last executing test programs: 2.249806832s ago: executing program 1 (id=1487): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='trusted.overlay.origin\x00') ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)='veth0_to_batadv\x00') ioctl$VT_ACTIVATE(r0, 0x5606, 0x5) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'ipvlan1\x00', &(0x7f00000000c0)=@ethtool_rxfh={0x46, 0x1, 0x1, 0xffffffb5, 0x3, "62e344", 0x2, [0xba1]}}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e20, 0x8, @local, 0x1000}}, 0x0, 0x0, 0x5, 0x0, "d5ca499237a56e5475c29c6ca6e587d333652e0d1753873e391d269419f19145bb0a2cb105e2a3c1e8d87d045b1e57d1d80de7cdd609f1221121bd56d67ea18a7dd184ccad02baf1f47597da87734dc2"}, 0xd8) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xd0, &(0x7f0000000240), &(0x7f0000000280)=0x4) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000002c0)) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x20002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000400)={@in6={0xa, 0x4e21, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x46da}, {&(0x7f0000000380)=""/59, 0x3b}, &(0x7f00000003c0), 0x60}, 0xa0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, 0x1412, 0x200, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10048024}, 0x4000080) lsetxattr$trusted_overlay_redirect(&(0x7f0000000600)='.\x00', &(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x8, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000700)) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000740)={0x5, 0xffffffd4}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000780)={"9132c4997ec69395bdc2083b6ec73ec8", 0x0, 0x0, {0x5, 0x659}, {0x0, 0x1}, 0x69acc05b, [0x4, 0x3, 0xfffffffffffffffc, 0x6359, 0x0, 0x1, 0x7ff, 0x84, 0x1ff, 0x8, 0x532, 0x10001, 0xffffffffb08ca31e, 0x1, 0x2, 0x67]}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000880)=r5) fanotify_mark(r4, 0x2, 0x20, 0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00') r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000940), r4) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r6, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x96f}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x404c001) r7 = open(&(0x7f0000000a40)='./file0\x00', 0x101100, 0x8) read$FUSE(r3, &(0x7f0000000a80)={0x2020, 0x0, 0x0}, 0x2020) r9 = getpid() write$FUSE_LK(r7, &(0x7f0000002ac0)={0x28, 0x0, r8, {{0x4, 0x3, 0x1, r9}}}, 0x28) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f0000002b00)={{@any, 0x2}, 0x1, 0x2, 0x80}) 2.154481045s ago: executing program 1 (id=1489): r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x1}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000480)={{r1}, 0x0, 0xe, @inherit={0x80, &(0x7f0000000000)={0x0, 0x7, 0x67, 0xb6ff, {0x3b, 0x5, 0x8, 0x3, 0x6d}, [0x0, 0x1, 0x2, 0x10, 0x5, 0x401, 0xd]}}, @devid=r2}) r3 = fcntl$dupfd(r0, 0x406, r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001540)={'syztnl1\x00', &(0x7f0000001480)={'syztnl0\x00', 0x0, 0x7800, 0x40, 0x9, 0x2, {{0x19, 0x4, 0x1, 0xd, 0x64, 0x64, 0x0, 0x1, 0x2f, 0x0, @private=0xa010101, @rand_addr=0x64010100, {[@noop, @cipso={0x86, 0x21, 0x2, [{0x0, 0x9, "a344e19ec80c7d"}, {0x5, 0xa, "59d01bd953438958"}, {0x7, 0x8, "e88f9e8161cb"}]}, @rr={0x7, 0x7, 0xf4, [@private=0xa010102]}, @generic={0x88, 0xc, "76d2603ccf7f0d6ddcd1"}, @rr={0x7, 0x7, 0xe8, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @rr={0x7, 0xf, 0x13, [@private=0xa010101, @remote, @loopback]}, @ra={0x94, 0x4, 0x1}]}}}}}) bind$packet(r3, &(0x7f0000001580)={0x11, 0x1b, r4, 0x1, 0x1, 0x6, @local}, 0x14) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f00000015c0)=0x7, 0x2) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000001600)) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000011) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f0000001740)={{0xad3a, 0x51}, 0x2}, 0x10) pipe2$9p(&(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) readv(r6, &(0x7f0000001c40)=[{&(0x7f00000017c0)=""/157, 0x9d}, {&(0x7f0000001880)=""/253, 0xfd}, {&(0x7f0000001980)=""/197, 0xc5}, {&(0x7f0000001a80)=""/3, 0x3}, {&(0x7f0000001ac0)=""/93, 0x5d}, {&(0x7f0000001b40)=""/243, 0xf3}], 0x6) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000001d00), r3) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x2c, r7, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001e00)) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x28, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001fc0)={'sit0\x00', &(0x7f0000001f40)={'ip_vti0\x00', r4, 0x40, 0x1, 0xa000000, 0xffffffd1, {{0xc, 0x4, 0x0, 0x6, 0x30, 0x68, 0x0, 0xd, 0x2f, 0x0, @remote, @remote, {[@cipso={0x86, 0x1c, 0x0, [{0x1, 0xa, "5608dd3bdae218bf"}, {0x0, 0xc, "2142cec7e0156da153d7"}]}]}}}}}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000023c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x48200020}, 0xc, &(0x7f0000002380)={&(0x7f0000002080)={0x2d0, r8, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5a10ab9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe7c2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x24be, @ipv4={'\x00', '\xff\xff', @multicast2}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8c2}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x22800000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x10001, @local, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7fffffff, @local, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}}}}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @mcast1, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "e8ad293351a7d50d7d6e141b06935676c8fec9804fa6b45c7c270990967bdcad288e"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x4}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040000) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000024c0)={@ax25={{0x3, @null, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, {&(0x7f0000002400)=""/127, 0x7f}, &(0x7f0000002480), 0x60}, 0xa0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000025c0), r3) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000002680)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x1c, r9, 0x10, 0x70bd26, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$FIOCLEX(r0, 0x5451) symlinkat(&(0x7f00000026c0)='./file0\x00', r3, &(0x7f0000002700)='./file0\x00') socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002780), r5) sendmsg$IPVS_CMD_GET_DAEMON(r10, &(0x7f00000028c0)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002880)={&(0x7f00000027c0)={0x88, r11, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 2.070020752s ago: executing program 2 (id=1490): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000002380)={{}, {0x1, 0x4}, [{0x2, 0x3}], {0x4, 0x4}, [{0x8, 0x6}], {}, {0x20, 0x6}}, 0x34, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x99) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x93771000) 1.968991937s ago: executing program 1 (id=1492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000000906050000000000ffffeff9060000000900020073797a300000000014000780060004404e20000006000540362100000500010007"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) 1.808105991s ago: executing program 3 (id=1494): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x80401, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x28801, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r2) ioctl$KVM_CHECK_EXTENSION(r1, 0xae01, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa07, &(0x7f0000000000)={{&(0x7f00006f0000/0x1000)=nil, 0x1000}, 0x3, 0x2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000900)={0x100000, 0x399000, 0x8}) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f00002e6000/0x400000)=nil) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x7, r4, 0x1478, 0x350) futex_waitv(&(0x7f0000001b00)=[{0x3, &(0x7f0000000940)=0x400020000000a, 0x6}], 0x1, 0x0, 0x0, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000001c0), 0x2) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x120}) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000000c0), 0x2) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) 1.797447805s ago: executing program 1 (id=1495): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x80}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x50000000}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1.60983593s ago: executing program 1 (id=1497): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x3, 0x81, 0x8}) (async, rerun: 32) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) (rerun: 32) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "0400"}]}}, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="a3a6500000001822"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x200080d1) (async) r3 = syz_socket_connect_nvme_tcp() setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x81, 0xbd, 0xf, 0x7}, {0xff, 0x5, 0xf8, 0x9}, {0x9, 0x3, 0x1, 0x9}, {0x9, 0x0, 0x8, 0xffff8000}, {0xdd82, 0x7, 0x4}, {0x101, 0x4, 0x5, 0x3}]}, 0x10) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async, rerun: 32) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$I2C_RDWR(r5, 0x707, 0x0) (async) setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f00000000c0)={0xfffffffc, 0x2000008}, 0x8) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) 1.145538722s ago: executing program 3 (id=1499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000000906054e2000000000000000060000000900020073797a300000000314000780060004404e20000006000540362100000500010007"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) 1.062081609s ago: executing program 2 (id=1500): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) 1.061753444s ago: executing program 3 (id=1501): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001240)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x400, 0x2, @loopback}, {0xa, 0x4e21, 0x101, @mcast2, 0x9}, r2, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648d000) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x3, {0xa, 0x4e20, 0x400, @private0, 0x400}}}, 0x32) 1.004629777s ago: executing program 2 (id=1502): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000008c0)={0x100000, 0x20007f, 0x80000}, 0x20) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xe, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcc) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000f40)=@ethtool_gstrings={0x1b, 0x3}}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000007e23400910cf33fc0e86f030b86f8d92b9b9ba250965da31298f7470b582790c545c5a77a450a85cbbf6943be8fdc70f21d5395f", @ANYRES16=r5, @ANYBLOB="010426bd7000fbdbdf25170000001c000680150003001d62812055fd4f3ad78e15310bc349cfb5000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000200), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r6, 0x5708e000) 1.001584244s ago: executing program 3 (id=1503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0xfd, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000100)="6139c1ef249a9f4f4db71ceb7b11028edb553bc82a2a9e733a5d8e5cee983363332d8744033e075fba7382450000", 0x2e) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)={0x2, [0x1, 0x3]}, 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000180)=0x8) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) 830.213736ms ago: executing program 0 (id=1504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000000906050000000000f9efffff060000000900020073797a300000000014000780060004404e20000006000540362100000500010007"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) 829.970987ms ago: executing program 2 (id=1505): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000400)=[{0x6, 0xa5, 0x0, 0x6}]}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003041000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff0200"/51], 0xfdef) 829.335273ms ago: executing program 3 (id=1506): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x80}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xf0ffffff}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 725.535171ms ago: executing program 1 (id=1507): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) unshare(0x2a020480) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r3, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="2a0000000600000000000000000000000100000000000000000000000020000001000000020000000008c1b21879e652392095df1cacab5ad9094da2ab81b42fea28c8d85f250021d486ff472c981d758be9bd2560f8266a065f750be35d00000000000000"], 0x2a) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x22020600) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000180)={'ip6gre0\x00', @ifru_names='rose0\x00'}) ioctl$KVM_SET_IRQCHIP(r5, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x7, 0x2, '\x00', 0x62}, {0x8, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x8, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x7}, {0xf, 0x7, 0x5}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0x3, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}}) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) personality(0x5400004) socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x541b, &(0x7f0000000080)={r4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000340)={r8}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r7, 0x7dfff000) 709.22376ms ago: executing program 0 (id=1508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000090605000000000000000000060021360900020073797a300000000014000780060004404e20000006000540362100000500010007"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) 622.118824ms ago: executing program 3 (id=1509): r0 = syz_io_uring_setup(0x2f93, &(0x7f0000000180)={0x0, 0x20c383, 0x3000, 0x1, 0x200004}, &(0x7f0000000100), &(0x7f0000000200)) setpriority(0x1000000, 0x0, 0x4) r1 = epoll_create(0xaf2) pause() epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe000200f}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000240), 0x7, 0x12a01) ioctl$SG_BLKTRACESTOP(r3, 0x1275, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r2, 0x8ee4a000) memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) 552.247119ms ago: executing program 2 (id=1510): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x18, 0x41, 0x107, 0x0, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x31}]}, 0x18}}, 0x4010) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x1) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000900)={0x2}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002400010001000000c2e79f760eb62f83060003"], 0x1c}}, 0x8004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x5708e000) 525.188318ms ago: executing program 0 (id=1511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000000906054e2000000000000000060000000900020073797a3000004e2014000780060004404e20000006000540362100000500010007"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) 418.175656ms ago: executing program 2 (id=1512): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0x0, 0x2019}}}, 0x7) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) read$FUSE(r1, 0x0, 0x2e) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 416.133716ms ago: executing program 0 (id=1513): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae\x04\x00\x00\x00\xc2\x9aml\r\xcf\xaa\x13\x99\x85B\xc3\x06<\xc2\xa9\xc3\xdb\x88\xee\x85md\xc8\x85HX\xa9%\f\x8fe\xe0\x00\x00\xa8\xfdn\xbe \a\x0e\xa3\xb9\x1d\x9dO\xbdj\x00\x00\xfb\xff\x00c\xb2\xc9\ap\xd0\xa2\x82\x1e\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcb\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2\xa75\x9d\xcb\x1e\x80\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x00uNh\xc5(\xbc\xf3\xac{\x04D2\xf2\xcd\xc2{E\xae\x89\xddI\xc8\xc6\xe9\xef\x98\xf0\x8b\xac\x9bR\x10\x011\x9fi\x00\x00\x00\x00\x00\x00\x00\x00\x002?D\x86\x14\xa52<\x87n\xf4\x04R\x15\t\xb8\xbeT\xb8\xe7K)\x1fP\xb6\xce8\xcc\xabe\xcb\xd0\xf9\xc9\xfe_\v\xaa#\x8f\x8asu\xb2\xfe\xc4\xbe\x03\xd3\x93E\x1d\xaf}\x9b\xac\xc2\x9a\xe6W\x92sD\fn\x9e\xc2s\xc6_4\f\xc1\x8b\x9a\xa4_\xad\x9b\xb9 \v\x0f{>\xdf^.\xb8\x96\x1d\x99vY\xa8\xfa\xd7i\x94i^;\xaa\xe7XA\xd2\xc5\x02\x12I\xbe\xd0Ksq\x96 \xbf\xed\x1c\x91\xeeN\xda&\xddtG\xc2\xa8j\xae\xac)\xfdNu\x19\x91\xa7z\x1b\x0e\xab\xd2k\x16\x87#\xf6p#\x8d\xdd?\x9fXV\x12\xa9\xc7v\x02\x98g:4\xb6\xcaY\xc2~k\xcb\xef]h/\xa2\xaf\xc4\xec\xdc\xd4H\xed\x94qNY\x85\x87&\xf1\xbb\f\x02\x0fo\xae\xf4\x19|\xc4\xfcL\xdb\x00\xedrK\x13\xb5J?s\x93\xe6\xda\xf0\xf3B\x8d\xb4\xd8>\x12\xb0\x8e\x8d\xdaQ\xa2\xd0\xbc\x92d\x9e^\xbc\xd5\x8aNf\xefa\v*\xb08\xfc\xd2\xa4\x11`\xae\x98\xcc\xe1\xea\xc2\x1dKR\x0e\x1cK\x86\v\xba\xdfz\xa8\xdf\xb6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xe9\xb3@\xe8\a0\x1e\xb8L\x83\xc4\xa8\xb2\xc1\xf8\xae\x1d\x198\x0f\xfa\t\x88+\xdc\xe1\x01@\xbd\x8ba\"|\x14\x1bF\x9b\xd3\xff7\a\x1c:U\xba\xf4\t\xdc\xef\xe3\x11\xdb^\xee\x8c0\xee\xde6:\x80t\xfb\xbc^K\xb4\x8c9\xb0\xec\x82\x127!\x0e\xa3\xc9\xe0\xea\xfa\x0f\xbb\x0e \xc3\xef\xb20xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) 0s ago: executing program 0 (id=1515): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0x200, 0x0) mq_getsetattr(r2, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000100)=""/23, 0x17, 0x6068, &(0x7f0000000200)={0x77359400}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000009c0)={0x28, r3, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8099}, 0x440) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xe4, 0x0, 0x42, 0x5c}) r6 = socket(0x2b, 0x801, 0x1) mmap(&(0x7f000087d000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f000087cf79)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x0, 0x0, "0000000000000099010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be4f28860000000000000000ffe300"}, 0xd8) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) fadvise64(r7, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r7, 0x93771000) kernel console output (not intermixed with test programs): 00007ffd0a65b6e8 [ 184.900107][ T7682] [ 185.109382][ T7664] [U] [ 185.364751][ T43] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 185.395476][ T43] usb 2-1: device descriptor read/8, error -71 [ 185.635014][ T43] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 185.655315][ T43] usb 2-1: device descriptor read/8, error -71 [ 185.767926][ T43] usb usb2-port1: unable to enumerate USB device [ 185.814662][ T983] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 185.964600][ T983] usb 4-1: Using ep0 maxpacket: 32 [ 185.971723][ T983] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 185.980025][ T983] usb 4-1: config 0 has no interface number 0 [ 185.986301][ T983] usb 4-1: config 0 interface 12 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.004445][ T983] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=2e.5f [ 186.013640][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.021722][ T983] usb 4-1: Product: syz [ 186.025973][ T983] usb 4-1: Manufacturer: syz [ 186.030590][ T983] usb 4-1: SerialNumber: syz [ 186.037782][ T983] usb 4-1: config 0 descriptor?? [ 186.048753][ T983] iowarrior 4-1:0.12: no interrupt-in endpoint found [ 186.299915][ T983] usb 4-1: USB disconnect, device number 28 [ 186.498910][ T983] usb 1-1: USB disconnect, device number 34 [ 186.588397][ T7709] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 186.596300][ T7709] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 186.604786][ T7709] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 186.612816][ T7709] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 186.622671][ T7709] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 186.630263][ T7709] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 186.638534][ T7706] FAULT_INJECTION: forcing a failure. [ 186.638534][ T7706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.640854][ T7709] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 186.657932][ T7706] CPU: 1 UID: 0 PID: 7706 Comm: syz.0.595 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 186.657967][ T7706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 186.657983][ T7706] Call Trace: [ 186.657992][ T7706] [ 186.658002][ T7706] dump_stack_lvl+0x189/0x250 [ 186.658041][ T7706] ? __pfx____ratelimit+0x10/0x10 [ 186.658078][ T7706] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.658111][ T7706] ? __pfx__printk+0x10/0x10 [ 186.658143][ T7706] ? __might_fault+0xb0/0x130 [ 186.658194][ T7706] should_fail_ex+0x414/0x560 [ 186.658237][ T7706] fpu__restore_sig+0x1bb/0x1100 [ 186.658268][ T7706] ? __lock_acquire+0xab9/0xd20 [ 186.658297][ T7706] ? __pfx_fpu__restore_sig+0x10/0x10 [ 186.658357][ T7706] __ia32_sys_rt_sigreturn+0x661/0x7b0 [ 186.658390][ T7706] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 186.658416][ T7706] ? _raw_spin_unlock_irq+0x2e/0x50 [ 186.658483][ T7706] ? __task_pid_nr_ns+0x28/0x470 [ 186.658525][ T7706] ? do_syscall_64+0xbe/0x3b0 [ 186.658552][ T7706] do_syscall_64+0xfa/0x3b0 [ 186.658572][ T7706] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.658605][ T7706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.658630][ T7706] ? clear_bhb_loop+0x60/0xb0 [ 186.658659][ T7706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.658684][ T7706] RIP: 0033:0x7f936e98eb69 [ 186.658707][ T7706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.658728][ T7706] RSP: 002b:00007f936f715038 EFLAGS: 00000246 [ 186.658749][ T7706] RAX: 0000000000000058 RBX: 00007f936ebb5fa0 RCX: 00007f936e98eb69 [ 186.658766][ T7706] RDX: 0000000000002020 RSI: 0000200000002140 RDI: 0000000000000004 [ 186.658783][ T7706] RBP: 00007f936f715090 R08: 0000000000000000 R09: 0000000000000000 [ 186.658796][ T7706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.658809][ T7706] R13: 0000000000000000 R14: 00007f936ebb5fa0 R15: 00007ffc4432bdc8 [ 186.658839][ T7706] [ 186.860834][ T7709] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 186.888602][ T7709] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 186.925790][ T7709] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 186.978608][ T7709] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 187.042824][ T7709] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 187.077264][ T7709] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 187.090480][ T7709] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 187.106421][ T7709] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 187.127649][ T7709] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 187.141752][ T7718] /dev/rnullb0: Can't open blockdev [ 187.170545][ T7709] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 187.196315][ T7709] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 187.213375][ T7709] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 187.240301][ T7709] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 187.254893][ T7709] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 187.262248][ T7709] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 187.272957][ T7709] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 187.287751][ T7709] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 187.299772][ T7709] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 187.313438][ T7709] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 187.328386][ T7709] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 187.354692][ T5965] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 187.397751][ T7709] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 187.421262][ T7709] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 187.445420][ T7709] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 187.531272][ T5965] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.538579][ T7728] netlink: 'syz.3.604': attribute type 3 has an invalid length. [ 187.558906][ T7728] netlink: 'syz.3.604': attribute type 3 has an invalid length. [ 187.564620][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.580622][ T7728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.604'. [ 187.590864][ T5965] usb 2-1: Product: syz [ 187.596086][ T5965] usb 2-1: Manufacturer: syz [ 187.603339][ T5965] usb 2-1: SerialNumber: syz [ 187.685724][ T7735] overlay: Unknown parameter 'euid' [ 187.691264][ T7734] FAULT_INJECTION: forcing a failure. [ 187.691264][ T7734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.712645][ T7734] CPU: 0 UID: 0 PID: 7734 Comm: syz.2.606 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 187.712678][ T7734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.712692][ T7734] Call Trace: [ 187.712701][ T7734] [ 187.712710][ T7734] dump_stack_lvl+0x189/0x250 [ 187.712745][ T7734] ? __pfx____ratelimit+0x10/0x10 [ 187.712779][ T7734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.712809][ T7734] ? __pfx__printk+0x10/0x10 [ 187.712854][ T7734] should_fail_ex+0x414/0x560 [ 187.712885][ T7734] _copy_to_user+0x31/0xb0 [ 187.712909][ T7734] simple_read_from_buffer+0xe1/0x170 [ 187.712941][ T7734] proc_fail_nth_read+0x1b3/0x220 [ 187.712978][ T7734] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.713014][ T7734] ? rw_verify_area+0x2a6/0x4d0 [ 187.713034][ T7734] ? __lock_acquire+0xab9/0xd20 [ 187.713054][ T7734] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.713089][ T7734] vfs_read+0x200/0x980 [ 187.713118][ T7734] ? fdget_pos+0x247/0x320 [ 187.713151][ T7734] ? __pfx___mutex_lock+0x10/0x10 [ 187.713185][ T7734] ? __pfx_vfs_read+0x10/0x10 [ 187.713209][ T7734] ? __fget_files+0x2a/0x420 [ 187.713242][ T7734] ? __fget_files+0x3a0/0x420 [ 187.713267][ T7734] ? __fget_files+0x2a/0x420 [ 187.713305][ T7734] ksys_read+0x145/0x250 [ 187.713331][ T7734] ? __pfx_ksys_read+0x10/0x10 [ 187.713350][ T7734] ? __task_pid_nr_ns+0x28/0x470 [ 187.713390][ T7734] ? do_syscall_64+0xbe/0x3b0 [ 187.713415][ T7734] do_syscall_64+0xfa/0x3b0 [ 187.713433][ T7734] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.713464][ T7734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.713486][ T7734] ? clear_bhb_loop+0x60/0xb0 [ 187.713513][ T7734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.713535][ T7734] RIP: 0033:0x7fc75df8d57c [ 187.713556][ T7734] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 187.713575][ T7734] RSP: 002b:00007fc75ed7e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 187.713598][ T7734] RAX: ffffffffffffffda RBX: 00007fc75e1b5fa0 RCX: 00007fc75df8d57c [ 187.713614][ T7734] RDX: 000000000000000f RSI: 00007fc75ed7e0a0 RDI: 0000000000000005 [ 187.713628][ T7734] RBP: 00007fc75ed7e090 R08: 0000000000000000 R09: 0000000000000000 [ 187.713642][ T7734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.713655][ T7734] R13: 0000000000000000 R14: 00007fc75e1b5fa0 R15: 00007fffe10ccb78 [ 187.713689][ T7734] [ 188.658002][ T5965] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 188.669888][ T5965] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 188.884330][ T7769] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 189.104714][ T43] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 189.274641][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 189.328465][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 189.352023][ T43] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 189.373295][ T7779] syzkaller1: entered promiscuous mode [ 189.378445][ T43] usb 1-1: can't read configurations, error -71 [ 189.382306][ T7779] syzkaller1: entered allmulticast mode [ 189.404796][ T7778] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 189.412245][ T7778] VFS: Can't find a romfs filesystem on dev rnullb0. [ 189.412245][ T7778] [ 189.634613][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 190.002757][ T7803] netlink: 'syz.0.629': attribute type 21 has an invalid length. [ 190.011074][ T7803] netlink: 156 bytes leftover after parsing attributes in process `syz.0.629'. [ 190.023763][ T7803] netlink: 'syz.0.629': attribute type 21 has an invalid length. [ 190.034030][ T7803] netlink: 156 bytes leftover after parsing attributes in process `syz.0.629'. [ 190.161463][ T7807] vxfs: WRONG superblock magic 00000000 at 1 [ 190.171080][ T7807] vxfs: WRONG superblock magic 00000000 at 8 [ 190.178489][ T7807] vxfs: can't find superblock. [ 190.301216][ T5965] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 190.372869][ T5965] usb 2-1: USB disconnect, device number 37 [ 190.391391][ T5965] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 191.114595][ T5965] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 191.229533][ T7844] syzkaller1: entered promiscuous mode [ 191.235814][ T7844] syzkaller1: entered allmulticast mode [ 191.244287][ T7844] /dev/rnullb0: Can't open blockdev [ 191.268364][ T5965] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 191.277534][ T5965] usb 2-1: config 0 has no interface number 0 [ 191.288206][ T5965] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 191.298429][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.306643][ T5965] usb 2-1: Product: syz [ 191.310858][ T5965] usb 2-1: Manufacturer: syz [ 191.315587][ T5965] usb 2-1: SerialNumber: syz [ 191.326076][ T5965] usb 2-1: config 0 descriptor?? [ 191.460302][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.647'. [ 191.537250][ T5965] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 191.560711][ T5965] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 191.577756][ T5965] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 191.586973][ T5965] usb 2-1: media controller created [ 191.631837][ T5965] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 191.770469][ T5965] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 191.851607][ T5965] usb 2-1: USB disconnect, device number 38 [ 192.235567][ T7863] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 192.242884][ T7863] /dev/rnullb0: Can't open blockdev [ 192.461210][ T7868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.654'. [ 192.474296][ T7870] /dev/rnullb0: Can't open blockdev [ 192.489876][ T7868] nbd: illegal input index -1900544 [ 192.527018][ T7868] FAT-fs (rnullb0): bogus number of reserved sectors [ 192.538449][ T7868] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 192.795138][ T43] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 192.935231][ T43] usb 2-1: device descriptor read/64, error -71 [ 193.054909][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 193.176910][ T43] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 193.205352][ T9] usb 4-1: device descriptor read/64, error -71 [ 193.264804][ T5894] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 193.314633][ T43] usb 2-1: device descriptor read/64, error -71 [ 193.424926][ T43] usb usb2-port1: attempt power cycle [ 193.447078][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.458279][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 193.465969][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.476521][ T5894] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 193.486180][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.499247][ T5894] usb 1-1: config 0 descriptor?? [ 193.510489][ T5894] usbhid 1-1:0.0: can't add hid device: -22 [ 193.516823][ T5894] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 193.615510][ T9] usb 4-1: device descriptor read/64, error -71 [ 193.701297][ T7899] /dev/rnullb0: Can't open blockdev [ 193.726194][ T9] usb usb4-port1: attempt power cycle [ 193.748921][ T983] usb 1-1: USB disconnect, device number 37 [ 193.769166][ T43] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 193.796939][ T43] usb 2-1: device descriptor read/8, error -71 [ 194.034606][ T43] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 194.057730][ T43] usb 2-1: device descriptor read/8, error -71 [ 194.121552][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 194.145648][ T9] usb 4-1: device descriptor read/8, error -71 [ 194.166822][ T43] usb usb2-port1: unable to enumerate USB device [ 194.384605][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 194.407595][ T9] usb 4-1: device descriptor read/8, error -71 [ 194.526131][ T9] usb usb4-port1: unable to enumerate USB device [ 194.595108][ T43] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 194.748859][ T7908] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 194.762234][ T43] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=d6.bb [ 194.771705][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.779853][ T43] usb 1-1: Product: syz [ 194.784077][ T43] usb 1-1: Manufacturer: syz [ 194.788968][ T43] usb 1-1: SerialNumber: syz [ 194.796750][ T43] usb 1-1: config 0 descriptor?? [ 194.810084][ T43] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 195.010473][ T43] gspca_sn9c2028: read1 error -71 [ 195.024824][ T43] gspca_sn9c2028: read1 error -71 [ 195.031578][ T43] gspca_sn9c2028: read1 error -71 [ 195.045164][ T43] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -71 [ 195.072774][ T43] usb 1-1: USB disconnect, device number 38 [ 195.494292][ T7923] /dev/rnullb0: Can't open blockdev [ 195.893586][ T7930] netlink: 212 bytes leftover after parsing attributes in process `syz.3.677'. [ 195.914809][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 196.116196][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.160409][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.196481][ T9] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 196.244804][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.269956][ T9] usb 1-1: config 0 descriptor?? [ 196.621429][ T7954] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 196.633078][ T7954] /dev/rnullb0: Can't open blockdev [ 196.681136][ T7957] netlink: 92 bytes leftover after parsing attributes in process `syz.2.685'. [ 196.693817][ T7957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.685'. [ 196.771026][ T9] cm6533_jd 0003:0D8C:0022.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 196.996131][ T7972] /dev/rnullb0: Can't open blockdev [ 197.084765][ T983] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 197.234564][ T983] usb 2-1: Using ep0 maxpacket: 16 [ 197.242370][ T983] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.253079][ T983] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.271723][ T983] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.284437][ T983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.292848][ T983] usb 2-1: Product: syz [ 197.297457][ T983] usb 2-1: Manufacturer: syz [ 197.302130][ T983] usb 2-1: SerialNumber: syz [ 197.528882][ T983] usb 2-1: 0:2 : does not exist [ 197.533108][ T9] usb 1-1: USB disconnect, device number 39 [ 197.551447][ T983] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 197.596012][ T983] usb 2-1: USB disconnect, device number 43 [ 197.639833][ T6774] udevd[6774]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.830769][ T7986] netlink: 60 bytes leftover after parsing attributes in process `syz.3.692'. [ 197.840740][ T7985] netlink: 60 bytes leftover after parsing attributes in process `syz.3.692'. [ 198.187984][ T7994] /dev/rnullb0: Can't open blockdev [ 198.554866][ T5894] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 198.612394][ T8005] /dev/rnullb0: Can't open blockdev [ 198.724655][ T5894] usb 4-1: device descriptor read/64, error -71 [ 198.888377][ T8012] /dev/rnullb0: Can't open blockdev [ 198.987056][ T5894] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 199.139669][ T5894] usb 4-1: device descriptor read/64, error -71 [ 199.168772][ T8019] /dev/rnullb0: Can't open blockdev [ 199.255243][ T5894] usb usb4-port1: attempt power cycle [ 199.391269][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.706'. [ 199.601520][ T8031] /dev/rnullb0: Can't open blockdev [ 199.618792][ T5894] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 199.662326][ T5894] usb 4-1: device descriptor read/8, error -71 [ 199.773689][ T8036] /dev/rnullb0: Can't open blockdev [ 199.902860][ T8038] capability: warning: `syz.1.711' uses 32-bit capabilities (legacy support in use) [ 199.964717][ T983] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 200.019992][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.026586][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.033466][ T5894] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 200.081971][ T5894] usb 4-1: device descriptor read/8, error -71 [ 200.101104][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.712'. [ 200.119956][ T8040] qnx4: no qnx4 filesystem (no root dir). [ 200.138405][ T983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.165098][ T983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.204981][ T5894] usb usb4-port1: unable to enumerate USB device [ 200.215144][ T983] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 200.244684][ T983] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.264214][ T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.306785][ T983] usb 3-1: config 0 descriptor?? [ 200.365966][ T5965] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 200.530970][ T5965] usb 2-1: Using ep0 maxpacket: 32 [ 200.539845][ T5965] usb 2-1: unable to get BOS descriptor or descriptor too short [ 200.549312][ T5965] usb 2-1: config 4 has an invalid interface number: 75 but max is 0 [ 200.557586][ T5965] usb 2-1: config 4 has no interface number 0 [ 200.563789][ T5965] usb 2-1: config 4 interface 75 has no altsetting 0 [ 200.573403][ T5965] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=31.1c [ 200.583689][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.591950][ T5965] usb 2-1: Product: syz [ 200.596366][ T5965] usb 2-1: Manufacturer: syz [ 200.601047][ T5965] usb 2-1: SerialNumber: syz [ 200.725756][ T983] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 200.733253][ T983] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 200.740977][ T983] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 200.748526][ T983] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 200.756156][ T983] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 200.763622][ T983] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 200.771126][ T983] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 200.778732][ T983] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 200.786251][ T983] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 200.794924][ T983] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 200.811361][ T983] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 200.842172][ T5965] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 200.858364][ T5965] gspca_m5602: Failed to find a sensor [ 200.863897][ T5965] ALi m5602 2-1:4.75: ALi m5602 webcam failed [ 200.881828][ T5965] usb 2-1: USB disconnect, device number 44 [ 201.191401][ T8055] fuse: Unknown parameter 'g' [ 201.596275][ T8066] lo: mtu less than device minimum [ 202.158403][ T8073] /dev/rnullb0: Can't open blockdev [ 202.711635][ T983] usb 3-1: USB disconnect, device number 30 [ 202.888971][ T8092] binder: BINDER_SET_CONTEXT_MGR already set [ 202.894455][ T8090] mkiss: ax0: crc mode is auto. [ 202.900502][ T8092] binder: 8091:8092 ioctl 4018620d 2000000001c0 returned -16 [ 202.966075][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 203.120122][ T8096] /dev/rnullb0: Can't open blockdev [ 203.139121][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 203.159124][ T9] usb 2-1: config 0 has an invalid interface number: 212 but max is 0 [ 203.171881][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.206822][ T9] usb 2-1: config 0 has no interface number 0 [ 203.213063][ T9] usb 2-1: config 0 interface 212 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 203.256710][ T9] usb 2-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=39.2d [ 203.266226][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.274368][ T9] usb 2-1: Product: syz [ 203.278848][ T9] usb 2-1: Manufacturer: syz [ 203.283629][ T9] usb 2-1: SerialNumber: syz [ 203.301974][ T9] usb 2-1: config 0 descriptor?? [ 203.317793][ T9] safe_serial 2-1:0.212: safe_serial converter detected [ 203.329595][ T9] safe_serial 2-1:0.212: probe with driver safe_serial failed with error -22 [ 203.457503][ T8105] /dev/rnullb0: Can't open blockdev [ 203.712845][ T8109] : entered promiscuous mode [ 203.938793][ T9] usb 2-1: USB disconnect, device number 45 [ 204.895853][ T5965] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 205.064686][ T5965] usb 4-1: device descriptor read/64, error -71 [ 205.108012][ T8151] comedi comedi0: pcmda12: I/O port conflict (0x4f27,16) [ 205.111607][ T8152] /dev/sg0: Can't lookup blockdev [ 205.123769][ T8152] netlink: 328 bytes leftover after parsing attributes in process `syz.0.751'. [ 205.296101][ T9] hid-generic 0012:0005:0008.0006: item fetching failed at offset 31/137 [ 205.312472][ T9] hid-generic 0012:0005:0008.0006: probe with driver hid-generic failed with error -22 [ 205.326830][ T5965] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 205.380381][ T8160] vxfs: WRONG superblock magic 00000000 at 1 [ 205.388282][ T8160] vxfs: WRONG superblock magic 00000000 at 8 [ 205.394570][ T8160] vxfs: can't find superblock. [ 205.474879][ T5965] usb 4-1: device descriptor read/64, error -71 [ 205.585761][ T5965] usb usb4-port1: attempt power cycle [ 205.764622][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 205.914687][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 205.921904][ T9] usb 2-1: config 0 has an invalid interface number: 212 but max is 0 [ 205.934601][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.934757][ T5965] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 205.950529][ T9] usb 2-1: config 0 has no interface number 0 [ 205.958724][ T9] usb 2-1: config 0 interface 212 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 205.974708][ T9] usb 2-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=39.2d [ 205.984245][ T5965] usb 4-1: device descriptor read/8, error -71 [ 205.984353][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.999513][ T9] usb 2-1: Product: syz [ 206.003732][ T9] usb 2-1: Manufacturer: syz [ 206.013005][ T9] usb 2-1: SerialNumber: syz [ 206.030631][ T9] usb 2-1: config 0 descriptor?? [ 206.044309][ T9] safe_serial 2-1:0.212: safe_serial converter detected [ 206.053986][ T9] safe_serial 2-1:0.212: probe with driver safe_serial failed with error -22 [ 206.181333][ T8168] /dev/rnullb0: Can't open blockdev [ 206.239896][ T5965] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 206.280609][ T5965] usb 4-1: device descriptor read/8, error -71 [ 206.364031][ T43] usb 2-1: USB disconnect, device number 46 [ 206.404862][ T5965] usb usb4-port1: unable to enumerate USB device [ 206.564164][ T8181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.763'. [ 206.576156][ T8181] veth1_to_bond: entered allmulticast mode [ 206.621999][ T8180] veth1_to_bond: left allmulticast mode [ 206.785998][ T5965] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 206.947564][ T5965] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 206.961703][ T5965] usb 3-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 206.965343][ T8188] XFS (rnullb0): Invalid superblock magic number [ 206.976303][ T5965] usb 3-1: config 2 interface 0 has no altsetting 0 [ 206.991244][ T5965] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 207.018888][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.072032][ T5965] usb 3-1: Product: syz [ 207.087756][ T5965] usb 3-1: Manufacturer: syz [ 207.092424][ T5965] usb 3-1: SerialNumber: syz [ 207.582020][ T8216] syz.3.774: attempt to access beyond end of device [ 207.582020][ T8216] loop3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 207.854658][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 208.017362][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 208.026711][ T10] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 208.039607][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 208.054111][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 208.067653][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.076763][ T10] usb 2-1: Product: syz [ 208.082361][ T10] usb 2-1: Manufacturer: syz [ 208.090237][ T10] usb 2-1: SerialNumber: syz [ 208.226557][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 208.237288][ T9] usb 4-1: config 0 has an invalid interface number: 212 but max is 0 [ 208.250596][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.257166][ T8230] XFS (rnullb0): Invalid superblock magic number [ 208.288879][ T9] usb 4-1: config 0 has no interface number 0 [ 208.297218][ T9] usb 4-1: config 0 interface 212 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 208.346172][ T9] usb 4-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=39.2d [ 208.358808][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.369534][ T9] usb 4-1: Product: syz [ 208.373846][ T9] usb 4-1: Manufacturer: syz [ 208.400318][ T9] usb 4-1: SerialNumber: syz [ 208.413069][ T9] usb 4-1: config 0 descriptor?? [ 208.413498][ T8238] hfs: can't find a HFS filesystem on dev rnullb0 [ 208.430999][ T9] safe_serial 4-1:0.212: safe_serial converter detected [ 208.438992][ T9] safe_serial 4-1:0.212: probe with driver safe_serial failed with error -22 [ 208.694218][ T9] usb 4-1: USB disconnect, device number 42 [ 208.946178][ T10] usb 2-1: reset high-speed USB device number 47 using dummy_hcd [ 209.007993][ T8244] comedi comedi3: comedi_config --init_data is deprecated [ 209.020990][ T31] audit: type=1800 audit(1754106020.484:5): pid=8245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.783" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 209.120584][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 209.135455][ T10] usb 2-1: device firmware changed [ 209.151351][ T10] usb 2-1: USB disconnect, device number 47 [ 209.307769][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 209.476876][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 209.487000][ T10] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 209.502910][ T10] usb 2-1: string descriptor 0 read error: -22 [ 209.512760][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 209.522533][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.588788][ T5965] ims_pcu 3-1:2.0: Zero length descriptor [ 209.615120][ T5965] ims_pcu 3-1:2.0: probe with driver ims_pcu failed with error -22 [ 209.647145][ T5965] usb 3-1: USB disconnect, device number 31 [ 209.675365][ T9] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 209.695636][ T10] usb 2-1: reset high-speed USB device number 48 using dummy_hcd [ 209.838100][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 209.863826][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 209.879462][ T9] usb 4-1: config 9 has an invalid interface number: 47 but max is 0 [ 209.887890][ T9] usb 4-1: config 9 has no interface number 0 [ 209.894165][ T9] usb 4-1: config 9 interface 47 has no altsetting 0 [ 209.907862][ T9] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010b, bcdDevice=7f.32 [ 209.919342][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.929807][ T9] usb 4-1: Product: syz [ 209.934024][ T9] usb 4-1: Manufacturer: syz [ 209.941426][ T9] usb 4-1: SerialNumber: syz [ 209.970213][ T5965] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 210.144639][ T5965] usb 3-1: Using ep0 maxpacket: 16 [ 210.155362][ T5965] usb 3-1: config 0 has an invalid interface number: 58 but max is 0 [ 210.164388][ T5965] usb 3-1: config 0 has no interface number 0 [ 210.194953][ T5965] usb 3-1: config 0 interface 58 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 210.226740][ T5965] usb 3-1: config 0 interface 58 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 210.240299][ T5965] usb 3-1: config 0 interface 58 has no altsetting 0 [ 210.252305][ T5965] usb 3-1: New USB device found, idVendor=054c, idProduct=002b, bcdDevice= 1.03 [ 210.274559][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.282622][ T5965] usb 3-1: Product: syz [ 210.287335][ T5965] usb 3-1: Manufacturer: syz [ 210.291973][ T5965] usb 3-1: SerialNumber: syz [ 210.305717][ T5965] usb 3-1: config 0 descriptor?? [ 210.313253][ T8264] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 210.340996][ T8264] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 210.354142][ T5965] ums-isd200 3-1:0.58: USB Mass Storage device detected [ 210.451183][ T9] kvaser_usb 4-1:9.47: error -ENODEV: Cannot get usb endpoint(s) [ 210.491075][ T9] usb 4-1: USB disconnect, device number 43 [ 210.612213][ T5965] ums-isd200 3-1:0.58: probe with driver ums-isd200 failed with error -22 [ 210.638904][ T10] usb 2-1: USB disconnect, device number 48 [ 210.857523][ T43] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 210.990832][ T5965] usb 3-1: USB disconnect, device number 32 [ 211.034605][ T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 211.046564][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 211.059722][ T43] usb 1-1: config 0 has an invalid interface number: 212 but max is 0 [ 211.072262][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.084041][ T43] usb 1-1: config 0 has no interface number 0 [ 211.090468][ T43] usb 1-1: config 0 interface 212 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 211.107483][ T43] usb 1-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=39.2d [ 211.117073][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.125222][ T43] usb 1-1: Product: syz [ 211.129610][ T43] usb 1-1: Manufacturer: syz [ 211.136357][ T43] usb 1-1: SerialNumber: syz [ 211.143525][ T43] usb 1-1: config 0 descriptor?? [ 211.152518][ T43] safe_serial 1-1:0.212: safe_serial converter detected [ 211.159890][ T43] safe_serial 1-1:0.212: probe with driver safe_serial failed with error -22 [ 211.205342][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 211.213303][ T10] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 211.224118][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 211.233771][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 211.242969][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.251073][ T10] usb 2-1: Product:   [ 211.255311][ T10] usb 2-1: Manufacturer: 辞ë蔣ꮥı候廂溲땥▘䎨ꕒï™ê…ᚔ뤈敵贮韽綫ვ쑼䌅䩣ⴾ얦ã˜ç³›è…§ì£˜é‰Œë´¨î·£ì€²î®Šé´Šã¡Žá²—氕⚒颴橧ù墙ꕬꤑದìƒä‰µá¯Œï°·åµ±ã¢ë´•ëœ²é¶žâ瘰ç©ã••ã¬¿ëŒ¹å”®áˆŸ [ 211.277133][ T10] usb 2-1: SerialNumber: Ñ„ [ 211.290800][ T8293] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 211.438538][ T43] usb 1-1: USB disconnect, device number 40 [ 211.510474][ T10] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 211.529284][ T10] usb 2-1: USB disconnect, device number 49 [ 211.801140][ T8308] syz.2.801: attempt to access beyond end of device [ 211.801140][ T8308] loop2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 211.815128][ T8308] syz.2.801: attempt to access beyond end of device [ 211.815128][ T8308] loop2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 212.188460][ T8322] binder: BINDER_SET_CONTEXT_MGR already set [ 212.204654][ T8322] binder: 8319:8322 ioctl 4018620d 2000000001c0 returned -16 [ 212.401530][ T8330] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.811'. [ 212.434208][ T8330] raw_sendmsg: syz.2.811 forgot to set AF_INET. Fix it! [ 212.510898][ T8328] IPVS: persistence engine module ip_vs_pe_ not found [ 212.604129][ T8341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.695001][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 212.826402][ T9] usb 3-1: device descriptor read/64, error -71 [ 213.084995][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 213.235562][ T9] usb 3-1: device descriptor read/64, error -71 [ 213.358571][ T9] usb usb3-port1: attempt power cycle [ 213.411989][ T8357] netlink: 'syz.1.821': attribute type 1 has an invalid length. [ 213.435853][ T8357] netlink: 232 bytes leftover after parsing attributes in process `syz.1.821'. [ 213.459862][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'. [ 213.624604][ T983] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 213.664621][ T43] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 213.714767][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 213.763886][ T9] usb 3-1: device descriptor read/8, error -71 [ 213.779678][ T983] usb 4-1: not running at top speed; connect to a high speed hub [ 213.790581][ T983] usb 4-1: config 1 has an invalid interface number: 140 but max is 2 [ 213.805423][ T983] usb 4-1: config 1 has an invalid interface number: 81 but max is 2 [ 213.813645][ T983] usb 4-1: config 1 has an invalid interface number: 22 but max is 2 [ 213.826063][ T983] usb 4-1: config 1 has an invalid interface number: 144 but max is 2 [ 213.841559][ T983] usb 4-1: config 1 has an invalid interface number: 49 but max is 2 [ 213.851407][ T983] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 213.860637][ T983] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 213.869740][ T983] usb 4-1: config 1 has 5 interfaces, different from the descriptor's value: 3 [ 213.869923][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.890530][ T983] usb 4-1: config 1 has no interface number 0 [ 213.898133][ T983] usb 4-1: config 1 has no interface number 1 [ 213.904386][ T983] usb 4-1: config 1 has no interface number 2 [ 213.914947][ T43] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 213.924051][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.932404][ T983] usb 4-1: config 1 has no interface number 3 [ 213.938673][ T983] usb 4-1: config 1 has no interface number 4 [ 213.945084][ T983] usb 4-1: config 1 interface 140 altsetting 210 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 213.958229][ T983] usb 4-1: config 1 interface 140 altsetting 210 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 213.971123][ T43] usb 2-1: config 0 descriptor?? [ 213.989870][ T983] usb 4-1: config 1 interface 140 altsetting 210 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 214.011082][ T983] usb 4-1: config 1 interface 140 altsetting 210 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 214.024106][ T983] usb 4-1: config 1 interface 140 altsetting 210 has an invalid descriptor for endpoint zero, skipping [ 214.028981][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 214.035482][ T983] usb 4-1: config 1 interface 140 altsetting 210 has a duplicate endpoint with address 0xA, skipping [ 214.054196][ T983] usb 4-1: config 1 interface 140 altsetting 210 has 7 endpoint descriptors, different from the interface descriptor's value: 13 [ 214.078021][ T983] usb 4-1: config 1 interface 81 altsetting 190 has an invalid descriptor for endpoint zero, skipping [ 214.089346][ T983] usb 4-1: config 1 interface 81 altsetting 190 has an invalid descriptor for endpoint zero, skipping [ 214.102024][ T983] usb 4-1: config 1 interface 81 altsetting 190 has a duplicate endpoint with address 0x1, skipping [ 214.102198][ T9] usb 3-1: device descriptor read/8, error -71 [ 214.113198][ T983] usb 4-1: config 1 interface 81 altsetting 190 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 214.134257][ T983] usb 4-1: too many endpoints for config 1 interface 22 altsetting 116: 43, using maximum allowed: 30 [ 214.145671][ T983] usb 4-1: config 1 interface 22 altsetting 116 has an invalid descriptor for endpoint zero, skipping [ 214.160535][ T983] usb 4-1: config 1 interface 22 altsetting 116 has 2 endpoint descriptors, different from the interface descriptor's value: 43 [ 214.174096][ T983] usb 4-1: config 1 interface 144 altsetting 106 has an invalid descriptor for endpoint zero, skipping [ 214.195624][ T8358] No control pipe specified [ 214.208368][ T983] usb 4-1: config 1 interface 49 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 214.219380][ T983] usb 4-1: config 1 interface 49 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 214.230365][ T983] usb 4-1: config 1 interface 49 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 214.241544][ T983] usb 4-1: config 1 interface 49 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 214.252379][ T983] usb 4-1: config 1 interface 140 has no altsetting 0 [ 214.259304][ T983] usb 4-1: config 1 interface 81 has no altsetting 0 [ 214.265347][ T9] usb usb3-port1: unable to enumerate USB device [ 214.266265][ T983] usb 4-1: config 1 interface 22 has no altsetting 0 [ 214.280724][ T983] usb 4-1: config 1 interface 144 has no altsetting 0 [ 214.287839][ T983] usb 4-1: config 1 interface 49 has no altsetting 0 [ 214.298367][ T983] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a42, bcdDevice=3b.ea [ 214.310753][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.319335][ T983] usb 4-1: Product: 㚫∧䮊엩ኚç®ã¢¼ê¤¸åž™àªˆÞ’Ίꉻ칭ꯠ•栭狈劋ä€é·Žâ ”î¾ç§—íˆâ›…싊箤伙刎࣫嘋ꂲ哬쯜᷎憅鱰颠輧떱Ꚅꔟឲ휭晫橘㕓橿㌑臯㈮鎳᰿ï兩ꈒ蟕炤ଞ혱柃⬞ẖï£ë¤£ã®²â°£â¿ŠëƒŠìš¬à·’ê¨æ°¢ëŒ£î‘«ï‚âœá„†æ€¿î–斉漯㈿峺만꒬艕ザ϶ [ 214.348789][ T983] usb 4-1: Manufacturer: 怤 [ 214.353444][ T983] usb 4-1: SerialNumber: Ð’ [ 214.409350][ T43] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 214.429870][ T43] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0007/input/input12 [ 214.535346][ T43] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 214.607287][ T8364] netlink: 60 bytes leftover after parsing attributes in process `syz.1.821'. [ 214.623256][ T8358] netlink: 60 bytes leftover after parsing attributes in process `syz.1.821'. [ 214.778708][ T8355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.789534][ T8355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.851536][ T983] usb 4-1: USB disconnect, device number 44 [ 214.975945][ T5894] usb 2-1: USB disconnect, device number 50 [ 215.679971][ T8379] netlink: 36 bytes leftover after parsing attributes in process `syz.3.830'. [ 215.964959][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 216.010827][ T8395] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 216.040232][ T8396] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 216.136464][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 216.171526][ T9] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 216.205527][ T9] usb 2-1: config 0 has no interface number 0 [ 216.211712][ T9] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 216.241034][ T9] usb 2-1: config 0 interface 85 has no altsetting 0 [ 216.284732][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 216.303211][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.336545][ T8405] blkio.reset_stats is deprecated [ 216.343354][ T9] usb 2-1: Product: syz [ 216.354885][ T9] usb 2-1: Manufacturer: syz [ 216.368456][ T9] usb 2-1: SerialNumber: syz [ 216.401735][ T9] usb 2-1: config 0 descriptor?? [ 217.019107][ T9] appletouch 2-1:0.85: Geyser mode initialized. [ 217.035659][ T9] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input13 [ 217.147684][ T24] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 217.252194][ T9] usb 2-1: USB disconnect, device number 51 [ 217.282004][ T9] appletouch 2-1:0.85: input: appletouch disconnected [ 217.308950][ T43] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 217.348852][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 217.359045][ T24] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 217.375304][ T24] usb 3-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 217.389900][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 217.400087][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.426760][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.435550][ T24] usb 3-1: Product: syz [ 217.439784][ T24] usb 3-1: Manufacturer: syz [ 217.444419][ T24] usb 3-1: SerialNumber: syz [ 217.454030][ T8417] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 217.508622][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.520044][ T43] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 217.532558][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.557545][ T43] usb 4-1: config 0 descriptor?? [ 217.668366][ T24] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 217.873162][ T8417] hpfs: Bad magic ... probably not HPFS [ 217.902521][ T8439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.923930][ T8439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.967345][ T9] usb 3-1: USB disconnect, device number 37 [ 217.985280][ T43] hid_parser_main: 7 callbacks suppressed [ 217.985305][ T43] playstation 0003:054C:0BA0.0008: unknown main item tag 0x0 [ 218.020730][ T43] playstation 0003:054C:0BA0.0008: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.3-1/input0 [ 218.179426][ T43] playstation 0003:054C:0BA0.0008: Failed to retrieve feature with reportID 18: -71 [ 218.215919][ T43] playstation 0003:054C:0BA0.0008: Failed to retrieve DualShock4 pairing info: -71 [ 218.240603][ T43] playstation 0003:054C:0BA0.0008: Failed to get MAC address from DualShock4 [ 218.253247][ T43] playstation 0003:054C:0BA0.0008: Failed to create dualshock4. [ 218.282222][ T43] playstation 0003:054C:0BA0.0008: probe with driver playstation failed with error -71 [ 218.307327][ T43] usb 4-1: USB disconnect, device number 45 [ 218.314668][ T5894] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 218.327566][ T8451] vxfs: WRONG superblock magic 00000000 at 1 [ 218.334056][ T8451] vxfs: WRONG superblock magic 00000000 at 8 [ 218.346867][ T8451] vxfs: can't find superblock. [ 218.464592][ T5894] usb 1-1: device descriptor read/64, error -71 [ 218.704601][ T5894] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 218.844595][ T5894] usb 1-1: device descriptor read/64, error -71 [ 218.956909][ T5894] usb usb1-port1: attempt power cycle [ 219.044962][ T43] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 219.187735][ T43] usb 4-1: device descriptor read/64, error -71 [ 219.304692][ T5894] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 219.348122][ T5894] usb 1-1: device descriptor read/8, error -71 [ 219.446882][ T43] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 219.584656][ T43] usb 4-1: device descriptor read/64, error -71 [ 219.619450][ T5894] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 219.655668][ T5894] usb 1-1: device descriptor read/8, error -71 [ 219.695140][ T43] usb usb4-port1: attempt power cycle [ 219.765930][ T5894] usb usb1-port1: unable to enumerate USB device [ 219.794267][ T8493] syz.1.868: attempt to access beyond end of device [ 219.794267][ T8493] loop1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 219.807679][ T8493] hfs: can't find a HFS filesystem on dev loop1 [ 220.044631][ T43] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 220.073198][ T43] usb 4-1: device descriptor read/8, error -71 [ 220.100309][ T5851] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 220.334625][ T43] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 220.355543][ T43] usb 4-1: device descriptor read/8, error -71 [ 220.476042][ T43] usb usb4-port1: unable to enumerate USB device [ 220.817166][ T8513] netlink: 2148 bytes leftover after parsing attributes in process `syz.2.874'. [ 220.828861][ T8513] /dev/rnullb0: Can't open blockdev [ 221.102953][ T8523] netlink: 132 bytes leftover after parsing attributes in process `syz.1.878'. [ 221.133897][ T8523] netlink: 36 bytes leftover after parsing attributes in process `syz.1.878'. [ 221.219461][ T8530] FAT-fs (rnullb0): bogus number of reserved sectors [ 221.229777][ T8530] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 221.351698][ T8533] fuseblk: Bad value for 'user_id' [ 221.358349][ T8533] fuseblk: Bad value for 'user_id' [ 221.605358][ T10] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 221.756040][ T10] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 221.768837][ T10] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 221.779311][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.788259][ T10] usb 3-1: Product: syz [ 221.792675][ T10] usb 3-1: Manufacturer: syz [ 221.797392][ T10] usb 3-1: SerialNumber: syz [ 221.813016][ T10] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 221.961880][ T8538] overlay: ./file0 is not a directory [ 221.970965][ T8538] qnx4: no qnx4 filesystem (no root dir). [ 222.206641][ T8542] netlink: 'syz.3.885': attribute type 16 has an invalid length. [ 222.214435][ T8542] netlink: 48 bytes leftover after parsing attributes in process `syz.3.885'. [ 222.428120][ T52] Bluetooth: hci0: unexpected event for opcode 0x2023 [ 222.445476][ T8533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.451065][ T10] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 222.482335][ T8533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.513309][ T43] usb 3-1: USB disconnect, device number 38 [ 222.578517][ T5859] Bluetooth: hci1: command 0x0406 tx timeout [ 222.580561][ T5856] Bluetooth: hci2: command 0x0406 tx timeout [ 222.584889][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 223.284602][ T43] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 223.414620][ T43] usb 2-1: device descriptor read/64, error -71 [ 223.444602][ T5907] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 223.606405][ T5907] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 223.615043][ T5907] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.637963][ T5907] usb 1-1: config 0 has no interface number 0 [ 223.644150][ T5907] usb 1-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 223.657995][ T43] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 223.665696][ T5907] usb 1-1: config 0 interface 200 has no altsetting 0 [ 223.676608][ T5907] usb 1-1: New USB device found, idVendor=0b57, idProduct=8520, bcdDevice=6d.39 [ 223.685831][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.694001][ T5907] usb 1-1: Product: syz [ 223.698923][ T5907] usb 1-1: Manufacturer: syz [ 223.707388][ T5907] usb 1-1: SerialNumber: syz [ 223.716282][ T5907] usb 1-1: config 0 descriptor?? [ 223.804613][ T43] usb 2-1: device descriptor read/64, error -71 [ 223.920198][ T43] usb usb2-port1: attempt power cycle [ 224.051571][ T8573] netlink: 48 bytes leftover after parsing attributes in process `syz.0.897'. [ 224.065947][ T5907] usbhid 1-1:0.200: couldn't find an input interrupt endpoint [ 224.090433][ T5907] usb 1-1: USB disconnect, device number 45 [ 224.285237][ T43] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 224.324126][ T43] usb 2-1: device descriptor read/8, error -71 [ 224.415745][ T8588] sctp: [Deprecated]: syz.2.901 (pid 8588) Use of int in maxseg socket option. [ 224.415745][ T8588] Use struct sctp_assoc_value instead [ 224.594565][ T43] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 224.635833][ T43] usb 2-1: device descriptor read/8, error -71 [ 224.721903][ T8592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.904'. [ 224.732072][ T8592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.904'. [ 224.733997][ T8590] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 224.750203][ T43] usb usb2-port1: unable to enumerate USB device [ 224.757789][ T8590] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 224.919783][ T8601] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 224.927425][ T8601] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 225.284598][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 225.296695][ T5965] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 225.415636][ T10] usb 3-1: device descriptor read/64, error -71 [ 225.456557][ T5965] usb 1-1: config index 0 descriptor too short (expected 64706, got 72) [ 225.469299][ T5965] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 225.478648][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.487037][ T5965] usb 1-1: Product: syz [ 225.491378][ T5965] usb 1-1: Manufacturer: syz [ 225.496075][ T5965] usb 1-1: SerialNumber: syz [ 225.509061][ T5965] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 225.541120][ T43] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 225.655438][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 225.784610][ T10] usb 3-1: device descriptor read/64, error -71 [ 225.905026][ T10] usb usb3-port1: attempt power cycle [ 226.574853][ T43] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 226.597327][ T43] ath9k_htc: Failed to initialize the device [ 226.644921][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 226.646065][ T43] usb 1-1: ath9k_htc: USB layer deinitialized [ 226.687306][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.911'. [ 226.697933][ T10] usb 3-1: device descriptor read/8, error -71 [ 226.715579][ T8615] /dev/rnullb0: Can't open blockdev [ 226.995339][ T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 227.037335][ T10] usb 3-1: device descriptor read/8, error -71 [ 227.146605][ T10] usb usb3-port1: unable to enumerate USB device [ 227.494605][ T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 227.666389][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.728633][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.744616][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 227.753917][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.768711][ T10] usb 4-1: config 0 descriptor?? [ 228.054825][ T5965] usb 1-1: USB disconnect, device number 46 [ 228.199661][ T10] kye 0003:0458:5019.0009: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 228.216180][ T8636] binder: BINDER_SET_CONTEXT_MGR already set [ 228.222225][ T8636] binder: 8633:8636 ioctl 4018620d 2000000001c0 returned -16 [ 228.235709][ T10] kye 0003:0458:5019.0009: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.3-1/input0 [ 228.256962][ T10] kye 0003:0458:5019.0009: tablet-enabling feature report not found [ 228.274599][ T10] kye 0003:0458:5019.0009: tablet enabling failed [ 228.399401][ T8624] /dev/rnullb0: Can't open blockdev [ 228.417010][ T5965] usb 4-1: USB disconnect, device number 50 [ 228.458780][ T8637] fido_id[8637]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 228.482848][ T8641] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 228.504101][ T8639] hpfs: Bad magic ... probably not HPFS [ 228.718096][ T8646] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 228.731876][ T8646] VFS: Can't find a romfs filesystem on dev rnullb0. [ 228.731876][ T8646] [ 228.848151][ T8655] hugetlbfs: Unknown parameter 'üÂt¢OIÊŸs' [ 228.848199][ T8652] /dev/rnullb0: Can't open blockdev [ 228.863291][ T8648] syzkaller1: entered promiscuous mode [ 228.869258][ T8648] syzkaller1: entered allmulticast mode [ 228.950773][ T8657] netlink: 'syz.0.927': attribute type 83 has an invalid length. [ 229.694709][ T5894] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 229.718200][ T8683] omfs: Invalid superblock (0) [ 229.803056][ T8687] omfs: Invalid superblock (0) [ 229.855009][ T5894] usb 1-1: Using ep0 maxpacket: 32 [ 229.871416][ T5894] usb 1-1: config 14 has an invalid interface number: 137 but max is 3 [ 229.891018][ T5894] usb 1-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 229.903776][ T5894] usb 1-1: config 14 has 2 interfaces, different from the descriptor's value: 4 [ 229.918121][ T10] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 229.930535][ T5894] usb 1-1: config 14 has no interface number 1 [ 229.938228][ T5894] usb 1-1: config 14 interface 0 altsetting 8 endpoint 0x6 has invalid wMaxPacketSize 0 [ 229.962686][ T5894] usb 1-1: config 14 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.978609][ T5894] usb 1-1: config 14 interface 137 has no altsetting 0 [ 229.994691][ T5894] usb 1-1: config 14 interface 0 has no altsetting 0 [ 230.009231][ T5894] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=2a.8a [ 230.037556][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.054963][ T5894] usb 1-1: Product: syz [ 230.062397][ T5894] usb 1-1: Manufacturer: syz [ 230.069904][ T5894] usb 1-1: SerialNumber: syz [ 230.088864][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.113845][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 230.141353][ T8700] NILFS (loop3): device size too small [ 230.142637][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 230.178897][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 230.209651][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 230.238087][ T10] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 230.251950][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 230.264365][ T10] usb 2-1: Product: syz [ 230.269870][ T10] usb 2-1: Manufacturer: syz [ 230.280270][ T10] usb 2-1: SerialNumber: syz [ 230.290980][ T8704] program syz.2.945 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.305426][ T10] usb 2-1: config 0 descriptor?? [ 230.353211][ T8706] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 230.361221][ T8706] VFS: Can't find a romfs filesystem on dev rnullb0. [ 230.361221][ T8706] [ 230.480987][ T8710] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 230.505955][ T8710] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 230.520386][ T8711] netlink: 28 bytes leftover after parsing attributes in process `syz.3.947'. [ 230.532515][ T8710] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 230.551466][ T10] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 230.571312][ T10] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 230.588643][ T10] usb 2-1: USB disconnect, device number 56 [ 231.221327][ T8730] Can't find a SQUASHFS superblock on rnullb0 [ 231.237551][ T8732] binder: BINDER_SET_CONTEXT_MGR already set [ 231.243818][ T8732] binder: 8731:8732 ioctl 4018620d 2000000001c0 returned -16 [ 231.624612][ T24] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 232.510233][ T5894] ati_remote2 1-1:14.0: ati_remote2_probe(): need 2 interfaces, found 2 [ 232.602361][ T5894] usb 1-1: USB disconnect, device number 47 [ 232.645448][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 232.669582][ T24] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 232.684547][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.705653][ T24] usb 2-1: Product: syz [ 232.720415][ T24] usb 2-1: Manufacturer: syz [ 232.730570][ T24] usb 2-1: SerialNumber: syz [ 232.750982][ T24] r8152-cfgselector 2-1: Unknown version 0x0000 [ 232.764576][ T24] r8152-cfgselector 2-1: config 0 descriptor?? [ 232.833229][ T8750] delete_channel: no stack [ 232.855317][ T8750] delete_channel: no stack [ 232.907712][ T8752] netlink: 'syz.2.960': attribute type 10 has an invalid length. [ 232.954643][ T5894] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 232.958819][ T8755] program syz.2.960 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.993417][ T8736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.005269][ T8736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.026492][ T8752] team0: Port device netdevsim0 added [ 233.125136][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 233.148464][ T5894] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 233.164579][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.183548][ T5894] usb 1-1: config 0 descriptor?? [ 233.197329][ T5894] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 233.237276][ T5934] r8152-cfgselector 2-1: USB disconnect, device number 57 [ 233.293451][ T8762] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 233.402565][ T5894] usb 1-1: Detected FT232B [ 233.624352][ T8743] exFAT-fs (rnullb0): invalid boot record signature [ 233.631258][ T8743] exFAT-fs (rnullb0): failed to read boot sector [ 233.640066][ T8743] exFAT-fs (rnullb0): failed to recognize exfat type [ 233.653294][ T5894] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 233.677441][ T5894] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 233.698836][ T5894] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 233.715548][ T5894] usb 1-1: USB disconnect, device number 48 [ 233.731519][ T6774] udevd[6774]: setting mode of /dev/ttyUSB0 to 020660 failed: No such file or directory [ 233.732466][ T5894] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 233.746414][ T8769] Can't find a SQUASHFS superblock on rnullb0 [ 233.757456][ T6774] udevd[6774]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 233.758693][ T5894] ftdi_sio 1-1:0.0: device disconnected [ 234.555946][ T8789] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 235.664724][ T24] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 235.805801][ T24] usb 1-1: device descriptor read/64, error -71 [ 236.054588][ T24] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 236.207457][ T24] usb 1-1: device descriptor read/64, error -71 [ 236.315057][ T24] usb usb1-port1: attempt power cycle [ 236.352368][ T5934] libceph: connect (1)[c::]:6789 error -22 [ 236.399234][ T5934] libceph: mon0 (1)[c::]:6789 connect error [ 236.413518][ T5894] libceph: connect (1)[c::]:6789 error -22 [ 236.420876][ T8841] ceph: No mds server is up or the cluster is laggy [ 236.424735][ T8842] ceph: No mds server is up or the cluster is laggy [ 236.430013][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 236.490717][ T8851] /dev/rnullb0: Can't open blockdev [ 236.664719][ T24] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 236.718531][ T24] usb 1-1: device descriptor read/8, error -71 [ 236.891205][ T8854] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.985'. [ 236.984642][ T24] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 237.041896][ T24] usb 1-1: device descriptor read/8, error -71 [ 237.179056][ T24] usb usb1-port1: unable to enumerate USB device [ 237.425115][ T5934] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 237.609706][ T5934] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 237.649465][ T5934] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 237.674622][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.683125][ T5934] usb 3-1: Product: syz [ 237.694638][ T5934] usb 3-1: Manufacturer: syz [ 237.704869][ T5934] usb 3-1: SerialNumber: syz [ 237.844690][ T24] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 237.938055][ T5934] usb 3-1: probing VID:PID(0424:012C) [ 237.966679][ T5934] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 237.984802][ T5934] vub300 3-1:2.0: probe with driver vub300 failed with error -22 [ 237.994595][ T24] usb 2-1: device descriptor read/64, error -71 [ 238.013346][ T5934] usb 3-1: USB disconnect, device number 43 [ 238.248447][ T24] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 238.394651][ T24] usb 2-1: device descriptor read/64, error -71 [ 238.507044][ T8889] hpfs: Bad magic ... probably not HPFS [ 238.528457][ T24] usb usb2-port1: attempt power cycle [ 238.874658][ T24] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 238.905608][ T24] usb 2-1: device descriptor read/8, error -71 [ 239.055712][ T8748] syz.2.958 (8748) used greatest stack depth: 18856 bytes left [ 239.154590][ T24] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 239.175414][ T24] usb 2-1: device descriptor read/8, error -71 [ 239.287365][ T24] usb usb2-port1: unable to enumerate USB device [ 239.535605][ T8916] /dev/rnullb0: Can't open blockdev [ 239.548659][ T8915] /dev/rnullb0: Can't open blockdev [ 240.071332][ T8933] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 240.605576][ T5934] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 240.697170][ T8948] tipc: Enabling of bearer rejected, failed to enable media [ 240.709115][ T8948] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1014'. [ 240.720535][ T8948] openvswitch: netlink: Flow key attr not present in new flow. [ 240.764684][ T5934] usb 3-1: device descriptor read/64, error -71 [ 241.014814][ T5934] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 241.265330][ T5934] usb 3-1: device descriptor read/64, error -71 [ 241.394990][ T5934] usb usb3-port1: attempt power cycle [ 241.454831][ T43] usb 2-1: new low-speed USB device number 62 using dummy_hcd [ 241.604589][ T43] usb 2-1: Invalid ep0 maxpacket: 64 [ 241.605958][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1020'. [ 241.672600][ T8969] /dev/rnullb0: Can't open blockdev [ 241.684020][ T8968] /dev/rnullb0: Can't open blockdev [ 241.734742][ T43] usb 2-1: new low-speed USB device number 63 using dummy_hcd [ 241.744711][ T5907] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 241.757293][ T5934] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 241.786678][ T5934] usb 3-1: device descriptor read/8, error -71 [ 241.894816][ T43] usb 2-1: Invalid ep0 maxpacket: 64 [ 241.905309][ T5907] usb 1-1: device descriptor read/64, error -71 [ 241.911929][ T43] usb usb2-port1: attempt power cycle [ 242.025052][ T5934] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 242.055734][ T5934] usb 3-1: device descriptor read/8, error -71 [ 242.144615][ T5907] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 242.165074][ T5934] usb usb3-port1: unable to enumerate USB device [ 242.274577][ T43] usb 2-1: new low-speed USB device number 64 using dummy_hcd [ 242.304600][ T5907] usb 1-1: device descriptor read/64, error -71 [ 242.311838][ T43] usb 2-1: Invalid ep0 maxpacket: 64 [ 242.424839][ T5907] usb usb1-port1: attempt power cycle [ 242.455105][ T43] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 242.495615][ T43] usb 2-1: Invalid ep0 maxpacket: 64 [ 242.505285][ T43] usb usb2-port1: unable to enumerate USB device [ 242.784681][ T5907] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 242.805348][ T5907] usb 1-1: device descriptor read/8, error -71 [ 243.054653][ T5907] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 243.076681][ T5907] usb 1-1: device descriptor read/8, error -71 [ 243.195324][ T5907] usb usb1-port1: unable to enumerate USB device [ 243.369719][ T8989] syzkaller1: entered promiscuous mode [ 243.376078][ T8989] syzkaller1: entered allmulticast mode [ 243.803155][ T9003] /dev/rnullb0: Can't open blockdev [ 244.176152][ T9010] /dev/rnullb0: Can't open blockdev [ 244.391506][ T9015] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1041'. [ 244.422204][ T9015] /dev/rnullb0: Can't open blockdev [ 244.557926][ T9020] /dev/rnullb0: Can't open blockdev [ 245.052714][ T9030] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 245.568888][ T9036] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 245.602722][ T9036] /dev/rnullb0: Can't open blockdev [ 245.694645][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 245.888976][ T10] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 245.898860][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.925923][ T10] usb 3-1: Product: syz [ 245.930172][ T10] usb 3-1: Manufacturer: syz [ 245.958793][ T10] usb 3-1: SerialNumber: syz [ 245.978544][ T10] usb 3-1: config 0 descriptor?? [ 245.998888][ T10] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 246.331440][ T5907] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 246.484568][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 246.497746][ T5907] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.508242][ T5907] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.519660][ T5907] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 246.528864][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.537927][ T5907] usb 4-1: Product: syz [ 246.542160][ T5907] usb 4-1: Manufacturer: syz [ 246.546875][ T5907] usb 4-1: SerialNumber: syz [ 246.777283][ T5907] usb 4-1: 0:2 : does not exist [ 246.794033][ T5907] usb 4-1: unit 9 not found! [ 246.806660][ T43] usb 3-1: USB disconnect, device number 48 [ 246.832966][ T5907] usb 4-1: 4:0: cannot get min/max values for control 1 (id 4) [ 246.842241][ T9071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1061'. [ 246.863101][ T5907] usb 4-1: 4:0: cannot get min/max values for control 2 (id 4) [ 246.898406][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 246.929872][ T24] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 246.950133][ T5907] usb 4-1: 4:0: cannot get min/max values for control 3 (id 4) [ 246.996875][ T5907] usb 4-1: 4:0: cannot get min/max values for control 4 (id 4) [ 247.042056][ T5907] usb 4-1: USB disconnect, device number 51 [ 247.107797][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.258132][ T9076] XFS (rnullb0): Invalid superblock magic number [ 247.409260][ T9085] /dev/rnullb0: Can't open blockdev [ 248.074660][ T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 248.237483][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.272794][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.302763][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 248.324050][ T10] usb 3-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 248.336568][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.360872][ T10] usb 3-1: config 0 descriptor?? [ 248.367808][ T9104] vivid-001: disconnect [ 248.402600][ T9104] vivid-001: reconnect [ 248.464629][ T5934] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 248.606329][ T5934] usb 2-1: device descriptor read/64, error -71 [ 248.785260][ T10] hid (null): invalid report_size 1701381599 [ 248.799430][ T10] itetech 0003:048D:8595.000B: invalid report_size 1701381599 [ 248.849069][ T10] itetech 0003:048D:8595.000B: item 0 4 1 7 parsing failed [ 248.874692][ T5934] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 248.883433][ T10] itetech 0003:048D:8595.000B: probe with driver itetech failed with error -22 [ 248.977034][ T5851] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 248.997263][ T10] usb 3-1: USB disconnect, device number 49 [ 249.035638][ T5934] usb 2-1: device descriptor read/64, error -71 [ 249.156687][ T5934] usb usb2-port1: attempt power cycle [ 249.286887][ T1213] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 249.500894][ T1213] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 249.517001][ T5934] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 249.537909][ T1213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.560142][ T1213] usb 4-1: Product: syz [ 249.569064][ T1213] usb 4-1: Manufacturer: syz [ 249.577839][ T5934] usb 2-1: device descriptor read/8, error -71 [ 249.588097][ T1213] usb 4-1: SerialNumber: syz [ 249.604961][ T1213] usb 4-1: config 0 descriptor?? [ 249.622370][ T1213] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 249.836244][ T5934] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 249.886553][ T5934] usb 2-1: device descriptor read/8, error -71 [ 249.997075][ T5934] usb usb2-port1: unable to enumerate USB device [ 250.031785][ T9110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.041512][ T1213] gspca_sq905c: sq905c_read: usb_control_msg failed (-32) [ 250.053741][ T9110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.061675][ T1213] sq905c 4-1:0.0: Reading version command failed [ 250.069550][ T1213] sq905c 4-1:0.0: probe with driver sq905c failed with error -32 [ 250.163208][ T9132] Mount JFS Failure: -22 [ 250.374909][ T1213] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 250.514745][ T1213] usb 3-1: device descriptor read/64, error -71 [ 250.764739][ T1213] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 250.904755][ T1213] usb 3-1: device descriptor read/64, error -71 [ 251.024872][ T1213] usb usb3-port1: attempt power cycle [ 251.365684][ T1213] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 251.399570][ T1213] usb 3-1: device descriptor read/8, error -71 [ 251.654619][ T1213] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 251.675357][ T1213] usb 3-1: device descriptor read/8, error -71 [ 251.684994][ T5907] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 251.706960][ T9151] overlayfs: failed to resolve './file1': -2 [ 251.786740][ T1213] usb usb3-port1: unable to enumerate USB device [ 251.856794][ T5907] usb 2-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 251.884716][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.916864][ T5907] usb 2-1: config 0 descriptor?? [ 251.916946][ T9157] omfs: Invalid superblock (0) [ 251.943953][ T1213] usb 4-1: USB disconnect, device number 52 [ 251.946856][ T5907] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 252.093098][ T9160] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1089'. [ 252.138361][ T9160] NILFS (rnullb0): couldn't find nilfs on the device [ 252.373594][ T5907] pwc: send_video_command error -71 [ 252.380012][ T5907] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 252.389563][ T5907] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 252.415480][ T5907] usb 2-1: USB disconnect, device number 70 [ 252.607713][ T9170] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1092'. [ 252.621508][ T9170] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 253.096616][ T9183] /dev/nullb0: Can't open blockdev [ 253.233297][ T9185] netlink: 'syz.0.1098': attribute type 10 has an invalid length. [ 253.242992][ T9185] lo: entered promiscuous mode [ 253.263661][ T9187] binder: BINDER_SET_CONTEXT_MGR already set [ 253.275037][ T5907] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 253.293078][ T9187] binder: 9186:9187 ioctl 4018620d 2000000001c0 returned -16 [ 253.312244][ T9185] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 253.338033][ T9185] /dev/rnullb0: Can't open blockdev [ 253.475809][ T5907] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 253.487206][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.495476][ T5907] usb 2-1: Product: syz [ 253.500354][ T5907] usb 2-1: Manufacturer: syz [ 253.506350][ T5907] usb 2-1: SerialNumber: syz [ 253.545022][ T5907] usb 2-1: config 0 descriptor?? [ 253.565851][ T5907] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 253.597224][ T9197] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1102'. [ 253.612931][ T9197] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1102'. [ 254.182852][ T9212] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1106'. [ 254.199604][ T9212] omfs: Invalid superblock (0) [ 254.275781][ T5907] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 254.301847][ T5907] sq905c 2-1:0.0: Reading version command failed [ 254.309100][ T5907] sq905c 2-1:0.0: probe with driver sq905c failed with error -110 [ 254.654014][ T9230] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 254.666250][ T9230] VFS: Can't find a romfs filesystem on dev rnullb0. [ 254.666250][ T9230] [ 254.872369][ T9237] Mount JFS Failure: -22 [ 255.714662][ T1213] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 255.879205][ T1213] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.901153][ T1213] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 255.926535][ T1213] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 255.938432][ T1213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.980669][ T1213] usb 3-1: config 0 descriptor?? [ 256.088592][ T24] usb 2-1: USB disconnect, device number 71 [ 256.211650][ T9262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.239944][ T9262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.529127][ T24] usb 3-1: USB disconnect, device number 54 [ 256.551144][ T9294] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 256.584827][ T9294] VFS: Can't find a romfs filesystem on dev rnullb0. [ 256.584827][ T9294] [ 256.777783][ T9298] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 256.808759][ T9306] binder: 9304:9306 ioctl c008aeb0 200000000040 returned -22 [ 256.942683][ T9309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.973376][ T9309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.976377][ T9310] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 256.988502][ T9309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.991961][ T9] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 257.159345][ T9] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 257.159388][ T9315] Can't find a SQUASHFS superblock on rnullb0 [ 257.172248][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.183930][ T9] usb 3-1: Product: syz [ 257.190191][ T9] usb 3-1: Manufacturer: syz [ 257.195215][ T9] usb 3-1: SerialNumber: syz [ 257.203366][ T9] usb 3-1: config 0 descriptor?? [ 257.213549][ T9] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 257.557091][ T5934] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 257.581560][ T9320] netlink: 'syz.0.1139': attribute type 64 has an invalid length. [ 257.591326][ T9320] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1139'. [ 257.718663][ T5934] usb 2-1: not running at top speed; connect to a high speed hub [ 257.737203][ T5934] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 257.759308][ T5934] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 257.773702][ T5934] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.781477][ T31] audit: type=1326 audit(1754106069.244:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9308 comm="syz.3.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f716e78eb69 code=0x7fc00000 [ 257.811905][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.820762][ T5934] usb 2-1: Product: syz [ 257.826508][ T5934] usb 2-1: Manufacturer: syz [ 257.831486][ T5934] usb 2-1: SerialNumber: syz [ 257.836812][ T9325] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1141'. [ 257.842790][ T9318] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 257.894190][ T9323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.904868][ T9323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.022179][ T9330] QAT: Device 7 not found [ 258.090280][ T5934] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 258.090335][ T5934] cdc_ncm 2-1:1.0: bind() failure [ 258.108279][ T5934] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 258.108333][ T5934] cdc_ncm 2-1:1.1: bind() failure [ 258.128541][ T5934] usb 2-1: USB disconnect, device number 72 [ 259.775383][ T24] usb 3-1: USB disconnect, device number 55 [ 260.051578][ T9366] bridge0: port 3(syz_tun) entered blocking state [ 260.088215][ T9366] bridge0: port 3(syz_tun) entered disabled state [ 260.112165][ T9366] syz_tun: entered allmulticast mode [ 260.127210][ T9362] netlink: 'syz.0.1151': attribute type 10 has an invalid length. [ 260.132793][ T9366] syz_tun: entered promiscuous mode [ 260.181858][ T9366] bridge0: port 3(syz_tun) entered blocking state [ 260.188792][ T9366] bridge0: port 3(syz_tun) entered forwarding state [ 260.240477][ T9362] macvlan0: entered promiscuous mode [ 260.285460][ T9362] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 260.455020][ T9] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 260.510581][ T9379] NILFS (rnullb0): couldn't find nilfs on the device [ 260.619014][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 260.628478][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.637244][ T9] usb 4-1: Product: syz [ 260.641598][ T9] usb 4-1: Manufacturer: syz [ 260.646803][ T9] usb 4-1: SerialNumber: syz [ 260.657878][ T9] usb 4-1: config 0 descriptor?? [ 260.814869][ T5907] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 260.895050][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 260.990487][ T5907] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 261.024667][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.032757][ T5907] usb 3-1: Product: syz [ 261.055008][ T5907] usb 3-1: Manufacturer: syz [ 261.064601][ T5907] usb 3-1: SerialNumber: syz [ 261.090699][ T5907] usb 3-1: config 0 descriptor?? [ 261.133230][ T5907] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 261.460390][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.474584][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.557739][ T9394] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20003 [ 262.007399][ T5907] usb 3-1: USB disconnect, device number 56 [ 262.145644][ T9405] /dev/rnullb0: Can't open blockdev [ 262.514225][ T9410] syzkaller1: entered promiscuous mode [ 262.531315][ T9410] syzkaller1: entered allmulticast mode [ 262.559005][ T9410] /dev/rnullb0: Can't open blockdev [ 262.725972][ T9377] /dev/rnullb0: Can't open blockdev [ 262.841694][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 262.864784][ T9] usb 4-1: USB disconnect, device number 53 [ 262.999683][ T9414] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 263.031345][ T9414] /dev/rnullb0: Can't open blockdev [ 263.342149][ T9427] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1175'. [ 263.410691][ T9430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.485656][ T9430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.526308][ T9432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.545641][ T9432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.774675][ T43] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 263.914568][ T5934] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 263.949097][ T9427] /dev/rnullb0: Can't open blockdev [ 264.046105][ T5934] usb 4-1: device descriptor read/64, error -71 [ 264.285604][ T5934] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 264.337480][ T1213] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 264.447099][ T9450] binder: BINDER_SET_CONTEXT_MGR already set [ 264.453227][ T9450] binder: 9449:9450 ioctl 4018620d 2000000001c0 returned -16 [ 264.646657][ T9454] /dev/rnullb0: Can't open blockdev [ 265.232986][ T5934] usb 4-1: device descriptor read/64, error -71 [ 265.318804][ T1213] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 265.334542][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.342611][ T1213] usb 3-1: Product: syz [ 265.359985][ T5934] usb usb4-port1: attempt power cycle [ 265.377610][ T1213] usb 3-1: Manufacturer: syz [ 265.382285][ T1213] usb 3-1: SerialNumber: syz [ 265.395736][ T1213] usb 3-1: config 0 descriptor?? [ 265.421915][ T1213] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 265.565511][ T9462] nbd: must specify a size in bytes for the device [ 265.591576][ T9462] hfs: can't find a HFS filesystem on dev rnullb0 [ 265.615413][ T9463] hfs: can't find a HFS filesystem on dev rnullb0 [ 265.730795][ T5934] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 265.752371][ T9466] vxfs: WRONG superblock magic 00000000 at 1 [ 265.762300][ T9466] vxfs: WRONG superblock magic 00000000 at 8 [ 265.769672][ T9466] vxfs: can't find superblock. [ 265.775571][ T5934] usb 4-1: device descriptor read/8, error -71 [ 265.928033][ T9468] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 266.015039][ T5934] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 266.066963][ T5934] usb 4-1: device descriptor read/8, error -71 [ 266.185766][ T5934] usb usb4-port1: unable to enumerate USB device [ 266.288251][ T24] usb 3-1: USB disconnect, device number 57 [ 266.504343][ T9474] syz.3.1189: attempt to access beyond end of device [ 266.504343][ T9474] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 266.517956][ T9474] SQUASHFS error: Failed to read block 0x0: -5 [ 266.524292][ T9474] unable to read squashfs_super_block [ 267.412998][ T9502] /dev/rnullb0: Can't open blockdev [ 267.691958][ T9505] /dev/rnullb0: Can't open blockdev [ 267.833327][ T9513] binder: BINDER_SET_CONTEXT_MGR already set [ 267.839682][ T9513] binder: 9512:9513 ioctl 4018620d 2000000001c0 returned -16 [ 267.954599][ T5907] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 268.107076][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.122983][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.149344][ T5907] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 268.159601][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.173514][ T5907] usb 2-1: config 0 descriptor?? [ 268.344650][ T43] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 268.354985][ T5934] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 268.500305][ T43] usb 3-1: config 0 has an invalid interface number: 115 but max is 0 [ 268.508315][ T5934] usb 1-1: unable to get BOS descriptor or descriptor too short [ 268.508940][ T43] usb 3-1: config 0 has no interface number 0 [ 268.523199][ T43] usb 3-1: too many endpoints for config 0 interface 115 altsetting 47: 102, using maximum allowed: 30 [ 268.535882][ T5934] usb 1-1: config 6 has an invalid interface number: 200 but max is 0 [ 268.537646][ T43] usb 3-1: config 0 interface 115 altsetting 47 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 268.544105][ T5934] usb 1-1: config 6 has no interface number 0 [ 268.544158][ T5934] usb 1-1: config 6 interface 200 has no altsetting 0 [ 268.561824][ T43] usb 3-1: config 0 interface 115 has no altsetting 0 [ 268.567864][ T5934] usb 1-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 268.574404][ T43] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 268.579992][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.596906][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.598066][ T5934] usb 1-1: Product: syz [ 268.605865][ T43] usb 3-1: Product: syz [ 268.618317][ T5934] usb 1-1: Manufacturer: syz [ 268.618546][ T43] usb 3-1: Manufacturer: syz [ 268.622523][ T5934] usb 1-1: SerialNumber: syz [ 268.637338][ T43] usb 3-1: SerialNumber: syz [ 268.646852][ T43] usb 3-1: config 0 descriptor?? [ 268.817488][ T5907] usbhid 2-1:0.0: can't add hid device: -71 [ 268.823655][ T5907] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 268.856923][ T5907] usb 2-1: USB disconnect, device number 74 [ 268.879857][ T43] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 268.905165][ T43] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 268.912615][ T43] sq905c 3-1:0.115: Get version command failed [ 268.923909][ T43] sq905c 3-1:0.115: probe with driver sq905c failed with error -71 [ 268.953283][ T43] usb 3-1: USB disconnect, device number 58 [ 269.411241][ T5934] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 269.452998][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 269.484141][ T5934] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 269.496780][ T5934] usb 1-1: media controller created [ 269.530755][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 269.609458][ T5934] dvb-usb: recv bulk message failed: -22 [ 269.813184][ T9523] C: renamed from team_slave_0 (while UP) [ 269.830046][ T9523] netlink: 'syz.0.1204': attribute type 3 has an invalid length. [ 269.840858][ T9523] netlink: 'syz.0.1204': attribute type 1 has an invalid length. [ 269.854715][ T1213] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 269.868774][ T9523] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1204'. [ 269.897065][ T5934] dvb-usb: bulk message failed: -71 (6/0) [ 269.902999][ T5934] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 269.966000][ T5934] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 269.989443][ T5934] dvb-usb: schedule remote query interval to 150 msecs. [ 269.998788][ T5934] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 270.021612][ T5934] usb 1-1: USB disconnect, device number 57 [ 270.041317][ T1213] usb 3-1: Using ep0 maxpacket: 32 [ 270.060015][ T1213] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 270.080195][ T1213] usb 3-1: config 0 has no interface number 0 [ 270.088041][ T1213] usb 3-1: config 0 interface 184 has no altsetting 0 [ 270.102167][ T1213] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 270.114922][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.144936][ T1213] usb 3-1: Product: syz [ 270.149271][ T1213] usb 3-1: Manufacturer: syz [ 270.166059][ T1213] usb 3-1: SerialNumber: syz [ 270.186178][ T1213] usb 3-1: config 0 descriptor?? [ 270.204300][ T1213] smsc75xx v1.0.0 [ 270.213921][ T5934] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 270.274592][ T43] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 270.428249][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 270.452968][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 270.469037][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 270.479629][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 270.498846][ T43] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 270.502184][ T9554] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 270.508763][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.537164][ T9554] VFS: Can't find a romfs filesystem on dev rnullb0. [ 270.537164][ T9554] [ 270.558742][ T43] usb 4-1: config 0 descriptor?? [ 270.776868][ T9548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.789666][ T9548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.973133][ T1213] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 270.986404][ T1213] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 270.996355][ T1213] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 271.007168][ T1213] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 271.012916][ T43] plantronics 0003:047F:FFFF.000C: ignoring exceeding usage max [ 271.025054][ T5907] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 271.026088][ T1213] usb 3-1: USB disconnect, device number 59 [ 271.079023][ T43] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 271.174750][ T5907] usb 1-1: device descriptor read/64, error -71 [ 271.386734][ T9573] NILFS (rnullb0): couldn't find nilfs on the device [ 271.414619][ T5907] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 271.450248][ T9573] IPVS: persistence engine module ip_vs_pe_ not found [ 271.543925][ T9578] nbd: couldn't find device at index 587202560 [ 271.564658][ T5907] usb 1-1: device descriptor read/64, error -71 [ 271.684972][ T5907] usb usb1-port1: attempt power cycle [ 271.738644][ T9580] support for cryptoloop has been removed. Use dm-crypt instead. [ 271.757704][ T9584] /dev/rnullb0: Can't open blockdev [ 272.046041][ T5907] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 272.065452][ T5907] usb 1-1: device descriptor read/8, error -71 [ 272.304658][ T5907] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 272.329139][ T5907] usb 1-1: device descriptor read/8, error -71 [ 272.445295][ T5907] usb usb1-port1: unable to enumerate USB device [ 272.465238][ T24] usb 4-1: reset high-speed USB device number 58 using dummy_hcd [ 272.604638][ T24] usb 4-1: device descriptor read/64, error -32 [ 272.844579][ T24] usb 4-1: reset high-speed USB device number 58 using dummy_hcd [ 272.874598][ T5907] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 272.974641][ T24] usb 4-1: device descriptor read/64, error -32 [ 273.004652][ T5907] usb 3-1: device descriptor read/64, error -71 [ 273.225135][ T24] usb 4-1: reset high-speed USB device number 58 using dummy_hcd [ 273.244856][ T24] usb 4-1: device descriptor read/8, error -32 [ 273.254601][ T5907] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 273.387793][ T5907] usb 3-1: device descriptor read/64, error -71 [ 273.516183][ T5907] usb usb3-port1: attempt power cycle [ 273.858500][ T5907] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 273.907176][ T5907] usb 3-1: device descriptor read/8, error -71 [ 273.920010][ T9624] tmpfs: Bad value for 'mpol' [ 274.109455][ T9634] /dev/rnullb0: Can't open blockdev [ 274.151656][ T43] usb 4-1: USB disconnect, device number 58 [ 274.157902][ T5907] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 274.201244][ T9639] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 274.208512][ T9639] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 274.211331][ T5907] usb 3-1: device descriptor read/8, error -71 [ 274.256416][ T9639] vhci_hcd vhci_hcd.0: Device attached [ 274.345454][ T5907] usb usb3-port1: unable to enumerate USB device [ 274.506864][ T24] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 274.535868][ T9657] /dev/rnullb0: Can't open blockdev [ 274.547276][ T43] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 274.725923][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 274.733540][ T43] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 274.749882][ T43] usb 1-1: config 0 has no interface number 0 [ 274.757482][ T43] usb 1-1: config 0 interface 69 has no altsetting 0 [ 274.767031][ T43] usb 1-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice= 2.bf [ 274.776484][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.784843][ T43] usb 1-1: Product: syz [ 274.789045][ T43] usb 1-1: Manufacturer: syz [ 274.793656][ T43] usb 1-1: SerialNumber: syz [ 274.802307][ T43] usb 1-1: config 0 descriptor?? [ 274.884894][ T5916] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 275.018330][ T9640] vhci_hcd: cannot find the pending unlink 1342177280 [ 275.019255][ T9639] /dev/rnullb0: Can't open blockdev [ 275.050259][ T43] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 275.055536][ T9640] vhci_hcd: connection reset by peer [ 275.065047][ T5916] usb 4-1: config 0 has an invalid interface number: 253 but max is 0 [ 275.080803][ T3455] vhci_hcd: stop threads [ 275.086903][ T5916] usb 4-1: config 0 has no interface number 0 [ 275.093292][ T43] gspca_sn9c2028: read1 error -71 [ 275.100532][ T3455] vhci_hcd: release socket [ 275.105293][ T5916] usb 4-1: config 0 interface 253 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 275.116720][ T43] gspca_sn9c2028: read1 error -71 [ 275.123672][ T3455] vhci_hcd: disconnect device [ 275.128841][ T43] gspca_sn9c2028: read1 error -71 [ 275.136127][ T43] sn9c2028 1-1:0.69: probe with driver sn9c2028 failed with error -71 [ 275.147044][ T5916] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0018, bcdDevice=e4.3c [ 275.164299][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.173481][ T43] usb 1-1: USB disconnect, device number 62 [ 275.193007][ T5916] usb 4-1: Product: syz [ 275.203126][ T5916] usb 4-1: Manufacturer: syz [ 275.218963][ T5916] usb 4-1: SerialNumber: syz [ 275.244054][ T5916] usb 4-1: config 0 descriptor?? [ 275.253316][ T5916] kvaser_usb 4-1:0.253: error -ENODEV: Cannot get usb endpoint(s) [ 275.789626][ T10] usb 4-1: USB disconnect, device number 59 [ 275.878004][ T9685] /dev/rnullb0: Can't open blockdev [ 275.914756][ T43] usb 1-1: new low-speed USB device number 63 using dummy_hcd [ 275.984888][ T5916] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 276.064753][ T43] usb 1-1: device descriptor read/64, error -71 [ 276.138131][ T5916] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 276.147434][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.156324][ T5916] usb 3-1: Product: syz [ 276.160535][ T5916] usb 3-1: Manufacturer: syz [ 276.165256][ T5916] usb 3-1: SerialNumber: syz [ 276.173378][ T5916] usb 3-1: config 0 descriptor?? [ 276.183247][ T5916] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 276.254694][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 276.314547][ T43] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 276.404576][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 276.411508][ T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 276.424010][ T10] usb 4-1: config 0 has no interface number 0 [ 276.430289][ T10] usb 4-1: config 0 interface 184 has no altsetting 0 [ 276.441342][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 276.450776][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.454592][ T43] usb 1-1: device descriptor read/64, error -71 [ 276.459166][ T10] usb 4-1: Product: syz [ 276.470154][ T10] usb 4-1: Manufacturer: syz [ 276.474945][ T10] usb 4-1: SerialNumber: syz [ 276.482527][ T10] usb 4-1: config 0 descriptor?? [ 276.492052][ T10] smsc75xx v1.0.0 [ 276.576491][ T43] usb usb1-port1: attempt power cycle [ 276.687495][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1250'. [ 276.937867][ T43] usb 1-1: new low-speed USB device number 65 using dummy_hcd [ 276.986197][ T43] usb 1-1: device descriptor read/8, error -71 [ 277.007098][ T9683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.020054][ T9683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.039164][ T5934] usb 3-1: USB disconnect, device number 64 [ 277.234593][ T43] usb 1-1: new low-speed USB device number 66 using dummy_hcd [ 277.265428][ T43] usb 1-1: device descriptor read/8, error -71 [ 277.304886][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -32 [ 277.331085][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 277.384944][ T43] usb usb1-port1: unable to enumerate USB device [ 277.559642][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 277.596332][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 277.616432][ T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 277.629190][ T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 277.660593][ T9697] bpf: Bad value for 'uid' [ 277.672926][ T9697] /dev/rnullb0: Can't open blockdev [ 277.686945][ T10] usb 4-1: USB disconnect, device number 60 [ 277.721640][ T9699] /dev/rnullb0: Can't open blockdev [ 277.918154][ T9710] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 277.925425][ T9710] /dev/rnullb0: Can't open blockdev [ 278.329752][ T9731] ./cgroup: Can't lookup blockdev [ 278.814585][ T10] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 278.910604][ T9754] 9pnet_fd: Insufficient options for proto=fd [ 278.941358][ T31] audit: type=1326 audit(1754106090.404:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9753 comm="syz.1.1271" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb6258eb69 code=0x0 [ 278.990377][ T10] usb 3-1: New USB device found, idVendor=2770, idProduct=9048, bcdDevice=15.f5 [ 279.002073][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.010992][ T10] usb 3-1: Product: syz [ 279.017965][ T10] usb 3-1: Manufacturer: syz [ 279.023095][ T10] usb 3-1: SerialNumber: syz [ 279.034381][ T10] usb 3-1: config 0 descriptor?? [ 279.114709][ T5916] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 279.284622][ T5916] usb 1-1: Using ep0 maxpacket: 16 [ 279.292563][ T5916] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 279.304740][ T5916] usb 1-1: config 4 has no interface number 0 [ 279.312426][ T5916] usb 1-1: config 4 interface 51 has no altsetting 0 [ 279.331571][ T5916] usb 1-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice=83.4b [ 279.344505][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.352777][ T5916] usb 1-1: Product: syz [ 279.358293][ T5916] usb 1-1: Manufacturer: syz [ 279.363172][ T5916] usb 1-1: SerialNumber: syz [ 279.379303][ T5916] upd78f0730 1-1:4.51: upd78f0730 converter detected [ 279.393589][ T5916] usb 1-1: upd78f0730 converter now attached to ttyUSB0 [ 279.604940][ T24] vhci_hcd: vhci_device speed not set [ 279.621259][ T9775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.645575][ T9775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.658644][ T9775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.668480][ T9775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.841964][ T9780] /dev/rnullb0: Can't open blockdev [ 279.845976][ T9782] /dev/rnullb0: Can't open blockdev [ 279.859707][ T9780] /dev/rnullb0: Can't open blockdev [ 280.024195][ T9790] /dev/rnullb0: Can't open blockdev [ 280.058812][ T9793] /dev/rnullb0: Can't open blockdev [ 280.522435][ T9816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.555069][ T9816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.035105][ T24] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 281.196206][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 281.204281][ T24] usb 4-1: config 0 has no interface number 0 [ 281.228297][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.241295][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.251447][ T24] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 281.261196][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.291483][ T24] usb 4-1: config 0 descriptor?? [ 281.332867][ T9841] /dev/rnullb0: Can't open blockdev [ 281.612619][ T9] usb 3-1: USB disconnect, device number 65 [ 281.922661][ T9826] /dev/rnullb0: Can't open blockdev [ 281.931059][ T24] usbhid 4-1:0.1: can't add hid device: -71 [ 281.945814][ T24] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 281.970069][ T24] usb 4-1: USB disconnect, device number 61 [ 282.009615][ T9858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.018562][ T9858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.034641][ T9] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 282.095703][ T5916] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 282.184633][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 282.192034][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 282.205330][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 282.219628][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 282.230394][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.238997][ T9] usb 3-1: Product: syz [ 282.243536][ T9] usb 3-1: Manufacturer: syz [ 282.248722][ T9] usb 3-1: SerialNumber: syz [ 282.257959][ T9] usb 3-1: config 0 descriptor?? [ 282.262427][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 282.269914][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 282.280197][ T9] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 282.287271][ T5916] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.287300][ T5916] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 282.299428][ T5916] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 282.320655][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.329127][ T5916] usb 2-1: Product: syz [ 282.333481][ T5916] usb 2-1: Manufacturer: syz [ 282.338786][ T5916] usb 2-1: SerialNumber: syz [ 282.788755][ T5916] usb 2-1: 0:2 : does not exist [ 282.888170][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 282.899736][ T9] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 283.245654][ T5916] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 283.288376][ T5916] usb 2-1: USB disconnect, device number 75 [ 283.381686][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.518807][ T9852] /dev/sg0: Can't lookup blockdev [ 283.529924][ T9] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 283.550308][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 283.565234][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 283.585604][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 283.592573][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 283.610726][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 283.647331][ T9] usb 3-1: USB disconnect, device number 66 [ 283.826864][ T9874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.855210][ T9874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.933341][ T9874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.951778][ T9878] /dev/rnullb0: Can't open blockdev [ 283.966384][ T9874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.284064][ T9892] /dev/rnullb0: Can't open blockdev [ 284.904732][ T9] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 285.074021][ T9] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 285.116766][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.143943][ T9] usb 2-1: Product: syz [ 285.156444][ T9] usb 2-1: Manufacturer: syz [ 285.161334][ T9] usb 2-1: SerialNumber: syz [ 285.182199][ T9] usb 2-1: config 0 descriptor?? [ 285.194111][ T9] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 285.670912][ T9936] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20000 [ 285.679942][ T9935] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20000 [ 286.764103][ T9982] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1351'. [ 286.764636][ T5965] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 286.775485][ T9982] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1351'. [ 286.787213][ T9984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.800047][ T9984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.832666][ T9982] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1351'. [ 286.847839][ T9982] /dev/rnullb0: Can't open blockdev [ 286.947196][ T5965] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 286.957901][ T5965] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 286.970481][ T5965] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 287.000643][ T5965] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 287.011854][ T5965] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 287.028271][ T5965] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 287.040232][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.049429][ T5965] usb 4-1: Product: syz [ 287.053904][ T5965] usb 4-1: Manufacturer: syz [ 287.059575][ T5965] usb 4-1: SerialNumber: syz [ 287.080116][ T5965] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 287.094617][ T5965] imon 4-1:155.0: unable to initialize intf0, err -90 [ 287.111290][ T5965] imon:imon_probe: failed to initialize context! [ 287.118245][ T5965] imon 4-1:155.0: unable to register, err -19 [ 287.286936][ T9970] /dev/rnullb0: Can't open blockdev [ 287.333455][ T5965] usb 4-1: USB disconnect, device number 62 [ 287.489455][T10004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.518043][T10004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.535395][T10004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.548065][T10004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.567645][T10004] random: crng reseeded on system resumption [ 287.766225][T10019] /dev/rnullb0: Can't open blockdev [ 287.974597][T10027] program syz.3.1370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.162653][T10030] /dev/sg0: Can't lookup blockdev [ 288.645807][ T5934] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 288.827438][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.858022][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.888771][ T5934] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 288.907842][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.930761][ T5934] usb 3-1: config 0 descriptor?? [ 288.972340][ T5934] usbhid 3-1:0.0: can't add hid device: -22 [ 288.999692][ T5934] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 289.171528][ T5965] usb 3-1: USB disconnect, device number 67 [ 289.465280][ T983] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 289.630888][ T983] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 289.647960][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.667921][ T983] usb 4-1: Product: syz [ 289.678606][ T983] usb 4-1: Manufacturer: syz [ 289.689313][ T983] usb 4-1: SerialNumber: syz [ 289.711908][ T983] usb 4-1: config 0 descriptor?? [ 289.733222][ T983] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 290.114075][T10068] /dev/rnullb0: Can't open blockdev [ 290.138526][T10059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.169090][T10059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.468458][T10081] /dev/rnullb0: Can't open blockdev [ 290.479859][T10082] /dev/rnullb0: Can't open blockdev [ 290.643388][ T983] videodev: could not get a free minor [ 290.650818][ T983] gspca_main: video_register_device err -23 [ 290.665827][ T983] sq905c 4-1:0.0: probe with driver sq905c failed with error -23 [ 291.606478][T10121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.617616][T10121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.967176][T10133] /dev/rnullb0: Can't open blockdev [ 292.264021][ T983] usb 4-1: USB disconnect, device number 63 [ 292.337297][T10144] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1411'. [ 292.350382][T10144] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1411'. [ 292.360773][T10144] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1411'. [ 292.371375][T10144] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1411'. [ 292.385304][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1411'. [ 292.963515][T10159] /dev/rnullb0: Can't open blockdev [ 293.180920][T10170] /dev/rnullb0: Can't open blockdev [ 293.393226][T10179] program syz.1.1424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.429362][T10184] netlink: 'syz.0.1425': attribute type 11 has an invalid length. [ 293.455040][ T5934] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 293.569952][ T983] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 293.609275][ T5934] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 293.630150][T10191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.639262][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.640245][T10191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.650856][ T5934] usb 4-1: Product: syz [ 293.661370][ T5934] usb 4-1: Manufacturer: syz [ 293.667998][ T5934] usb 4-1: SerialNumber: syz [ 293.680668][ T5934] usb 4-1: config 0 descriptor?? [ 293.691364][ T5934] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 293.734622][ T983] usb 3-1: Using ep0 maxpacket: 16 [ 293.744172][ T983] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 293.756291][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.764515][ T983] usb 3-1: Product: syz [ 293.769493][ T983] usb 3-1: Manufacturer: syz [ 293.774177][ T983] usb 3-1: SerialNumber: syz [ 293.788866][ T983] usb 3-1: config 0 descriptor?? [ 293.797254][ T983] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 294.007740][ T983] ssu100 3-1:0.0: probe with driver ssu100 failed with error -5 [ 294.295520][ T5934] videodev: could not get a free minor [ 294.301267][ T5934] gspca_main: video_register_device err -23 [ 294.307877][T10199] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 294.315181][ T5934] sq905c 4-1:0.0: probe with driver sq905c failed with error -23 [ 294.316555][T10199] /dev/rnullb0: Can't open blockdev [ 294.512068][T10205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.521861][T10205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.654246][T10210] netlink: 592 bytes leftover after parsing attributes in process `syz.1.1435'. [ 294.949388][T10217] /dev/rnullb0: Can't open blockdev [ 295.035728][ T5916] usb 4-1: USB disconnect, device number 64 [ 295.563502][T10235] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 295.814334][T10249] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1448'. [ 295.837508][T10249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.852090][T10249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.023616][ T5965] usb 3-1: USB disconnect, device number 68 [ 296.084896][ T5916] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 296.239129][ T5916] usb 4-1: device descriptor read/64, error -71 [ 296.278777][T10263] syzkaller1: entered promiscuous mode [ 296.285806][T10263] syzkaller1: entered allmulticast mode [ 296.306919][T10263] /dev/rnullb0: Can't open blockdev [ 296.485262][ T5916] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 296.634660][ T5916] usb 4-1: device descriptor read/64, error -71 [ 296.744941][ T5916] usb usb4-port1: attempt power cycle [ 296.821599][T10277] /dev/rnullb0: Can't open blockdev [ 297.094607][ T5916] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 297.115414][ T5916] usb 4-1: device descriptor read/8, error -71 [ 297.164820][T10285] /dev/rnullb0: Can't open blockdev [ 297.266256][ T983] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 297.273020][T10293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.291745][T10293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.354969][ T5916] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 297.366586][T10296] /dev/rnullb0: Can't open blockdev [ 297.392296][T10296] netlink: 'syz.1.1469': attribute type 46 has an invalid length. [ 297.407019][ T5916] usb 4-1: device descriptor read/8, error -71 [ 297.455922][ T983] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 297.467936][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.476180][ T983] usb 3-1: Product: syz [ 297.480511][ T983] usb 3-1: Manufacturer: syz [ 297.492910][ T983] usb 3-1: SerialNumber: syz [ 297.502316][ T983] usb 3-1: config 0 descriptor?? [ 297.519234][ T5916] usb usb4-port1: unable to enumerate USB device [ 297.529659][ T983] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 298.243369][ T983] videodev: could not get a free minor [ 298.252644][ T983] gspca_main: video_register_device err -23 [ 298.263124][ T983] sq905c 3-1:0.0: probe with driver sq905c failed with error -23 [ 298.914338][T10316] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1477'. [ 299.173035][T10323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.203765][T10323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.228668][T10326] binder: BINDER_SET_CONTEXT_MGR already set [ 299.236833][T10326] binder: 10322:10326 ioctl 4018620d 200000000040 returned -16 [ 299.237437][T10323] binder: BINDER_SET_CONTEXT_MGR already set [ 299.251154][T10326] binder: 10322:10326 ioctl c0306201 2000000003c0 returned -22 [ 299.251720][T10323] binder: 10322:10323 ioctl 4018620d 200000000040 returned -16 [ 299.259635][T10326] binder: 10322:10326 ioctl c0306201 200000001440 returned -11 [ 299.286943][ T9] Process accounting resumed [ 299.296053][T10323] binder: 10322:10323 ioctl c0306201 200000000600 returned -11 [ 299.443837][T10331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1483'. [ 299.810576][T10327] Process accounting resumed [ 300.108989][ T9] usb 3-1: USB disconnect, device number 69 [ 300.400766][T10351] /dev/rnullb0: Can't open blockdev [ 300.443864][T10350] /dev/rnullb0: Can't open blockdev [ 300.752165][T10363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.793330][T10363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.800009][T10365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.816380][T10365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.824330][T10363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.844412][T10365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.854268][T10363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.867038][T10365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.883469][T10363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.898127][T10363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.912236][T10363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.927885][T10363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.940940][T10363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.950953][T10363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.966064][T10363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.978390][T10363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.016808][T10366] /dev/rnullb0: Can't open blockdev [ 301.119740][T10356] /dev/rnullb0: Can't open blockdev [ 301.353711][T10376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1503'. [ 301.373527][T10376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1503'. [ 301.386676][T10376] syz.3.1503: attempt to access beyond end of device [ 301.386676][T10376] loop3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 301.404880][T10376] vxfs: unable to read disk superblock at 1 [ 301.411149][T10376] syz.3.1503: attempt to access beyond end of device [ 301.411149][T10376] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 301.424886][T10376] vxfs: unable to read disk superblock at 8 [ 301.430835][T10376] vxfs: can't find superblock. [ 301.728507][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1507'. [ 302.134575][ T983] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 302.244288][T10409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.255531][T10409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.267385][T10408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.277868][T10408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.314819][ T983] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 302.324906][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.335060][ T983] usb 3-1: Product: syz [ 302.339348][ T983] usb 3-1: Manufacturer: syz [ 302.344042][ T983] usb 3-1: SerialNumber: syz [ 302.353319][ T983] usb 3-1: config 0 descriptor?? [ 302.369877][ T983] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 302.414825][ C0] ================================================================== [ 302.422953][ C0] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 302.430973][ C0] Read of size 2 at addr ffff888028f81c2a by task syz.0.1515/10413 [ 302.438911][ C0] [ 302.441264][ C0] CPU: 0 UID: 0 PID: 10413 Comm: syz.0.1515 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 302.441295][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 302.441316][ C0] Call Trace: [ 302.441324][ C0] [ 302.441331][ C0] dump_stack_lvl+0x189/0x250 [ 302.441367][ C0] ? rcu_is_watching+0x15/0xb0 [ 302.441394][ C0] ? __kasan_check_byte+0x12/0x40 [ 302.441432][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.441461][ C0] ? rcu_is_watching+0x15/0xb0 [ 302.441487][ C0] ? lock_release+0x4b/0x3e0 [ 302.441505][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 302.441539][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 302.441574][ C0] print_report+0xca/0x240 [ 302.441596][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 302.441626][ C0] kasan_report+0x118/0x150 [ 302.441647][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 302.441685][ C0] rose_timer_expiry+0x471/0x4b0 [ 302.441720][ C0] call_timer_fn+0x17e/0x5f0 [ 302.441741][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 302.441771][ C0] ? call_timer_fn+0xbe/0x5f0 [ 302.441789][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 302.441807][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 302.441830][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.441864][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 302.441896][ C0] __run_timer_base+0x61a/0x860 [ 302.441931][ C0] ? ktime_get+0x3e/0x1f0 [ 302.441956][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 302.441979][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 302.442020][ C0] run_timer_softirq+0xb7/0x180 [ 302.442055][ C0] handle_softirqs+0x283/0x870 [ 302.442084][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 302.442105][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 302.442126][ C0] __irq_exit_rcu+0xca/0x1f0 [ 302.442149][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 302.442181][ C0] irq_exit_rcu+0x9/0x30 [ 302.442203][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 302.442237][ C0] [ 302.442243][ C0] [ 302.442249][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 302.442266][ C0] RIP: 0010:lock_acquire+0x94/0x360 [ 302.442283][ C0] Code: 0f 84 d7 01 00 00 83 3d 49 d8 45 0e 00 0f 84 f0 00 00 00 48 8b b4 24 90 00 00 00 4c 89 ef e8 d3 8b 85 00 83 3d 2c d8 45 0e 00 <0f> 84 fa 00 00 00 65 8b 05 df 03 44 11 85 c0 0f 85 eb 00 00 00 65 [ 302.442301][ C0] RSP: 0018:ffffc900044e7238 EFLAGS: 00000202 [ 302.442323][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 69703ac6230ee200 [ 302.442340][ C0] RDX: 0000000000000000 RSI: ffffffff817301b2 RDI: 1ffffffff1ca73e4 [ 302.442356][ C0] RBP: ffffffff81730195 R08: 0000000000000000 R09: 0000000000000000 [ 302.442370][ C0] R10: ffffc900044e73f8 R11: ffffffff81ac8020 R12: 0000000000000002 [ 302.442386][ C0] R13: ffffffff8e539f20 R14: 0000000000000000 R15: 0000000000000000 [ 302.442401][ C0] ? unwind_next_frame+0xa5/0x2390 [ 302.442422][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 302.442446][ C0] ? unwind_next_frame+0xc2/0x2390 [ 302.442479][ C0] ? lock_acquire+0x8d/0x360 [ 302.442504][ C0] ? unwind_next_frame+0xa5/0x2390 [ 302.442534][ C0] ? kmem_cache_free+0x166/0x400 [ 302.442567][ C0] ? unwind_next_frame+0xa5/0x2390 [ 302.442595][ C0] unwind_next_frame+0xc2/0x2390 [ 302.442619][ C0] ? unwind_next_frame+0xa5/0x2390 [ 302.442651][ C0] ? unwind_next_frame+0xa5/0x2390 [ 302.442688][ C0] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 302.442725][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 302.442757][ C0] arch_stack_walk+0x11c/0x150 [ 302.442786][ C0] ? kmem_cache_free+0x166/0x400 [ 302.442824][ C0] stack_trace_save+0x9c/0xe0 [ 302.442853][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 302.442883][ C0] ? get_signal+0x1286/0x1340 [ 302.442901][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.442921][ C0] kasan_save_track+0x3e/0x80 [ 302.442949][ C0] ? kasan_save_track+0x3e/0x80 [ 302.442981][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 302.443011][ C0] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 302.443043][ C0] ? kmem_cache_free+0x166/0x400 [ 302.443087][ C0] __kasan_kmalloc+0x93/0xb0 [ 302.443124][ C0] __kmalloc_cache_noprof+0x230/0x3d0 [ 302.443159][ C0] ? kmem_cache_free+0x166/0x400 [ 302.443193][ C0] ? exit_mmap+0x53f/0xb50 [ 302.443206][ C0] kmem_cache_free+0x166/0x400 [ 302.443232][ C0] exit_mmap+0x53f/0xb50 [ 302.443249][ C0] ? uprobe_clear_state+0x20f/0x290 [ 302.443281][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 302.443299][ C0] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 302.443341][ C0] ? __pfx_exit_aio+0x10/0x10 [ 302.443365][ C0] ? uprobe_clear_state+0x274/0x290 [ 302.443387][ C0] __mmput+0x118/0x430 [ 302.443413][ C0] exit_mm+0x1da/0x2c0 [ 302.443445][ C0] ? __pfx_exit_mm+0x10/0x10 [ 302.443478][ C0] ? rcu_is_watching+0x15/0xb0 [ 302.443505][ C0] do_exit+0x648/0x2300 [ 302.443536][ C0] ? do_raw_spin_lock+0x121/0x290 [ 302.443559][ C0] ? __pfx_do_exit+0x10/0x10 [ 302.443600][ C0] do_group_exit+0x21c/0x2d0 [ 302.443635][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.443679][ C0] get_signal+0x1286/0x1340 [ 302.443712][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 302.443736][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 302.443769][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 302.443794][ C0] exit_to_user_mode_loop+0x75/0x110 [ 302.443816][ C0] do_syscall_64+0x2bd/0x3b0 [ 302.443835][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.443868][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.443885][ C0] ? clear_bhb_loop+0x60/0xb0 [ 302.443909][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.443932][ C0] RIP: 0033:0x7f936e98eb69 [ 302.443952][ C0] Code: Unable to access opcode bytes at 0x7f936e98eb3f. [ 302.443963][ C0] RSP: 002b:00007f936f7150e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 302.443985][ C0] RAX: fffffffffffffe00 RBX: 00007f936ebb5fa8 RCX: 00007f936e98eb69 [ 302.444002][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f936ebb5fa8 [ 302.444013][ C0] RBP: 00007f936ebb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 302.444023][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f936ebb5fac [ 302.444034][ C0] R13: 0000000000000000 R14: 00007ffc4432bce0 R15: 00007ffc4432bdc8 [ 302.444052][ C0] [ 302.444061][ C0] [ 302.975864][ T5851] Bluetooth: hci2: unexpected event for opcode 0x2019 [ 302.981080][ C0] Allocated by task 5216: [ 302.981097][ C0] kasan_save_track+0x3e/0x80 [ 302.997349][ T983] videodev: could not get a free minor [ 303.001192][ C0] __kasan_kmalloc+0x93/0xb0 [ 303.014043][ T983] gspca_main: video_register_device err -23 [ 303.017201][ C0] __kmalloc_cache_noprof+0x230/0x3d0 [ 303.017245][ C0] kernfs_fop_open+0x397/0xca0 [ 303.017269][ C0] do_dentry_open+0x953/0x13f0 [ 303.029775][ T983] sq905c 3-1:0.0: probe with driver sq905c failed with error -23 [ 303.033260][ C0] vfs_open+0x3b/0x340 [ 303.033297][ C0] path_openat+0x2ee5/0x3830 [ 303.109923][ C0] do_filp_open+0x1fa/0x410 [ 303.114439][ C0] do_sys_openat2+0x121/0x1c0 [ 303.119157][ C0] __x64_sys_openat+0x138/0x170 [ 303.124025][ C0] do_syscall_64+0xfa/0x3b0 [ 303.128539][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.134460][ C0] [ 303.136814][ C0] Freed by task 5216: [ 303.140813][ C0] kasan_save_track+0x3e/0x80 [ 303.145537][ C0] kasan_save_free_info+0x46/0x50 [ 303.150598][ C0] __kasan_slab_free+0x5b/0x80 [ 303.155386][ C0] kfree+0x18e/0x440 [ 303.159313][ C0] kernfs_fop_release+0x160/0x190 [ 303.164362][ C0] __fput+0x44c/0xa70 [ 303.168359][ C0] fput_close_sync+0x119/0x200 [ 303.173139][ C0] __x64_sys_close+0x7f/0x110 [ 303.177834][ C0] do_syscall_64+0xfa/0x3b0 [ 303.182341][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.188249][ C0] [ 303.190603][ C0] The buggy address belongs to the object at ffff888028f81c00 [ 303.190603][ C0] which belongs to the cache kmalloc-512 of size 512 [ 303.202597][ T5916] usb 3-1: USB disconnect, device number 70 [ 303.204757][ C0] The buggy address is located 42 bytes inside of [ 303.204757][ C0] freed 512-byte region [ffff888028f81c00, ffff888028f81e00) [ 303.204784][ C0] [ 303.204790][ C0] The buggy address belongs to the physical page: [ 303.204816][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028f81c00 pfn:0x28f80 [ 303.204843][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 303.204862][ C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 303.204884][ C0] page_type: f5(slab) [ 303.204904][ C0] raw: 00fff00000000240 ffff88801a841c80 ffffea000176c710 ffffea0000c5bf10 [ 303.204932][ C0] raw: ffff888028f81c00 000000000010000d 00000000f5000000 0000000000000000 [ 303.204955][ C0] head: 00fff00000000240 ffff88801a841c80 ffffea000176c710 ffffea0000c5bf10 [ 303.204976][ C0] head: ffff888028f81c00 000000000010000d 00000000f5000000 0000000000000000 [ 303.204996][ C0] head: 00fff00000000002 ffffea0000a3e001 00000000ffffffff 00000000ffffffff [ 303.205016][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 303.205028][ C0] page dumped because: kasan: bad access detected [ 303.323170][ C0] page_owner tracks the page as allocated [ 303.328907][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 19255841820, free_ts 0 [ 303.348895][ C0] post_alloc_hook+0x240/0x2a0 [ 303.354126][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 303.359699][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 303.365548][ C0] alloc_pages_mpol+0x232/0x4a0 [ 303.370444][ C0] allocate_slab+0x8a/0x370 [ 303.375054][ C0] ___slab_alloc+0xbeb/0x1410 [ 303.379763][ C0] __kmalloc_cache_noprof+0x296/0x3d0 [ 303.385223][ C0] device_add+0xbe/0xb50 [ 303.389506][ C0] usb_hub_create_port_device+0x3c2/0xb90 [ 303.395247][ C0] hub_probe+0x26bf/0x37f0 [ 303.399813][ C0] usb_probe_interface+0x668/0xc30 [ 303.405119][ C0] really_probe+0x26d/0x9e0 [ 303.409655][ C0] __driver_probe_device+0x18c/0x2f0 [ 303.414968][ C0] driver_probe_device+0x4f/0x430 [ 303.420031][ C0] __device_attach_driver+0x2ce/0x530 [ 303.425424][ C0] bus_for_each_drv+0x24e/0x2e0 [ 303.430316][ C0] page_owner free stack trace missing [ 303.435695][ C0] [ 303.438055][ C0] Memory state around the buggy address: [ 303.443703][ C0] ffff888028f81b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 303.451800][ C0] ffff888028f81b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 303.459910][ C0] >ffff888028f81c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 303.468005][ C0] ^ [ 303.473479][ C0] ffff888028f81c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 303.481590][ C0] ffff888028f81d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 303.489662][ C0] ================================================================== [ 303.497768][ C0] vkms_vblank_simulate: vblank timer overrun [ 303.503971][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 303.511204][ C0] CPU: 0 UID: 0 PID: 10413 Comm: syz.0.1515 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 303.522434][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.532588][ C0] Call Trace: [ 303.535890][ C0] [ 303.538767][ C0] dump_stack_lvl+0x99/0x250 [ 303.543442][ C0] ? __asan_memcpy+0x40/0x70 [ 303.548068][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.553723][ C0] ? __pfx__printk+0x10/0x10 [ 303.558338][ C0] vpanic+0x281/0x750 [ 303.562367][ C0] ? __pfx_vpanic+0x10/0x10 [ 303.566887][ C0] ? irqentry_exit+0x74/0x90 [ 303.571673][ C0] panic+0xb9/0xc0 [ 303.575856][ C0] ? __pfx_panic+0x10/0x10 [ 303.580313][ C0] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 303.586229][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 303.592169][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 303.597308][ C0] check_panic_on_warn+0x89/0xb0 [ 303.602293][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 303.607468][ C0] end_report+0x78/0x160 [ 303.611732][ C0] kasan_report+0x129/0x150 [ 303.616252][ C0] ? rose_timer_expiry+0x471/0x4b0 [ 303.621416][ C0] rose_timer_expiry+0x471/0x4b0 [ 303.626406][ C0] call_timer_fn+0x17e/0x5f0 [ 303.631010][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 303.636487][ C0] ? call_timer_fn+0xbe/0x5f0 [ 303.641193][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 303.646330][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 303.651562][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.656786][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 303.662274][ C0] __run_timer_base+0x61a/0x860 [ 303.667181][ C0] ? ktime_get+0x3e/0x1f0 [ 303.671531][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 303.677047][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 303.683336][ C0] run_timer_softirq+0xb7/0x180 [ 303.688209][ C0] handle_softirqs+0x283/0x870 [ 303.692992][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 303.697778][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 303.703624][ C0] __irq_exit_rcu+0xca/0x1f0 [ 303.708233][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 303.713466][ C0] irq_exit_rcu+0x9/0x30 [ 303.717894][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 303.723549][ C0] [ 303.726579][ C0] [ 303.729524][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 303.735530][ C0] RIP: 0010:lock_acquire+0x94/0x360 [ 303.740779][ C0] Code: 0f 84 d7 01 00 00 83 3d 49 d8 45 0e 00 0f 84 f0 00 00 00 48 8b b4 24 90 00 00 00 4c 89 ef e8 d3 8b 85 00 83 3d 2c d8 45 0e 00 <0f> 84 fa 00 00 00 65 8b 05 df 03 44 11 85 c0 0f 85 eb 00 00 00 65 [ 303.760516][ C0] RSP: 0018:ffffc900044e7238 EFLAGS: 00000202 [ 303.766634][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 69703ac6230ee200 [ 303.774648][ C0] RDX: 0000000000000000 RSI: ffffffff817301b2 RDI: 1ffffffff1ca73e4 [ 303.782651][ C0] RBP: ffffffff81730195 R08: 0000000000000000 R09: 0000000000000000 [ 303.790729][ C0] R10: ffffc900044e73f8 R11: ffffffff81ac8020 R12: 0000000000000002 [ 303.798737][ C0] R13: ffffffff8e539f20 R14: 0000000000000000 R15: 0000000000000000 [ 303.806739][ C0] ? unwind_next_frame+0xa5/0x2390 [ 303.811988][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 303.818189][ C0] ? unwind_next_frame+0xc2/0x2390 [ 303.823324][ C0] ? lock_acquire+0x8d/0x360 [ 303.827934][ C0] ? unwind_next_frame+0xa5/0x2390 [ 303.833060][ C0] ? kmem_cache_free+0x166/0x400 [ 303.838021][ C0] ? unwind_next_frame+0xa5/0x2390 [ 303.843237][ C0] unwind_next_frame+0xc2/0x2390 [ 303.848191][ C0] ? unwind_next_frame+0xa5/0x2390 [ 303.853598][ C0] ? unwind_next_frame+0xa5/0x2390 [ 303.858729][ C0] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 303.864385][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 303.870573][ C0] arch_stack_walk+0x11c/0x150 [ 303.875388][ C0] ? kmem_cache_free+0x166/0x400 [ 303.880378][ C0] stack_trace_save+0x9c/0xe0 [ 303.885078][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 303.890506][ C0] ? get_signal+0x1286/0x1340 [ 303.895206][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.901427][ C0] kasan_save_track+0x3e/0x80 [ 303.906653][ C0] ? kasan_save_track+0x3e/0x80 [ 303.911633][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 303.916446][ C0] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 303.922103][ C0] ? kmem_cache_free+0x166/0x400 [ 303.927098][ C0] __kasan_kmalloc+0x93/0xb0 [ 303.931719][ C0] __kmalloc_cache_noprof+0x230/0x3d0 [ 303.937111][ C0] ? kmem_cache_free+0x166/0x400 [ 303.942072][ C0] ? exit_mmap+0x53f/0xb50 [ 303.946514][ C0] kmem_cache_free+0x166/0x400 [ 303.951305][ C0] exit_mmap+0x53f/0xb50 [ 303.955569][ C0] ? uprobe_clear_state+0x20f/0x290 [ 303.960823][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 303.965621][ C0] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 303.971331][ C0] ? __pfx_exit_aio+0x10/0x10 [ 303.976037][ C0] ? uprobe_clear_state+0x274/0x290 [ 303.981284][ C0] __mmput+0x118/0x430 [ 303.985382][ C0] exit_mm+0x1da/0x2c0 [ 303.989502][ C0] ? __pfx_exit_mm+0x10/0x10 [ 303.994128][ C0] ? rcu_is_watching+0x15/0xb0 [ 303.998920][ C0] do_exit+0x648/0x2300 [ 304.003107][ C0] ? do_raw_spin_lock+0x121/0x290 [ 304.008176][ C0] ? __pfx_do_exit+0x10/0x10 [ 304.012798][ C0] do_group_exit+0x21c/0x2d0 [ 304.017485][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.022736][ C0] get_signal+0x1286/0x1340 [ 304.027267][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 304.032844][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 304.039033][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 304.044531][ C0] exit_to_user_mode_loop+0x75/0x110 [ 304.049868][ C0] do_syscall_64+0x2bd/0x3b0 [ 304.054526][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.059788][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.065917][ C0] ? clear_bhb_loop+0x60/0xb0 [ 304.070665][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.076579][ C0] RIP: 0033:0x7f936e98eb69 [ 304.081009][ C0] Code: Unable to access opcode bytes at 0x7f936e98eb3f. [ 304.088211][ C0] RSP: 002b:00007f936f7150e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 304.096647][ C0] RAX: fffffffffffffe00 RBX: 00007f936ebb5fa8 RCX: 00007f936e98eb69 [ 304.104647][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f936ebb5fa8 [ 304.112670][ C0] RBP: 00007f936ebb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 304.120755][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f936ebb5fac [ 304.128754][ C0] R13: 0000000000000000 R14: 00007ffc4432bce0 R15: 00007ffc4432bdc8 [ 304.136756][ C0] [ 304.140122][ C0] Kernel Offset: disabled [ 304.144462][ C0] Rebooting in 86400 seconds..