214] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 353.100409][ T1214] usb 4-1: USB disconnect, device number 87 [ 353.174429][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.259920][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.329324][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.425130][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.475312][T17634] chnl_net:caif_netlink_parms(): no params data found [ 353.494833][T17795] tipc: Started in network mode [ 353.499768][T17795] tipc: Node identity a6b4796eee8f, cluster identity 4711 [ 353.507418][T17795] tipc: Enabled bearer , priority 0 [ 353.574803][T17795] syzkaller0: entered promiscuous mode [ 353.604886][T17795] syzkaller0: entered allmulticast mode [ 353.627927][T17795] tipc: Resetting bearer [ 353.713190][T17829] netlink: 'syz.4.2269': attribute type 2 has an invalid length. [ 353.741180][T17829] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2269'. [ 353.839215][T17858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2271'. [ 353.895828][T17634] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.902992][T17634] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.925207][T17634] bridge_slave_0: entered allmulticast mode [ 353.939581][T17634] bridge_slave_0: entered promiscuous mode [ 353.950727][T17634] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.959289][T17634] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.970006][T17634] bridge_slave_1: entered allmulticast mode [ 353.979428][T17634] bridge_slave_1: entered promiscuous mode [ 354.364267][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.375776][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.391199][ T49] bond0 (unregistering): Released all slaves [ 354.416057][T17841] tipc: Resetting bearer [ 354.506607][T17841] tipc: Disabling bearer [ 354.527716][T17634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.610421][ T49] tipc: Left network mode [ 354.614988][T17956] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2278'. [ 354.628524][T17634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.714866][T17634] team0: Port device team_slave_0 added [ 354.738642][T17999] comedi comedi3: pcl724: a I/O base address must be specified [ 354.758612][T17634] team0: Port device team_slave_1 added [ 354.835817][ T51] Bluetooth: hci7: command tx timeout [ 354.867303][T17634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.894320][T17634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.939446][T17634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.962070][T17634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.971718][T17634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.011830][T17634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.158994][T17634] hsr_slave_0: entered promiscuous mode [ 355.174989][T17634] hsr_slave_1: entered promiscuous mode [ 355.183335][T17634] debugfs: 'hsr0' already exists in 'hsr' [ 355.196366][T17634] Cannot create hsr debugfs directory [ 355.423578][ T49] hsr_slave_0: left promiscuous mode [ 355.443630][ T49] hsr_slave_1: left promiscuous mode [ 355.459431][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.485804][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.496364][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.503782][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.556410][ T49] veth1_macvtap: left promiscuous mode [ 355.562109][ T49] veth0_macvtap: left promiscuous mode [ 355.569016][ T49] veth1_vlan: left promiscuous mode [ 356.049413][ T49] team0 (unregistering): Port device team_slave_1 removed [ 356.124712][ T49] team0 (unregistering): Port device team_slave_0 removed [ 356.625736][ T9] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 356.815876][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 356.825722][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.840586][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.865758][ T9] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 356.885460][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.915127][ T9] usb 4-1: config 0 descriptor?? [ 356.916476][ T51] Bluetooth: hci7: command tx timeout [ 357.169580][ T49] IPVS: stop unused estimator thread 0... [ 357.205798][ T5863] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 357.303251][T17634] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 357.331143][T17634] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 357.343460][T17634] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 357.371454][T17634] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 357.378493][ T5863] usb 5-1: Invalid ep0 maxpacket: 64 [ 357.505886][ T5863] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 357.575594][T17634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.641418][T17634] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.667342][ T5863] usb 5-1: Invalid ep0 maxpacket: 64 [ 357.672969][ T5863] usb usb5-port1: attempt power cycle [ 357.689787][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.696942][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.733170][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.740357][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.836414][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 357.871981][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 357.915858][ T9] usb 4-1: USB disconnect, device number 88 [ 358.029900][ T5863] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 358.079005][ T5863] usb 5-1: Invalid ep0 maxpacket: 64 [ 358.216538][ T5863] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 358.249567][ T5863] usb 5-1: Invalid ep0 maxpacket: 64 [ 358.265247][ T5863] usb usb5-port1: unable to enumerate USB device [ 358.274030][T17634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.387895][T17634] veth0_vlan: entered promiscuous mode [ 358.427339][T17634] veth1_vlan: entered promiscuous mode [ 358.460776][T17634] veth0_macvtap: entered promiscuous mode [ 358.470540][T17634] veth1_macvtap: entered promiscuous mode [ 358.493378][T17634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.514939][T17634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.559403][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.622909][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.639433][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.664621][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.716824][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.724847][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.774689][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.785215][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.859901][T18345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2262'. [ 358.995927][ T51] Bluetooth: hci7: command tx timeout [ 359.610451][T18416] binder: 18415:18416 ioctl 4018620d 0 returned -22 [ 359.643876][T18420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.654736][T18420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.015998][ T6070] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 360.198627][ T6070] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 360.210626][ T6070] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 360.221302][ T6070] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 360.232642][ T6070] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.244114][T18444] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 360.257464][ T6070] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 360.456231][ T6070] usb 4-1: USB disconnect, device number 89 [ 361.075887][ T51] Bluetooth: hci7: command tx timeout [ 361.676045][T18554] netlink: 'syz.2.2326': attribute type 1 has an invalid length. [ 361.687999][T18554] netlink: 'syz.2.2326': attribute type 1 has an invalid length. [ 361.935698][ T981] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 362.105567][ T981] usb 5-1: Using ep0 maxpacket: 16 [ 362.118017][ T981] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 362.137625][ T981] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 5.00 [ 362.171476][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.189958][ T981] usb 5-1: Product: syz [ 362.194158][ T981] usb 5-1: Manufacturer: syz [ 362.205676][ T981] usb 5-1: SerialNumber: syz [ 362.226159][ T981] usb 5-1: config 0 descriptor?? [ 362.237629][ T981] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 362.256393][ T981] usb 5-1: Detected FT2232C/D [ 362.458737][ T981] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 362.481019][ T981] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 362.497255][ T981] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 362.521851][ T981] usb 5-1: USB disconnect, device number 36 [ 362.547616][ T981] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 362.559068][ T981] ftdi_sio 5-1:0.0: device disconnected [ 363.945923][ T6070] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 364.122068][ T6070] usb 4-1: Using ep0 maxpacket: 8 [ 364.150494][ T6070] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 364.161756][ T6070] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.194511][ T6070] usb 4-1: Product: syz [ 364.199835][ T6070] usb 4-1: Manufacturer: syz [ 364.204483][ T6070] usb 4-1: SerialNumber: syz [ 364.212466][ T6070] usb 4-1: config 0 descriptor?? [ 364.220549][ T6070] gspca_main: se401-2.14.0 probing 047d:5003 [ 364.452473][T18668] sp0: Synchronizing with TNC [ 364.589465][T18684] sp0: Synchronizing with TNC [ 364.631461][T18668] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 364.652660][ T51] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 364.654116][T18668] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 364.659632][ T51] Bluetooth: Wrong link type (-22) [ 364.682411][ T6070] gspca_se401: Wrong descriptor type [ 365.062523][ T981] usb 4-1: USB disconnect, device number 90 [ 365.892975][T18766] /dev/rnullb0: Can't open blockdev [ 366.191823][T18742] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 366.201433][T18742] /dev/rnullb0: Can't open blockdev [ 366.607879][T18801] netlink: 'syz.3.2360': attribute type 44 has an invalid length. [ 366.665977][ T43] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 366.837993][ T43] usb 3-1: not running at top speed; connect to a high speed hub [ 366.846703][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.858526][ T43] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 366.867870][ T43] usb 3-1: config 1 has no interface number 1 [ 366.875436][ T43] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 366.890587][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 366.899802][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.909156][ T43] usb 3-1: Product: syz [ 366.913361][ T43] usb 3-1: Manufacturer: syz [ 366.913378][ T43] usb 3-1: SerialNumber: syz [ 367.143279][ T43] usb 3-1: USB disconnect, device number 67 [ 367.171905][ T7270] udevd[7270]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 367.288829][T18832] hfs: can't find a HFS filesystem on dev rnullb0 [ 367.615706][ T43] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 367.665606][T18849] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 367.673723][T18849] UDF-fs: Scanning with blocksize 4096 failed [ 367.772059][ T43] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 367.821515][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.835689][ T43] usb 5-1: Product: syz [ 367.839923][ T43] usb 5-1: Manufacturer: syz [ 367.854715][ T43] usb 5-1: SerialNumber: syz [ 367.948548][T18859] cgroup: release_agent respecified [ 368.059681][T18867] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 368.073225][T18867] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 368.239543][T18888] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 368.249195][T18888] /dev/rnullb0: Can't open blockdev [ 368.884793][T18899] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2375'. [ 368.901125][T18899] /dev/rnullb0: Can't open blockdev [ 369.254898][T18910] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2379'. [ 369.382524][T18919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2382'. [ 369.393010][T18919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2382'. [ 369.880337][T18937] NILFS (rnullb0): couldn't find nilfs on the device [ 370.182238][T18953] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2389'. [ 370.194310][ T5863] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 370.348966][ T5863] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 370.363519][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 370.375019][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 370.397975][ T5863] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 370.430690][ T5863] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 370.451543][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.473681][ T5863] usb 4-1: config 0 descriptor?? [ 370.795697][ T9] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 370.905039][ T5863] plantronics 0003:047F:FFFF.0011: ignoring exceeding usage max [ 370.941276][ T5863] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 370.960611][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 370.984255][ T9] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 371.053596][ T9] usb 3-1: config 0 has no interface number 0 [ 371.053676][ T43] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e8. ret = -EPROTO [ 371.082027][ T9] usb 3-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=a8.3c [ 371.099850][ T43] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 371.105480][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.127792][ T43] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 371.129617][ T9] usb 3-1: Product: syz [ 371.142471][ T9] usb 3-1: Manufacturer: syz [ 371.147333][ T9] usb 3-1: SerialNumber: syz [ 371.148492][ T43] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 371.161981][ T9] usb 3-1: config 0 descriptor?? [ 371.187732][ T43] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 371.209601][ T43] usb 5-1: USB disconnect, device number 37 [ 371.241887][T18981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.253471][T18981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.473263][T18944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.491017][T18944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.504335][ T43] usb 4-1: USB disconnect, device number 91 [ 371.610162][ T9] mos7840 3-1:0.186: required endpoints missing [ 371.635241][ T9] usb 3-1: USB disconnect, device number 68 [ 371.747436][T19009] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2393'. [ 372.325382][T19044] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2398'. [ 373.171959][T19068] /dev/rnullb0: Can't open blockdev [ 373.339615][T19083] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2407'. [ 374.066883][ T5873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.074285][ T5873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.081715][ T5873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.096812][ T5873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.107705][ T5873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 374.159635][T19154] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2419'. [ 374.280799][T19167] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 374.287835][T19167] /dev/rnullb0: Can't open blockdev [ 374.319321][T19172] /dev/sg0: Can't lookup blockdev [ 374.327014][T19171] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 374.348274][T19172] overlay: ./file0 is not a directory [ 374.536437][ T5873] Bluetooth: hci7: hardware error 0x03 [ 374.843483][T19144] chnl_net:caif_netlink_parms(): no params data found [ 374.901310][T19317] netlink: 'syz.2.2429': attribute type 21 has an invalid length. [ 374.911755][T19317] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2429'. [ 374.964067][T19144] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.983940][T19144] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.994751][T19144] bridge_slave_0: entered allmulticast mode [ 375.019038][T19144] bridge_slave_0: entered promiscuous mode [ 375.033390][T19144] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.057900][T19144] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.069618][T19144] bridge_slave_1: entered allmulticast mode [ 375.078947][T19144] bridge_slave_1: entered promiscuous mode [ 375.136119][ T5900] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 375.145549][T19144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.158863][T19144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.188951][T19144] team0: Port device team_slave_0 added [ 375.196701][T19144] team0: Port device team_slave_1 added [ 375.221769][T19144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.229271][T19144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.258321][T19144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.272046][T19144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.279803][T19144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.286680][ T5863] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 375.306684][T19144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.350880][ T5900] usb 5-1: config 0 has no interfaces? [ 375.356742][ T5900] usb 5-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 375.366032][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.376920][ T5900] usb 5-1: config 0 descriptor?? [ 375.389200][T19144] hsr_slave_0: entered promiscuous mode [ 375.395392][T19144] hsr_slave_1: entered promiscuous mode [ 375.482999][ T5863] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 375.493982][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.502378][ T5863] usb 3-1: Product: syz [ 375.503824][T19144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.507235][ T5863] usb 3-1: Manufacturer: syz [ 375.522374][ T5863] usb 3-1: SerialNumber: syz [ 375.534710][ T5863] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 375.551118][ T981] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 375.591603][T19226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.592783][T19144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.601457][T19226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.624052][ T1214] usb 5-1: USB disconnect, device number 38 [ 375.692311][T19144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.796217][T19144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.937154][T19144] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 375.950773][T19144] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 375.964046][T19144] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 375.978129][T19144] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 376.067597][ T6652] usb 3-1: USB disconnect, device number 69 [ 376.091993][ T1214] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 376.145026][T19144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.170659][T19144] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.184310][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.191487][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.200747][ T51] Bluetooth: hci2: command tx timeout [ 376.211542][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.218684][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.268085][ T1214] usb 5-1: Using ep0 maxpacket: 8 [ 376.280270][ T1214] usb 5-1: config index 0 descriptor too short (expected 64774, got 36) [ 376.292960][ T1214] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 376.315358][ T1214] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 376.335720][ T1214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.348374][ T1214] usb 5-1: Product: syz [ 376.356307][ T1214] usb 5-1: Manufacturer: syz [ 376.367407][ T1214] usb 5-1: SerialNumber: syz [ 376.492221][T19144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.540415][T19144] veth0_vlan: entered promiscuous mode [ 376.568033][T19144] veth1_vlan: entered promiscuous mode [ 376.595927][ T5873] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 376.606317][ T981] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 376.613332][ T981] ath9k_htc: Failed to initialize the device [ 376.623739][T19144] veth0_macvtap: entered promiscuous mode [ 376.639149][ T6652] usb 3-1: ath9k_htc: USB layer deinitialized [ 376.646470][T19144] veth1_macvtap: entered promiscuous mode [ 376.659840][T19226] netlink: 'syz.4.2427': attribute type 1 has an invalid length. [ 376.670212][T19144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.685490][T19144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.690580][T19226] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2427'. [ 376.710888][ T1106] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.738513][ T1106] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.740225][T19592] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2434'. [ 376.757275][ T66] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.783385][ T66] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.531924][T19620] No control pipe specified [ 378.275831][ T5873] Bluetooth: hci2: command tx timeout [ 378.681763][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.689118][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.355896][ T5873] Bluetooth: hci2: command tx timeout [ 381.547734][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.586195][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.633460][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.652994][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.683353][T19651] omfs: Invalid superblock (0) [ 381.699122][T19652] omfs: Invalid superblock (0) [ 381.784975][T19664] /dev/rnullb0: Can't open blockdev [ 381.848582][T19668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.857641][T19668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.885000][T19668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.897736][T19668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.086557][T19691] tmpfs: Unknown parameter 'huglwj}e`f}i5a`"ZHǤ||ޢ (^|IdkWyT!AZG;w/ ct:Mظ a+Z¡- [ 382.086557][T19691] /MV\)uTcf{gF' [ 382.133688][ T5873] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 382.140476][ T5873] Bluetooth: Wrong link type (-22) [ 382.147604][ T5873] Bluetooth: hci2: hardware error 0x03 [ 382.435909][ T981] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 382.528359][T19709] pimreg3: entered allmulticast mode [ 382.597901][ T981] usb 4-1: Using ep0 maxpacket: 32 [ 382.611217][ T981] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.632963][ T981] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.655451][ T981] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 382.685774][ T981] usb 4-1: config 0 interface 0 has no altsetting 0 [ 382.692571][ T981] usb 4-1: New USB device found, idVendor=04b3, idProduct=3109, bcdDevice= 0.00 [ 382.717694][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.747590][ T981] usb 4-1: config 0 descriptor?? [ 382.777078][T19730] qnx4: no qnx4 filesystem (no root dir). [ 382.872325][T19734] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2464'. [ 382.989192][T19737] sit0: entered promiscuous mode [ 383.007018][T19737] netlink: 'syz.4.2465': attribute type 1 has an invalid length. [ 383.014790][T19737] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2465'. [ 383.163410][ T981] lenovo 0003:04B3:3109.0012: item fetching failed at offset 5/9 [ 383.196246][ T981] lenovo 0003:04B3:3109.0012: hid_parse failed [ 383.210032][ T981] lenovo 0003:04B3:3109.0012: probe with driver lenovo failed with error -22 [ 383.493446][ T9] usb 4-1: USB disconnect, device number 92 [ 384.196015][ T5873] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 384.433914][T19795] /dev/rnullb0: Can't open blockdev [ 384.452908][T19795] XFS (nullb0): Invalid superblock magic number [ 385.966834][T19850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.996495][T19850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.169812][T19858] /dev/rnullb0: Can't open blockdev [ 386.204202][T19858] netlink: 'syz.6.2486': attribute type 27 has an invalid length. [ 386.274198][T19858] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.281770][T19858] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.323643][T19860] /dev/rnullb0: Can't open blockdev [ 386.404038][T19858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.415533][T19858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.503837][T19859] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.523662][ T49] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.545190][ T49] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.562583][ T49] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.716208][ T1214] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 386.892644][ T1214] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 386.902953][ T1214] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 387.034521][ T1214] usb 4-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 387.130993][ T1214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.149485][ T1214] usb 4-1: Product: syz [ 387.159573][ T1214] usb 4-1: Manufacturer: syz [ 387.169691][ T1214] usb 4-1: SerialNumber: syz [ 387.181319][ T1214] usb 4-1: config 0 descriptor?? [ 387.338812][T19862] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 387.346321][T19862] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 387.357787][ T1214] option 4-1:0.0: GSM modem (1-port) converter detected [ 387.380857][ T1214] usb 4-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 387.572521][T19862] erofs (device rnullb0): cannot find valid erofs superblock [ 387.588574][ T9] usb 4-1: USB disconnect, device number 93 [ 387.612651][ T9] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 387.634906][ T9] option 4-1:0.0: device disconnected [ 387.645393][T19897] netlink: 'syz.4.2491': attribute type 1 has an invalid length. [ 388.316143][T19961] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 388.323358][T19961] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 388.442359][T19975] /dev/rnullb0: Can't open blockdev [ 388.577664][T19980] netlink: 'syz.2.2512': attribute type 12 has an invalid length. [ 388.594500][T19980] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2512'. [ 388.612088][T19980] block nbd2: Attempted send on invalid socket [ 388.625761][T19980] blk_print_req_error: 2 callbacks suppressed [ 388.625795][T19980] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 388.641621][T19980] SQUASHFS error: Failed to read block 0x0: -5 [ 388.648158][T19980] unable to read squashfs_super_block [ 389.441339][T20013] netlink: 'syz.2.2519': attribute type 2 has an invalid length. [ 389.455767][T20013] netlink: 'syz.2.2519': attribute type 2 has an invalid length. [ 389.595767][ T43] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 389.747273][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.758595][ T43] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 389.775937][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.787926][ T43] usb 4-1: config 0 descriptor?? [ 390.201310][ T43] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 390.221817][ T43] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0013/input/input38 [ 390.313567][ T43] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 390.902793][T20061] /dev/rnullb0: Can't open blockdev [ 391.506725][T20068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.521699][T20068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.532246][ T1214] usb 4-1: USB disconnect, device number 94 [ 391.532417][ C1] keytouch 0003:0926:3333.0013: usb_submit_urb(ctrl) failed: -19 [ 391.770921][T20093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2530'. [ 391.863468][T20104] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2531'. [ 392.070191][T20134] /dev/rnullb0: Can't open blockdev [ 392.158483][T20143] dlm: non-version read from control device 8224 [ 392.185042][T20152] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2541'. [ 392.318315][ T30] audit: type=1326 audit(1756421280.186:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20164 comm="syz.6.2543" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c7c78ebe9 code=0x0 [ 392.571971][T20186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.594700][T20186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.602773][T20192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2550'. [ 392.624105][T20186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.632550][T20192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2550'. [ 392.645286][T20186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.682760][T20201] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2552'. [ 392.788458][T20206] FAULT_INJECTION: forcing a failure. [ 392.788458][T20206] name failslab, interval 1, probability 0, space 0, times 0 [ 392.829459][T20206] CPU: 1 UID: 0 PID: 20206 Comm: syz.2.2553 Not tainted syzkaller #0 PREEMPT(full) [ 392.829489][T20206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 392.829507][T20206] Call Trace: [ 392.829527][T20206] [ 392.829535][T20206] dump_stack_lvl+0x189/0x250 [ 392.829572][T20206] ? __pfx____ratelimit+0x10/0x10 [ 392.829598][T20206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.829628][T20206] ? __pfx__printk+0x10/0x10 [ 392.829659][T20206] ? __pfx___might_resched+0x10/0x10 [ 392.829686][T20206] ? lock_acquire+0x5f/0x360 [ 392.829706][T20206] should_fail_ex+0x414/0x560 [ 392.829742][T20206] should_failslab+0xa8/0x100 [ 392.829764][T20206] __kmalloc_noprof+0xcb/0x4b0 [ 392.829792][T20206] ? kfree+0x4d/0x440 [ 392.829816][T20206] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 392.829847][T20206] tomoyo_realpath_from_path+0xe3/0x5d0 [ 392.829876][T20206] ? tomoyo_domain+0xd9/0x130 [ 392.829906][T20206] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 392.829928][T20206] tomoyo_path_number_perm+0x1e8/0x5a0 [ 392.829950][T20206] ? lock_release+0x4b/0x3e0 [ 392.829968][T20206] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 392.829993][T20206] ? rcu_is_watching+0x15/0xb0 [ 392.830015][T20206] ? lock_release+0x4b/0x3e0 [ 392.830032][T20206] ? vfs_write+0x956/0xb30 [ 392.830061][T20206] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 392.830103][T20206] ? __fget_files+0x3a0/0x420 [ 392.830125][T20206] ? __fget_files+0x2a/0x420 [ 392.830150][T20206] security_file_ioctl+0xcb/0x2d0 [ 392.830173][T20206] __se_sys_ioctl+0x47/0x170 [ 392.830204][T20206] do_syscall_64+0xfa/0xfa0 [ 392.830231][T20206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.830251][T20206] ? clear_bhb_loop+0x60/0xb0 [ 392.830273][T20206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.830298][T20206] RIP: 0033:0x7f8cbdb8ebe9 [ 392.830315][T20206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.830334][T20206] RSP: 002b:00007f8cbe9ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 392.830375][T20206] RAX: ffffffffffffffda RBX: 00007f8cbddb5fa0 RCX: 00007f8cbdb8ebe9 [ 392.830391][T20206] RDX: 0000200000000000 RSI: 0000000000001269 RDI: 0000000000000003 [ 392.830405][T20206] RBP: 00007f8cbe9ad090 R08: 0000000000000000 R09: 0000000000000000 [ 392.830419][T20206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.830432][T20206] R13: 00007f8cbddb6038 R14: 00007f8cbddb5fa0 R15: 00007ffd75db8be8 [ 392.830456][T20206] [ 392.833918][T20206] ERROR: Out of memory at tomoyo_realpath_from_path. [ 393.541299][T20254] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2564'. [ 393.636785][T20258] FAULT_INJECTION: forcing a failure. [ 393.636785][T20258] name failslab, interval 1, probability 0, space 0, times 0 [ 393.681261][T20258] CPU: 0 UID: 0 PID: 20258 Comm: syz.4.2567 Not tainted syzkaller #0 PREEMPT(full) [ 393.681288][T20258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 393.681310][T20258] Call Trace: [ 393.681318][T20258] [ 393.681327][T20258] dump_stack_lvl+0x189/0x250 [ 393.681362][T20258] ? __pfx____ratelimit+0x10/0x10 [ 393.681389][T20258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.681419][T20258] ? __pfx__printk+0x10/0x10 [ 393.681460][T20258] ? read_seqbegin+0x1ac/0x250 [ 393.681490][T20258] ? __pfx___might_resched+0x10/0x10 [ 393.681523][T20258] ? lock_acquire+0x5f/0x360 [ 393.681542][T20258] should_fail_ex+0x414/0x560 [ 393.681569][T20258] should_failslab+0xa8/0x100 [ 393.681587][T20258] __kmalloc_noprof+0xcb/0x4b0 [ 393.681613][T20258] ? tomoyo_encode+0x28b/0x550 [ 393.681640][T20258] tomoyo_encode+0x28b/0x550 [ 393.681666][T20258] tomoyo_realpath_from_path+0x58d/0x5d0 [ 393.681695][T20258] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 393.681715][T20258] tomoyo_path_number_perm+0x1e8/0x5a0 [ 393.681735][T20258] ? lock_release+0x4b/0x3e0 [ 393.681753][T20258] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 393.681775][T20258] ? rcu_is_watching+0x15/0xb0 [ 393.681795][T20258] ? lock_release+0x4b/0x3e0 [ 393.681811][T20258] ? vfs_write+0x956/0xb30 [ 393.681829][T20258] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 393.681866][T20258] ? __fget_files+0x3a0/0x420 [ 393.681888][T20258] ? __fget_files+0x2a/0x420 [ 393.681910][T20258] security_file_ioctl+0xcb/0x2d0 [ 393.681929][T20258] __se_sys_ioctl+0x47/0x170 [ 393.681958][T20258] do_syscall_64+0xfa/0xfa0 [ 393.681982][T20258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.682001][T20258] ? clear_bhb_loop+0x60/0xb0 [ 393.682021][T20258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.682038][T20258] RIP: 0033:0x7fc800f8ebe9 [ 393.682054][T20258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.682072][T20258] RSP: 002b:00007fc801ddb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.682092][T20258] RAX: ffffffffffffffda RBX: 00007fc8011b5fa0 RCX: 00007fc800f8ebe9 [ 393.682106][T20258] RDX: 0000200000000000 RSI: 0000000000001269 RDI: 0000000000000003 [ 393.682121][T20258] RBP: 00007fc801ddb090 R08: 0000000000000000 R09: 0000000000000000 [ 393.682133][T20258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.682145][T20258] R13: 00007fc8011b6038 R14: 00007fc8011b5fa0 R15: 00007ffd34cb23d8 [ 393.682167][T20258] [ 393.684763][T20258] ERROR: Out of memory at tomoyo_realpath_from_path. [ 393.915784][ T981] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 394.026051][T20267] /dev/rnullb0: Can't open blockdev [ 394.049476][ T31] INFO: task syz.0.1500:11813 blocked for more than 143 seconds. [ 394.078731][ T31] Not tainted syzkaller #0 [ 394.083716][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 394.112437][ T31] task:syz.0.1500 state:D stack:24840 pid:11813 tgid:11811 ppid:5860 task_flags:0x400140 flags:0x00004004 [ 394.144843][ T31] Call Trace: [ 394.154922][ T31] [ 394.160272][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.175822][ T31] __schedule+0x1798/0x4cc0 [ 394.180391][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 394.195755][ T981] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 394.214994][ T31] ? __pfx___schedule+0x10/0x10 [ 394.220029][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.228247][ T31] ? schedule+0x91/0x360 [ 394.232530][ T31] ? rcu_is_watching+0x15/0xb0 [ 394.245832][ T31] ? lock_release+0x4b/0x3e0 [ 394.252024][ T31] ? rcu_is_watching+0x15/0xb0 [ 394.252805][ T981] usb 3-1: config 0 descriptor?? [ 394.260371][ T31] schedule+0x165/0x360 [ 394.266218][ T10] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 394.290981][ T31] io_schedule+0x80/0xd0 [ 394.300445][ T31] bit_wait_io+0x11/0xd0 [ 394.310281][ T31] __wait_on_bit+0xb6/0x310 [ 394.321669][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 394.332282][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 394.344114][ T31] out_of_line_wait_on_bit+0x123/0x170 [ 394.355753][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 394.369840][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 394.381058][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 394.391603][ T31] __bread_gfp+0x2ca/0x3c0 [ 394.400233][ T31] vxfs_try_sb_magic+0xd7/0x360 [ 394.408295][ T31] ? sb_min_blocksize+0x16c/0x210 [ 394.419824][ T31] vxfs_fill_super+0x17d/0x870 [ 394.427965][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 394.434275][ T31] get_tree_bdev_flags+0x40b/0x4d0 [ 394.442380][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.454554][ T31] ? __pfx_vxfs_fill_super+0x10/0x10 [ 394.463531][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.473424][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 394.485734][ T31] vfs_get_tree+0x8f/0x2b0 [ 394.490304][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 394.503774][ T31] do_new_mount+0x2a2/0xa30 [ 394.508399][ T31] ? ns_capable+0x8a/0xf0 [ 394.515067][ T31] ? __pfx_do_new_mount+0x10/0x10 [ 394.522611][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 394.534006][ T31] ? path_mount+0x61c/0xfe0 [ 394.539789][ T31] ? user_path_at+0x44/0x60 [ 394.545532][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.553775][ T31] __se_sys_mount+0x317/0x410 [ 394.566548][ T31] ? __pfx___se_sys_mount+0x10/0x10 [ 394.572614][ T10] usb 4-1: config 0 descriptor?? [ 394.580473][ T31] ? rcu_is_watching+0x15/0xb0 [ 394.591240][ T31] ? __x64_sys_mount+0x20/0xc0 [ 394.608114][ T31] do_syscall_64+0xfa/0xfa0 [ 394.612804][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.623499][ T31] ? clear_bhb_loop+0x60/0xb0 [ 394.637579][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.643554][ T31] RIP: 0033:0x7f373d18ebe9 [ 394.648304][ T31] RSP: 002b:00007f373e01c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 394.657106][ T31] RAX: ffffffffffffffda RBX: 00007f373d3b6090 RCX: 00007f373d18ebe9 [ 394.665133][ T31] RDX: 0000200000000240 RSI: 0000200000000040 RDI: 0000200000000080 [ 394.673553][ T31] RBP: 00007f373d211e19 R08: 0000000000000000 R09: 0000000000000000 [ 394.682428][ T31] R10: 00000000020080c4 R11: 0000000000000246 R12: 0000000000000000 [ 394.690844][ T31] R13: 00007f373d3b6128 R14: 00007f373d3b6090 R15: 00007fffa9aac348 [ 394.699146][ T31] [ 394.704536][ T981] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 394.723489][ T31] INFO: lockdep is turned off. [ 394.728956][ T31] NMI backtrace for cpu 0 [ 394.728979][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 394.729003][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 394.729016][ T31] Call Trace: [ 394.729024][ T31] [ 394.729033][ T31] dump_stack_lvl+0x189/0x250 [ 394.729070][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.729111][ T31] ? __pfx__printk+0x10/0x10 [ 394.729146][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 394.729170][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 394.729192][ T31] ? __pfx__printk+0x10/0x10 [ 394.729223][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 394.729247][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 394.729271][ T31] watchdog+0xf60/0xfa0 [ 394.729291][ T31] ? watchdog+0x1e2/0xfa0 [ 394.729311][ T31] kthread+0x711/0x8a0 [ 394.729340][ T31] ? __pfx_watchdog+0x10/0x10 [ 394.729369][ T31] ? __pfx_kthread+0x10/0x10 [ 394.729397][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.729423][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.729449][ T31] ? __pfx_kthread+0x10/0x10 [ 394.729476][ T31] ret_from_fork+0x47c/0x820 [ 394.729500][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 394.729526][ T31] ? __switch_to_asm+0x39/0x70 [ 394.729546][ T31] ? __switch_to_asm+0x33/0x70 [ 394.729566][ T31] ? __pfx_kthread+0x10/0x10 [ 394.729593][ T31] ret_from_fork_asm+0x1a/0x30 [ 394.729622][ T31] [ 394.729650][ T31] Sending NMI from CPU 0 to CPUs 1: [ 394.753106][ T981] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0014/input/input39 [ 394.753303][ C1] NMI backtrace for cpu 1 [ 394.753317][ C1] CPU: 1 UID: 0 PID: 981 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 394.753338][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 394.753350][ C1] Workqueue: usb_hub_wq hub_event [ 394.753389][ C1] RIP: 0010:io_serial_out+0x7c/0xc0 [ 394.753416][ C1] Code: 46 66 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 3c f0 c9 fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 38 c1 [ 394.753431][ C1] RSP: 0018:ffffc9000393dfd0 EFLAGS: 00000002 [ 394.753446][ C1] RAX: 000000000000005b RBX: 000000000000005b RCX: 0000000000000000 [ 394.753458][ C1] RDX: 00000000000003f8 RSI: 000000000004985c RDI: 000000000004985d [ 394.753470][ C1] RBP: 00000000000003f8 R08: ffff888142b18237 R09: 1ffff11028563046 [ 394.753483][ C1] R10: dffffc0000000000 R11: ffffffff855a87f0 R12: dffffc0000000000 [ 394.753496][ C1] R13: ffffffff99f518c1 R14: ffffffff9a246080 R15: 0000000000000000 [ 394.753509][ C1] FS: 0000000000000000(0000) GS:ffff8881258c4000(0000) knlGS:0000000000000000 [ 394.753524][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 394.753538][ C1] CR2: 0000200000001000 CR3: 0000000011dfc000 CR4: 00000000003526f0 [ 394.753555][ C1] DR0: 0000000000000007 DR1: 0000000000000002 DR2: 0000000000000008 [ 394.753565][ C1] DR3: 1000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 394.753578][ C1] Call Trace: [ 394.753585][ C1] [ 394.753593][ C1] serial8250_console_write+0x140d/0x1ba0 [ 394.753617][ C1] ? format_decode+0xd9/0xe30 [ 394.753637][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 394.753658][ C1] ? console_flush_all+0x13a/0xc40 [ 394.753685][ C1] ? rcu_is_watching+0x15/0xb0 [ 394.753705][ C1] ? lock_acquire+0x5f/0x360 [ 394.753724][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 394.753746][ C1] ? console_flush_all+0x13a/0xc40 [ 394.753768][ C1] ? console_flush_all+0x13a/0xc40 [ 394.753791][ C1] console_flush_all+0x725/0xc40 [ 394.753818][ C1] ? console_flush_all+0x13a/0xc40 [ 394.753843][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 394.753901][ C1] ? stack_trace_save+0x9c/0xe0 [ 394.753931][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 394.753961][ C1] console_unlock+0xc4/0x270 [ 394.753982][ C1] ? __pfx_console_unlock+0x10/0x10 [ 394.754001][ C1] ? vprintk_emit+0x444/0x7a0 [ 394.754023][ C1] ? vprintk_emit+0x444/0x7a0 [ 394.754042][ C1] ? vprintk_emit+0x444/0x7a0 [ 394.754062][ C1] vprintk_emit+0x5b7/0x7a0 [ 394.754083][ C1] ? vprintk_emit+0x444/0x7a0 [ 394.754105][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 394.754125][ C1] ? __device_attach+0x2b8/0x400 [ 394.754146][ C1] ? bus_probe_device+0x185/0x260 [ 394.754162][ C1] ? device_add+0x7b6/0xb50 [ 394.754181][ C1] ? usb_new_device+0xa39/0x16f0 [ 394.754202][ C1] ? hub_event+0x2958/0x4a20 [ 394.754230][ C1] ? worker_thread+0x8a0/0xda0 [ 394.754249][ C1] ? kthread+0x711/0x8a0 [ 394.754271][ C1] ? ret_from_fork+0x47c/0x820 [ 394.754295][ C1] _printk+0xcf/0x120 [ 394.754323][ C1] ? __pfx__printk+0x10/0x10 [ 394.754349][ C1] ? __asan_memcpy+0x40/0x70 [ 394.754375][ C1] ? kobject_get_path+0x20b/0x2d0 [ 394.754400][ C1] input_register_device+0xa59/0x1140 [ 394.754423][ C1] hidinput_connect+0x269e/0x3030 [ 394.754462][ C1] hid_connect+0x499/0x19a0 [ 394.754488][ C1] ? usbhid_start+0x1a92/0x24b0 [ 394.754519][ C1] ? __pfx_hid_connect+0x10/0x10 [ 394.754547][ C1] hid_device_probe+0x548/0x710 [ 394.754572][ C1] ? driver_sysfs_add+0x1fe/0x210 [ 394.754594][ C1] ? __pfx_hid_device_probe+0x10/0x10 [ 394.754617][ C1] really_probe+0x26d/0x9e0 [ 394.754646][ C1] __driver_probe_device+0x18c/0x2f0 [ 394.754670][ C1] driver_probe_device+0x4f/0x430 [ 394.754695][ C1] __device_attach_driver+0x2ce/0x530 [ 394.754721][ C1] bus_for_each_drv+0x24e/0x2e0 [ 394.754738][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 394.754764][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 394.754786][ C1] __device_attach+0x2b8/0x400 [ 394.754809][ C1] ? __pfx___device_attach+0x10/0x10 [ 394.754832][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 394.754864][ C1] bus_probe_device+0x185/0x260 [ 394.754883][ C1] device_add+0x7b6/0xb50 [ 394.754908][ C1] hid_add_device+0x398/0x540 [ 394.754933][ C1] usbhid_probe+0xe13/0x12a0 [ 394.754954][ C1] usb_probe_interface+0x665/0xc30 [ 394.754976][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 394.754992][ C1] really_probe+0x26d/0x9e0 [ 394.755018][ C1] __driver_probe_device+0x18c/0x2f0 [ 394.755045][ C1] driver_probe_device+0x4f/0x430 [ 394.755070][ C1] __device_attach_driver+0x2ce/0x530 [ 394.755095][ C1] bus_for_each_drv+0x24e/0x2e0 [ 394.755113][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 394.755137][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 394.755158][ C1] __device_attach+0x2b8/0x400 [ 394.755184][ C1] ? __pfx___device_attach+0x10/0x10 [ 394.755206][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 394.755232][ C1] bus_probe_device+0x185/0x260 [ 394.755250][ C1] device_add+0x7b6/0xb50 [ 394.755271][ C1] usb_set_configuration+0x1a87/0x20e0 [ 394.755298][ C1] usb_generic_driver_probe+0x8d/0x150 [ 394.755329][ C1] usb_probe_device+0x1c4/0x390 [ 394.755347][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 394.755363][ C1] really_probe+0x26d/0x9e0 [ 394.755389][ C1] __driver_probe_device+0x18c/0x2f0 [ 394.755412][ C1] driver_probe_device+0x4f/0x430 [ 394.755437][ C1] __device_attach_driver+0x2ce/0x530 [ 394.755465][ C1] bus_for_each_drv+0x24e/0x2e0 [ 394.755483][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 394.755507][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 394.755528][ C1] __device_attach+0x2b8/0x400 [ 394.755551][ C1] ? __pfx___device_attach+0x10/0x10 [ 394.755575][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 394.755603][ C1] bus_probe_device+0x185/0x260 [ 394.755623][ C1] device_add+0x7b6/0xb50 [ 394.755645][ C1] usb_new_device+0xa39/0x16f0 [ 394.755672][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 394.755696][ C1] ? rcu_is_watching+0x15/0xb0 [ 394.755718][ C1] hub_event+0x2958/0x4a20 [ 394.755766][ C1] ? __pfx_hub_event+0x10/0x10 [ 394.755791][ C1] ? rcu_is_watching+0x15/0xb0 [ 394.755809][ C1] ? lock_acquire+0x5f/0x360 [ 394.755827][ C1] ? rcu_is_watching+0x15/0xb0 [ 394.755851][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 394.755873][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 394.755893][ C1] process_scheduled_works+0xae1/0x17b0 [ 394.755924][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 394.755950][ C1] worker_thread+0x8a0/0xda0 [ 394.755971][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 394.755999][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 394.756021][ C1] ? __kthread_parkme+0x7b/0x200 [ 394.756045][ C1] kthread+0x711/0x8a0 [ 394.756069][ C1] ? __pfx_worker_thread+0x10/0x10 [ 394.756089][ C1] ? __pfx_kthread+0x10/0x10 [ 394.756113][ C1] ? rcu_is_watching+0x15/0xb0 [ 394.756136][ C1] ? __pfx_kthread+0x10/0x10 [ 394.756159][ C1] ret_from_fork+0x47c/0x820 [ 394.756179][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 394.756202][ C1] ? __switch_to_asm+0x39/0x70 [ 394.756220][ C1] ? __switch_to_asm+0x33/0x70 [ 394.756236][ C1] ? __pfx_kthread+0x10/0x10 [ 394.756261][ C1] ret_from_fork_asm+0x1a/0x30 [ 394.756288][ C1] [ 394.805576][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 394.805605][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 394.805634][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 394.805649][ T31] Call Trace: [ 394.805660][ T31] [ 394.805671][ T31] dump_stack_lvl+0x99/0x250 [ 394.805712][ T31] ? __asan_memcpy+0x40/0x70 [ 394.805742][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.805777][ T31] ? __pfx__printk+0x10/0x10 [ 394.805817][ T31] vpanic+0x281/0x750 [ 394.805853][ T31] ? __pfx_vpanic+0x10/0x10 [ 394.805880][ T31] ? preempt_schedule+0xae/0xc0 [ 394.805915][ T31] panic+0xb9/0xc0 [ 394.805942][ T31] ? __pfx_panic+0x10/0x10 [ 394.805974][ T31] ? __pfx_panic+0x10/0x10 [ 394.806002][ T31] watchdog+0xf9f/0xfa0 [ 394.806026][ T31] ? watchdog+0x1e2/0xfa0 [ 394.806048][ T31] kthread+0x711/0x8a0 [ 394.806081][ T31] ? __pfx_watchdog+0x10/0x10 [ 394.806114][ T31] ? __pfx_kthread+0x10/0x10 [ 394.806146][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.806173][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.806204][ T31] ? __pfx_kthread+0x10/0x10 [ 394.806234][ T31] ret_from_fork+0x47c/0x820 [ 394.806262][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 394.806292][ T31] ? __switch_to_asm+0x39/0x70 [ 394.806314][ T31] ? __switch_to_asm+0x33/0x70 [ 394.806338][ T31] ? __pfx_kthread+0x10/0x10 [ 394.806369][ T31] ret_from_fork_asm+0x1a/0x30 [ 394.806400][ T31] [ 394.809537][ T31] Kernel Offset: disabled