last executing test programs: 12m46.572852555s ago: executing program 2 (id=2241): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) readv(r0, &(0x7f0000000140)=[{0x0, 0x44}, {&(0x7f00000001c0)=""/259, 0x103}], 0x2) 12m46.421847972s ago: executing program 2 (id=2243): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x42280, 0x0) close(r1) ioctl$KVM_CHECK_EXTENSION(r2, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000080)={0x1000, 0x100000, 0x8}) 12m46.337813756s ago: executing program 2 (id=2245): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000440)="7d717c1f8428280ab55a04c6325d699064905ef93ebd77e2efec9f53dda482c9ee2e65a7f14fb8c8ba86e1a48d2b6b6afa2f0b4ec3e4f1113ef51e3ee2e89096948f4605cb79bde9e3c35e2e8c5656e7f4e2839f750dbc54845ec35a6540a0ac354fc844277715dc45a624629d82528a3e868dc2152570c88ba2157e21a3fd45974bfeb026194d440b5318f8bc08da0d365fd550f1ddb920ad905618a7289482f74bc2e81ec9c0abf25663403ca2ad939860eef39a36235f55b27706f0bbf4a7596f3c713b3b5e96c8186e508bac854c98bcae2a79234c8f125fd1199bcc52695fe06ba43c32a91f2cabaec6291285220c54819496843f", 0xf7}, {&(0x7f0000002c40)="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", 0xeec}], 0x2}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)="80", 0x1}], 0x1}}], 0x2, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) 12m46.248860625s ago: executing program 2 (id=2247): syz_io_uring_setup(0xa86, &(0x7f0000000200)={0x0, 0x4661, 0x80, 0x5, 0x345}, &(0x7f0000000b40), &(0x7f0000000b80)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 12m46.101732632s ago: executing program 2 (id=2248): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 12m45.835777002s ago: executing program 2 (id=2249): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000900)={0x0, 0x2, 0x1, [0xffff, 0x13a0000000000, 0x0, 0x88, 0x5], [0xffffffffffffff63, 0x8, 0xffffffffffffff4a, 0xfffffffffffffff8, 0x10000, 0x2, 0x2d9, 0x4, 0x3, 0xc7, 0x8001, 0x9, 0x4, 0x7e, 0x7d, 0x3ae7, 0x8, 0x101, 0x80, 0xffffffffffff8000, 0x3, 0x9, 0x7f, 0x6, 0x1, 0xc, 0x5, 0xff800000000000, 0x401, 0x7fffffff, 0xc333, 0x9, 0x6, 0x8001, 0x1, 0xd5d, 0x8, 0x1, 0x2, 0x5, 0x6cf2, 0x2, 0x9, 0xa, 0x0, 0xffffffff00000001, 0x7fffffffffffffff, 0x2, 0x5, 0x4cc2, 0xfffffffffffffff7, 0x6, 0x0, 0x3a67, 0x7f, 0x0, 0xfff, 0xffffffffffffffff, 0x8, 0x3, 0x706, 0x2, 0x5b4, 0x8, 0xfffffffffffffffb, 0xb, 0xb88a, 0x6, 0x3, 0x6, 0x2, 0x77, 0x8, 0x346, 0x0, 0xfffffffffffffff9, 0x8, 0xffff800000000000, 0x7, 0x6, 0x7, 0xffffffffffffff92, 0x7, 0x5, 0xe36, 0x3, 0x9, 0x5, 0x8, 0x6, 0x40000000000000, 0x6, 0x684, 0x2, 0x401, 0x34, 0x6fc, 0xc90, 0xfff, 0xfffffffffffffeff, 0x72, 0x3, 0x6, 0x28, 0x3, 0x1, 0x8d45, 0x100000000, 0x3ff, 0xf2, 0x800, 0x8, 0x8, 0x8001, 0x5, 0x9, 0xa, 0x1ff, 0x2, 0x6b, 0x334]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40408c1) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 12m45.175666333s ago: executing program 32 (id=2249): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000900)={0x0, 0x2, 0x1, [0xffff, 0x13a0000000000, 0x0, 0x88, 0x5], [0xffffffffffffff63, 0x8, 0xffffffffffffff4a, 0xfffffffffffffff8, 0x10000, 0x2, 0x2d9, 0x4, 0x3, 0xc7, 0x8001, 0x9, 0x4, 0x7e, 0x7d, 0x3ae7, 0x8, 0x101, 0x80, 0xffffffffffff8000, 0x3, 0x9, 0x7f, 0x6, 0x1, 0xc, 0x5, 0xff800000000000, 0x401, 0x7fffffff, 0xc333, 0x9, 0x6, 0x8001, 0x1, 0xd5d, 0x8, 0x1, 0x2, 0x5, 0x6cf2, 0x2, 0x9, 0xa, 0x0, 0xffffffff00000001, 0x7fffffffffffffff, 0x2, 0x5, 0x4cc2, 0xfffffffffffffff7, 0x6, 0x0, 0x3a67, 0x7f, 0x0, 0xfff, 0xffffffffffffffff, 0x8, 0x3, 0x706, 0x2, 0x5b4, 0x8, 0xfffffffffffffffb, 0xb, 0xb88a, 0x6, 0x3, 0x6, 0x2, 0x77, 0x8, 0x346, 0x0, 0xfffffffffffffff9, 0x8, 0xffff800000000000, 0x7, 0x6, 0x7, 0xffffffffffffff92, 0x7, 0x5, 0xe36, 0x3, 0x9, 0x5, 0x8, 0x6, 0x40000000000000, 0x6, 0x684, 0x2, 0x401, 0x34, 0x6fc, 0xc90, 0xfff, 0xfffffffffffffeff, 0x72, 0x3, 0x6, 0x28, 0x3, 0x1, 0x8d45, 0x100000000, 0x3ff, 0xf2, 0x800, 0x8, 0x8, 0x8001, 0x5, 0x9, 0xa, 0x1ff, 0x2, 0x6b, 0x334]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40408c1) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 9m44.7943955s ago: executing program 4 (id=3175): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) (async) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x920000000000f5ff) (async) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) r5 = gettid() r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000580)={0x3c, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_KEY={0x20, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}]}, 0x3c}}, 0x20000000) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="020025bd7000ffdbdf251e00000010002f800c000380080001000300000008000300", @ANYRES32=r10, @ANYBLOB="0c000600030000000000"], 0x38}, 0x1, 0x0, 0x0, 0x24040001}, 0x52640564f1afe70a) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000300", @ANYRES32=0x0, @ANYRES16=r4, @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) (async) r15 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r15, 0xc0189436, &(0x7f0000000140)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r14, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002"], 0x7c}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000325bd7000ffdbdf250700000008000300", @ANYRES32=r11, @ANYBLOB="0c0017000200aaaaaaaaaaaa08000300", @ANYRES32=r14, @ANYBLOB="0c00260000000000000000000c0017000203aaaaaaaaaaaa"], 0x48}, 0x1, 0x0, 0x0, 0x2000}, 0x4000000) r16 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x22052, r16, 0x2000) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_EXTENDED_ADDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008044}, 0x2004000) 9m44.748357444s ago: executing program 4 (id=3176): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000e37cbccf45bd517dcf491a83b7e08b53f60dfdae8b49cf85b5f4d9a6cbb93763c14102fd9469d25e98e9875cab1a601bebcf4e0037", @ANYRESHEX=r0, @ANYBLOB="6d932bbd7000000000b6acbb7c1424169a0300"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xa0020, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRESHEX=0x0, @ANYRESHEX=r2]) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000840), 0x0, 0x6ca06509331c7af0) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x9}, 0x8) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='romfs\x00', 0x0, &(0x7f0000000340)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000040)={0x40, 0x5, 0x81, 0xffff375b, 0x7}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') ioctl$TUNSETIFF(r6, 0x8004b708, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffdfffffe, 0x20031, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r8, &(0x7f0000000c00), 0x7, 0x2, 0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x50}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2400, 0x0) 9m43.749881724s ago: executing program 4 (id=3181): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="000a0200"], 0x0, 0x0, 0x0, 0x0}) 9m40.707773108s ago: executing program 4 (id=3190): syz_usb_connect$cdc_ncm(0x3, 0x71, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x2, 0x1, 0x59, 0x10, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, 'Lfd'}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0xfffffff9, 0x1, 0x1, 0x1}, {0x6, 0x24, 0x1a, 0x74b1, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0xbb, 0xf8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x40, 0xca}}}}}}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6576, 0x9}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0x5}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x200007, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285629, &(0x7f0000000080)={0x6, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x3}}, 0x0, 0x0}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x220a00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r5) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x10000, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x141840) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000000140)=0xe8) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2001, &(0x7f00000004c0)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x35, 0x38]}}, {@huge_within_size}, {@huge_always}, {@uid={'uid', 0x3d, r8}}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x70, 0x67, 0xc]}}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x14, 0x6d, 0x37, 0x74, 0x6d]}}, {@noswap}, {@quota}], [{@func={'func', 0x3d, 'FILE_MMAP'}}]}) ioctl$HIDIOCGUCODE(r7, 0xc018480d, &(0x7f00000011c0)={0x3, 0x100, 0x300, 0x8000005, 0x590f, 0x9}) 9m39.234163953s ago: executing program 4 (id=3200): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) close(r2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0x9, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 9m38.649682651s ago: executing program 4 (id=3201): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b", 0xaf}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf", 0xe5}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad", 0x24}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa4386", 0xc4}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd64", 0xb8}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 9m38.249319578s ago: executing program 33 (id=3201): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b", 0xaf}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf", 0xe5}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad", 0x24}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa4386", 0xc4}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd64", 0xb8}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 8m54.601848641s ago: executing program 1 (id=3427): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) (fail_nth: 1) 8m53.997867685s ago: executing program 1 (id=3429): r0 = syz_open_dev$vbi(&(0x7f0000001040), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 8m53.96742686s ago: executing program 1 (id=3430): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x100, 0x7}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r3 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468305f746f5f626174616476000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514"], 0xe8}}, 0x0) 8m53.841399817s ago: executing program 1 (id=3431): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)={0x2, 0x0, @b}, 0x48, r1) r3 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, r0) r4 = add_key$fscrypt_provisioning(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)={0x1, 0x0, @c}, 0x29, r3) keyctl$link(0x8, r2, r1) r5 = add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="6a9f926012a9771104b85e64e6ab62b57b69510e52f5f8728a6c141c9c6760b8d68f0d365c191649d645e462a4e5dcc9071f655d46256e72dc8875bd9eddd88c9083cc29a4e7b6f4e1fd8f8642e58c25c96a07fab4a370b55b533b7e15020a151f74d7085fd8b72f296eb1d5cc5aafcfd6a1a4edfb1359680bee4f4897b49352aab5bcca5f66e9b605fc57b6ec5df8a1f1ad0d0e04244ca2a6f02b1bed189c85c5c6873ea69c2e6bae8684b16a834798de94176b5957f69d48fdbf4bf0d6cd577ae1cd", 0xc3, r0) keyctl$unlink(0x9, r4, r1) keyctl$reject(0x13, 0x0, 0x3, 0x6, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$link(0x8, r2, r6) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000540)={r2, 0xdb, 0xa}, 0xfffffffffffffffe, &(0x7f0000000580)="9f43fcaca5cbea83332c046a692dce009f7174edf15f003163b760dd5715a46808312f4457e18ea456ab065db836d9af0739bae4f465fd7236e5f8a1fe869fd7c062be5645909613ae3c25149bf41a6ee5034fe5e2bfe4815df8786569779ea7003e4f8d4751db2c0e20e6840432ca06f64f2a55390e3783768d8153d77639f1d10b8bd170b9fdf3b116f29d70a2e3f1cef2da1a478ba4328be7fa60880eaa217b25da98140016a4adacffa8f860b1a25480830072cef27bbc1159d3cae91ff25905af222aa4a493a279c4a148b53ebc01e1646f5d325774d6bdea", &(0x7f0000000680)=""/10) keyctl$restrict_keyring(0x1d, r3, &(0x7f00000006c0)='big_key\x00', &(0x7f0000000700)='\\\x00') ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000740)=0x0) r8 = getpgrp(r7) keyctl$KEYCTL_MOVE(0x1e, r3, r0, r3, 0x1) getpgrp(r8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000780)=@secondary) keyctl$link(0x8, 0x0, r6) keyctl$get_keyring_id(0x0, r4, 0x0) timer_create(0x6, &(0x7f00000007c0)={0x0, 0x18, 0x2, @tid=r8}, &(0x7f0000000800)=0x0) timer_settime(r9, 0x1, &(0x7f0000000840)={{0x0, 0x989680}}, &(0x7f0000000880)) keyctl$restrict_keyring(0x1d, r6, &(0x7f00000008c0)='big_key\x00', 0x0) keyctl$search(0xa, r3, &(0x7f0000000900)='big_key\x00', &(0x7f0000000940)={'syz', 0x2}, r3) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, &(0x7f0000000a00)=@keyring={'key_or_keyring:', r5}) keyctl$reject(0x13, r2, 0x1400000000000000, 0x4, r0) r10 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, &(0x7f0000000ac0)="78af9811260f791831ff22848ede29722371e1d41b638847306bf66a78229c6881d787cfbbfdcc0b522ee1d3380ba59a8b298a97551859f0828b085f530e4abedf852dbbeca743f38d7764acec062e1751afd13bf9f5c6472fcaabddf013098f920ddc262378e233c77fdd9ef1", 0x6d, r6) keyctl$read(0xb, r10, &(0x7f0000000b40)=""/4096, 0x1000) keyctl$search(0xa, r6, &(0x7f0000001b40)='pkcs7_test\x00', &(0x7f0000001b80)={'syz', 0x1}, r1) 8m53.774147447s ago: executing program 1 (id=3433): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5, 0x6, 0x1], 0xd5d5c004, 0x8340}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x80, 0x4, 0x5, 0x0, 0x9, 0x5, 0x40, 0x7, 0x6, 0x4, 0xf9, 0x8, 0x0, 0x0, 0x5, 0x2, 0x4, 0x3, 0x4, '\x00', 0x4, 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/68, 0x44}], 0x1, 0x5d, 0x9) 8m53.47768918s ago: executing program 1 (id=3435): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x5956) write$char_usb(r0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x401, 0xf8d6, 0x4, 0x0, 0x0}) close_range(r1, r1, 0x2) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000140)={r2}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = getpid() ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r4) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)) r5 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x7fff}, {0x10, 0x9}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) syz_usb_control_io$uac1(r5, &(0x7f0000000000)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$char_usb(r7, 0x0, 0x0) 8m38.423486835s ago: executing program 34 (id=3435): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x5956) write$char_usb(r0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x401, 0xf8d6, 0x4, 0x0, 0x0}) close_range(r1, r1, 0x2) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000140)={r2}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = getpid() ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=r4) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)) r5 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x7fff}, {0x10, 0x9}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) syz_usb_control_io$uac1(r5, &(0x7f0000000000)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$char_usb(r7, 0x0, 0x0) 7m52.122397926s ago: executing program 6 (id=3741): r0 = syz_open_dev$vim2m(&(0x7f0000001100), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x5c, 0x31384142}) 7m52.003812135s ago: executing program 6 (id=3743): ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000580)={0x34, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}]}, 0x34}}, 0x20000000) read$FUSE(0xffffffffffffffff, &(0x7f000000ddc0)={0x2020}, 0x2020) 7m51.881436811s ago: executing program 6 (id=3745): prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000100)) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x60, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8, 0xfffffffe}}) syz_open_dev$char_usb(0xc, 0xb4, 0x5) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) ioctl$LOOP_CONFIGURE(r2, 0xc030128a, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x100) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000500)={0x60, 0x17, 0x100, "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"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m48.701730167s ago: executing program 6 (id=3759): r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) ioctl$CEC_ADAP_G_CAPS(r0, 0xc04c6100, &(0x7f0000000000)) getsockname$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x1c) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000500)={0x6, 0x3, 0x9fb, 0x0, 0x4, 0x0, "01e60000000000000034dbb39fe6083a", 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x7f}) 7m48.596474016s ago: executing program 6 (id=3760): mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r3) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000500)={0x28, 0x4, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) 7m48.415278208s ago: executing program 6 (id=3763): ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000580)={0x34, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}]}, 0x34}}, 0x20000000) read$FUSE(0xffffffffffffffff, &(0x7f000000ddc0)={0x2020}, 0x2020) 7m33.222034388s ago: executing program 35 (id=3763): ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000580)={0x34, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}]}, 0x34}}, 0x20000000) read$FUSE(0xffffffffffffffff, &(0x7f000000ddc0)={0x2020}, 0x2020) 3m36.767952084s ago: executing program 0 (id=5273): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 3m36.102970155s ago: executing program 3 (id=5277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="0500000000000000000021"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 3m35.938766936s ago: executing program 3 (id=5278): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008200800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 3m35.774428345s ago: executing program 5 (id=5279): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36104001a0038001d004231a0e69ee581ffffffffffffff00a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407163ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) r2 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) getpid() (async) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/191, 0xbf}], 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x20000, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, &(0x7f0000000080), 0x0, 0x24020804, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10) 3m35.762917768s ago: executing program 3 (id=5280): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="240000001600010400000000000000000a000000040000000c000a"], 0x24}, 0x1, 0x2000000}, 0x0) 3m35.611384898s ago: executing program 3 (id=5281): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, 0x0, 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 3m35.306420823s ago: executing program 5 (id=5283): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) r2 = signalfd(r1, &(0x7f0000000000)={[0x6a7]}, 0x8) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0xcc) chroot(&(0x7f0000000100)='./file0/file0\x00') chroot(&(0x7f0000000100)='./file0\x00') rmdir(&(0x7f0000000140)='./file0/file0/..\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r7}, 0x10) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x1002044, 0x4) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000240)={0x60, 0x1, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000667000/0x2000)=nil, 0x80000001, &(0x7f0000000100)=[{0x800, 0xfffffffffffffffd, 0x5}, {0xeb, 0x9, 0x5}, {0x7, 0x0, 0x1}, {0x8458, 0xfffffffffffffffe, 0x7fffffff}], 0x4, 0x100000000, 0x2, 0x40, 0x1, 0x1c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/73, 0x49}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) 3m35.289865575s ago: executing program 0 (id=5284): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, '\x00', "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38) sendto$inet6(r0, 0x0, 0x0, 0xe0ffffffffffffff, 0x0, 0x0) 3m34.879977621s ago: executing program 0 (id=5286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="0500000000000000000021"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 3m34.292089013s ago: executing program 0 (id=5287): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0xd4, 0x3, 0x40, @empty, @mcast2, 0x700, 0x7, 0x9, 0x6}}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) 3m33.941121187s ago: executing program 0 (id=5288): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007add152045058080010309040000000000000000000000000036b5ef6d3e6714945b83e948a060a05c744611a0163d2f451e19f515cc76ce213eab7a"], 0x0) 3m33.709186323s ago: executing program 7 (id=5290): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x2000c004) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r1, &(0x7f0000000340)={{0xcc, 0x3, 0x80, 0x2e8, 0xd8, 0x2860, 0x2f3, 0xfffffff8}, "9ac717552c41b94700e2f4c48bf8c439db28bf629a4b03b9bda96609c06bb404c31a17d4554bb9a412608628401a4d4fa19fa7a1a0366fa14d86383d65ec743679d4d2f1b4eba36fc4dcb9ecdbfbb151e7cc6b995a7f96405bd68c8e34615c62fe418ab5d17c50d3df7e760cf7fb66d32c736b808b87beff5ef351622c5e279a87b2aa79fd4962a005ddc065344e5c997fb12cba561b9c20ae7fbc4ec89978b65e71b18ae101b00a49ca242ce84e1ee23a03fe5d85a2132293caa366174574296ec3575a777948ccc238219170b1f3bec432eabf5d013796d879a34a79d4eb9cf0e35ce2dc1cec1ff036ee6438b9e2c48fc5c19096052f", ['\x00', '\x00', '\x00', '\x00']}, 0x517) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0xfffffffffffffd1e, &(0x7f0000000d00)=[{&(0x7f0000000a00)=""/240, 0xf0}, {&(0x7f0000000240)=""/88, 0x58}, {&(0x7f0000002980)=""/4093, 0x1002}, {&(0x7f00000000c0)=""/221, 0xdd}, {&(0x7f00000008c0)=""/46, 0x2e}], 0x5}, 0x80000000}], 0x4, 0x10162, 0x0) recvmmsg(r0, &(0x7f0000003980)=[{{&(0x7f0000000040)=@ieee802154, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000900)=""/252, 0xfc}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/16, 0x10}, {&(0x7f00000002c0)=""/52, 0x34}, {&(0x7f0000000b00)=""/143, 0x8f}, {&(0x7f0000000880)=""/27, 0x1b}, {&(0x7f0000000bc0)=""/60, 0x3c}], 0x7, &(0x7f0000001d80)=""/237, 0xed}, 0x3}, {{&(0x7f0000000c80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002280)=[{&(0x7f0000001e80)=""/142, 0x8e}, {&(0x7f0000001f40)=""/207, 0xcf}, {&(0x7f0000002040)=""/22, 0x16}, {&(0x7f0000002080)=""/58, 0x3a}, {&(0x7f00000020c0)=""/56, 0x38}, {&(0x7f0000002100)=""/67, 0x43}, {&(0x7f0000002180)=""/211, 0xd3}], 0x7, &(0x7f0000002300)=""/220, 0xdc}, 0x8000}, {{&(0x7f0000002400)=@nfc_llcp, 0x80, &(0x7f0000002500)=[{&(0x7f0000002480)=""/118, 0x76}], 0x1}, 0x492}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002540)=""/157, 0x9d}, {&(0x7f0000002600)=""/133, 0x85}, {&(0x7f00000026c0)=""/96, 0x60}, {&(0x7f0000002740)=""/39, 0x27}], 0x4, &(0x7f00000027c0)=""/194, 0xc2}, 0x8}], 0x4, 0x2, &(0x7f00000028c0)={0x0, 0x3938700}) 3m33.481700022s ago: executing program 5 (id=5291): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8280, 0x0) fadvise64(r0, 0x3, 0x3, 0x5) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) mmap(&(0x7f0000785000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0xbd463000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa4c81, 0x0) dup3(r3, r1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000140)=r5) 3m33.389217388s ago: executing program 7 (id=5292): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x100, 0x5d, 0x2, 0x8004}]}, 0x10) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)="180c4552", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r5, @ANYBLOB="0a000600080211000001000006006600c78800001a0033"], 0x50}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fddbdf2537000000080003008a1cea74081d981dd6fed05adc968edfc0d6fa37656b53449f7a6564e3abc4b63348431356f58702cdd5602006fbaf7c6445e73342d6c2a4058cffe0dbebbc063bc6ae9ab297291b2426da8a9c89bf01db", @ANYRES32=r5, @ANYBLOB="080057009d3d0000"], 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r4, 0x203, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0xc090}, 0x900) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x2]}}) r6 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x26642) socket$igmp6(0xa, 0x3, 0x2) sendto$rxrpc(r6, &(0x7f0000000780)="604c671ebe9429a7dee55db030014f45209c052430bdba7fe15bafb3b3938112e9e8d96b1718fd47e188eef0f416a04bc9ef4780ca8b2deb363b38b1c4913db54ad4094ecffa6fed4cdde377d9276387c75a85587e94c0690c7f6ecf6ce87a0edaaf18453dca5cb30072d50b7fc90672f247259c5604b0", 0x77, 0x20040014, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @rand_addr=0x64010100}}, 0x24) fsetxattr$security_capability(r6, &(0x7f0000000280), &(0x7f0000000380)=@v3={0x3000000, [{0x5, 0x82}, {0x80000000, 0xffffaf0a}]}, 0x18, 0x0) write$P9_RLERRORu(r6, &(0x7f0000000200)=ANY=[], 0xe) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="0615a9cde5bf61b683b0c11ae73bfba039d0425cce80550eb75612b34401942e8fa5b3ff47050000009c26b7e6d2aabc67e1d0f69a32bda06740c3ddc4f16427267c79bd7c335bbf597368c5f4cbc1d46b8bdf12f7dace805961553e91902e605771511f3e", @ANYRES16=r7, @ANYBLOB="000326bd7000fcdbdf25390000006c005a80680002801400030000000600aa020400bbf7060002000300140003000400090008007a65080007000100c80b050006000000000014000300060034000600e310944d08000800a0f30f000200082125341e070a0b13383d0005000400020000000500040000000000d4005a800c0003800500060002000000c400038014000300090038410000060005000500f0000c00130001001804240212161601483012060c240600050004000000000027000200090a4057384425341e3c5427423c09470854284a060849080f3a11271f42263807441b00230001001b0905600c300403300509090c0516301848006c05020b16021b0378090b030005000700010000003c00020018210f353d43002a412f280c220d48504b01461f504e4a12180a4a144116184c310b1b1237235150354a0c3508204c412d01393e41470015"], 0x154}, 0x1, 0x0, 0x0, 0x4880}, 0x4) 3m33.249119955s ago: executing program 3 (id=5293): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 3m33.108656756s ago: executing program 7 (id=5294): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000007140)={0x0, 0xff8d, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}, {&(0x7f0000006000)=""/4096, 0x1000}], 0x2}, 0x40000102) sendmmsg$inet(r1, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="ec0767", 0x3}, {&(0x7f000000c640)="4dea2e9fc630f1670cf70c207e43667038bf092497c42179b09807f9b234acd0e2bf920be733d5e21ac510b279753142e15c366bd567563a39dc8a1f82c12b5e23e4297fa70d70110fd408097aa1b9c560dae166223968985d838c4dc5cf0b9122d7df3e79c64af3b05fe3dd65bdba33b66aa6e67e71127deb6cab6c7b1ee2858dc8e2aed6de1a8e07dd75b017df1bd495c59812ac39c2066b761f596a88ece33728617f756fd136f6b2819c27981ce35b449f192aec94239f56e68ea969881ae13899dd2fe4193b18c0210a47dd57b02240ed5fbe3b902caf598599", 0xdc}, {&(0x7f00000000c0)="80819a406c4532b29ab729dd0e4b12cffeb3347d8b69fb0fd7cbd350f01b17ad694672000cf10c8ed49156aa8617da1d70dde03283db4bd40fafaf2acecd0b59707d0b4ffbe1d938673cfc2099646e761ddded8cd96605ce080e313344ca123c103fe1bcf68fd4f2890418d9b67537405b0bc2889546f05bd712495b0600000000000000407923b2fff8bf1cfce5b74dd7d77c2e0d02", 0x96}, {&(0x7f000000c5c0)="2cad1cb24db0481cba0fe4efcc9b012f9976ea7f782c100ce30fca34ffa9c98e5c24851bc899a730ff662353fa6cad61e53be4c5d14f555ef2a1a9e7dfca05c8532236694df200cd9fba820c02cec743286b58f4380acfec90d09a8f38dee5976a2b5204b2", 0x65}], 0x4}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000500)="25bbf953d9e63a86502326a91bcb452d049906b8663a98ffd6eb4a9471a6b34a725ae193d99db3d460f7bc4aed2217ef4f96211bcb85f3c5b29b0357cb5526a2bf026fce752e9453032fe77673f0bf89cd0d842e437d5d7c0a6af5493a6160e4019655e7ec27c1566b7e5c625149dc633e4c132a9118796e0dae4b094d7030d37e3b268c2da4c0716e9c9da8be9ad79d176059ed950c425404eee5c70a91acb3a80fa82c61d5637be14a66056edc33e8111e50e43eadc326d80dd63563cf75b7dc86f5aa26ac30bc812b0a4244625753", 0xd0}, {&(0x7f0000000600)="c88b24f13e46650376bd62b2a4a9e5529d9c1d28afea7a51dc9057907876a2b013890ed7000000000000000000", 0x2d}, {&(0x7f0000000640)="2d8535ae0c438abd0bc4f58c4e3b", 0xe}, {&(0x7f00000003c0)="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", 0x12b}, {&(0x7f0000000800)="dfda34e3ee7dda93a0aeed729cd5cabedf707118f5cf8acfe7747fccf72b6612754caddf60baf2dbe649d3fe02595d224cf75c98174effb4bb82011113ff74b68dc8a2c49e31b3f9576f654b87b67e4e1599c5f0eaa01acb7e6aaf2ad51cb7b0cb2463d665daddf0bd903aa0e78c0912a84c1b3ff60a75dff896f3e8ef5ac614a8223484e5662ab03b927cb375820928976f3f6c4aba8ff8c5cd4671e8f46d1670f45379e9a15d4e27ec2b0a1fd6fbe11c482169b34525f89ced9acc31f6d22df3914597f296aa7b01efcd849bc089e84da99e84b07f22e5f2a4d557f7a7eb86dee45a986a87ba29447a33f15f62be723a5b", 0xf2}, {&(0x7f0000000900)="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", 0xb0e}], 0x6}}], 0x2, 0x8058) 3m32.849480311s ago: executing program 5 (id=5295): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB="0500000000000000000021"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 3m32.711636541s ago: executing program 5 (id=5296): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x9, 0x3f, 0x1a, "3eadd25569fa07b33090e954145d1c5f001c00"}) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000a40)=""/216) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x800}}, './file0\x00'}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r6, 0x0, 0x40, &(0x7f0000000100)="bcd38af624ce5b13ef10f44831081bb4075f1c2969670d95f3685063abc49f5f2e332d9cf4597c33a824d449179a1cfa2aad865eb8163cd3b2b5600fead5739e4600406fd88eb5a44e12b7365a1c6d7a62f14a7f723963521b64b3f21fd4da34", 0x60) read$FUSE(r5, &(0x7f0000000080)={0x2020}, 0x2020) creat(&(0x7f0000001380)='./file0\x00', 0x94) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 3m32.190032353s ago: executing program 3 (id=5297): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000840)=0x60, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3c, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0x10, 0x136, 0x0, 0x1, [@typed={0xa, 0x2, 0x0, 0x0, @binary="b27d9adc61c3"}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000400)=ANY=[@ANYBLOB="12010300000000000000a1a440000102030101025c4081a5830e44d8c59d3a6b00611200248e6306da8c438d9feb6e0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d00f3cfd873ecda407aa1567193e14af5f6a61420b69cb6fb9fa97f897f42e5d63240927deee197d0500238c5027a90b283324fdc87a967a47a317ba8f6e36ded941b283f2f5d", @ANYRESOCT=r0], 0x0) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)={0x0, 0x0, 0x100000}) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010006080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r6, 0x0, 0xcf, 0x0, &(0x7f0000000040)) 3m32.039271393s ago: executing program 7 (id=5298): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008200800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 3m31.894923257s ago: executing program 7 (id=5299): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x1e, 0x0, "7a58beca3900000000000000000000000200"}) 3m31.74041302s ago: executing program 5 (id=5300): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x22, &(0x7f00002cef88)="d8", 0x1) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) readv(r3, &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r5, 0x0, 0x0, 0x20048880, 0x0, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) recvmmsg(r5, &(0x7f00000008c0), 0x0, 0x101, 0x0) (async) recvmmsg(r5, &(0x7f00000008c0), 0x0, 0x101, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000371dad06f979b4e484c17146092cea9500000100000014000180"], 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x41, 0x6, 0xcd, 0x40, 0x6cd, 0x10f, 0xd51b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0xb, 0xfd, 0x1, 0x33, 0x77, 0x61, 0x0, [], [{{0x9, 0x5, 0x87, 0x3, 0x8, 0xf, 0xff, 0x7}}]}}]}}]}}, 0x0) bind$tipc(r8, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r8, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000100)={0x0, {{0xa, 0x4c22, 0x89, @loopback, 0x3}}, {{0xa, 0x4e21, 0x1, @mcast2, 0x102}}}, 0x108) (async) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000100)={0x0, {{0xa, 0x4c22, 0x89, @loopback, 0x3}}, {{0xa, 0x4e21, 0x1, @mcast2, 0x102}}}, 0x108) socket$rds(0x15, 0x5, 0x0) (async) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r9, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') (async) syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') pread64(r4, &(0x7f0000001180)=""/102400, 0x19000, 0x9) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) 3m31.318469356s ago: executing program 7 (id=5301): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, 0x0, 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 3m29.24238549s ago: executing program 0 (id=5302): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x5) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0xfd, 0x4, 0x5, 0x5, @private1, @loopback={0x0, 0x460c6}, 0x20, 0x8, 0x804, 0x40000}}) 3m2.954106643s ago: executing program 36 (id=5297): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000840)=0x60, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3c, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0x10, 0x136, 0x0, 0x1, [@typed={0xa, 0x2, 0x0, 0x0, @binary="b27d9adc61c3"}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000400)=ANY=[@ANYBLOB="12010300000000000000a1a440000102030101025c4081a5830e44d8c59d3a6b00611200248e6306da8c438d9feb6e0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d00f3cfd873ecda407aa1567193e14af5f6a61420b69cb6fb9fa97f897f42e5d63240927deee197d0500238c5027a90b283324fdc87a967a47a317ba8f6e36ded941b283f2f5d", @ANYRESOCT=r0], 0x0) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)={0x0, 0x0, 0x100000}) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010006080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r6, 0x0, 0xcf, 0x0, &(0x7f0000000040)) 0s ago: executing program 37 (id=5302): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x5) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0xfd, 0x4, 0x5, 0x5, @private1, @loopback={0x0, 0x460c6}, 0x20, 0x8, 0x804, 0x40000}}) kernel console output (not intermixed with test programs): er_sigmask+0x10/0x10 [ 916.657407][T18815] ? __fget_files+0x3a0/0x420 [ 916.657456][T18815] __se_sys_ppoll+0x1ff/0x260 [ 916.657485][T18815] ? __pfx___se_sys_ppoll+0x10/0x10 [ 916.657511][T18815] ? __pfx_ksys_write+0x10/0x10 [ 916.657530][T18815] ? rcu_is_watching+0x15/0xb0 [ 916.657557][T18815] ? do_syscall_64+0xbe/0x3b0 [ 916.657580][T18815] ? __x64_sys_ppoll+0x20/0xc0 [ 916.657607][T18815] do_syscall_64+0xfa/0x3b0 [ 916.657630][T18815] ? lockdep_hardirqs_on+0x9c/0x150 [ 916.657653][T18815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.657673][T18815] ? clear_bhb_loop+0x60/0xb0 [ 916.657700][T18815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.657720][T18815] RIP: 0033:0x7f356478e929 [ 916.657739][T18815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 916.657757][T18815] RSP: 002b:00007f35656e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 916.657781][T18815] RAX: ffffffffffffffda RBX: 00007f35649b5fa0 RCX: 00007f356478e929 [ 916.657797][T18815] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 916.657812][T18815] RBP: 00007f35656e1090 R08: 0000000000000000 R09: 0000000000000000 [ 916.657826][T18815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 916.657839][T18815] R13: 0000000000000000 R14: 00007f35649b5fa0 R15: 00007fff20d39028 [ 916.657871][T18815] [ 916.917635][ C1] vkms_vblank_simulate: vblank timer overrun [ 916.957714][T11356] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 917.114276][T11356] usb 6-1: device descriptor read/64, error -71 [ 917.357089][T11356] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 917.484067][ T24] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 917.494284][T11356] usb 6-1: device descriptor read/64, error -71 [ 917.614481][T11356] usb usb6-port1: attempt power cycle [ 917.643983][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 917.653043][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 917.674071][ T24] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 917.687868][ T24] usb 8-1: New USB device found, idVendor=0403, idProduct=e548, bcdDevice=ad.d6 [ 917.697263][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.705856][ T24] usb 8-1: Product: syz [ 917.710060][ T24] usb 8-1: Manufacturer: syz [ 917.715180][ T24] usb 8-1: SerialNumber: syz [ 917.722930][ T24] usb 8-1: config 0 descriptor?? [ 917.838297][T18831] /dev/rnullb0: Can't open blockdev [ 917.954303][T11356] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 917.990974][T11356] usb 6-1: device descriptor read/8, error -71 [ 918.091710][ T5921] usb 8-1: USB disconnect, device number 11 [ 918.148158][T18836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4132'. [ 918.246337][T11356] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 918.277431][T11356] usb 6-1: device descriptor read/8, error -71 [ 918.330831][T18840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.339963][T18840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.387386][T11356] usb usb6-port1: unable to enumerate USB device [ 919.954092][T11356] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 920.117259][T11356] usb 8-1: Using ep0 maxpacket: 8 [ 920.134535][T11356] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 920.143752][T11356] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.163288][T11356] pvrusb2: Hardware description: Terratec Grabster AV400 [ 920.185012][T11356] pvrusb2: ********** [ 920.189106][T11356] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 920.224210][T11356] pvrusb2: Important functionality might not be entirely working. [ 920.232087][T11356] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 920.263997][T11356] pvrusb2: ********** [ 920.374020][ T5921] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 920.418266][T18873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.429891][T18873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.471842][ T2343] pvrusb2: Invalid write control endpoint [ 920.537853][ T5921] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 920.560857][ T5921] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 920.584094][ T5921] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 920.590049][ T2343] pvrusb2: Invalid write control endpoint [ 920.598114][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.602413][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 920.622080][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 920.630210][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 920.650262][ T2343] pvrusb2: Device being rendered inoperable [ 920.659298][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 920.666784][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 920.676437][ T2343] pvrusb2: Attached sub-driver cx25840 [ 920.681981][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 920.701587][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 920.704827][T18864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.731988][T18864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.832710][ T5921] usb 6-1: GET_CAPABILITIES returned 0 [ 920.838631][ T5921] usbtmc 6-1:16.0: can't read capabilities [ 920.843417][ T9] usb 8-1: USB disconnect, device number 12 [ 921.037956][ T5921] usb 6-1: USB disconnect, device number 70 [ 921.123739][T18879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.134352][T18879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.145977][T18879] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4147'. [ 921.155819][T18877] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4147'. [ 921.165743][T18878] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4147'. [ 921.666752][T18885] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4150'. [ 921.798662][T18889] hpfs: Bad magic ... probably not HPFS [ 921.886696][T18893] netlink: 'syz.3.4154': attribute type 12 has an invalid length. [ 921.940681][ T5921] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 922.096494][ T5921] usb 8-1: Using ep0 maxpacket: 32 [ 922.112201][ T5921] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 922.120613][ T5921] usb 8-1: config 0 has no interface number 0 [ 922.133677][ T5921] usb 8-1: config 0 interface 12 has no altsetting 0 [ 922.154319][ T5921] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 922.164273][ T5921] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.172332][ T5921] usb 8-1: Product: syz [ 922.177078][ T5921] usb 8-1: Manufacturer: syz [ 922.181711][ T5921] usb 8-1: SerialNumber: syz [ 922.191019][ T5921] usb 8-1: config 0 descriptor?? [ 922.224258][ T9] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 922.400720][ T9] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 922.420999][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.444751][ T9] usb 6-1: config 0 descriptor?? [ 922.629697][T18907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.640474][T18907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.656193][T18907] FAULT_INJECTION: forcing a failure. [ 922.656193][T18907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 922.671054][T18907] CPU: 0 UID: 0 PID: 18907 Comm: syz.3.4160 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 922.671084][T18907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 922.671101][T18907] Call Trace: [ 922.671111][T18907] [ 922.671120][T18907] dump_stack_lvl+0x189/0x250 [ 922.671150][T18907] ? __pfx____ratelimit+0x10/0x10 [ 922.671174][T18907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 922.671197][T18907] ? __pfx__printk+0x10/0x10 [ 922.671222][T18907] ? __might_fault+0xb0/0x130 [ 922.671255][T18907] should_fail_ex+0x414/0x560 [ 922.671295][T18907] _copy_from_user+0x2d/0xb0 [ 922.671317][T18907] kstrtouint_from_user+0xc4/0x170 [ 922.671350][T18907] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 922.671398][T18907] proc_fail_nth_write+0x88/0x240 [ 922.671428][T18907] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 922.671463][T18907] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 922.671495][T18907] vfs_write+0x27b/0xa90 [ 922.671528][T18907] ? __pfx_vfs_write+0x10/0x10 [ 922.671560][T18907] ? __fget_files+0x2a/0x420 [ 922.671591][T18907] ? __fget_files+0x3a0/0x420 [ 922.671617][T18907] ? __fget_files+0x2a/0x420 [ 922.671653][T18907] ksys_write+0x145/0x250 [ 922.671675][T18907] ? __fget_files+0x3a0/0x420 [ 922.671703][T18907] ? __pfx_ksys_write+0x10/0x10 [ 922.671732][T18907] ? do_syscall_64+0xbe/0x3b0 [ 922.671769][T18907] do_syscall_64+0xfa/0x3b0 [ 922.671795][T18907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.671815][T18907] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 922.671837][T18907] ? clear_bhb_loop+0x60/0xb0 [ 922.671864][T18907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.671904][T18907] RIP: 0033:0x7f356478d3df [ 922.671923][T18907] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 922.671943][T18907] RSP: 002b:00007f35656e1030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 922.671967][T18907] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f356478d3df [ 922.671983][T18907] RDX: 0000000000000001 RSI: 00007f35656e10a0 RDI: 0000000000000004 [ 922.671997][T18907] RBP: 00007f35656e1090 R08: 0000000000000000 R09: 0000000000000000 [ 922.672011][T18907] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 922.672025][T18907] R13: 0000000000000000 R14: 00007f35649b5fa0 R15: 00007fff20d39028 [ 922.672060][T18907] [ 922.992377][T18909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.001751][T18909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.737085][ T9] pegasus 6-1:0.0: setup Pegasus II specific registers [ 925.674487][ T5921] f81534 8-1:0.12: f81534_get_register: reg: 1004 failed: -71 [ 925.674549][ T5921] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 925.674571][ T5921] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 925.674659][ T5921] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 925.690608][ T5921] usb 8-1: USB disconnect, device number 13 [ 926.131295][T18933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.141101][T18933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.174606][ T9] pegasus 6-1:0.0: can't locate MII phy, using default [ 926.200177][ T9] pegasus 6-1:0.0: eth13, ELECOM USB Ethernet LD-USB20, e2:86:4b:2e:74:83 [ 926.352944][T18936] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4169'. [ 926.382447][T18936] netlink: 152 bytes leftover after parsing attributes in process `syz.7.4169'. [ 926.403694][T18936] tls_set_device_offload_rx: netdev not found [ 926.410457][ T9] usb 6-1: USB disconnect, device number 71 [ 927.430760][T18962] netlink: 100 bytes leftover after parsing attributes in process `syz.7.4181'. [ 927.674362][ T5890] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 927.864484][ T5890] usb 6-1: Using ep0 maxpacket: 8 [ 927.877170][ T5890] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 927.901866][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.942194][ T5890] pvrusb2: Hardware description: Terratec Grabster AV400 [ 927.972457][ T5890] pvrusb2: ********** [ 927.982567][ T5890] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 928.011878][ T5890] pvrusb2: Important functionality might not be entirely working. [ 928.041479][ T5890] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 928.089343][ T5890] pvrusb2: ********** [ 928.248382][ T2343] pvrusb2: Invalid write control endpoint [ 928.304794][ T5921] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 928.372916][ T2343] pvrusb2: Invalid write control endpoint [ 928.378948][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 928.388416][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 928.403707][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 928.416717][ T2343] pvrusb2: Device being rendered inoperable [ 928.422777][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 928.432024][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 928.459993][ T2343] pvrusb2: Attached sub-driver cx25840 [ 928.461843][T18963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.468591][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 928.483810][T18963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.487460][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 928.509286][ T5921] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 928.518668][ T5921] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.546174][ T5921] usb 8-1: config 0 descriptor?? [ 928.566912][ T5921] cp210x 8-1:0.0: cp210x converter detected [ 928.652251][T11356] usb 6-1: USB disconnect, device number 72 [ 928.979050][ T5921] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 929.193486][ T5921] cp210x 8-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 929.230654][ T5921] cp210x 8-1:0.0: GPIO initialisation failed: -71 [ 929.264703][ T5921] usb 8-1: cp210x converter now attached to ttyUSB0 [ 929.302930][ T5921] usb 8-1: USB disconnect, device number 14 [ 929.323429][ T5921] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 929.352979][ T5921] cp210x 8-1:0.0: device disconnected [ 929.634046][ T5867] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 929.693457][T19004] FAULT_INJECTION: forcing a failure. [ 929.693457][T19004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 929.708505][T19004] CPU: 1 UID: 0 PID: 19004 Comm: syz.3.4184 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 929.708545][T19004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 929.708559][T19004] Call Trace: [ 929.708567][T19004] [ 929.708577][T19004] dump_stack_lvl+0x189/0x250 [ 929.708606][T19004] ? __pfx____ratelimit+0x10/0x10 [ 929.708629][T19004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 929.708654][T19004] ? __pfx__printk+0x10/0x10 [ 929.708693][T19004] should_fail_ex+0x414/0x560 [ 929.708733][T19004] _copy_to_user+0x31/0xb0 [ 929.708757][T19004] __se_sys_move_pages+0x13ab/0x16a0 [ 929.708804][T19004] ? __pfx___se_sys_move_pages+0x10/0x10 [ 929.708846][T19004] ? fput+0xa0/0xd0 [ 929.708875][T19004] ? ksys_write+0x22a/0x250 [ 929.708901][T19004] ? __pfx_ksys_write+0x10/0x10 [ 929.708930][T19004] ? __x64_sys_move_pages+0x21/0xf0 [ 929.708960][T19004] do_syscall_64+0xfa/0x3b0 [ 929.708982][T19004] ? lockdep_hardirqs_on+0x9c/0x150 [ 929.709004][T19004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.709020][T19004] ? clear_bhb_loop+0x60/0xb0 [ 929.709038][T19004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.709053][T19004] RIP: 0033:0x7f356478e929 [ 929.709073][T19004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 929.709093][T19004] RSP: 002b:00007f35656e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 929.709116][T19004] RAX: ffffffffffffffda RBX: 00007f35649b5fa0 RCX: 00007f356478e929 [ 929.709133][T19004] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000000 [ 929.709148][T19004] RBP: 00007f35656e1090 R08: 0000200000000000 R09: 0000000000000000 [ 929.709162][T19004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.709174][T19004] R13: 0000000000000000 R14: 00007f35649b5fa0 R15: 00007fff20d39028 [ 929.709205][T19004] [ 929.901097][ C1] vkms_vblank_simulate: vblank timer overrun [ 930.064160][ T5867] usb 6-1: Using ep0 maxpacket: 16 [ 930.071537][ T5867] usb 6-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 930.083264][ T5867] usb 6-1: config 1 interface 0 has no altsetting 0 [ 930.104070][ T5867] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.40 [ 930.117792][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.125984][ T5867] usb 6-1: Product: syz [ 930.130174][ T5867] usb 6-1: Manufacturer: syz [ 930.134924][ T5867] usb 6-1: SerialNumber: syz [ 930.485513][T19021] FAULT_INJECTION: forcing a failure. [ 930.485513][T19021] name failslab, interval 1, probability 0, space 0, times 0 [ 930.500043][T19021] CPU: 0 UID: 0 PID: 19021 Comm: syz.7.4189 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 930.500084][T19021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 930.500099][T19021] Call Trace: [ 930.500108][T19021] [ 930.500118][T19021] dump_stack_lvl+0x189/0x250 [ 930.500252][T19021] ? __pfx____ratelimit+0x10/0x10 [ 930.500282][T19021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 930.500309][T19021] ? __pfx__printk+0x10/0x10 [ 930.500341][T19021] ? __pfx___might_resched+0x10/0x10 [ 930.500362][T19021] ? fs_reclaim_acquire+0x7d/0x100 [ 930.500394][T19021] should_fail_ex+0x414/0x560 [ 930.500436][T19021] should_failslab+0xa8/0x100 [ 930.500461][T19021] __kmalloc_noprof+0xcb/0x4f0 [ 930.500480][T19021] ? kfree+0x4d/0x440 [ 930.500511][T19021] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 930.500546][T19021] tomoyo_realpath_from_path+0xe3/0x5d0 [ 930.500577][T19021] ? tomoyo_domain+0xd9/0x130 [ 930.500612][T19021] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 930.500642][T19021] tomoyo_path_number_perm+0x1e8/0x5a0 [ 930.500668][T19021] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 930.500710][T19021] ? __lock_acquire+0xab9/0xd20 [ 930.500767][T19021] ? __fget_files+0x2a/0x420 [ 930.500799][T19021] ? __fget_files+0x2a/0x420 [ 930.500825][T19021] ? __fget_files+0x3a0/0x420 [ 930.500852][T19021] ? __fget_files+0x2a/0x420 [ 930.500886][T19021] security_file_ioctl+0xcb/0x2d0 [ 930.500923][T19021] __se_sys_ioctl+0x47/0x170 [ 930.500948][T19021] do_syscall_64+0xfa/0x3b0 [ 930.500972][T19021] ? lockdep_hardirqs_on+0x9c/0x150 [ 930.500996][T19021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.501018][T19021] ? clear_bhb_loop+0x60/0xb0 [ 930.501044][T19021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.501065][T19021] RIP: 0033:0x7f0fe898e929 [ 930.501085][T19021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 930.501104][T19021] RSP: 002b:00007f0fe9723038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 930.501128][T19021] RAX: ffffffffffffffda RBX: 00007f0fe8bb5fa0 RCX: 00007f0fe898e929 [ 930.501145][T19021] RDX: 0000200000001080 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 930.501160][T19021] RBP: 00007f0fe9723090 R08: 0000000000000000 R09: 0000000000000000 [ 930.501174][T19021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.501195][T19021] R13: 0000000000000000 R14: 00007f0fe8bb5fa0 R15: 00007ffc7174e888 [ 930.501229][T19021] [ 930.501319][T19021] ERROR: Out of memory at tomoyo_realpath_from_path. [ 930.504839][T19019] netlink: 'syz.3.4190': attribute type 15 has an invalid length. [ 930.785190][ T5867] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input37 [ 930.840843][ T5867] usb 6-1: USB disconnect, device number 73 [ 930.910325][T19027] netlink: 100 bytes leftover after parsing attributes in process `syz.7.4192'. [ 931.151950][T19035] /dev/rnullb0: Can't open blockdev [ 931.608326][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.732051][T19055] FAULT_INJECTION: forcing a failure. [ 931.732051][T19055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 931.764151][T19055] CPU: 1 UID: 0 PID: 19055 Comm: syz.5.4201 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 931.764184][T19055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 931.764211][T19055] Call Trace: [ 931.764221][T19055] [ 931.764231][T19055] dump_stack_lvl+0x189/0x250 [ 931.764262][T19055] ? __pfx____ratelimit+0x10/0x10 [ 931.764286][T19055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 931.764310][T19055] ? __pfx__printk+0x10/0x10 [ 931.764334][T19055] ? __might_fault+0xb0/0x130 [ 931.764368][T19055] should_fail_ex+0x414/0x560 [ 931.764409][T19055] _copy_from_user+0x2d/0xb0 [ 931.764431][T19055] kstrtouint_from_user+0xc4/0x170 [ 931.764464][T19055] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 931.764532][T19055] proc_fail_nth_write+0x88/0x240 [ 931.764563][T19055] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 931.764601][T19055] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 931.764635][T19055] vfs_write+0x27b/0xa90 [ 931.764669][T19055] ? __pfx_vfs_write+0x10/0x10 [ 931.764696][T19055] ? __fget_files+0x2a/0x420 [ 931.764730][T19055] ? __fget_files+0x3a0/0x420 [ 931.764763][T19055] ? __fget_files+0x2a/0x420 [ 931.764802][T19055] ksys_write+0x145/0x250 [ 931.764829][T19055] ? __pfx_ksys_write+0x10/0x10 [ 931.764855][T19055] ? rcu_is_watching+0x15/0xb0 [ 931.764884][T19055] ? do_syscall_64+0xbe/0x3b0 [ 931.764914][T19055] do_syscall_64+0xfa/0x3b0 [ 931.764941][T19055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.764963][T19055] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 931.764987][T19055] ? clear_bhb_loop+0x60/0xb0 [ 931.765014][T19055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.765036][T19055] RIP: 0033:0x7f23e558d3df [ 931.765057][T19055] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 931.765077][T19055] RSP: 002b:00007f23e646f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 931.765107][T19055] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f23e558d3df [ 931.765124][T19055] RDX: 0000000000000001 RSI: 00007f23e646f0a0 RDI: 0000000000000003 [ 931.765138][T19055] RBP: 00007f23e646f090 R08: 0000000000000000 R09: 0000000000000000 [ 931.765152][T19055] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 931.765165][T19055] R13: 0000000000000000 R14: 00007f23e57b5fa0 R15: 00007ffdda0fbce8 [ 931.765200][T19055] [ 932.161904][T19058] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4203'. [ 932.829438][T19083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.848777][T19083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.079725][T19089] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4213'. [ 933.606448][T19103] FAULT_INJECTION: forcing a failure. [ 933.606448][T19103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 933.630401][T19103] CPU: 1 UID: 0 PID: 19103 Comm: syz.0.4219 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 933.630435][T19103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 933.630450][T19103] Call Trace: [ 933.630459][T19103] [ 933.630470][T19103] dump_stack_lvl+0x189/0x250 [ 933.630501][T19103] ? __pfx____ratelimit+0x10/0x10 [ 933.630525][T19103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 933.630550][T19103] ? __pfx__printk+0x10/0x10 [ 933.630576][T19103] ? __might_fault+0xb0/0x130 [ 933.630610][T19103] should_fail_ex+0x414/0x560 [ 933.630653][T19103] _copy_from_iter+0x1db/0x16f0 [ 933.630689][T19103] ? rcu_is_watching+0x15/0xb0 [ 933.630713][T19103] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 933.630737][T19103] ? __pfx__copy_from_iter+0x10/0x10 [ 933.630773][T19103] ? __build_skb_around+0x257/0x3e0 [ 933.630805][T19103] ? netlink_sendmsg+0x642/0xb30 [ 933.630830][T19103] ? skb_put+0x11b/0x210 [ 933.630863][T19103] netlink_sendmsg+0x6b2/0xb30 [ 933.630899][T19103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 933.630930][T19103] ? aa_sock_msg_perm+0xf1/0x1d0 [ 933.630960][T19103] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 933.630989][T19103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 933.631018][T19103] __sock_sendmsg+0x219/0x270 [ 933.631044][T19103] ____sys_sendmsg+0x505/0x830 [ 933.631081][T19103] ? __pfx_____sys_sendmsg+0x10/0x10 [ 933.631122][T19103] ? import_iovec+0x74/0xa0 [ 933.631148][T19103] ___sys_sendmsg+0x21f/0x2a0 [ 933.631182][T19103] ? __pfx____sys_sendmsg+0x10/0x10 [ 933.631251][T19103] ? __fget_files+0x2a/0x420 [ 933.631296][T19103] ? __fget_files+0x3a0/0x420 [ 933.631336][T19103] __x64_sys_sendmsg+0x19b/0x260 [ 933.631375][T19103] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 933.631417][T19103] ? __pfx_ksys_write+0x10/0x10 [ 933.631438][T19103] ? rcu_is_watching+0x15/0xb0 [ 933.631466][T19103] ? do_syscall_64+0xbe/0x3b0 [ 933.631496][T19103] do_syscall_64+0xfa/0x3b0 [ 933.631521][T19103] ? lockdep_hardirqs_on+0x9c/0x150 [ 933.631544][T19103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.631567][T19103] ? clear_bhb_loop+0x60/0xb0 [ 933.631605][T19103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.631628][T19103] RIP: 0033:0x7fac6138e929 [ 933.631648][T19103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 933.631668][T19103] RSP: 002b:00007fac62138038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 933.631692][T19103] RAX: ffffffffffffffda RBX: 00007fac615b5fa0 RCX: 00007fac6138e929 [ 933.631709][T19103] RDX: 0000000020000000 RSI: 0000200000001940 RDI: 0000000000000003 [ 933.631724][T19103] RBP: 00007fac62138090 R08: 0000000000000000 R09: 0000000000000000 [ 933.631738][T19103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 933.631752][T19103] R13: 0000000000000000 R14: 00007fac615b5fa0 R15: 00007ffc35aea058 [ 933.631786][T19103] [ 934.793209][T19130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.821276][T19130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 935.088312][T19137] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4227'. [ 936.041222][T19159] syzkaller1: entered promiscuous mode [ 936.061289][T19159] syzkaller1: entered allmulticast mode [ 936.253045][T19163] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4236'. [ 936.322631][T19162] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4236'. [ 936.507955][T19172] netlink: 'syz.7.4241': attribute type 9 has an invalid length. [ 936.625956][T19176] FAULT_INJECTION: forcing a failure. [ 936.625956][T19176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 936.654053][T19176] CPU: 0 UID: 0 PID: 19176 Comm: syz.5.4242 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 936.654088][T19176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 936.654103][T19176] Call Trace: [ 936.654112][T19176] [ 936.654126][T19176] dump_stack_lvl+0x189/0x250 [ 936.654157][T19176] ? __pfx____ratelimit+0x10/0x10 [ 936.654182][T19176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 936.654208][T19176] ? __pfx__printk+0x10/0x10 [ 936.654234][T19176] ? __might_fault+0xb0/0x130 [ 936.654269][T19176] should_fail_ex+0x414/0x560 [ 936.654311][T19176] _copy_from_user+0x2d/0xb0 [ 936.654336][T19176] do_ip_vs_set_ctl+0x2d3/0xa60 [ 936.654377][T19176] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 936.654408][T19176] ? rcu_is_watching+0x15/0xb0 [ 936.654450][T19176] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 936.654484][T19176] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 936.654509][T19176] ? smc_setsockopt+0x181/0xab0 [ 936.654536][T19176] ? __pfx___mutex_lock+0x10/0x10 [ 936.654560][T19176] ? rcu_read_lock_any_held+0xb3/0x120 [ 936.654585][T19176] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 936.654614][T19176] ? vfs_write+0x8d8/0xa90 [ 936.654641][T19176] nf_setsockopt+0x26c/0x290 [ 936.654674][T19176] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 936.654703][T19176] smc_setsockopt+0x232/0xab0 [ 936.654734][T19176] ? __pfx_smc_setsockopt+0x10/0x10 [ 936.654756][T19176] ? aa_sock_opt_perm+0xff/0x1b0 [ 936.654788][T19176] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 936.654818][T19176] ? __pfx_smc_setsockopt+0x10/0x10 [ 936.654844][T19176] do_sock_setsockopt+0x25a/0x3e0 [ 936.654878][T19176] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 936.654914][T19176] ? __fget_files+0x2a/0x420 [ 936.654953][T19176] __x64_sys_setsockopt+0x18b/0x220 [ 936.654990][T19176] do_syscall_64+0xfa/0x3b0 [ 936.655018][T19176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.655047][T19176] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 936.655070][T19176] ? clear_bhb_loop+0x60/0xb0 [ 936.655098][T19176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.655121][T19176] RIP: 0033:0x7f23e558e929 [ 936.655140][T19176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 936.655160][T19176] RSP: 002b:00007f23e646f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 936.655183][T19176] RAX: ffffffffffffffda RBX: 00007f23e57b5fa0 RCX: 00007f23e558e929 [ 936.655200][T19176] RDX: 0000000000000487 RSI: 0000000000000000 RDI: 0000000000000004 [ 936.655213][T19176] RBP: 00007f23e646f090 R08: 0000000000000044 R09: 0000000000000000 [ 936.655228][T19176] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 936.655242][T19176] R13: 0000000000000000 R14: 00007f23e57b5fa0 R15: 00007ffdda0fbce8 [ 936.655277][T19176] [ 938.259444][T19200] netlink: 100 bytes leftover after parsing attributes in process `syz.7.4250'. [ 938.824192][T19212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.837160][T19212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.054122][ T5867] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 939.207014][ T5867] usb 6-1: device descriptor read/64, error -71 [ 939.464156][ T5867] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 939.513365][T19224] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4260'. [ 939.542717][T19226] 9pnet_fd: p9_fd_create_tcp (19226): problem connecting socket to 127.0.0.1 [ 939.596077][T19226] overlayfs: statfs failed on './file0' [ 939.624563][ T5867] usb 6-1: device descriptor read/64, error -71 [ 939.739423][ T5867] usb usb6-port1: attempt power cycle [ 939.991936][T19237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.009413][T19237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.023646][T19237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.037960][T19237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.094006][ T5867] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 940.114696][ T5867] usb 6-1: device descriptor read/8, error -71 [ 940.124021][ T5921] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 940.280369][ T5921] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.291436][ T5921] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 940.301510][ T5921] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 940.315232][ T5921] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 940.325502][ T5921] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.336710][ T5921] usb 8-1: config 0 descriptor?? [ 940.374009][ T5867] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 940.401894][ T5867] usb 6-1: device descriptor read/8, error -71 [ 940.517375][ T5867] usb usb6-port1: unable to enumerate USB device [ 940.632165][T19239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.643735][T19239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.706097][T19239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.718538][T19239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.780888][ T5921] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 941.605794][ T5890] usb 4-1: USB disconnect, device number 45 [ 941.611814][ C0] synaptics_usb 4-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 941.994607][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 942.005570][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 942.016225][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 942.027843][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 942.041017][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 942.309035][T19249] chnl_net:caif_netlink_parms(): no params data found [ 942.334537][ T5834] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 942.372048][ T6017] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.464619][ T6017] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.503997][ T5834] usb 6-1: Using ep0 maxpacket: 32 [ 942.511239][ T5834] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 942.519884][ T5834] usb 6-1: config 0 has no interface number 0 [ 942.526183][ T5834] usb 6-1: config 0 interface 12 has no altsetting 0 [ 942.537148][ T5834] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 942.546426][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.554520][ T5834] usb 6-1: Product: syz [ 942.558860][ T5834] usb 6-1: Manufacturer: syz [ 942.563477][ T5834] usb 6-1: SerialNumber: syz [ 942.571560][ T5834] usb 6-1: config 0 descriptor?? [ 942.609878][ T6017] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.628857][T19249] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.638024][T19249] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.645953][T19249] bridge_slave_0: entered allmulticast mode [ 942.654356][T19249] bridge_slave_0: entered promiscuous mode [ 942.663267][T19249] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.671268][T19249] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.679789][T19249] bridge_slave_1: entered allmulticast mode [ 942.688182][T19249] bridge_slave_1: entered promiscuous mode [ 942.768619][ T6017] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.842835][T19249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 942.861309][T19249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.912086][ T9] usb 8-1: USB disconnect, device number 15 [ 943.049351][T19249] team0: Port device team_slave_0 added [ 943.062067][T19262] netlink: 100 bytes leftover after parsing attributes in process `syz.7.4271'. [ 943.077392][T19249] team0: Port device team_slave_1 added [ 943.277471][T19249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.285501][T19249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.313034][T19249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 943.351181][T19249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 943.373727][T19249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.373824][T19249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 943.433527][T19268] FAT-fs (rnullb0): bogus number of reserved sectors [ 943.433554][T19268] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 943.536050][T19249] hsr_slave_0: entered promiscuous mode [ 943.543276][T19249] hsr_slave_1: entered promiscuous mode [ 943.552284][ T6017] bridge_slave_1: left allmulticast mode [ 943.560029][ T6017] bridge_slave_1: left promiscuous mode [ 943.566967][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.579292][ T6017] bridge_slave_0: left allmulticast mode [ 943.585196][ T6017] bridge_slave_0: left promiscuous mode [ 943.591174][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.869522][T19274] FAULT_INJECTION: forcing a failure. [ 943.869522][T19274] name failslab, interval 1, probability 0, space 0, times 0 [ 943.882838][T19274] CPU: 1 UID: 0 PID: 19274 Comm: syz.0.4276 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 943.882868][T19274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 943.882881][T19274] Call Trace: [ 943.882891][T19274] [ 943.882900][T19274] dump_stack_lvl+0x189/0x250 [ 943.882928][T19274] ? __pfx____ratelimit+0x10/0x10 [ 943.882951][T19274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 943.882973][T19274] ? __pfx__printk+0x10/0x10 [ 943.883021][T19274] ? __pfx___might_resched+0x10/0x10 [ 943.883047][T19274] should_fail_ex+0x414/0x560 [ 943.883086][T19274] should_failslab+0xa8/0x100 [ 943.883111][T19274] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 943.883132][T19274] ? __alloc_skb+0x112/0x2d0 [ 943.883162][T19274] __alloc_skb+0x112/0x2d0 [ 943.883191][T19274] netlink_sendmsg+0x5c6/0xb30 [ 943.883237][T19274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 943.883266][T19274] ? aa_sock_msg_perm+0xf1/0x1d0 [ 943.883293][T19274] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 943.883321][T19274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 943.883347][T19274] __sock_sendmsg+0x219/0x270 [ 943.883371][T19274] ____sys_sendmsg+0x505/0x830 [ 943.883406][T19274] ? __pfx_____sys_sendmsg+0x10/0x10 [ 943.883444][T19274] ? import_iovec+0x74/0xa0 [ 943.883469][T19274] ___sys_sendmsg+0x21f/0x2a0 [ 943.883500][T19274] ? __pfx____sys_sendmsg+0x10/0x10 [ 943.883566][T19274] ? __fget_files+0x2a/0x420 [ 943.883592][T19274] ? __fget_files+0x3a0/0x420 [ 943.883629][T19274] __x64_sys_sendmsg+0x19b/0x260 [ 943.883661][T19274] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 943.883701][T19274] ? __pfx_ksys_write+0x10/0x10 [ 943.883721][T19274] ? rcu_is_watching+0x15/0xb0 [ 943.883747][T19274] ? do_syscall_64+0xbe/0x3b0 [ 943.883775][T19274] do_syscall_64+0xfa/0x3b0 [ 943.883802][T19274] ? lockdep_hardirqs_on+0x9c/0x150 [ 943.883824][T19274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.883845][T19274] ? clear_bhb_loop+0x60/0xb0 [ 943.883870][T19274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.883891][T19274] RIP: 0033:0x7fac6138e929 [ 943.883911][T19274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 943.883930][T19274] RSP: 002b:00007fac62138038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 943.883953][T19274] RAX: ffffffffffffffda RBX: 00007fac615b5fa0 RCX: 00007fac6138e929 [ 943.883969][T19274] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 943.883983][T19274] RBP: 00007fac62138090 R08: 0000000000000000 R09: 0000000000000000 [ 943.883997][T19274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 943.884010][T19274] R13: 0000000000000000 R14: 00007fac615b5fa0 R15: 00007ffc35aea058 [ 943.884042][T19274] [ 944.151171][ C1] vkms_vblank_simulate: vblank timer overrun [ 944.159786][ T5840] Bluetooth: hci0: command tx timeout [ 944.258069][ T6017] dvmrp0 (unregistering): left allmulticast mode [ 944.501044][ T6017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 944.526188][ T6017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 944.548528][ T6017] bond0 (unregistering): Released all slaves [ 944.594274][T19276] netlink: 'syz.0.4277': attribute type 29 has an invalid length. [ 944.634454][T19277] netlink: 'syz.0.4277': attribute type 29 has an invalid length. [ 944.845679][T19283] netlink: 100 bytes leftover after parsing attributes in process `syz.7.4280'. [ 945.078464][T19288] FAULT_INJECTION: forcing a failure. [ 945.078464][T19288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 945.095866][T19288] CPU: 0 UID: 0 PID: 19288 Comm: syz.7.4281 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 945.095898][T19288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 945.095913][T19288] Call Trace: [ 945.095922][T19288] [ 945.095932][T19288] dump_stack_lvl+0x189/0x250 [ 945.095966][T19288] ? __pfx____ratelimit+0x10/0x10 [ 945.095991][T19288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 945.096017][T19288] ? __pfx__printk+0x10/0x10 [ 945.096042][T19288] ? __might_fault+0xb0/0x130 [ 945.096077][T19288] should_fail_ex+0x414/0x560 [ 945.096118][T19288] _copy_from_iter+0x1db/0x16f0 [ 945.096164][T19288] ? __pfx__copy_from_iter+0x10/0x10 [ 945.096201][T19288] ? rcu_is_watching+0x15/0xb0 [ 945.096223][T19288] ? trace_kmalloc+0x1f/0xd0 [ 945.096243][T19288] ? kernfs_fop_write_iter+0x158/0x4f0 [ 945.096272][T19288] kernfs_fop_write_iter+0x19f/0x4f0 [ 945.096304][T19288] vfs_write+0x548/0xa90 [ 945.096341][T19288] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 945.096366][T19288] ? __pfx_vfs_write+0x10/0x10 [ 945.096401][T19288] ? __fget_files+0x2a/0x420 [ 945.096439][T19288] ksys_write+0x145/0x250 [ 945.096466][T19288] ? __pfx_ksys_write+0x10/0x10 [ 945.096487][T19288] ? rcu_is_watching+0x15/0xb0 [ 945.096514][T19288] ? do_syscall_64+0xbe/0x3b0 [ 945.096544][T19288] do_syscall_64+0xfa/0x3b0 [ 945.096568][T19288] ? lockdep_hardirqs_on+0x9c/0x150 [ 945.096592][T19288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.096614][T19288] ? clear_bhb_loop+0x60/0xb0 [ 945.096642][T19288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.096664][T19288] RIP: 0033:0x7f0fe898e929 [ 945.096683][T19288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 945.096704][T19288] RSP: 002b:00007f0fe9723038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 945.096728][T19288] RAX: ffffffffffffffda RBX: 00007f0fe8bb5fa0 RCX: 00007f0fe898e929 [ 945.096745][T19288] RDX: 0000000000000008 RSI: 0000200000000140 RDI: 0000000000000004 [ 945.096760][T19288] RBP: 00007f0fe9723090 R08: 0000000000000000 R09: 0000000000000000 [ 945.096775][T19288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.096788][T19288] R13: 0000000000000000 R14: 00007f0fe8bb5fa0 R15: 00007ffc7174e888 [ 945.096823][T19288] [ 945.734151][T11356] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 945.913747][T11356] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.940055][T11356] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.972686][T11356] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 945.991593][T11356] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.003175][T11356] usb 8-1: config 0 descriptor?? [ 946.186259][ T6017] hsr_slave_0: left promiscuous mode [ 946.194614][ T6017] hsr_slave_1: left promiscuous mode [ 946.205578][ T5834] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 946.207356][ T6017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 946.213140][ T5834] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 946.223592][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 946.236715][ T5840] Bluetooth: hci0: command tx timeout [ 946.253413][ T6017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 946.262064][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 946.269365][ T5834] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 946.269464][ T5834] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 946.304202][ T5834] usb 6-1: USB disconnect, device number 78 [ 946.336920][T11356] usbhid 8-1:0.0: can't add hid device: -71 [ 946.366930][T11356] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 946.379543][ T6017] veth1_macvtap: left promiscuous mode [ 946.404149][ T6017] veth0_macvtap: left promiscuous mode [ 946.406318][T11356] usb 8-1: USB disconnect, device number 16 [ 946.409814][ T6017] veth1_vlan: left promiscuous mode [ 946.475744][ T6017] veth0_vlan: left promiscuous mode [ 946.543064][T19311] FAT-fs (rnullb0): bogus number of reserved sectors [ 946.550210][T19311] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 947.261930][ T6017] team0 (unregistering): Port device team_slave_1 removed [ 947.328926][ T6017] team0 (unregistering): Port device team_slave_0 removed [ 947.611255][T19317] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4287'. [ 947.721513][T19319] netlink: 100 bytes leftover after parsing attributes in process `syz.7.4288'. [ 947.810010][T19321] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4289'. [ 948.064113][T11356] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 948.236429][T11356] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 948.254971][T11356] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 948.270488][T11356] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 948.280273][T11356] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 948.288977][T11356] usb 8-1: SerialNumber: syz [ 948.324222][ T5840] Bluetooth: hci0: command tx timeout [ 948.512718][T11356] usb 8-1: 0:2 : does not exist [ 948.541380][T11356] usb 8-1: unit 5: unexpected type 0x0c [ 948.600759][ T6017] IPVS: stop unused estimator thread 0... [ 948.610781][T19249] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 948.623219][T11356] usb 8-1: USB disconnect, device number 17 [ 948.666481][T19249] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 948.695066][ T7184] udevd[7184]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 948.762366][T19249] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 948.793087][T19249] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 949.115739][T19249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.202222][T19249] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.270428][ T5920] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.277612][ T5920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.453347][ T5920] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.460580][ T5920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.561237][T19345] can0: slcan on ptm0. [ 949.616783][T19347] can1: slcan on ptm1. [ 949.628672][T19249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 949.656021][T19347] FAULT_INJECTION: forcing a failure. [ 949.656021][T19347] name failslab, interval 1, probability 0, space 0, times 0 [ 949.668960][T19347] CPU: 1 UID: 0 PID: 19347 Comm: syz.5.4295 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 949.668999][T19347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 949.669015][T19347] Call Trace: [ 949.669024][T19347] [ 949.669034][T19347] dump_stack_lvl+0x189/0x250 [ 949.669063][T19347] ? __pfx____ratelimit+0x10/0x10 [ 949.669087][T19347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 949.669107][T19347] ? __pfx__printk+0x10/0x10 [ 949.669131][T19347] ? __pfx___might_resched+0x10/0x10 [ 949.669153][T19347] should_fail_ex+0x414/0x560 [ 949.669185][T19347] should_failslab+0xa8/0x100 [ 949.669206][T19347] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 949.669224][T19347] ? __alloc_skb+0x112/0x2d0 [ 949.669250][T19347] __alloc_skb+0x112/0x2d0 [ 949.669274][T19347] netlink_sendmsg+0x5c6/0xb30 [ 949.669303][T19347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 949.669327][T19347] ? aa_sock_msg_perm+0xf1/0x1d0 [ 949.669350][T19347] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 949.669374][T19347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 949.669395][T19347] __sock_sendmsg+0x219/0x270 [ 949.669416][T19347] ____sys_sendmsg+0x505/0x830 [ 949.669445][T19347] ? __pfx_____sys_sendmsg+0x10/0x10 [ 949.669476][T19347] ? import_iovec+0x74/0xa0 [ 949.669496][T19347] ___sys_sendmsg+0x21f/0x2a0 [ 949.669522][T19347] ? __pfx____sys_sendmsg+0x10/0x10 [ 949.669575][T19347] ? __fget_files+0x2a/0x420 [ 949.669596][T19347] ? __fget_files+0x3a0/0x420 [ 949.669626][T19347] __x64_sys_sendmsg+0x19b/0x260 [ 949.669653][T19347] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 949.669685][T19347] ? __pfx_ksys_write+0x10/0x10 [ 949.669702][T19347] ? rcu_is_watching+0x15/0xb0 [ 949.669723][T19347] ? do_syscall_64+0xbe/0x3b0 [ 949.669748][T19347] do_syscall_64+0xfa/0x3b0 [ 949.669766][T19347] ? lockdep_hardirqs_on+0x9c/0x150 [ 949.669785][T19347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.669802][T19347] ? clear_bhb_loop+0x60/0xb0 [ 949.669823][T19347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.669840][T19347] RIP: 0033:0x7f23e558e929 [ 949.669855][T19347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 949.669871][T19347] RSP: 002b:00007f23e646f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 949.669890][T19347] RAX: ffffffffffffffda RBX: 00007f23e57b5fa0 RCX: 00007f23e558e929 [ 949.669903][T19347] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000005 [ 949.669914][T19347] RBP: 00007f23e646f090 R08: 0000000000000000 R09: 0000000000000000 [ 949.669925][T19347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.669936][T19347] R13: 0000000000000000 R14: 00007f23e57b5fa0 R15: 00007ffdda0fbce8 [ 949.669966][T19347] [ 949.953276][T19357] netlink: 100 bytes leftover after parsing attributes in process `syz.7.4296'. [ 950.037247][T19346] can1 (unregistered): slcan off ptm1. [ 950.216781][T19344] can0 (unregistered): slcan off ptm0. [ 950.292778][T19249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 950.394431][ T5840] Bluetooth: hci0: command tx timeout [ 950.432406][T19370] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 950.441145][T19370] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 950.456541][T19249] veth0_vlan: entered promiscuous mode [ 950.521144][T19249] veth1_vlan: entered promiscuous mode [ 950.554785][T11356] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 950.576950][T19249] veth0_macvtap: entered promiscuous mode [ 950.596317][T19249] veth1_macvtap: entered promiscuous mode [ 950.632431][T19249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 950.671805][T19249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 950.697527][T18472] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.718449][T11356] usb 8-1: config index 0 descriptor too short (expected 140, got 72) [ 950.739678][T11356] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 950.749487][T18472] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.762084][T11356] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.770824][T18472] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.779744][T11356] usb 8-1: Product: syz [ 950.788254][T11356] usb 8-1: Manufacturer: syz [ 950.792896][T11356] usb 8-1: SerialNumber: syz [ 950.813431][T18472] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.822047][T19385] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4305'. [ 950.853344][T11356] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 950.969822][ T5867] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 951.030645][T18472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.055757][T18472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.140443][T18472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.148667][T18472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.414337][T19399] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4308'. [ 951.503993][ T5834] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 951.653996][ T5834] usb 4-1: Using ep0 maxpacket: 16 [ 951.661691][T19404] siw: device registration error -23 [ 951.685663][ T5834] usb 4-1: unable to get BOS descriptor or descriptor too short [ 951.707843][ T5834] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 951.716127][ T5834] usb 4-1: can't read configurations, error -71 [ 951.992547][T19413] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4313'. [ 952.083755][ T5867] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 952.091322][ T5867] ath9k_htc: Failed to initialize the device [ 952.123003][ T5867] usb 8-1: ath9k_htc: USB layer deinitialized [ 953.141349][T19428] FAULT_INJECTION: forcing a failure. [ 953.141349][T19428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 953.163560][T19428] CPU: 0 UID: 0 PID: 19428 Comm: syz.5.4317 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 953.163593][T19428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 953.163609][T19428] Call Trace: [ 953.163619][T19428] [ 953.163629][T19428] dump_stack_lvl+0x189/0x250 [ 953.163661][T19428] ? __pfx____ratelimit+0x10/0x10 [ 953.163687][T19428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 953.163712][T19428] ? __pfx__printk+0x10/0x10 [ 953.163738][T19428] ? __might_fault+0xb0/0x130 [ 953.163773][T19428] should_fail_ex+0x414/0x560 [ 953.163815][T19428] _copy_from_iter+0x1db/0x16f0 [ 953.163851][T19428] ? sock_alloc_send_pskb+0x875/0x990 [ 953.163895][T19428] ? __pfx__copy_from_iter+0x10/0x10 [ 953.163936][T19428] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 953.163972][T19428] skb_copy_datagram_from_iter+0xf5/0x720 [ 953.164009][T19428] ? __lock_acquire+0xab9/0xd20 [ 953.164043][T19428] ? skb_put+0x11b/0x210 [ 953.164076][T19428] tun_get_user+0x15c3/0x3ce0 [ 953.164119][T19428] ? aa_file_perm+0x13e/0x11b0 [ 953.164149][T19428] ? aa_file_perm+0x13e/0x11b0 [ 953.164177][T19428] ? aa_file_perm+0x3ed/0x11b0 [ 953.164208][T19428] ? __pfx_tun_get_user+0x10/0x10 [ 953.164247][T19428] ? __lock_acquire+0xab9/0xd20 [ 953.164285][T19428] ? ref_tracker_alloc+0x318/0x460 [ 953.164306][T19428] ? __lock_acquire+0xab9/0xd20 [ 953.164340][T19428] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 953.164370][T19428] ? tun_get+0x1c/0x2f0 [ 953.164407][T19428] ? tun_get+0x1c/0x2f0 [ 953.164437][T19428] ? tun_get+0x1c/0x2f0 [ 953.164480][T19428] tun_chr_write_iter+0x113/0x200 [ 953.164516][T19428] vfs_write+0x548/0xa90 [ 953.164544][T19428] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 953.164577][T19428] ? __pfx_vfs_write+0x10/0x10 [ 953.164612][T19428] ? __fget_files+0x2a/0x420 [ 953.164650][T19428] ksys_write+0x145/0x250 [ 953.164677][T19428] ? __pfx_ksys_write+0x10/0x10 [ 953.164698][T19428] ? rcu_is_watching+0x15/0xb0 [ 953.164727][T19428] ? do_syscall_64+0xbe/0x3b0 [ 953.164762][T19428] do_syscall_64+0xfa/0x3b0 [ 953.164786][T19428] ? lockdep_hardirqs_on+0x9c/0x150 [ 953.164810][T19428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.164832][T19428] ? clear_bhb_loop+0x60/0xb0 [ 953.164860][T19428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.164882][T19428] RIP: 0033:0x7f23e558e929 [ 953.164902][T19428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 953.164922][T19428] RSP: 002b:00007f23e646f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 953.164946][T19428] RAX: ffffffffffffffda RBX: 00007f23e57b5fa0 RCX: 00007f23e558e929 [ 953.164964][T19428] RDX: 0000000000000ffe RSI: 0000200000000040 RDI: 0000000000000005 [ 953.164978][T19428] RBP: 00007f23e646f090 R08: 0000000000000000 R09: 0000000000000000 [ 953.164992][T19428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 953.165006][T19428] R13: 0000000000000000 R14: 00007f23e57b5fa0 R15: 00007ffdda0fbce8 [ 953.165040][T19428] [ 953.510351][ T5921] usb 8-1: USB disconnect, device number 18 [ 953.708639][T19441] syzkaller1: entered promiscuous mode [ 953.714383][T19441] syzkaller1: entered allmulticast mode [ 953.912373][T19445] netlink: 100 bytes leftover after parsing attributes in process `syz.7.4323'. [ 954.389272][ T10] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 954.567893][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 954.604047][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 954.632213][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 954.643484][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 954.662717][ T10] usb 6-1: SerialNumber: syz [ 954.709146][T19477] FAT-fs (rnullb0): bogus number of reserved sectors [ 954.735046][T19477] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 954.789583][T19480] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 955.390174][ T10] usb 6-1: 0:2 : does not exist [ 955.437236][ T10] usb 6-1: USB disconnect, device number 79 [ 955.497967][ T7184] udevd[7184]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 955.629779][T19480] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 955.638608][T19480] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 955.663287][T19480] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 955.669354][T19480] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 955.986881][T19497] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4343'. [ 956.223437][T19506] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4339'. [ 956.232979][T19506] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 956.299119][T19507] devpts: Bad value for 'max' [ 956.444225][ T5921] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 956.612046][ T5921] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 956.620839][ T5921] usb 4-1: config 0 has no interface number 0 [ 956.634251][ T5921] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 956.656340][ T5921] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 956.673171][ T5921] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 956.687784][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.701371][ T5921] usb 4-1: config 0 descriptor?? [ 956.727244][T19504] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 956.771853][ T5921] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 956.961275][T19504] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4346'. [ 957.574181][ T5867] usb 4-1: USB disconnect, device number 48 [ 958.259228][T19530] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4354'. [ 958.287374][T19530] unsupported nlmsg_type 40 [ 958.313273][T19534] overlay: ./file0 is not a directory [ 958.350430][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.378190][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.392897][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.404108][ T5890] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 958.406162][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.419163][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.426364][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.433490][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.441897][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.449513][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.458294][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.469868][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.478081][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.489320][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.497186][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.509446][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.517773][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.525257][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.532381][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.540254][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.547783][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.555459][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.562567][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.570044][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.577868][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.584191][ T5890] usb 6-1: Using ep0 maxpacket: 16 [ 958.585323][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.600609][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.612438][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.628880][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.640434][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.647616][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.661458][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.668900][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.680703][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.689235][T19534] qnx4: no qnx4 filesystem (no root dir). [ 958.865949][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.880332][ T5890] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 958.889697][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.902853][ T5890] usb 6-1: config 0 descriptor?? [ 959.243237][T19539] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4359'. [ 959.349827][ T5890] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 959.367356][ T5890] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 959.376822][ T5890] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 959.385486][ T5890] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 959.392928][ T5890] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 959.402768][ T5890] mcp2221 0003:04D8:00DD.001D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 959.409497][T19543] mmap: syz.7.4360 (19543): VmData 25853952 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 959.549364][ T5921] usb 6-1: USB disconnect, device number 80 [ 959.628202][T19547] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4362'. [ 959.874150][ T5834] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 960.037306][ T5834] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 960.048544][ T5834] usb 8-1: config 0 interface 0 has no altsetting 0 [ 960.063995][ T5834] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 960.073110][ T5834] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 960.092321][ T5834] usb 8-1: Product: syz [ 960.097166][ T5834] usb 8-1: Manufacturer: syz [ 960.101823][ T5834] usb 8-1: SerialNumber: syz [ 960.115081][ T5834] usb 8-1: config 0 descriptor?? [ 960.128730][ T5834] usb 8-1: selecting invalid altsetting 0 [ 960.255629][ T5867] hid (null): unknown global tag 0x47 [ 960.268533][ T5867] hid-generic 0002:0007:0003.001E: unexpected long global item [ 960.278425][ T5867] hid-generic 0002:0007:0003.001E: probe with driver hid-generic failed with error -22 [ 960.339375][ T5867] usb 8-1: USB disconnect, device number 19 [ 960.540805][T19563] exFAT-fs (rnullb0): invalid boot record signature [ 960.548219][T19563] exFAT-fs (rnullb0): failed to read boot sector [ 960.559103][T19563] exFAT-fs (rnullb0): failed to recognize exfat type [ 960.571738][T19565] exFAT-fs (rnullb0): invalid boot record signature [ 960.578844][T19565] exFAT-fs (rnullb0): failed to read boot sector [ 960.585337][T19565] exFAT-fs (rnullb0): failed to recognize exfat type [ 960.715037][T19568] usb usb1: usbfs: process 19568 (syz.5.4369) did not claim interface 0 before use [ 961.138472][T19587] support for the xor transformation has been removed. [ 961.294680][T11356] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 961.453963][T11356] usb 4-1: Using ep0 maxpacket: 8 [ 961.461682][T11356] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 961.484118][T11356] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 961.503934][T11356] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 961.514013][ T10] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 961.514042][T11356] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 961.544009][T11356] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 961.553156][T11356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.676962][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 961.694032][ T10] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 961.703264][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.719544][ T10] usb 6-1: config 0 descriptor?? [ 961.737872][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 961.772234][T11356] usb 4-1: GET_CAPABILITIES returned 0 [ 961.784063][T11356] usbtmc 4-1:16.0: can't read capabilities [ 961.949016][T19592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.962080][T19592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.988854][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 962.000665][ T5867] usb 4-1: USB disconnect, device number 49 [ 962.182405][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 962.191961][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 962.204673][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 962.212030][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 962.224682][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 962.244522][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 962.253005][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 962.278926][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 962.286919][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 962.305927][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 962.315579][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 962.334699][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 962.342426][ T10] pwc: recv_control_msg error -32 req 02 val 2900 [ 962.351222][ T10] pwc: recv_control_msg error -32 req 02 val 2800 [ 962.365220][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 962.383995][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 962.404105][ T10] pwc: Registered as video103. [ 962.424578][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input39 [ 962.494030][ T10] usb 6-1: USB disconnect, device number 81 [ 962.642219][T19605] overlay: Unknown parameter 'defcontext' [ 963.244023][ T10] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 963.415830][ T10] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 963.435172][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.456258][ T10] usb 6-1: config 0 descriptor?? [ 963.959814][T19640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 964.017250][ T5890] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 964.029357][ T5890] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 964.032277][T19640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 964.042562][ T3477] wlan1: authenticated [ 964.060939][ T3477] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 964.073363][T19642] ip6_vti0 speed is unknown, defaulting to 1000 [ 964.078298][T19640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 964.085731][T19642] ip6_vti0 speed is unknown, defaulting to 1000 [ 964.098363][T19642] ip6_vti0 speed is unknown, defaulting to 1000 [ 964.323779][T11356] ip6_vti0 speed is unknown, defaulting to 1000 [ 964.323979][T19642] infiniband syz2: set active [ 964.337956][T19642] infiniband syz2: added ip6_vti0 [ 964.393501][T19642] RDS/IB: syz2: added [ 964.400637][T19642] smc: adding ib device syz2 with port count 1 [ 964.407473][T19642] smc: ib device syz2 port 1 has pnetid [ 964.416725][ T5890] ip6_vti0 speed is unknown, defaulting to 1000 [ 964.426442][T19642] ip6_vti0 speed is unknown, defaulting to 1000 [ 964.717777][T19642] ip6_vti0 speed is unknown, defaulting to 1000 [ 964.875813][ T10] pegasus 6-1:0.0: can't reset MAC [ 964.888061][ T10] pegasus 6-1:0.0: probe with driver pegasus failed with error -5 [ 964.957109][ T6017] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 965.024112][T19642] ip6_vti0 speed is unknown, defaulting to 1000 [ 965.085051][ T65] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 965.219071][ T6017] wlan1: association with 08:02:11:00:00:00 timed out [ 965.387188][T19649] ip6_vti0 speed is unknown, defaulting to 1000 [ 965.730093][T19642] ip6_vti0 speed is unknown, defaulting to 1000 [ 966.166253][T19642] ip6_vti0 speed is unknown, defaulting to 1000 [ 966.278858][ T10] usb 6-1: USB disconnect, device number 82 [ 966.714676][T19672] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4402'. [ 966.723671][T19672] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4402'. [ 966.742805][T19672] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4402'. [ 966.752648][T19672] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4402'. [ 967.250840][T19686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 967.285262][T19686] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4407'. [ 967.301663][T19686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 967.388850][T19686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 967.427548][T19686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 968.180920][T19705] netlink: 'syz.0.4414': attribute type 291 has an invalid length. [ 968.886513][T19725] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4419'. [ 969.226195][T19738] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4424'. [ 969.244104][T19738] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4424'. [ 969.253388][T19738] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4424'. [ 969.270017][T19738] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4424'. [ 969.365166][ T5867] usb 6-1: new full-speed USB device number 83 using dummy_hcd [ 969.442001][T19743] netlink: 'syz.7.4436': attribute type 21 has an invalid length. [ 969.452901][T19743] netlink: 'syz.7.4436': attribute type 6 has an invalid length. [ 969.535638][ T5867] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 969.578019][ T5867] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 969.592579][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.612563][ T5867] usb 6-1: config 0 descriptor?? [ 969.628286][ T5867] pegasus_notetaker 6-1:0.0: Invalid number of endpoints [ 969.650434][ T5867] pegasus_notetaker 6-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 969.727707][T19753] ip6_vti0 speed is unknown, defaulting to 1000 [ 969.828471][T19736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 969.843329][T19736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 969.888569][T11356] usb 6-1: USB disconnect, device number 83 [ 970.640517][T19778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 970.774235][T19779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 970.843468][T19778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 970.867737][T19778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 972.759156][T19809] __nla_validate_parse: 6 callbacks suppressed [ 972.759178][T19809] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4449'. [ 972.778584][T19809] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4449'. [ 972.788054][T19809] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4449'. [ 972.797990][T19809] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4449'. [ 972.831105][T19812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 972.862609][T19812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4456'. [ 972.881781][T19812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 972.911979][T19812] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 972.921397][T19812] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 972.932749][ T1057] wlan1: authenticated [ 972.934371][T19812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 972.944222][ T10] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 972.970304][T19812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 972.972847][ T5834] wlan1: associating to AP 08:02:11:00:00:00 with corrupt probe response [ 973.028708][ T1057] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 973.145643][ T1057] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 973.153166][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 973.180010][ T10] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 973.192406][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 973.203122][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 973.213388][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 973.240275][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 973.256225][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 973.265691][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.274756][ T65] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 973.354267][ T5834] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 973.394054][ T3477] wlan1: association with 08:02:11:00:00:00 timed out [ 973.439767][T19827] input: syz1 as /devices/virtual/input/input40 [ 973.495027][ T10] usb 8-1: GET_CAPABILITIES returned 0 [ 973.520550][ T10] usbtmc 8-1:16.0: can't read capabilities [ 973.534396][ T5834] usb 6-1: Using ep0 maxpacket: 32 [ 973.542415][ T5834] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 973.566689][ T5834] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 973.582369][ T5834] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 973.592361][ T5834] usb 6-1: config 1 has no interface number 0 [ 973.598640][ T5834] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 973.610204][ T5834] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 973.636876][ T5834] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 973.654447][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.674980][ T5834] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 973.703846][T11356] usb 8-1: USB disconnect, device number 20 [ 973.882083][ T5834] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 973.966855][T19833] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 973.974495][T19833] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 973.981340][T19833] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 973.993147][T19833] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 974.010635][T19833] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 974.019709][T19833] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 974.026940][T19833] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 974.041079][T19833] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 974.289660][ T5921] usb 6-1: USB disconnect, device number 84 [ 974.297757][ T5921] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 976.120409][T19883] kvm: user requested TSC rate below hardware speed [ 976.726127][T19897] input: syz1 as /devices/virtual/input/input41 [ 977.113305][T19902] netlink: 'syz.7.4485': attribute type 5 has an invalid length. [ 977.414173][ T5921] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 977.574788][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 977.602676][ T5921] usb 4-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 977.624923][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.648342][ T5921] usb 4-1: config 0 descriptor?? [ 977.847832][T19919] vcan0: entered allmulticast mode [ 978.033150][T19926] input: syz1 as /devices/virtual/input/input42 [ 978.121859][T19928] netlink: 'syz.7.4494': attribute type 8 has an invalid length. [ 978.651427][T19941] syz.5.4498 (19941): drop_caches: 2 [ 978.678057][T19904] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 978.690332][T19904] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 978.723050][ T5921] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 978.762525][ T5921] usb 4-1: USB disconnect, device number 50 [ 978.888294][T19951] fuse: Unknown parameter 'gr_d' [ 979.127518][T19962] x_tables: duplicate underflow at hook 2 [ 979.644255][T11356] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 979.826617][T11356] usb 8-1: Using ep0 maxpacket: 32 [ 979.841023][T11356] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 979.864975][T11356] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 979.896822][T11356] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 979.914505][T11356] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.922720][T11356] usb 8-1: Product: syz [ 979.933949][T11356] usb 8-1: Manufacturer: syz [ 979.938636][T11356] usb 8-1: SerialNumber: syz [ 980.162775][T11356] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 980.169964][T11356] cdc_ncm 8-1:1.0: bind() failure [ 980.188381][T11356] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 980.195788][T11356] cdc_ncm 8-1:1.1: bind() failure [ 980.236344][T19993] hpfs: Bad magic ... probably not HPFS [ 980.378081][ T5882] usb 8-1: USB disconnect, device number 21 [ 980.570513][T20005] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4525'. [ 980.580432][T20005] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4525'. [ 980.589539][T20005] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4525'. [ 980.598999][T20005] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4525'. [ 980.687726][ T5834] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 980.732102][T20009] netlink: 'syz.5.4527': attribute type 1 has an invalid length. [ 980.740991][T20009] netlink: 216 bytes leftover after parsing attributes in process `syz.5.4527'. [ 980.751633][T20009] NCSI netlink: No device for ifindex 0 [ 980.824108][ T5834] usb 4-1: device descriptor read/64, error -71 [ 980.865960][T20013] hfs: can't find a HFS filesystem on dev rnullb0 [ 981.084170][ T5834] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 981.223956][ T5834] usb 4-1: device descriptor read/64, error -71 [ 981.334727][ T5834] usb usb4-port1: attempt power cycle [ 981.694036][ T5834] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 981.726250][ T5834] usb 4-1: device descriptor read/8, error -71 [ 981.762534][T20036] gfs2: not a GFS2 filesystem [ 981.964782][ T5834] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 981.995217][ T5834] usb 4-1: device descriptor read/8, error -71 [ 982.104807][ T5834] usb usb4-port1: unable to enumerate USB device [ 982.314247][ T5882] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 982.485641][ T5882] usb 8-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 982.494973][ T5882] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.506634][ T5882] usb 8-1: config 0 descriptor?? [ 982.844172][ T5865] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 982.994187][ T5865] usb 6-1: Using ep0 maxpacket: 8 [ 983.002829][ T5865] usb 6-1: unable to get BOS descriptor or descriptor too short [ 983.012120][ T5865] usb 6-1: config 4 has an invalid interface number: 189 but max is 0 [ 983.020482][ T5865] usb 6-1: config 4 has no interface number 0 [ 983.026848][ T5865] usb 6-1: config 4 interface 189 has no altsetting 0 [ 983.036609][ T5865] usb 6-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=cb.03 [ 983.045869][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.054146][ T5865] usb 6-1: Product: syz [ 983.058342][ T5865] usb 6-1: Manufacturer: syz [ 983.062980][ T5865] usb 6-1: SerialNumber: syz [ 983.279847][ T5865] usb 6-1: bad CDC descriptors [ 983.287754][ T5865] usb 6-1: unsupported MDLM descriptors [ 983.297805][ T5865] usb 6-1: USB disconnect, device number 85 [ 983.774027][ T5865] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 983.944122][ T5865] usb 6-1: Using ep0 maxpacket: 32 [ 983.952901][ T5865] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 983.961283][ T5865] usb 6-1: config 0 has no interface number 0 [ 983.970126][ T5865] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 983.979483][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.987689][ T5865] usb 6-1: Product: syz [ 983.991891][ T5865] usb 6-1: Manufacturer: syz [ 983.996660][ T5865] usb 6-1: SerialNumber: syz [ 984.009371][ T5865] usb 6-1: config 0 descriptor?? [ 984.018090][ T5865] smsc95xx v2.0.0 [ 984.196430][ T5882] pegasus 8-1:0.0: can't reset MAC [ 984.207001][ T5882] pegasus 8-1:0.0: probe with driver pegasus failed with error -5 [ 984.235094][ T5882] usb 8-1: USB disconnect, device number 22 [ 984.417991][ T5865] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 984.428951][ T5865] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 984.851517][T11356] IPVS: starting estimator thread 0... [ 984.964263][T20062] IPVS: using max 27 ests per chain, 64800 per kthread [ 985.155247][T20051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.164267][T11356] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 985.166399][T20051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.200474][ T5865] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 985.221871][ T5865] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 985.239822][ T5865] usb 6-1: USB disconnect, device number 86 [ 985.320419][T11356] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 985.340347][T11356] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 985.352499][T11356] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 985.363350][T11356] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 985.377188][T11356] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 985.387807][T11356] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.407707][T11356] usb 8-1: config 0 descriptor?? [ 985.684271][T17290] Bluetooth: hci2: command 0x1003 tx timeout [ 985.688025][ T5840] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 985.793815][T20073] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4553'. [ 985.803090][T20073] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4553'. [ 985.812494][T20073] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4553'. [ 985.826623][T11356] plantronics 0003:047F:FFFF.001F: ignoring exceeding usage max [ 985.834389][T20073] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4553'. [ 985.854456][T11356] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 985.983810][T20077] omfs: Invalid superblock (0) [ 986.237531][ T5882] usb 8-1: USB disconnect, device number 23 [ 986.494403][ T5834] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 986.624126][ T5834] usb 6-1: device descriptor read/64, error -71 [ 986.830479][T20099] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 986.873949][ T5834] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 986.916010][T20101] omfs: Invalid superblock (0) [ 987.015633][ T5834] usb 6-1: device descriptor read/64, error -71 [ 987.127164][ T5834] usb usb6-port1: attempt power cycle [ 987.504006][ T5834] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 987.526028][ T5834] usb 6-1: device descriptor read/8, error -71 [ 987.794112][ T5834] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 987.824656][ T5834] usb 6-1: device descriptor read/8, error -71 [ 987.941256][ T5834] usb usb6-port1: unable to enumerate USB device [ 988.204080][ T5834] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 988.374406][ T5834] usb 8-1: Using ep0 maxpacket: 16 [ 988.383154][ T5834] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 988.392393][ T5834] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.400545][ T5834] usb 8-1: Product: syz [ 988.405548][ T5834] usb 8-1: Manufacturer: syz [ 988.410209][ T5834] usb 8-1: SerialNumber: syz [ 988.417466][ T5834] usb 8-1: config 0 descriptor?? [ 988.636514][T20113] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 988.652042][T20113] vxfs: WRONG superblock magic 00000000 at 1 [ 988.658503][T20113] vxfs: WRONG superblock magic 00000000 at 8 [ 988.664898][T20113] vxfs: can't find superblock. [ 988.673029][ T5834] usb 8-1: USB disconnect, device number 24 [ 989.674359][ T5921] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 989.814000][ T5921] usb 6-1: device descriptor read/64, error -71 [ 990.064052][ T5921] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 990.214511][ T5921] usb 6-1: device descriptor read/64, error -71 [ 990.324073][T11356] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 990.335679][ T5921] usb usb6-port1: attempt power cycle [ 990.347786][T20137] netlink: 'syz.7.4577': attribute type 21 has an invalid length. [ 990.359195][T20137] netlink: 'syz.7.4577': attribute type 6 has an invalid length. [ 990.368963][T20137] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4577'. [ 990.383541][T20139] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4578'. [ 990.507986][T11356] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 990.522272][T11356] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 990.541210][T11356] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 990.550801][T11356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.694144][ T5921] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 990.725854][ T5921] usb 6-1: device descriptor read/8, error -71 [ 990.780282][T11356] usb 4-1: usb_control_msg returned -32 [ 990.786085][T11356] usbtmc 4-1:16.0: can't read capabilities [ 990.824250][ T5834] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 990.964567][ T5921] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 990.976335][ T5834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.985027][ T5921] usb 6-1: device descriptor read/8, error -71 [ 990.987572][ T5834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.006458][ T5834] usb 8-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 991.016257][ T5834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.028602][ T5834] usb 8-1: config 0 descriptor?? [ 991.104426][ T5921] usb usb6-port1: unable to enumerate USB device [ 991.451733][T20145] overlayfs: workdir and upperdir must reside under the same mount [ 991.500031][ T5834] greenasia 0003:0E8F:0012.0020: unknown main item tag 0x0 [ 991.514345][ T5834] greenasia 0003:0E8F:0012.0020: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.7-1/input0 [ 991.535604][ T5834] greenasia 0003:0E8F:0012.0020: no inputs found [ 992.924142][ T5921] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 993.048876][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.074899][ T5921] usb 6-1: Using ep0 maxpacket: 32 [ 993.082405][ T5921] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.106900][ T5921] usb 6-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 993.123314][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.133570][T11356] usb 4-1: USB disconnect, device number 55 [ 993.140150][ T5921] usb 6-1: Product: syz [ 993.147398][ T5921] usb 6-1: Manufacturer: syz [ 993.152054][ T5921] usb 6-1: SerialNumber: syz [ 993.169699][ T5921] usb 6-1: config 0 descriptor?? [ 993.186313][ T5921] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 993.300297][T20163] binder_alloc: 20162: binder_alloc_buf, no vma [ 993.320814][T20163] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 993.328703][T20163] UDF-fs: Scanning with blocksize 4096 failed [ 993.382986][ T5921] gspca_sunplus: reg_r err -32 [ 993.492725][T20167] tipc: Started in network mode [ 993.498722][T20167] tipc: Node identity cee71572e012, cluster identity 4711 [ 993.510415][T20167] tipc: Enabled bearer , priority 0 [ 993.604275][ T5834] usb 8-1: USB disconnect, device number 25 [ 993.727087][T20171] binder: BINDER_SET_CONTEXT_MGR already set [ 993.749486][T20171] binder: 20170:20171 ioctl 4018620d 2000000000c0 returned -16 [ 993.767361][ T10] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 993.770264][T20172] binder: BINDER_SET_CONTEXT_MGR already set [ 993.790122][T20171] binder: BINDER_SET_CONTEXT_MGR already set [ 993.796568][T20172] binder: 20170:20172 ioctl 4018620d 200000000040 returned -16 [ 993.808393][T20171] binder: 20170:20171 ioctl 4018620d 2000000000c0 returned -16 [ 993.817235][T20172] binder: 20170:20172 ioctl c0306201 2000000003c0 returned -22 [ 993.829370][T20171] binder: BINDER_SET_CONTEXT_MGR already set [ 993.840347][T20171] binder: 20170:20171 ioctl 4018620d 2000000000c0 returned -16 [ 993.936770][ T10] usb 4-1: no configurations [ 993.943106][T20173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.961730][ T10] usb 4-1: can't read configurations, error -22 [ 993.979355][T20173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.026775][T20185] vxfs: WRONG superblock magic 00000000 at 1 [ 994.038303][T20185] vxfs: WRONG superblock magic 00000000 at 8 [ 994.045231][T20185] vxfs: can't find superblock. [ 994.104028][ T10] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 994.183376][T20191] Cache volume key already in use (9p,(null),) [ 994.273610][T20193] netlink: 'syz.0.4598': attribute type 1 has an invalid length. [ 994.281813][T20193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4598'. [ 994.291730][ T10] usb 4-1: no configurations [ 994.297091][T20193] nbd: illegal input index 393224 [ 994.302367][ T10] usb 4-1: can't read configurations, error -22 [ 994.314895][ T10] usb usb4-port1: attempt power cycle [ 994.364662][ T5921] sunplus 6-1:0.0: probe with driver sunplus failed with error -32 [ 994.627840][ T5890] tipc: Node number set to 787813746 [ 994.674101][ T10] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 994.764549][ T10] usb 4-1: no configurations [ 994.771391][ T10] usb 4-1: can't read configurations, error -22 [ 994.870357][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 994.878840][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 994.906614][T20208] ceph: No mds server is up or the cluster is laggy [ 994.914042][ T10] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 994.965612][ T10] usb 4-1: no configurations [ 994.981019][ T10] usb 4-1: can't read configurations, error -22 [ 995.020621][ T10] usb usb4-port1: unable to enumerate USB device [ 995.780561][ T10] usb 6-1: USB disconnect, device number 95 [ 996.517570][T20167] tipc: Disabling bearer [ 997.111102][T20256] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.4621'. [ 998.704343][T11356] usb 6-1: new full-speed USB device number 96 using dummy_hcd [ 998.887627][T11356] usb 6-1: config 8 has an invalid interface number: 196 but max is 0 [ 998.904193][T11356] usb 6-1: config 8 has no interface number 0 [ 998.920653][T11356] usb 6-1: config 8 interface 196 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 998.964124][T11356] usb 6-1: config 8 interface 196 has no altsetting 0 [ 998.981382][T11356] usb 6-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=e5.59 [ 999.007262][T11356] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.033346][T20299] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 999.110967][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 999.110986][ T30] audit: type=1800 audit(1750981846.675:2726): pid=20259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4623" name="/" dev="fuse" ino=1 res=0 errno=0 [ 999.282378][T11356] usb 6-1: string descriptor 0 read error: -71 [ 999.303758][T11356] quatech2 6-1:8.196: Quatech 2nd gen USB to Serial Driver converter detected [ 999.317170][T11356] usb 6-1: qt2_attach - failed to power on unit: -71 [ 999.325546][T11356] quatech2 6-1:8.196: probe with driver quatech2 failed with error -71 [ 999.339080][T11356] usb 6-1: USB disconnect, device number 96 [ 999.617790][T20326] program syz.3.4634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 999.748945][T20330] FAULT_INJECTION: forcing a failure. [ 999.748945][T20330] name failslab, interval 1, probability 0, space 0, times 0 [ 999.764397][T20330] CPU: 1 UID: 0 PID: 20330 Comm: syz.3.4635 Not tainted 6.16.0-rc3-next-20250626-syzkaller #0 PREEMPT(full) [ 999.764431][T20330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 999.764454][T20330] Call Trace: [ 999.764463][T20330] [ 999.764474][T20330] dump_stack_lvl+0x189/0x250 [ 999.764504][T20330] ? __pfx____ratelimit+0x10/0x10 [ 999.764533][T20330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 999.764558][T20330] ? __pfx__printk+0x10/0x10 [ 999.764584][T20330] ? __pfx___might_resched+0x10/0x10 [ 999.764607][T20330] ? fs_reclaim_acquire+0x7d/0x100 [ 999.764643][T20330] should_fail_ex+0x414/0x560 [ 999.764689][T20330] should_failslab+0xa8/0x100 [ 999.764715][T20330] __kmalloc_noprof+0xcb/0x4f0 [ 999.764736][T20330] ? tomoyo_encode+0x28b/0x550 [ 999.764769][T20330] tomoyo_encode+0x28b/0x550 [ 999.764809][T20330] tomoyo_realpath_from_path+0x58d/0x5d0 [ 999.764849][T20330] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 999.764872][T20330] tomoyo_path_number_perm+0x1e8/0x5a0 [ 999.764902][T20330] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 999.764943][T20330] ? __lock_acquire+0xab9/0xd20 [ 999.764994][T20330] ? __fget_files+0x2a/0x420 [ 999.765033][T20330] ? __fget_files+0x2a/0x420 [ 999.765060][T20330] ? __fget_files+0x3a0/0x420 [ 999.765087][T20330] ? __fget_files+0x2a/0x420 [ 999.765124][T20330] security_file_ioctl+0xcb/0x2d0 [ 999.765162][T20330] __se_sys_ioctl+0x47/0x170 [ 999.765187][T20330] do_syscall_64+0xfa/0x3b0 [ 999.765215][T20330] ? lockdep_hardirqs_on+0x9c/0x150 [ 999.765239][T20330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.765266][T20330] ? clear_bhb_loop+0x60/0xb0 [ 999.765294][T20330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.765316][T20330] RIP: 0033:0x7f85a578e929 [ 999.765345][T20330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 999.765365][T20330] RSP: 002b:00007f85a65c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 999.765389][T20330] RAX: ffffffffffffffda RBX: 00007f85a59b5fa0 RCX: 00007f85a578e929 [ 999.765406][T20330] RDX: 0000200000000040 RSI: 00000000c02c564a RDI: 0000000000000003 [ 999.765421][T20330] RBP: 00007f85a65c2090 R08: 0000000000000000 R09: 0000000000000000 [ 999.765436][T20330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 999.765449][T20330] R13: 0000000000000000 R14: 00007f85a59b5fa0 R15: 00007ffe29df3498 [ 999.765482][T20330] [ 999.765538][T20330] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1001.233980][ T5834] usb 6-1: new full-speed USB device number 97 using dummy_hcd [ 1001.422328][ T5834] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1001.447638][ T5834] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 1001.479148][ T5834] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1001.517577][ T5834] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1001.547407][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.571464][ T5834] usb 6-1: Product: syz [ 1001.580762][ T5834] usb 6-1: Manufacturer: syz [ 1001.595459][ T5834] usb 6-1: SerialNumber: syz [ 1001.620084][ T5834] usb 6-1: config 0 descriptor?? [ 1002.192600][ T5865] usb 6-1: USB disconnect, device number 97 [ 1002.287018][T20403] ip6_vti0 speed is unknown, defaulting to 1000 [ 1002.814412][ T5865] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1003.021341][ T5865] usb 8-1: Using ep0 maxpacket: 8 [ 1003.030708][ T5865] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1003.060320][ T5865] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.083942][ T5865] usb 8-1: Product: syz [ 1003.088177][ T5865] usb 8-1: Manufacturer: syz [ 1003.092807][ T5865] usb 8-1: SerialNumber: syz [ 1003.127967][ T5865] usb 8-1: config 0 descriptor?? [ 1003.187191][T20431] loop6: detected capacity change from 0 to 524287999 [ 1003.344237][ T5865] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1004.559967][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1004.604113][T20417] ip6_vti0 speed is unknown, defaulting to 1000 [ 1004.716240][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1004.741858][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1004.758050][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1004.770253][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1004.793038][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1004.804800][ T5834] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1004.813786][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.831244][ T10] usb 4-1: config 0 descriptor?? [ 1004.974075][ T5834] usb 6-1: Using ep0 maxpacket: 16 [ 1004.982190][ T5834] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1004.995375][ T5834] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1005.005791][ T5834] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1005.020657][ T5834] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 57608, setting to 1024 [ 1005.039248][ T5834] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1005.055702][ T5834] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1005.077545][ T5834] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1005.094004][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1005.113976][ T5834] usb 6-1: SerialNumber: syz [ 1005.128883][T20448] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1005.147718][ T5834] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 1005.177013][ T5834] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12 [ 1005.241845][ T5865] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1005.263413][ T5865] usb 8-1: USB disconnect, device number 26 [ 1005.499798][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 1005.510007][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1005.520361][T20448] autofs: Bad value for 'fd' [ 1005.538967][ T10] usb 4-1: USB disconnect, device number 60 [ 1005.573453][ T5865] usb 6-1: USB disconnect, device number 98 [ 1006.330237][T20471] loop6: detected capacity change from 0 to 524287999 [ 1006.414087][ T10] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1006.578398][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.589978][ T10] usb 4-1: config 1 has no interfaces? [ 1006.596116][ T10] usb 4-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 1006.606738][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.025768][ T10] usb 4-1: string descriptor 0 read error: -71 [ 1007.054989][ T10] usb 4-1: USB disconnect, device number 61 [ 1007.543992][ T5867] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 1007.716283][ T5867] usb 8-1: config 8 has an invalid interface number: 196 but max is 0 [ 1007.734048][ T5867] usb 8-1: config 8 has no interface number 0 [ 1007.746950][ T5867] usb 8-1: config 8 interface 196 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1007.776902][ T5867] usb 8-1: config 8 interface 196 has no altsetting 0 [ 1007.791624][ T5867] usb 8-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=e5.59 [ 1007.806558][ T5867] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.820309][T20495] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1008.048930][ T5867] usb 8-1: string descriptor 0 read error: -71 [ 1008.056978][ T5867] quatech2 8-1:8.196: Quatech 2nd gen USB to Serial Driver converter detected [ 1008.080645][ T5867] usb 8-1: qt2_attach - failed to power on unit: -71 [ 1008.098011][ T5867] quatech2 8-1:8.196: probe with driver quatech2 failed with error -71 [ 1008.110849][ T5867] usb 8-1: USB disconnect, device number 27 [ 1008.288800][T20524] loop6: detected capacity change from 0 to 524287999 [ 1008.556481][T20530] tmpfs: Unknown parameter 'grpquC/ }ota' [ 1008.795702][T20532] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1008.857558][T20535] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1009.012233][T20537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1009.073318][T20537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4699'. [ 1009.109726][T20541] 9pnet_fd: Insufficient options for proto=fd [ 1009.254194][T20540] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1009.664314][ T5882] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1009.723985][ T5834] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1009.814836][ T5882] usb 6-1: Using ep0 maxpacket: 8 [ 1009.826843][ T5882] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1009.837480][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.846542][ T5882] usb 6-1: Product: syz [ 1009.850818][ T5882] usb 6-1: Manufacturer: syz [ 1009.857981][ T5882] usb 6-1: SerialNumber: syz [ 1009.865411][ T5882] usb 6-1: config 0 descriptor?? [ 1009.872405][T20560] BFS-fs: bfs_fill_super(): No BFS filesystem on rnullb0 (magic=00000000) [ 1009.904146][ T5834] usb 8-1: Using ep0 maxpacket: 32 [ 1009.927078][ T5834] usb 8-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 1009.943277][ T5834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.963412][ T5834] usb 8-1: config 0 descriptor?? [ 1010.348910][T20571] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4712'. [ 1010.400744][T20571] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1010.437152][ T5834] input: HID 28bd:1903 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:28BD:1903.0021/input/input43 [ 1010.440504][T20571] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1010.501097][T20574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1010.523554][T20574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4713'. [ 1010.596379][T20553] sctp: [Deprecated]: syz.7.4704 (pid 20553) Use of int in max_burst socket option. [ 1010.596379][T20553] Use struct sctp_assoc_value instead [ 1010.635009][ T5834] uclogic 0003:28BD:1903.0021: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:1903] on usb-dummy_hcd.7-1/input0 [ 1010.673816][ T5834] usb 8-1: USB disconnect, device number 28 [ 1010.738101][T20575] fido_id[20575]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 1011.282664][T20580] Mount JFS Failure: -22 [ 1011.288610][T20581] 9pnet_fd: Insufficient options for proto=fd [ 1011.347186][T11356] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1011.493584][T20588] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4719'. [ 1011.517245][T11356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.533408][T11356] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1011.543121][T11356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.567165][T11356] usb 4-1: config 0 descriptor?? [ 1011.766702][T20594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1011.785081][T20594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4722'. [ 1012.024757][T11356] keytouch 0003:0926:3333.0022: fixing up Keytouch IEC report descriptor [ 1012.041804][T11356] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0022/input/input44 [ 1012.189977][T11356] keytouch 0003:0926:3333.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1012.270195][ C1] Mem-Info: [ 1012.273717][ C1] active_anon:25766 inactive_anon:51 isolated_anon:0 [ 1012.273717][ C1] active_file:15764 inactive_file:4461 isolated_file:0 [ 1012.273717][ C1] unevictable:768 dirty:111 writeback:0 [ 1012.273717][ C1] slab_reclaimable:6706 slab_unreclaimable:105174 [ 1012.273717][ C1] mapped:25632 shmem:17748 pagetables:1598 [ 1012.273717][ C1] sec_pagetables:0 bounce:0 [ 1012.273717][ C1] kernel_misc_reclaimable:0 [ 1012.273717][ C1] free:1338006 free_pcp:11997 free_cma:0 [ 1012.319208][ C1] Node 0 active_anon:103064kB inactive_anon:204kB active_file:62996kB inactive_file:17708kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102468kB dirty:416kB writeback:0kB shmem:69456kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12628kB pagetables:6236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1012.352872][ C1] Node 1 active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:28kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1012.384615][ C1] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1012.413427][ C1] lowmem_reserve[]: 0 2497 2498 2498 2498 [ 1012.419219][ C1] Node 0 DMA32 free:1445488kB boost:0kB min:34232kB low:42788kB high:51344kB reserved_highatomic:0KB free_highatomic:0KB active_anon:102884kB inactive_anon:204kB active_file:62924kB inactive_file:16632kB unevictable:1536kB writepending:416kB present:3129332kB managed:2557012kB mlocked:0kB bounce:0kB free_pcp:30776kB local_pcp:20276kB free_cma:0kB [ 1012.451761][ C1] lowmem_reserve[]: 0 0 1 1 1 [ 1012.456510][ C1] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:180kB inactive_anon:0kB active_file:72kB inactive_file:1076kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:28kB free_cma:0kB [ 1012.485819][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 1012.490584][ C1] Node 1 Normal free:3891156kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:136kB unevictable:1536kB writepending:28kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17120kB local_pcp:6144kB free_cma:0kB [ 1012.521977][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 1012.526722][ C1] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1012.539458][ C1] Node 0 DMA32: 2968*4kB (UME) 852*8kB (UME) 427*16kB (UME) 414*32kB (UME) 178*64kB (UME) 149*128kB (UME) 84*256kB (UME) 54*512kB (UME) 20*1024kB (UME) 10*2048kB (UME) 314*4096kB (UM) = 1445488kB [ 1012.558789][ C1] Node 0 Normal: 3*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1012.571093][ C1] Node 1 Normal: 227*4kB (UME) 53*8kB (UME) 36*16kB (UME) 223*32kB (UME) 94*64kB (UME) 20*128kB (UME) 5*256kB (UME) 3*512kB (ME) 2*1024kB (ME) 5*2048kB (UME) 942*4096kB (UM) = 3891156kB [ 1012.589627][ C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1012.599184][ C1] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1012.608475][ C1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1012.618026][ C1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1012.627316][ C1] 38021 total pagecache pages [ 1012.632005][ C1] 52 pages in swap cache [ 1012.636243][ C1] Free swap = 124788kB [ 1012.640401][ C1] Total swap = 124996kB [ 1012.644561][ C1] 2097051 pages RAM [ 1012.648373][ C1] 0 pages HighMem/MovableOnly [ 1012.653063][ C1] 425820 pages reserved [ 1012.657215][ C1] 0 pages cma reserved [ 1012.662035][ C1] vkms_vblank_simulate: vblank timer overrun [ 1012.837707][ T5882] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1012.861533][ T5882] gspca_sunplus: reg_w_riv err -71 [ 1012.875723][ T5882] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1012.928659][ T5882] usb 6-1: USB disconnect, device number 99 [ 1012.964053][ T10] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1013.007833][T20604] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4724'. [ 1013.029322][ T5834] usb 4-1: USB disconnect, device number 62 [ 1013.135108][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1013.159843][ T10] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1013.208049][T20600] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4724'. [ 1013.217852][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.245964][T20602] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4724'. [ 1013.260061][ T10] usb 8-1: config 0 descriptor?? [ 1013.276071][ T10] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1013.454151][T11356] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1013.582097][T20618] 9pnet_fd: Insufficient options for proto=fd [ 1013.613971][T11356] usb 6-1: Using ep0 maxpacket: 16 [ 1013.622723][T11356] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1013.636065][T11356] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1013.642746][T11356] usb 6-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1013.652213][T11356] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.662874][T11356] usb 6-1: config 0 descriptor?? [ 1014.087000][T11356] zeroplus 0003:0C12:0030.0023: unknown main item tag 0x0 [ 1014.094783][T11356] zeroplus 0003:0C12:0030.0023: unknown main item tag 0x0 [ 1014.107595][T11356] zeroplus 0003:0C12:0030.0023: hidraw0: USB HID v0.00 Device [HID 0c12:0030] on usb-dummy_hcd.5-1/input0 [ 1014.119442][T11356] zeroplus 0003:0C12:0030.0023: no inputs found [ 1014.211588][T20623] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4723'. [ 1014.286836][ T5834] usb 6-1: USB disconnect, device number 100 [ 1014.456952][T20625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1015.279274][ T10] usb 8-1: USB disconnect, device number 29 [ 1015.564500][T20650] ./cgroup: Can't lookup blockdev [ 1015.734047][ T10] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1015.889776][ T10] usb 6-1: New USB device found, idVendor=1a86, idProduct=f522, bcdDevice=75.36 [ 1015.900181][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.904189][T11356] usb 4-1: new low-speed USB device number 63 using dummy_hcd [ 1015.908336][ T10] usb 6-1: Product: syz [ 1015.920135][ T10] usb 6-1: Manufacturer: syz [ 1015.925117][ T10] usb 6-1: SerialNumber: syz [ 1015.932122][ T10] usb 6-1: config 0 descriptor?? [ 1016.077180][T11356] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 1016.085825][T11356] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 1016.094936][T11356] usb 4-1: config 0 has no interface number 0 [ 1016.101604][T11356] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1016.111823][T11356] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1016.122897][T11356] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1016.132032][T11356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.144851][T11356] usb 4-1: config 0 descriptor?? [ 1016.162627][ T5865] usb 6-1: USB disconnect, device number 101 [ 1016.418841][T20652] syzkaller1: entered promiscuous mode [ 1016.428224][T20652] syzkaller1: entered allmulticast mode [ 1016.440632][T20652] kvm: MWAIT instruction emulated as NOP! [ 1016.510264][T20658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1016.614207][ T10] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 1016.772188][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1016.787353][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.799473][ T10] usb 8-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1016.808938][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.821840][ T10] usb 8-1: config 0 descriptor?? [ 1016.917929][T11356] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input45 [ 1016.952552][T11356] input: failed to attach handler kbd to device input45, error: -5 [ 1017.243583][ T10] hid-thrustmaster 0003:044F:B65D.0024: unknown main item tag 0x0 [ 1017.256210][ T10] hid-thrustmaster 0003:044F:B65D.0024: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.7-1/input0 [ 1017.269278][ T10] hid-thrustmaster 0003:044F:B65D.0024: Wrong number of endpoints? [ 1017.507006][ C0] hid-thrustmaster 0003:044F:B65D.0024: URB to get model id failed with error -71 [ 1017.507720][T11356] usb 8-1: USB disconnect, device number 30 [ 1018.444425][T20692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1018.804133][ T5865] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1018.819013][ T10] usb 4-1: USB disconnect, device number 63 [ 1018.926378][T20702] fuse: Bad value for 'fd' [ 1018.958692][ T5865] usb 6-1: Using ep0 maxpacket: 8 [ 1018.968445][ T5865] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1018.978358][ T5865] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1018.989917][ T5865] usb 6-1: string descriptor 0 read error: -22 [ 1018.996791][ T5865] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1019.007209][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.038187][ T5865] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1019.061572][ T5865] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1019.089930][ T5865] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1019.104007][ T5865] usb 6-1: media controller created [ 1019.152322][ T5865] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1019.237404][ T5865] zl10353_read_register: readreg error (reg=127, ret==0) [ 1019.267051][ T10] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1019.345543][ T5865] usb 6-1: USB disconnect, device number 102 [ 1019.414179][ T10] usb 4-1: device descriptor read/64, error -71 [ 1019.654146][ T10] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1019.794312][ T10] usb 4-1: device descriptor read/64, error -71 [ 1019.862345][T20712] netlink: 'syz.5.4764': attribute type 21 has an invalid length. [ 1019.873935][T20712] IPv6: NLM_F_CREATE should be specified when creating new route [ 1019.881801][T20712] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1019.889677][T20712] IPv6: NLM_F_CREATE should be set when creating new route [ 1019.896987][T20712] IPv6: NLM_F_CREATE should be set when creating new route [ 1019.904311][T20712] IPv6: NLM_F_CREATE should be set when creating new route [ 1019.914453][ T10] usb usb4-port1: attempt power cycle [ 1020.284532][ T10] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1020.294197][T20727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1020.340706][ T10] usb 4-1: device descriptor read/8, error -71 [ 1020.596251][ T10] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1020.635523][ T10] usb 4-1: device descriptor read/8, error -71 [ 1020.746897][ T10] usb usb4-port1: unable to enumerate USB device [ 1020.874298][T11356] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1020.957521][T20756] 9pnet_fd: Insufficient options for proto=fd [ 1021.040693][T11356] usb 6-1: Using ep0 maxpacket: 32 [ 1021.059557][T11356] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1021.068600][T11356] usb 6-1: config 0 has no interface number 0 [ 1021.076905][T11356] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1021.087609][T11356] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1021.097560][T11356] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.106069][T11356] usb 6-1: Product: syz [ 1021.110439][T11356] usb 6-1: Manufacturer: syz [ 1021.116122][T11356] usb 6-1: SerialNumber: syz [ 1021.129407][T11356] usb 6-1: config 0 descriptor?? [ 1021.572952][T20769] fuse: Bad value for 'fd' [ 1021.870253][T20776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1022.416119][T20789] fuse: Bad value for 'fd' [ 1022.572565][T20794] 9pnet_fd: Insufficient options for proto=fd [ 1022.943215][T20808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1023.444663][T20811] fuse: Bad value for 'fd' [ 1023.950377][T20830] 9pnet_fd: Insufficient options for proto=fd [ 1024.503058][T20833] fuse: Bad value for 'fd' [ 1024.580169][T11356] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1024.591298][T11356] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1024.602556][T11356] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1024.611549][T11356] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 1024.638414][T11356] usb 6-1: USB disconnect, device number 103 [ 1024.888625][T20845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4822'. [ 1025.285531][T20851] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4824'. [ 1025.582637][T20858] fuse: Bad value for 'fd' [ 1026.210554][T20880] fuse: Bad value for 'fd' [ 1026.313568][T20883] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4838'. [ 1026.325327][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1026.476377][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1026.485191][ T10] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1026.494127][ T10] usb 4-1: config 0 has no interface number 0 [ 1026.500694][ T10] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1026.512343][ T10] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1026.522081][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.530948][ T10] usb 4-1: Product: syz [ 1026.535594][ T10] usb 4-1: Manufacturer: syz [ 1026.540239][ T10] usb 4-1: SerialNumber: syz [ 1026.544365][T20809] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1026.559874][ T10] usb 4-1: config 0 descriptor?? [ 1026.707531][T20809] usb 8-1: Using ep0 maxpacket: 32 [ 1026.716762][T20809] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 1026.729162][T20809] usb 8-1: config 0 has no interface number 0 [ 1026.735423][T20809] usb 8-1: config 0 interface 12 has no altsetting 0 [ 1026.750598][T20809] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1026.760039][T20809] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.772069][T20809] usb 8-1: Product: syz [ 1026.777729][T20809] usb 8-1: Manufacturer: syz [ 1026.783621][T20809] usb 8-1: SerialNumber: syz [ 1026.800376][T20809] usb 8-1: config 0 descriptor?? [ 1026.972709][T20900] fuse: Bad value for 'fd' [ 1027.060443][T20902] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4848'. [ 1027.142726][T20905] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4849'. [ 1027.424406][T20915] netlink: 'syz.5.4852': attribute type 10 has an invalid length. [ 1027.432566][T20915] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4852'. [ 1027.470148][T20915] team0: Port device geneve0 added [ 1027.774305][T11356] usb 6-1: new full-speed USB device number 104 using dummy_hcd [ 1027.927371][T11356] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1027.939856][T11356] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.949929][T11356] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1027.956898][T11356] usb 6-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 1027.966366][T11356] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.977981][T11356] usb 6-1: config 0 descriptor?? [ 1028.401500][T11356] hid-alps 0003:044E:120B.0025: unknown main item tag 0x0 [ 1028.409041][T11356] hid-alps 0003:044E:120B.0025: unknown main item tag 0x0 [ 1028.416310][T11356] hid-alps 0003:044E:120B.0025: unknown main item tag 0x0 [ 1028.423613][T11356] hid-alps 0003:044E:120B.0025: unknown main item tag 0x0 [ 1028.430953][T11356] hid-alps 0003:044E:120B.0025: unknown main item tag 0x0 [ 1028.438970][T11356] hid-alps 0003:044E:120B.0025: unknown main item tag 0x0 [ 1028.448477][T11356] hid-alps 0003:044E:120B.0025: unknown main item tag 0x0 [ 1028.456903][T11356] hid-alps 0003:044E:120B.0025: unknown main item tag 0x0 [ 1028.464728][T11356] hid-alps 0003:044E:120B.0025: unknown main item tag 0x0 [ 1028.472046][T11356] hid-alps 0003:044E:120B.0025: unknown main item tag 0x0 [ 1028.484934][T11356] hid-alps 0003:044E:120B.0025: hidraw0: USB HID v0.00 Device [HID 044e:120b] on usb-dummy_hcd.5-1/input0 [ 1028.604976][T11356] usb 6-1: USB disconnect, device number 104 [ 1028.855413][T20809] f81534 8-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 1028.863755][T20809] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 1028.871457][T20809] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1028.884959][T20809] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 1028.899007][T20809] usb 8-1: USB disconnect, device number 31 [ 1029.180789][T20922] fuse: Bad value for 'fd' [ 1029.481769][T20930] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4857'. [ 1029.491089][T20930] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4857'. [ 1029.500894][T20930] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4857'. [ 1029.511311][T20932] fuse: Bad value for 'fd' [ 1029.769656][T20938] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4860'. [ 1030.006118][T20949] fuse: Bad value for 'fd' [ 1030.027232][ T10] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1030.064531][ T10] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1030.087145][ T10] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1030.110793][ T10] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1030.141489][ T10] usb 4-1: USB disconnect, device number 68 [ 1030.218187][T20954] fuse: Bad value for 'fd' [ 1030.360319][T20960] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4869'. [ 1030.373126][T20960] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4869'. [ 1030.393068][T20960] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4869'. [ 1030.605931][T20966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4872'. [ 1030.724886][ T5882] usb 8-1: new full-speed USB device number 32 using dummy_hcd [ 1030.761795][T20971] fuse: Bad value for 'fd' [ 1030.901525][ T5882] usb 8-1: config 8 has an invalid interface number: 196 but max is 0 [ 1030.914448][ T5882] usb 8-1: config 8 has no interface number 0 [ 1030.920633][ T5882] usb 8-1: config 8 interface 196 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1030.945307][ T5882] usb 8-1: config 8 interface 196 has no altsetting 0 [ 1030.952176][ T5882] usb 8-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=e5.59 [ 1030.965890][ T5882] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.978123][T20962] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1031.124402][T11356] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1031.209218][ T5882] usb 8-1: string descriptor 0 read error: -71 [ 1031.238249][ T5882] quatech2 8-1:8.196: Quatech 2nd gen USB to Serial Driver converter detected [ 1031.270480][ T5882] usb 8-1: qt2_attach - failed to power on unit: -71 [ 1031.295494][ T5882] quatech2 8-1:8.196: probe with driver quatech2 failed with error -71 [ 1031.313943][T11356] usb 4-1: Using ep0 maxpacket: 8 [ 1031.328630][T11356] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1031.331844][ T5882] usb 8-1: USB disconnect, device number 32 [ 1031.339507][T11356] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1031.357340][T20977] fuse: Bad value for 'fd' [ 1031.374626][T11356] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1031.393974][T11356] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1031.424998][T11356] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1031.461075][T11356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.577673][T20981] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4879'. [ 1031.588022][T20981] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4879'. [ 1031.598509][T20981] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4879'. [ 1031.705471][T11356] usb 4-1: usb_control_msg returned -32 [ 1031.711123][T11356] usbtmc 4-1:16.0: can't read capabilities [ 1031.723267][T20973] ip6_vti0 speed is unknown, defaulting to 1000 [ 1031.807290][T20985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.837023][T20985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.882549][T20987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4881'. [ 1031.917854][T20985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.937764][T20985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.407534][ T5882] usb 4-1: USB disconnect, device number 69 [ 1032.787588][T20999] fuse: Bad value for 'fd' [ 1032.867989][T21001] 9pnet_fd: Insufficient options for proto=fd [ 1033.065507][T21005] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4888'. [ 1033.094842][T21005] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4888'. [ 1033.464099][T11356] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1033.624018][T11356] usb 4-1: Using ep0 maxpacket: 32 [ 1033.631539][T11356] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1033.640990][T11356] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1033.650665][T11356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.662991][T11356] usb 4-1: config 0 descriptor?? [ 1033.851675][ T5882] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 1033.907886][T21019] fuse: Bad value for 'fd' [ 1034.016894][ T5882] usb 8-1: config 8 has an invalid interface number: 196 but max is 0 [ 1034.028251][ T5882] usb 8-1: config 8 has no interface number 0 [ 1034.036706][ T5882] usb 8-1: config 8 interface 196 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1034.051010][ T5882] usb 8-1: config 8 interface 196 has no altsetting 0 [ 1034.058893][ T5882] usb 8-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=e5.59 [ 1034.072101][ T5882] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.089612][T21015] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1034.115348][T11356] corsair-cpro 0003:1B1C:0C10.0026: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 1034.316149][ T5882] usb 8-1: string descriptor 0 read error: -71 [ 1034.328161][ T5882] quatech2 8-1:8.196: Quatech 2nd gen USB to Serial Driver converter detected [ 1034.338581][ T5882] usb 8-1: qt2_attach - failed to power on unit: -71 [ 1034.346557][ T5882] quatech2 8-1:8.196: probe with driver quatech2 failed with error -71 [ 1034.359796][ T5882] usb 8-1: USB disconnect, device number 33 [ 1034.512896][T11356] corsair-cpro 0003:1B1C:0C10.0026: probe with driver corsair-cpro failed with error -71 [ 1034.529618][T11356] usb 4-1: USB disconnect, device number 70 [ 1035.134285][T11356] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1035.269716][T21037] 9pnet_fd: Insufficient options for proto=fd [ 1035.284280][T11356] usb 6-1: Using ep0 maxpacket: 32 [ 1035.296331][T11356] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1035.305805][T11356] usb 6-1: config 0 has no interface number 0 [ 1035.312780][T11356] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1035.324788][T11356] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1035.336551][T11356] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.345767][T11356] usb 6-1: Product: syz [ 1035.350527][T11356] usb 6-1: Manufacturer: syz [ 1035.355709][T11356] usb 6-1: SerialNumber: syz [ 1035.366937][T11356] usb 6-1: config 0 descriptor?? [ 1035.485036][T21042] fuse: Bad value for 'fd' [ 1036.084161][ T10] usb 8-1: new full-speed USB device number 34 using dummy_hcd [ 1036.165949][T21056] __nla_validate_parse: 6 callbacks suppressed [ 1036.165972][T21056] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4909'. [ 1036.182627][T21056] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4909'. [ 1036.192051][T21056] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4909'. [ 1036.265707][ T10] usb 8-1: config 8 has an invalid interface number: 196 but max is 0 [ 1036.283999][ T10] usb 8-1: config 8 has no interface number 0 [ 1036.290184][ T10] usb 8-1: config 8 interface 196 has no altsetting 0 [ 1036.303540][ T10] usb 8-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=e5.59 [ 1036.313168][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.369435][T21060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4911'. [ 1036.534465][ T10] usb 8-1: string descriptor 0 read error: -71 [ 1036.542026][ T10] quatech2 8-1:8.196: Quatech 2nd gen USB to Serial Driver converter detected [ 1036.558218][ T10] usb 8-1: qt2_attach - failed to power on unit: -71 [ 1036.566088][ T10] quatech2 8-1:8.196: probe with driver quatech2 failed with error -71 [ 1036.582708][ T10] usb 8-1: USB disconnect, device number 34 [ 1036.648020][T21065] fuse: Bad value for 'fd' [ 1036.974097][ T5921] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1037.134798][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 1037.155063][ T5921] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1037.163380][ T5921] usb 4-1: config 0 has no interface number 0 [ 1037.170262][ T5921] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1037.181038][ T5921] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1037.191877][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.204423][ T5921] usb 4-1: Product: syz [ 1037.208798][ T5921] usb 4-1: Manufacturer: syz [ 1037.213818][ T5921] usb 4-1: SerialNumber: syz [ 1037.225094][ T5921] usb 4-1: config 0 descriptor?? [ 1037.657149][T21076] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1037.681150][T21076] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1037.692679][T11356] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 1037.704135][T11356] f81534 6-1:0.12: f81534_find_config_idx: read failed: -32 [ 1037.711572][T11356] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 1037.723688][T11356] f81534 6-1:0.12: probe with driver f81534 failed with error -32 [ 1037.943176][T11356] usb 6-1: USB disconnect, device number 105 [ 1038.033786][T21080] 9pnet_fd: Insufficient options for proto=fd [ 1038.500265][T21083] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4918'. [ 1038.509654][T21083] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4918'. [ 1038.519105][T21083] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4918'. [ 1038.680633][T21087] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4920'. [ 1038.933219][T21091] fuse: Bad value for 'fd' [ 1038.976179][T21093] Can't find a SQUASHFS superblock on rnullb0 [ 1039.286259][T21102] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4927'. [ 1039.313973][T21102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4927'. [ 1039.482010][ T5921] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1039.495535][ T5921] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1039.543988][ T5921] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1039.551796][ T5921] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1039.577916][ T5921] usb 4-1: USB disconnect, device number 71 [ 1039.675542][T21113] fuse: Bad value for 'fd' [ 1040.014087][T11356] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1040.031180][ T5921] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1040.173944][T11356] usb 6-1: Using ep0 maxpacket: 32 [ 1040.181008][T11356] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1040.181039][T11356] usb 6-1: config 0 has no interface number 0 [ 1040.181086][T11356] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1040.183565][T11356] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1040.183598][T11356] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.183619][T11356] usb 6-1: Product: syz [ 1040.183631][T11356] usb 6-1: Manufacturer: syz [ 1040.183643][T11356] usb 6-1: SerialNumber: syz [ 1040.189901][ T5921] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1040.189936][ T5921] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.189959][ T5921] usb 8-1: Product: syz [ 1040.189985][ T5921] usb 8-1: Manufacturer: syz [ 1040.189998][ T5921] usb 8-1: SerialNumber: syz [ 1040.206780][ T5921] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1040.212786][T11356] usb 6-1: config 0 descriptor?? [ 1040.254043][ T5921] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1040.457185][T21117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.457846][T21117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.503077][ T5867] usb 8-1: USB disconnect, device number 35 [ 1040.669834][T21127] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 1040.821200][T21134] fuse: Bad value for 'fd' [ 1040.922227][T21138] 9pnet_fd: Insufficient options for proto=fd [ 1041.274309][ T5921] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1041.285843][ T5921] ath9k_htc: Failed to initialize the device [ 1041.292558][ T5867] usb 8-1: ath9k_htc: USB layer deinitialized [ 1041.594059][ T5867] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1041.760779][ T5867] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1041.777190][ T5867] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.786172][ T5867] usb 8-1: Product: syz [ 1041.790584][ T5867] usb 8-1: Manufacturer: syz [ 1041.795414][ T5867] usb 8-1: SerialNumber: syz [ 1041.818196][ T5867] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1041.873831][T21145] __nla_validate_parse: 6 callbacks suppressed [ 1041.882931][T21145] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4946'. [ 1041.893438][T21145] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4946'. [ 1041.904760][T21145] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4946'. [ 1042.032184][T21135] usb 8-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1042.059983][T21135] usb 8-1: ath9k_htc: USB layer deinitialized [ 1042.082401][ T5867] usb 8-1: USB disconnect, device number 36 [ 1042.120827][T21149] tmpfs: Unknown parameter '&Oѕ' [ 1042.236724][T21155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4950'. [ 1042.318616][T21157] fuse: Bad value for 'fd' [ 1042.498525][T21163] 9pnet_fd: Insufficient options for proto=fd [ 1042.583113][T21165] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4955'. [ 1042.598658][T21165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4955'. [ 1042.609092][T21165] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4955'. [ 1042.859855][T21176] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4959'. [ 1042.970970][T21178] fuse: Bad value for 'fd' [ 1043.052509][T21180] 9pnet_rdma: rdma_create_trans (21180): problem binding to privport: 13 [ 1043.389521][T21184] netdevsim netdevsim3: Direct firmware load for . [ 1043.389521][T21184] failed with error -2 [ 1043.403032][T21184] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1043.403032][T21184] [ 1043.438754][T21185] Can't find a SQUASHFS superblock on rnullb0 [ 1043.661644][T11356] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1043.671624][T11356] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1043.680674][T11356] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1043.688986][T11356] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 1043.706844][T11356] usb 6-1: USB disconnect, device number 106 [ 1043.724069][T21189] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4965'. [ 1043.733514][T21189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4965'. [ 1044.132107][T21197] fuse: Bad value for 'fd' [ 1044.311973][T21203] 9pnet_fd: Insufficient options for proto=fd [ 1044.539026][T21214] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1044.658995][T21218] fuse: Bad value for 'fd' [ 1044.715097][T21220] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1044.735336][T21220] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1044.747463][T21220] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1045.636805][T21240] fuse: Bad value for 'fd' [ 1046.133982][T11356] usb 8-1: new full-speed USB device number 37 using dummy_hcd [ 1046.298083][T11356] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1046.306730][T11356] usb 8-1: not running at top speed; connect to a high speed hub [ 1046.316231][T11356] usb 8-1: config 129 has an invalid interface number: 28 but max is 0 [ 1046.324874][T11356] usb 8-1: config 129 has no interface number 0 [ 1046.331293][T11356] usb 8-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 1046.343464][T11356] usb 8-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 1046.355302][T21135] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1046.364202][T11356] usb 8-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1046.378744][T11356] usb 8-1: config 129 interface 28 has no altsetting 0 [ 1046.388332][T11356] usb 8-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 1046.397845][T11356] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.405960][T11356] usb 8-1: Product: syz [ 1046.410250][T11356] usb 8-1: Manufacturer: syz [ 1046.415056][T11356] usb 8-1: SerialNumber: syz [ 1046.424634][T21242] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1046.534051][T21135] usb 4-1: Using ep0 maxpacket: 16 [ 1046.541271][T21135] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 1046.549956][T21135] usb 4-1: config 252 has no interface number 0 [ 1046.556615][T21135] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1046.572411][T21135] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1046.582265][T21135] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.590625][T21135] usb 4-1: Product: syz [ 1046.595420][T21135] usb 4-1: Manufacturer: syz [ 1046.600097][T21135] usb 4-1: SerialNumber: syz [ 1046.621413][T21135] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1046.694454][T21242] af_packet: tpacket_rcv: packet too big, clamped from 124 to 4294967272. macoff=96 [ 1046.955931][ T10] usb 4-1: USB disconnect, device number 72 [ 1046.963605][T18472] usb 4-1: Failed to submit usb control message: -71 [ 1046.981709][T18472] usb 4-1: unable to send the bmi data to the device: -71 [ 1046.994140][T18472] usb 4-1: unable to get target info from device [ 1047.001411][T18472] usb 4-1: could not get target info (-71) [ 1047.016357][T18472] usb 4-1: could not probe fw (-71) [ 1047.286864][T21261] __nla_validate_parse: 12 callbacks suppressed [ 1047.286929][T21261] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4993'. [ 1047.303313][T21261] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4993'. [ 1047.313079][T21261] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4993'. [ 1047.568316][T21265] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4995'. [ 1047.593611][T21267] fuse: Bad value for 'fd' [ 1048.345558][T11356] etas_es58x 8-1:129.28: Starting syz syz (Serial Number syz) [ 1048.375064][T11356] etas_es58x 8-1:129.28: could not retrieve the product info string [ 1048.486959][T11356] usb 8-1: USB disconnect, device number 37 [ 1048.511047][T11356] etas_es58x 8-1:129.28: Disconnecting syz syz [ 1048.589105][T21288] vxfs: WRONG superblock magic 00000000 at 1 [ 1048.608577][T21288] vxfs: WRONG superblock magic 00000000 at 8 [ 1048.616393][T21288] vxfs: can't find superblock. [ 1048.695470][T21293] fuse: Bad value for 'fd' [ 1049.339593][T21313] fuse: Bad value for 'fd' [ 1049.408869][T21315] syz.0.5015: attempt to access beyond end of device [ 1049.408869][T21315] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1049.425406][T21315] EXT4-fs (loop0): unable to read superblock [ 1049.557043][ T9] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 1049.580834][T21320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.600320][T21320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.726015][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.740996][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1049.763315][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1049.778693][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1049.789883][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1049.809615][ T9] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1049.820120][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1049.828798][ T9] usb 4-1: Product: syz [ 1049.833076][ T9] usb 4-1: Manufacturer: syz [ 1049.841194][ T9] usb 4-1: SerialNumber: syz [ 1049.857744][T21135] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1049.862045][ T9] usb 4-1: config 0 descriptor?? [ 1049.896339][T21327] Mount JFS Failure: -22 [ 1050.018004][T21135] usb 8-1: device descriptor read/64, error -71 [ 1050.078016][ T9] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1050.085267][ T9] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1050.234412][ T10] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1050.264762][T21135] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1050.285969][ T9] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 1050.293709][ T9] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1050.307037][ T9] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1050.374039][ T10] usb 6-1: device descriptor read/64, error -71 [ 1050.394245][T21135] usb 8-1: device descriptor read/64, error -71 [ 1050.497299][ T9] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 1050.504389][T21135] usb usb8-port1: attempt power cycle [ 1050.624118][ T10] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1050.764154][ T10] usb 6-1: device descriptor read/64, error -71 [ 1050.844191][T21135] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1050.865274][T21135] usb 8-1: device descriptor read/8, error -71 [ 1050.877700][ T10] usb usb6-port1: attempt power cycle [ 1050.906151][ T9] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1050.915982][ T9] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 1050.931209][ T9] usb 4-1: USB disconnect, device number 73 [ 1051.104044][T21135] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1051.127964][T21135] usb 8-1: device descriptor read/8, error -71 [ 1051.224157][ T10] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1051.244655][ T10] usb 6-1: device descriptor read/8, error -71 [ 1051.248563][T21135] usb usb8-port1: unable to enumerate USB device [ 1051.459918][T21335] fuse: Bad value for 'fd' [ 1051.484109][ T10] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1051.516954][ T10] usb 6-1: device descriptor read/8, error -71 [ 1051.635536][ T10] usb usb6-port1: unable to enumerate USB device [ 1052.992765][T21360] fuse: Bad value for 'fd' [ 1053.148070][T21362] 9pnet_fd: Insufficient options for proto=fd [ 1053.546965][T21375] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5038'. [ 1053.594732][ T5867] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1053.764125][ T5867] usb 6-1: Using ep0 maxpacket: 8 [ 1053.775430][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.788323][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1053.799584][ T5867] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1053.813217][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.827813][ T5867] usb 6-1: config 0 descriptor?? [ 1054.104978][T21381] fuse: Bad value for 'fd' [ 1054.254499][ T5867] usbhid 6-1:0.0: can't add hid device: -71 [ 1054.260682][ T5867] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1054.297581][ T5867] usb 6-1: USB disconnect, device number 111 [ 1054.481382][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.671293][T21406] 9pnet_fd: Insufficient options for proto=fd [ 1054.677792][T21408] fuse: Bad value for 'fd' [ 1055.528402][T21431] fuse: Bad value for 'fd' [ 1055.621564][ T30] audit: type=1326 audit(1750981903.185:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21432 comm="syz.7.5062" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fe898e929 code=0x0 [ 1056.972613][T21458] 9pnet_fd: Insufficient options for proto=fd [ 1057.523264][T21461] fuse: Bad value for 'fd' [ 1057.834002][ T10] usb 8-1: new full-speed USB device number 42 using dummy_hcd [ 1057.976819][ T10] usb 8-1: device descriptor read/64, error -71 [ 1058.141537][T21472] kvm: pic: non byte write [ 1058.214409][ T10] usb 8-1: new full-speed USB device number 43 using dummy_hcd [ 1058.344351][ T10] usb 8-1: device descriptor read/64, error -71 [ 1058.455245][ T10] usb usb8-port1: attempt power cycle [ 1058.804205][ T10] usb 8-1: new full-speed USB device number 44 using dummy_hcd [ 1058.834769][ T10] usb 8-1: device descriptor read/8, error -71 [ 1059.074460][ T10] usb 8-1: new full-speed USB device number 45 using dummy_hcd [ 1059.115319][ T10] usb 8-1: device descriptor read/8, error -71 [ 1059.146382][T21484] fuse: Bad value for 'fd' [ 1059.234376][ T10] usb usb8-port1: unable to enumerate USB device [ 1059.523944][ T10] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1059.698096][ T10] usb 4-1: config 4 has an invalid interface number: 95 but max is 0 [ 1059.715538][ T10] usb 4-1: config 4 has no interface number 0 [ 1059.736847][ T10] usb 4-1: config 4 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 1059.830141][ T10] usb 4-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 1059.850150][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.872289][ T10] usb 4-1: Product: syz [ 1059.890713][ T10] usb 4-1: Manufacturer: syz [ 1059.910449][ T10] usb 4-1: SerialNumber: syz [ 1059.930768][T21492] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1060.101419][T21505] fuse: Bad value for 'fd' [ 1060.362481][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1060.371211][ T10] usb 4-1: MIDIStreaming interface descriptor not found [ 1060.425901][ T10] usb 4-1: USB disconnect, device number 74 [ 1060.515792][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1060.937654][T21524] kvm: pic: non byte write [ 1061.018201][T21529] fuse: Bad value for 'fd' [ 1061.166153][ T10] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1061.284252][T11356] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1061.337822][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1061.394011][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1061.413310][ T10] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1061.432989][ T10] usb 6-1: can't read configurations, error -71 [ 1061.464926][T11356] usb 4-1: Using ep0 maxpacket: 16 [ 1061.490394][T11356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1061.510169][T11356] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1061.530260][T11356] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1061.549167][T11356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.560663][T11356] usb 4-1: config 0 descriptor?? [ 1061.746100][T21551] fuse: Bad value for 'fd' [ 1061.987543][T11356] microsoft 0003:045E:07DA.0027: item 0 4 0 8 parsing failed [ 1061.998033][T11356] microsoft 0003:045E:07DA.0027: parse failed [ 1062.010662][ T30] audit: type=1800 audit(1750981909.575:2728): pid=21557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5110" name="memory.events" dev="tmpfs" ino=2598 res=0 errno=0 [ 1062.033572][T11356] microsoft 0003:045E:07DA.0027: probe with driver microsoft failed with error -22 [ 1062.219761][T21531] FAT-fs (rnullb0): bogus number of reserved sectors [ 1062.227204][T21531] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1062.244278][T11356] usb 4-1: USB disconnect, device number 75 [ 1062.484182][ T10] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1062.652168][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1062.787952][T21572] fuse: Bad value for 'fd' [ 1062.835635][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1062.869847][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1062.880062][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.903946][ T10] usb 6-1: Product: syz [ 1062.908397][ T10] usb 6-1: Manufacturer: syz [ 1062.913285][ T10] usb 6-1: SerialNumber: syz [ 1062.947814][ T10] usb 6-1: config 0 descriptor?? [ 1062.970873][ T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1063.004056][ T10] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1063.038153][T21576] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5118'. [ 1063.155255][T21578] kAFS: unparsable volume name [ 1063.224055][T11356] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1063.396330][T11356] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1063.410587][T11356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.427866][T11356] usb 4-1: config 0 descriptor?? [ 1063.581999][ T10] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1063.641539][T21586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5122'. [ 1064.212869][ T10] em28xx 6-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 1064.235756][ T10] em28xx 6-1:0.0: board has no eeprom [ 1064.265935][T11356] pegasus 4-1:0.0: probe with driver pegasus failed with error -121 [ 1064.369372][T21593] netlink: 'syz.7.5125': attribute type 29 has an invalid length. [ 1064.375135][T21594] fuse: Bad value for 'fd' [ 1064.379188][T21593] netlink: 'syz.7.5125': attribute type 29 has an invalid length. [ 1064.463999][ T10] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1064.471902][ T10] em28xx 6-1:0.0: dvb set to bulk mode. [ 1064.498314][ T9] em28xx 6-1:0.0: Binding DVB extension [ 1064.529042][ T10] usb 6-1: USB disconnect, device number 113 [ 1064.555361][ T10] em28xx 6-1:0.0: Disconnecting em28xx [ 1064.626348][ T9] em28xx 6-1:0.0: Registering input extension [ 1064.632722][ T10] em28xx 6-1:0.0: Closing input extension [ 1064.661534][ T10] em28xx 6-1:0.0: Freeing device [ 1064.833165][T21607] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5131'. [ 1065.257630][T21622] fuse: Bad value for 'fd' [ 1065.548337][T11356] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1065.706153][T11356] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1065.719279][T11356] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.730505][T11356] usb 6-1: config 0 descriptor?? [ 1066.114271][T21633] FAT-fs (rnullb0): bogus number of reserved sectors [ 1066.121028][T21633] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1066.973396][T21641] 9pnet_fd: Insufficient options for proto=fd [ 1066.981990][ T10] usb 4-1: USB disconnect, device number 76 [ 1067.049106][T21643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5140'. [ 1067.424453][ T10] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1067.584010][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1067.591544][ T10] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1067.603546][ T10] usb 4-1: config 0 has no interface number 0 [ 1067.609898][ T10] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1067.622928][ T10] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1067.632303][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.640752][ T10] usb 4-1: Product: syz [ 1067.647282][ T10] usb 4-1: Manufacturer: syz [ 1067.652905][ T10] usb 4-1: SerialNumber: syz [ 1067.660479][ T10] usb 4-1: config 0 descriptor?? [ 1067.917267][T21653] fuse: Bad value for 'fd' [ 1068.056662][T11356] pegasus 6-1:0.0: setup Pegasus II specific registers [ 1068.319275][T21668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5149'. [ 1069.081789][T21675] 9pnet_fd: Insufficient options for proto=fd [ 1069.476145][T11356] pegasus 6-1:0.0: can't locate MII phy, using default [ 1069.698194][T11356] pegasus 6-1:0.0: eth13, ELECOM USB Ethernet LD-USB20, 72:12:69:6f:b6:ff [ 1069.716430][T11356] usb 6-1: USB disconnect, device number 114 [ 1070.026914][T21677] fuse: Bad value for 'fd' [ 1070.098113][ T10] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 1070.113942][ T10] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1070.134289][ T10] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1070.142089][ T10] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1070.183929][ T10] usb 4-1: USB disconnect, device number 77 [ 1070.455984][ T5867] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1070.593995][ T5867] usb 8-1: device descriptor read/64, error -71 [ 1070.667216][T21692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5158'. [ 1070.824224][ T5865] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1070.833955][ T5867] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1070.974092][ T5867] usb 8-1: device descriptor read/64, error -71 [ 1070.994095][ T5865] usb 6-1: Using ep0 maxpacket: 16 [ 1071.002142][ T5865] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1071.010906][ T5865] usb 6-1: config 0 has no interface number 0 [ 1071.017228][ T5865] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1071.027244][ T5865] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1071.037395][ T5865] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1071.047390][ T5865] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1071.056700][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.064942][ T5865] usb 6-1: Product: syz [ 1071.069152][ T5865] usb 6-1: Manufacturer: syz [ 1071.073795][ T5865] usb 6-1: SerialNumber: syz [ 1071.081072][ T5865] usb 6-1: config 0 descriptor?? [ 1071.086532][ T5867] usb usb8-port1: attempt power cycle [ 1071.092855][T21690] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1071.106824][T21690] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1071.316732][T21689] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1071.324396][T21689] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1071.434386][ T5867] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1071.464780][ T5867] usb 8-1: device descriptor read/8, error -71 [ 1071.534704][ T5865] Error reading MAC address [ 1071.578934][ T5865] sr9700 6-1:0.41: probe with driver sr9700 failed with error -71 [ 1071.604980][ T5865] usb 6-1: USB disconnect, device number 115 [ 1071.680690][T21701] 9pnet_fd: Insufficient options for proto=fd [ 1071.688441][T21703] fuse: Bad value for 'fd' [ 1071.704696][ T5867] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1071.735018][ T5867] usb 8-1: device descriptor read/8, error -71 [ 1071.844850][ T5867] usb usb8-port1: unable to enumerate USB device [ 1072.511209][T21716] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5167'. [ 1072.645223][ T5867] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1072.815925][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.828720][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.839939][ T5867] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1072.853056][ T5867] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1072.862248][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.879800][ T5867] usb 4-1: config 0 descriptor?? [ 1073.299228][ T5867] usbhid 4-1:0.0: can't add hid device: -71 [ 1073.306560][ T5867] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1073.306803][T21730] fuse: Bad value for 'fd' [ 1073.325363][ T5867] usb 4-1: USB disconnect, device number 78 [ 1073.479609][T21734] netlink: 'syz.7.5174': attribute type 10 has an invalid length. [ 1073.489493][T21734] macvlan0: entered promiscuous mode [ 1073.503734][T21734] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1073.756786][ T5867] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1073.862784][T21738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5176'. [ 1073.935712][ T5867] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.951350][ T5867] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1073.962282][ T5867] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1073.979879][ T5867] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1073.989171][ T5867] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.004662][ T5867] usb 8-1: config 0 descriptor?? [ 1074.122933][T21742] XFS (rnullb0): Invalid superblock magic number [ 1074.439264][ T5867] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1074.581851][T21758] binder: 21757:21758 ioctl c0306201 200000001900 returned -14 [ 1074.631233][ T5867] usb 8-1: USB disconnect, device number 50 [ 1074.676870][T21760] fuse: Bad value for 'fd' [ 1074.684291][ T9] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1074.768610][T21762] ./cgroup: Can't lookup blockdev [ 1074.847827][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1074.866794][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1074.878878][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 1024 [ 1074.893571][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 1074.911867][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1074.923277][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.948321][ T9] usb 4-1: config 0 descriptor?? [ 1074.971493][T21770] ip6_vti0 speed is unknown, defaulting to 1000 [ 1074.971819][T21755] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1075.204664][ T9] hdpvr 4-1:0.0: firmware version 0x1e dated q|RC@=?SSW7BD^jvi0 [ 1075.204664][ T9] pY [ 1075.266932][T21773] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5185'. [ 1075.425644][T21755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.455504][T21755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.634056][ T10] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1075.814186][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 1075.821663][T21784] openvswitch: netlink: IP tunnel dst address not specified [ 1075.865854][ T5867] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1075.885377][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1075.889190][ T10] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1075.889267][ T10] usb 8-1: can't read configurations, error -71 [ 1075.894548][T21755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1076.031248][ T5867] usb 6-1: Using ep0 maxpacket: 16 [ 1076.035686][ T5867] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1076.035724][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.035748][ T5867] usb 6-1: Product: syz [ 1076.035768][ T5867] usb 6-1: Manufacturer: syz [ 1076.035787][ T5867] usb 6-1: SerialNumber: syz [ 1076.039242][ T5867] usb 6-1: config 0 descriptor?? [ 1076.154267][ T9] hdpvr 4-1:0.0: Could not setup controls [ 1076.155167][ T9] hdpvr 4-1:0.0: registering videodev failed [ 1076.182894][ T9] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71 [ 1076.189372][ T9] usb 4-1: USB disconnect, device number 79 [ 1076.794933][ T5867] usb_8dev 6-1:0.0 can0: sending command message failed [ 1076.803085][ T5867] usb_8dev 6-1:0.0 can0: can't get firmware version [ 1076.863103][T21793] fuse: Bad value for 'fd' [ 1076.884926][ T5867] usb_8dev 6-1:0.0: probe with driver usb_8dev failed with error -22 [ 1076.921113][ T5867] usb 6-1: USB disconnect, device number 116 [ 1077.156084][T21799] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5194'. [ 1077.531675][T21812] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1077.676116][T21814] fuse: Bad value for 'fd' [ 1078.085581][T21828] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5206'. [ 1078.456030][T21836] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 1078.472859][T21836] exFAT-fs (nullb0): invalid boot record signature [ 1078.482164][T21836] exFAT-fs (nullb0): failed to read boot sector [ 1078.496079][T21836] exFAT-fs (nullb0): failed to recognize exfat type [ 1078.598563][T21839] fuse: Unknown parameter '0xffffffffffffffff' [ 1079.244776][ T10] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1079.407489][ T10] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1079.417853][ T10] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 1079.431689][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1079.443079][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.451281][ T10] usb 4-1: Product: syz [ 1079.457452][ T10] usb 4-1: Manufacturer: syz [ 1079.462139][ T10] usb 4-1: SerialNumber: syz [ 1079.662680][T21862] 9pnet_fd: Insufficient options for proto=fd [ 1079.687063][ T10] cdc_ncm 4-1:1.0: bind() failure [ 1079.698365][ T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1079.705391][ T10] cdc_ncm 4-1:1.1: bind() failure [ 1079.721269][ T10] usb 4-1: USB disconnect, device number 80 [ 1080.096639][T21864] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5217'. [ 1080.329966][T21870] fuse: Unknown parameter '0xffffffffffffffff' [ 1080.602838][T21887] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5226'. [ 1080.691420][T21890] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1081.000957][T21897] fuse: Unknown parameter '0xffffffffffffffff' [ 1081.174475][T21901] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5231'. [ 1081.185118][T21899] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5231'. [ 1081.194949][T21900] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5231'. [ 1081.508326][T21912] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5235'. [ 1081.767474][T21919] netlink: 'syz.7.5238': attribute type 2 has an invalid length. [ 1081.779176][T21919] netlink: 'syz.7.5238': attribute type 1 has an invalid length. [ 1081.797298][T21919] netlink: 'syz.7.5238': attribute type 1 has an invalid length. [ 1082.062155][T21924] fuse: Unknown parameter '0xffffffffffffffff' [ 1082.305365][T21934] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5241'. [ 1082.624423][ T9] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1082.798005][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1082.809569][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1082.823358][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1082.840071][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 64544, setting to 1024 [ 1082.852437][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1082.866060][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1082.881416][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1082.893124][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.121964][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 1083.129520][ T9] usbtmc 4-1:16.0: can't read capabilities [ 1083.338090][T21933] fuse: Unknown parameter '`d]0x000000000000000a' [ 1083.347958][ T5865] usb 4-1: USB disconnect, device number 81 [ 1083.988422][T21952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5246'. [ 1084.109819][T21954] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1084.117643][ T5865] IPVS: starting estimator thread 0... [ 1084.196282][T21958] fuse: Unknown parameter '0xffffffffffffffff' [ 1084.234038][T21956] IPVS: using max 27 ests per chain, 64800 per kthread [ 1084.554372][ T5865] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1084.704007][ T5865] usb 4-1: Using ep0 maxpacket: 8 [ 1084.711905][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1084.727410][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1084.760930][ T5865] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1084.774090][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.782182][ T5865] usb 4-1: Product: syz [ 1084.786702][ T5865] usb 4-1: Manufacturer: syz [ 1084.791335][ T5865] usb 4-1: SerialNumber: syz [ 1084.801469][ T5865] usb 4-1: config 0 descriptor?? [ 1084.884122][ T5865] rc_core: IR keymap rc-streamzap not found [ 1084.890095][ T5865] Registered IR keymap rc-empty [ 1084.911451][ T5865] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1084.928384][ T5865] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input47 [ 1084.940933][T21971] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5254'. [ 1085.029602][ T9] usb 4-1: USB disconnect, device number 82 [ 1085.126370][ T5882] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1085.304567][ T5882] usb 6-1: Using ep0 maxpacket: 32 [ 1085.315306][ T5882] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1085.323377][ T5882] usb 6-1: config 0 has no interface number 0 [ 1085.330106][ T5882] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1085.345253][ T5882] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1085.365919][ T5882] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1085.387654][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.402314][ T5882] usb 6-1: Product: syz [ 1085.406634][ T5882] usb 6-1: Manufacturer: syz [ 1085.410512][T21976] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5255'. [ 1085.411300][ T5882] usb 6-1: SerialNumber: syz [ 1085.431902][ T5882] usb 6-1: config 0 descriptor?? [ 1085.599688][T21980] fuse: Unknown parameter '0xffffffffffffffff' [ 1085.646279][ T5882] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1085.666906][ T5882] cx231xx 6-1:0.1: Failed to read PCB config [ 1085.673029][ T5882] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 1085.709827][ T5882] usb 6-1: USB disconnect, device number 117 [ 1086.007082][T21998] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5258'. [ 1086.018369][T21982] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5258'. [ 1086.032341][T21992] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5258'. [ 1086.394183][ T5882] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1086.565392][ T5882] usb 6-1: Using ep0 maxpacket: 32 [ 1086.576554][ T5882] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1086.595093][ T5882] usb 6-1: config 0 has no interface number 0 [ 1086.601687][ T5882] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1086.616431][ T5882] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1086.626494][ T5882] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1086.635940][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.645055][ T5882] usb 6-1: Product: syz [ 1086.649401][ T5882] usb 6-1: Manufacturer: syz [ 1086.664104][ T5882] usb 6-1: SerialNumber: syz [ 1086.671440][ T5882] usb 6-1: config 0 descriptor?? [ 1086.937958][ T5882] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1086.951733][ T5882] cx231xx 6-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 1087.064447][ T5882] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 1087.073702][ T5882] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1087.082874][ T5882] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1087.091541][ T5882] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1087.099917][ T5882] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1087.108105][ T5882] cx231xx 6-1:0.1: Failed to set devmode to analog: error: -32 [ 1087.130731][ T5882] i2c i2c-2: Added multiplexed i2c bus 4 [ 1087.136589][ T9] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1087.148148][ T5882] i2c i2c-2: Added multiplexed i2c bus 5 [ 1087.156455][ T5882] cx231xx 6-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-32]! [ 1087.166029][ T5882] cx231xx 6-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-32]! [ 1087.200850][ T5882] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -32 [ 1087.315393][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 1087.328256][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.339719][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1087.349629][ T9] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1087.359341][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.369964][ T9] usb 8-1: config 0 descriptor?? [ 1087.384859][ T9] hub 8-1:0.0: USB hub found [ 1087.532423][T22014] XFS (rnullb0): Invalid superblock magic number [ 1087.582095][ T9] hub 8-1:0.0: 1 port detected [ 1087.778239][T22025] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1088.272985][ T5865] usb 8-1: USB disconnect, device number 53 [ 1088.300821][ T9] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 1088.699738][T21135] usb 6-1: USB disconnect, device number 118 [ 1089.397484][T22054] tls_set_device_offload_rx: netdev not found [ 1089.499928][T22056] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1089.611489][T22058] netlink: 'syz.3.5280': attribute type 10 has an invalid length. [ 1091.197540][T22084] NILFS (rnullb0): couldn't find nilfs on the device [ 1091.532599][T22088] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1092.070583][T22095] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5292'. [ 1092.742759][T22106] Mount JFS Failure: -22 [ 1093.343116][T22110] fuse: Bad value for 'fd' [ 1093.388536][T22111] netlink: 'syz.3.5297': attribute type 2 has an invalid length. [ 1093.694032][T21135] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1093.854000][T21135] usb 4-1: Using ep0 maxpacket: 8 [ 1093.870024][T21135] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1093.883438][ T5865] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1093.902385][T21135] usb 4-1: config 0 has no interface number 0 [ 1093.923616][T21135] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1093.949778][T21135] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1093.997995][T21135] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.040915][T21135] usb 4-1: config 0 descriptor?? [ 1094.075806][ T5865] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 1094.100207][T21135] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 1094.120478][ T5865] usb 6-1: config 0 has no interface number 0 [ 1094.162857][ T5865] usb 6-1: config 0 interface 11 has no altsetting 0 [ 1094.193666][ T5865] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1094.211184][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.241436][ T5865] usb 6-1: config 0 descriptor?? [ 1094.260879][ T5865] keyspan 6-1:0.11: Keyspan 2 port adapter converter detected [ 1096.253796][ T5865] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 7 [ 1097.366270][ T5865] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 81 [ 1098.742364][ C0] sched: DL replenish lagged too much [ 1116.445417][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1137.231902][ T5865] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 82 [ 1138.372795][ T5865] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 1 [ 1157.501405][ T5865] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 2 [ 1176.691172][ T5865] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 85 [ 1177.561539][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.850899][ T5890] usb 4-1: USB disconnect, device number 83 [ 1181.546660][ T5865] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 5 [ 1238.931171][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1302.281346][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.012050][ T1302] ieee802154 phy0 wpan0: encryption failed: -22